Mercurial > hg > nginx
comparison src/http/modules/ngx_http_uwsgi_module.c @ 6591:04d8d1f85649
SSL: ngx_ssl_ciphers() to set list of ciphers.
This patch moves various OpenSSL-specific function calls into the
OpenSSL module and introduces ngx_ssl_ciphers() to make nginx more
crypto-library-agnostic.
author | Tim Taubert <tim@timtaubert.de> |
---|---|
date | Wed, 15 Jun 2016 21:05:30 +0100 |
parents | 1d0e03db9f8e |
children | 20eb4587225b |
comparison
equal
deleted
inserted
replaced
6590:d375f4210e41 | 6591:04d8d1f85649 |
---|---|
2323 { | 2323 { |
2324 return NGX_ERROR; | 2324 return NGX_ERROR; |
2325 } | 2325 } |
2326 } | 2326 } |
2327 | 2327 |
2328 if (SSL_CTX_set_cipher_list(uwcf->upstream.ssl->ctx, | 2328 if (ngx_ssl_ciphers(cf, uwcf->upstream.ssl, &uwcf->ssl_ciphers, 0) |
2329 (const char *) uwcf->ssl_ciphers.data) | 2329 != NGX_OK) |
2330 == 0) | |
2331 { | 2330 { |
2332 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0, | |
2333 "SSL_CTX_set_cipher_list(\"%V\") failed", | |
2334 &uwcf->ssl_ciphers); | |
2335 return NGX_ERROR; | 2331 return NGX_ERROR; |
2336 } | 2332 } |
2337 | 2333 |
2338 if (uwcf->upstream.ssl_verify) { | 2334 if (uwcf->upstream.ssl_verify) { |
2339 if (uwcf->ssl_trusted_certificate.len == 0) { | 2335 if (uwcf->ssl_trusted_certificate.len == 0) { |