Mercurial > hg > nginx

comparison src/event/ngx_event_openssl_stapling.c @ 9200:ee40e2b1d083

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
SSL: reasonable version for LibreSSL adjusted. OPENSSL_VERSION_NUMBER is now redefined to 0x1010000fL for LibreSSL 3.5.0 and above. Building with older LibreSSL versions, such as 2.8.0, may now produce warnings (see cab37803ebb3) and may require appropriate compiler options to suppress them. Notably, this allows to start using SSL_get0_verified_chain() appeared in OpenSSL 1.1.0 and LibreSSL 3.5.0, without additional macro tests. Prodded by Ilya Shipitsin.
author Sergey Kandaurov <pluknet@nginx.com>
date Mon, 25 Dec 2023 21:15:48 +0400
parents a46fcf101cfc
children
comparison
equal deleted inserted replaced
9199:875cd36b8617 9200:ee40e2b1d083
891 891
892 ocsp->status = NGX_AGAIN; 892 ocsp->status = NGX_AGAIN;
893 ocsp->cert_status = V_OCSP_CERTSTATUS_GOOD; 893 ocsp->cert_status = V_OCSP_CERTSTATUS_GOOD;
894 ocsp->conf = ocf; 894 ocsp->conf = ocf;
895 895
896 #if (OPENSSL_VERSION_NUMBER >= 0x10100000L && !defined LIBRESSL_VERSION_NUMBER) 896 #if OPENSSL_VERSION_NUMBER >= 0x10100000L
897 897
898 ocsp->certs = SSL_get0_verified_chain(c->ssl->connection); 898 ocsp->certs = SSL_get0_verified_chain(c->ssl->connection);
899 899
900 if (ocsp->certs) { 900 if (ocsp->certs) {
901 ocsp->certs = X509_chain_up_ref(ocsp->certs); 901 ocsp->certs = X509_chain_up_ref(ocsp->certs);