comparison src/event/ngx_event_openssl.c @ 1924:291689a7e5dc

invalidate SSL session if there is no valid client certificate
author Igor Sysoev <igor@sysoev.ru>
date Mon, 10 Mar 2008 14:47:07 +0000
parents a55876dff8f5
children 52b6be1e2cab
comparison
equal deleted inserted replaced
1923:c72fe0a8d9b4 1924:291689a7e5dc
1550 1550
1551 return sess; 1551 return sess;
1552 } 1552 }
1553 1553
1554 1554
1555 void
1556 ngx_ssl_remove_cached_session(SSL_CTX *ssl, ngx_ssl_session_t *sess)
1557 {
1558 SSL_CTX_remove_session(ssl, sess);
1559
1560 ngx_ssl_remove_session(ssl, sess);
1561 }
1562
1563
1555 static void 1564 static void
1556 ngx_ssl_remove_session(SSL_CTX *ssl, ngx_ssl_session_t *sess) 1565 ngx_ssl_remove_session(SSL_CTX *ssl, ngx_ssl_session_t *sess)
1557 { 1566 {
1558 size_t len; 1567 size_t len;
1559 u_char *id; 1568 u_char *id;
1565 ngx_ssl_sess_id_t *sess_id; 1574 ngx_ssl_sess_id_t *sess_id;
1566 ngx_ssl_session_cache_t *cache; 1575 ngx_ssl_session_cache_t *cache;
1567 1576
1568 shm_zone = SSL_CTX_get_ex_data(ssl, ngx_ssl_session_cache_index); 1577 shm_zone = SSL_CTX_get_ex_data(ssl, ngx_ssl_session_cache_index);
1569 1578
1579 if (shm_zone == NULL) {
1580 return;
1581 }
1582
1570 cache = shm_zone->data; 1583 cache = shm_zone->data;
1571 1584
1572 id = sess->session_id; 1585 id = sess->session_id;
1573 len = (size_t) sess->session_id_length; 1586 len = (size_t) sess->session_id_length;
1574 1587