Mercurial > hg > nginx-quic

comparison src/http/modules/ngx_http_ssl_module.c @ 7466:48c87377aabd

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
SSL: fixed possible segfault with dynamic certificates. A virtual server may have no SSL context if it does not have certificates defined, so we have to use config of the ngx_http_ssl_module from the SSL context in the certificate callback. To do so, it is now passed as the argument of the callback. The stream module doesn't really need any changes, but was modified as well to match http code.
author Maxim Dounin <mdounin@mdounin.ru>
date Mon, 25 Feb 2019 21:16:26 +0300
parents 6708bec13757
children 8981dbb12254
comparison
equal deleted inserted replaced
7465:6708bec13757 7466:48c87377aabd
739 739
740 #ifdef SSL_R_CERT_CB_ERROR 740 #ifdef SSL_R_CERT_CB_ERROR
741 741
742 /* install callback to lookup certificates */ 742 /* install callback to lookup certificates */
743 743
744 SSL_CTX_set_cert_cb(conf->ssl.ctx, ngx_http_ssl_certificate, NULL); 744 SSL_CTX_set_cert_cb(conf->ssl.ctx, ngx_http_ssl_certificate, conf);
745 745
746 #else 746 #else
747 ngx_log_error(NGX_LOG_EMERG, cf->log, 0, 747 ngx_log_error(NGX_LOG_EMERG, cf->log, 0,
748 "variables in " 748 "variables in "
749 "\"ssl_certificate\" and \"ssl_certificate_key\" " 749 "\"ssl_certificate\" and \"ssl_certificate_key\" "