Mercurial > hg > nginx-quic
view misc/README @ 7471:7e8bcba6d039
SSL: server name callback changed to return SSL_TLSEXT_ERR_OK.
OpenSSL 1.1.1 does not save server name to the session if server name
callback returns anything but SSL_TLSEXT_ERR_OK, thus breaking
the $ssl_server_name variable in resumed sessions.
Since $ssl_server_name can be used even if we've selected the default
server and there are no other servers, it looks like the only viable
solution is to always return SSL_TLSEXT_ERR_OK regardless of the actual
result.
To fix things in the stream module as well, added a dummy server name
callback which always returns SSL_TLSEXT_ERR_OK.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Sun, 03 Mar 2019 16:47:44 +0300 |
parents | 001beb963d86 |
children |
line wrap: on
line source
make -f misc/GNUmakefile release the required tools: *) xsltproc to build CHANGES, *) xslscript.pl ( http://hg.nginx.org/xslscript ) to build XSLTs from XSLScript sources. make -f misc/GNUmakefile icons the required tool: *) netpbm to create Win32 icons from xpm sources.