Mercurial > hg > nginx
comparison src/http/modules/ngx_http_proxy_module.c @ 6591:04d8d1f85649
SSL: ngx_ssl_ciphers() to set list of ciphers.
This patch moves various OpenSSL-specific function calls into the
OpenSSL module and introduces ngx_ssl_ciphers() to make nginx more
crypto-library-agnostic.
author | Tim Taubert <tim@timtaubert.de> |
---|---|
date | Wed, 15 Jun 2016 21:05:30 +0100 |
parents | 1d0e03db9f8e |
children | 63991ab67b3a |
comparison
equal
deleted
inserted
replaced
6590:d375f4210e41 | 6591:04d8d1f85649 |
---|---|
4321 { | 4321 { |
4322 return NGX_ERROR; | 4322 return NGX_ERROR; |
4323 } | 4323 } |
4324 } | 4324 } |
4325 | 4325 |
4326 if (SSL_CTX_set_cipher_list(plcf->upstream.ssl->ctx, | 4326 if (ngx_ssl_ciphers(cf, plcf->upstream.ssl, &plcf->ssl_ciphers, 0) |
4327 (const char *) plcf->ssl_ciphers.data) | 4327 != NGX_OK) |
4328 == 0) | |
4329 { | 4328 { |
4330 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0, | |
4331 "SSL_CTX_set_cipher_list(\"%V\") failed", | |
4332 &plcf->ssl_ciphers); | |
4333 return NGX_ERROR; | 4329 return NGX_ERROR; |
4334 } | 4330 } |
4335 | 4331 |
4336 if (plcf->upstream.ssl_verify) { | 4332 if (plcf->upstream.ssl_verify) { |
4337 if (plcf->ssl_trusted_certificate.len == 0) { | 4333 if (plcf->ssl_trusted_certificate.len == 0) { |