Mercurial > hg > nginx
comparison src/stream/ngx_stream_proxy_module.c @ 6591:04d8d1f85649
SSL: ngx_ssl_ciphers() to set list of ciphers.
This patch moves various OpenSSL-specific function calls into the
OpenSSL module and introduces ngx_ssl_ciphers() to make nginx more
crypto-library-agnostic.
| author | Tim Taubert <tim@timtaubert.de> |
|---|---|
| date | Wed, 15 Jun 2016 21:05:30 +0100 |
| parents | 1d0e03db9f8e |
| children | b3b7e33083ac |
comparison
equal
deleted
inserted
replaced
| 6590:d375f4210e41 | 6591:04d8d1f85649 |
|---|---|
| 1638 { | 1638 { |
| 1639 return NGX_ERROR; | 1639 return NGX_ERROR; |
| 1640 } | 1640 } |
| 1641 } | 1641 } |
| 1642 | 1642 |
| 1643 if (SSL_CTX_set_cipher_list(pscf->ssl->ctx, | 1643 if (ngx_ssl_ciphers(cf, pscf->ssl, &pscf->ssl_ciphers, 0) != NGX_OK) { |
| 1644 (const char *) pscf->ssl_ciphers.data) | |
| 1645 == 0) | |
| 1646 { | |
| 1647 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0, | |
| 1648 "SSL_CTX_set_cipher_list(\"%V\") failed", | |
| 1649 &pscf->ssl_ciphers); | |
| 1650 return NGX_ERROR; | 1644 return NGX_ERROR; |
| 1651 } | 1645 } |
| 1652 | 1646 |
| 1653 if (pscf->ssl_verify) { | 1647 if (pscf->ssl_verify) { |
| 1654 if (pscf->ssl_trusted_certificate.len == 0) { | 1648 if (pscf->ssl_trusted_certificate.len == 0) { |