nginx: src/event/ngx_event_openssl.c comparison

comparison src/event/ngx_event_openssl.c @ 7973:3443c02ca1d1

SSL: $ssl_curve (ticket #2135). The variable contains a negotiated curve used for the handshake key exchange process. Known curves are listed by their names, unknown ones are shown in hex. Note that for resumed sessions in TLSv1.2 and older protocols, $ssl_curve contains the curve used during the initial handshake, while in TLSv1.3 it contains the curve used during the session resumption (see the SSL_get_negotiated_group manual page for details). The variable is only meaningful when using OpenSSL 3.0 and above. With older versions the variable is empty.

author	Sergey Kandaurov <pluknet@nginx.com>
date	Mon, 01 Nov 2021 18:09:34 +0300
parents	65946a191197
children	f1fcb0fe6975 5c86189a1c1b

comparison

equal deleted inserted replaced

-:284f03d6f154
+:3443c02ca1d1
 return NGX_OK;
 }
 ngx_int_t
+ngx_ssl_get_curve(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s)
+{
+#ifdef SSL_get_negotiated_group
+int  nid;
+nid = SSL_get_negotiated_group(c->ssl->connection);
+if (nid != NID_undef) {
+if ((nid & TLSEXT_nid_unknown) == 0) {
+s->len = ngx_strlen(OBJ_nid2sn(nid));
+s->data = (u_char *) OBJ_nid2sn(nid);
+return NGX_OK;
+}
+s->len = sizeof("0x0000") - 1;
+s->data = ngx_pnalloc(pool, s->len);
+if (s->data == NULL) {
+return NGX_ERROR;
+}
+ngx_sprintf(s->data, "0x%04xd", nid & 0xffff);
+return NGX_OK;
+}
+#endif
+s->len = 0;
+return NGX_OK;
+}
+ngx_int_t
 ngx_ssl_get_curves(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s)
 {
 #ifdef SSL_CTRL_GET_CURVES
 int         *curves, n, i, nid;

Mercurial > hg > nginx

comparison src/event/ngx_event_openssl.c @ 7973:3443c02ca1d1