Mercurial > hg > nginx
comparison src/core/ngx_core.h @ 4875:386a06a22c40
OCSP stapling: loading OCSP responses.
This includes the ssl_stapling_responder directive (defaults to OCSP
responder set in certificate's AIA extension).
OCSP response for a given certificate is requested once we get at least
one connection with certificate_status extension in ClientHello, and
certificate status won't be sent in the connection in question. This due
to limitations in the OpenSSL API (certificate status callback is blocking).
Note: SSL_CTX_use_certificate_chain_file() was reimplemented as it doesn't
allow to access the certificate loaded via SSL_CTX.
| author | Maxim Dounin <mdounin@mdounin.ru> |
|---|---|
| date | Mon, 01 Oct 2012 12:47:55 +0000 |
| parents | 7033faf6dc3c |
| children | 65b895cd0dfa |
comparison
equal
deleted
inserted
replaced
| 4874:d1a20423c425 | 4875:386a06a22c40 |
|---|---|
| 67 #include <ngx_times.h> | 67 #include <ngx_times.h> |
| 68 #include <ngx_shmtx.h> | 68 #include <ngx_shmtx.h> |
| 69 #include <ngx_slab.h> | 69 #include <ngx_slab.h> |
| 70 #include <ngx_inet.h> | 70 #include <ngx_inet.h> |
| 71 #include <ngx_cycle.h> | 71 #include <ngx_cycle.h> |
| 72 #include <ngx_resolver.h> | |
| 72 #if (NGX_OPENSSL) | 73 #if (NGX_OPENSSL) |
| 73 #include <ngx_event_openssl.h> | 74 #include <ngx_event_openssl.h> |
| 74 #endif | 75 #endif |
| 75 #include <ngx_process_cycle.h> | 76 #include <ngx_process_cycle.h> |
| 76 #include <ngx_conf_file.h> | 77 #include <ngx_conf_file.h> |
| 77 #include <ngx_resolver.h> | |
| 78 #include <ngx_open_file_cache.h> | 78 #include <ngx_open_file_cache.h> |
| 79 #include <ngx_os.h> | 79 #include <ngx_os.h> |
| 80 #include <ngx_connection.h> | 80 #include <ngx_connection.h> |
| 81 | 81 |
| 82 | 82 |