Mercurial > hg > nginx

comparison src/event/ngx_event_openssl.c @ 8647:507da0d3b070 quic

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Merged with the default branch.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 24 Nov 2020 17:19:40 +0000
parents 279ad36f2f4b a46fcf101cfc
children f61d347158d0
comparison
equal deleted inserted replaced
8646:4bf332873a83 8647:507da0d3b070
4062 ngx_array_t *keys; 4062 ngx_array_t *keys;
4063 ngx_connection_t *c; 4063 ngx_connection_t *c;
4064 ngx_ssl_session_ticket_key_t *key; 4064 ngx_ssl_session_ticket_key_t *key;
4065 const EVP_MD *digest; 4065 const EVP_MD *digest;
4066 const EVP_CIPHER *cipher; 4066 const EVP_CIPHER *cipher;
4067 #if (NGX_DEBUG)
4068 u_char buf[32];
4069 #endif
4070 4067
4071 c = ngx_ssl_get_connection(ssl_conn); 4068 c = ngx_ssl_get_connection(ssl_conn);
4072 ssl_ctx = c->ssl->session_ctx; 4069 ssl_ctx = c->ssl->session_ctx;
4073 4070
4074 #ifdef OPENSSL_NO_SHA256 4071 #ifdef OPENSSL_NO_SHA256
4086 4083
4087 if (enc == 1) { 4084 if (enc == 1) {
4088 /* encrypt session ticket */ 4085 /* encrypt session ticket */
4089 4086
4090 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, 4087 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0,
4091 "ssl session ticket encrypt, key: \"%*s\" (%s session)", 4088 "ssl session ticket encrypt, key: \"%*xs\" (%s session)",
4092 ngx_hex_dump(buf, key[0].name, 16) - buf, buf, 4089 (size_t) 16, key[0].name,
4093 SSL_session_reused(ssl_conn) ? "reused" : "new"); 4090 SSL_session_reused(ssl_conn) ? "reused" : "new");
4094 4091
4095 if (key[0].size == 48) { 4092 if (key[0].size == 48) {
4096 cipher = EVP_aes_128_cbc(); 4093 cipher = EVP_aes_128_cbc();
4097 size = 16; 4094 size = 16;
4133 goto found; 4130 goto found;
4134 } 4131 }
4135 } 4132 }
4136 4133
4137 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, 4134 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0,
4138 "ssl session ticket decrypt, key: \"%*s\" not found", 4135 "ssl session ticket decrypt, key: \"%*xs\" not found",
4139 ngx_hex_dump(buf, name, 16) - buf, buf); 4136 (size_t) 16, name);
4140 4137
4141 return 0; 4138 return 0;
4142 4139
4143 found: 4140 found:
4144 4141
4145 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, 4142 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0,
4146 "ssl session ticket decrypt, key: \"%*s\"%s", 4143 "ssl session ticket decrypt, key: \"%*xs\"%s",
4147 ngx_hex_dump(buf, key[i].name, 16) - buf, buf, 4144 (size_t) 16, key[i].name, (i == 0) ? " (default)" : "");
4148 (i == 0) ? " (default)" : "");
4149 4145
4150 if (key[i].size == 48) { 4146 if (key[i].size == 48) {
4151 cipher = EVP_aes_128_cbc(); 4147 cipher = EVP_aes_128_cbc();
4152 size = 16; 4148 size = 16;
4153 4149