Mercurial > hg > nginx
comparison src/event/ngx_event_openssl.c @ 8647:507da0d3b070 quic
Merged with the default branch.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Tue, 24 Nov 2020 17:19:40 +0000 |
parents | 279ad36f2f4b a46fcf101cfc |
children | f61d347158d0 |
comparison
equal
deleted
inserted
replaced
8646:4bf332873a83 | 8647:507da0d3b070 |
---|---|
4062 ngx_array_t *keys; | 4062 ngx_array_t *keys; |
4063 ngx_connection_t *c; | 4063 ngx_connection_t *c; |
4064 ngx_ssl_session_ticket_key_t *key; | 4064 ngx_ssl_session_ticket_key_t *key; |
4065 const EVP_MD *digest; | 4065 const EVP_MD *digest; |
4066 const EVP_CIPHER *cipher; | 4066 const EVP_CIPHER *cipher; |
4067 #if (NGX_DEBUG) | |
4068 u_char buf[32]; | |
4069 #endif | |
4070 | 4067 |
4071 c = ngx_ssl_get_connection(ssl_conn); | 4068 c = ngx_ssl_get_connection(ssl_conn); |
4072 ssl_ctx = c->ssl->session_ctx; | 4069 ssl_ctx = c->ssl->session_ctx; |
4073 | 4070 |
4074 #ifdef OPENSSL_NO_SHA256 | 4071 #ifdef OPENSSL_NO_SHA256 |
4086 | 4083 |
4087 if (enc == 1) { | 4084 if (enc == 1) { |
4088 /* encrypt session ticket */ | 4085 /* encrypt session ticket */ |
4089 | 4086 |
4090 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, | 4087 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, |
4091 "ssl session ticket encrypt, key: \"%*s\" (%s session)", | 4088 "ssl session ticket encrypt, key: \"%*xs\" (%s session)", |
4092 ngx_hex_dump(buf, key[0].name, 16) - buf, buf, | 4089 (size_t) 16, key[0].name, |
4093 SSL_session_reused(ssl_conn) ? "reused" : "new"); | 4090 SSL_session_reused(ssl_conn) ? "reused" : "new"); |
4094 | 4091 |
4095 if (key[0].size == 48) { | 4092 if (key[0].size == 48) { |
4096 cipher = EVP_aes_128_cbc(); | 4093 cipher = EVP_aes_128_cbc(); |
4097 size = 16; | 4094 size = 16; |
4133 goto found; | 4130 goto found; |
4134 } | 4131 } |
4135 } | 4132 } |
4136 | 4133 |
4137 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, | 4134 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, |
4138 "ssl session ticket decrypt, key: \"%*s\" not found", | 4135 "ssl session ticket decrypt, key: \"%*xs\" not found", |
4139 ngx_hex_dump(buf, name, 16) - buf, buf); | 4136 (size_t) 16, name); |
4140 | 4137 |
4141 return 0; | 4138 return 0; |
4142 | 4139 |
4143 found: | 4140 found: |
4144 | 4141 |
4145 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, | 4142 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, |
4146 "ssl session ticket decrypt, key: \"%*s\"%s", | 4143 "ssl session ticket decrypt, key: \"%*xs\"%s", |
4147 ngx_hex_dump(buf, key[i].name, 16) - buf, buf, | 4144 (size_t) 16, key[i].name, (i == 0) ? " (default)" : ""); |
4148 (i == 0) ? " (default)" : ""); | |
4149 | 4145 |
4150 if (key[i].size == 48) { | 4146 if (key[i].size == 48) { |
4151 cipher = EVP_aes_128_cbc(); | 4147 cipher = EVP_aes_128_cbc(); |
4152 size = 16; | 4148 size = 16; |
4153 | 4149 |