Mercurial > hg > nginx

comparison src/http/ngx_http_request.c @ 7941:65946a191197

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
SSL: SSL_sendfile() support with kernel TLS. Requires OpenSSL 3.0 compiled with "enable-ktls" option. Further, KTLS needs to be enabled in kernel, and in OpenSSL, either via OpenSSL configuration file or with "ssl_conf_command Options KTLS;" in nginx configuration. On FreeBSD, kernel TLS is available starting with FreeBSD 13.0, and can be enabled with "sysctl kern.ipc.tls.enable=1" and "kldload ktls_ocf" to load a software backend, see man ktls(4) for details. On Linux, kernel TLS is available starting with kernel 4.13 (at least 5.2 is recommended), and needs kernel compiled with CONFIG_TLS=y (with CONFIG_TLS=m, which is used at least on Ubuntu 21.04 by default, the tls module needs to be loaded with "modprobe tls").
author Maxim Dounin <mdounin@mdounin.ru>
date Thu, 21 Oct 2021 18:44:07 +0300
parents 61abb35bb8cf
children 0e562a332529 61d0fa67b55e
comparison
equal deleted inserted replaced
7940:46a02ed7c966 7941:65946a191197
605 ngx_destroy_pool(r->pool); 605 ngx_destroy_pool(r->pool);
606 return NULL; 606 return NULL;
607 } 607 }
608 608
609 #if (NGX_HTTP_SSL) 609 #if (NGX_HTTP_SSL)
610 if (c->ssl) { 610 if (c->ssl && !c->ssl->sendfile) {
611 r->main_filter_need_in_memory = 1; 611 r->main_filter_need_in_memory = 1;
612 } 612 }
613 #endif 613 #endif
614 614
615 r->main = r; 615 r->main = r;