Mercurial > hg > nginx

comparison src/event/ngx_event_openssl.c @ 4185:6af5959a2ace

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Disabling SSL compression. This saves about 300K per SSL connection. The SSL_OP_NO_COMPRESSION option is available since OpenSSL 1.0.0.
author Igor Sysoev <igor@sysoev.ru>
date Fri, 07 Oct 2011 10:59:02 +0000
parents 5b776ad53c3c
children cce2fd0acc0f
comparison
equal deleted inserted replaced
4184:f5ef10fe9534 4185:6af5959a2ace
172 SSL_CTX_set_options(ssl->ctx, SSL_OP_SINGLE_DH_USE); 172 SSL_CTX_set_options(ssl->ctx, SSL_OP_SINGLE_DH_USE);
173 173
174 if (ngx_ssl_protocols[protocols >> 1] != 0) { 174 if (ngx_ssl_protocols[protocols >> 1] != 0) {
175 SSL_CTX_set_options(ssl->ctx, ngx_ssl_protocols[protocols >> 1]); 175 SSL_CTX_set_options(ssl->ctx, ngx_ssl_protocols[protocols >> 1]);
176 } 176 }
177
178 #ifdef SSL_OP_NO_COMPRESSION
179 SSL_CTX_set_options(ssl->ctx, SSL_OP_NO_COMPRESSION);
180 #endif
177 181
178 SSL_CTX_set_read_ahead(ssl->ctx, 1); 182 SSL_CTX_set_read_ahead(ssl->ctx, 1);
179 183
180 SSL_CTX_set_info_callback(ssl->ctx, ngx_ssl_info_callback); 184 SSL_CTX_set_info_callback(ssl->ctx, ngx_ssl_info_callback);
181 185