comparison src/stream/ngx_stream_ssl_module.c @ 6817:e75e854657ba

SSL: $ssl_curves (ticket #1088). The variable contains a list of curves as supported by the client. Known curves are listed by their names, unknown ones are shown in hex, e.g., "0x001d:prime256v1:secp521r1:secp384r1". Note that OpenSSL uses session data for SSL_get1_curves(), and it doesn't store full list of curves supported by the client when serializing a session. As a result $ssl_curves is only available for new sessions (and will be empty for reused ones). The variable is only meaningful when using OpenSSL 1.0.2 and above. With older versions the variable is empty.
author Maxim Dounin <mdounin@mdounin.ru>
date Mon, 05 Dec 2016 22:23:23 +0300
parents ea93c7d8752a
children 41cb1b64561d
comparison
equal deleted inserted replaced
6816:ea93c7d8752a 6817:e75e854657ba
183 (uintptr_t) ngx_ssl_get_cipher_name, NGX_STREAM_VAR_CHANGEABLE, 0 }, 183 (uintptr_t) ngx_ssl_get_cipher_name, NGX_STREAM_VAR_CHANGEABLE, 0 },
184 184
185 { ngx_string("ssl_ciphers"), NULL, ngx_stream_ssl_variable, 185 { ngx_string("ssl_ciphers"), NULL, ngx_stream_ssl_variable,
186 (uintptr_t) ngx_ssl_get_ciphers, NGX_STREAM_VAR_CHANGEABLE, 0 }, 186 (uintptr_t) ngx_ssl_get_ciphers, NGX_STREAM_VAR_CHANGEABLE, 0 },
187 187
188 { ngx_string("ssl_curves"), NULL, ngx_stream_ssl_variable,
189 (uintptr_t) ngx_ssl_get_curves, NGX_STREAM_VAR_CHANGEABLE, 0 },
190
188 { ngx_string("ssl_session_id"), NULL, ngx_stream_ssl_variable, 191 { ngx_string("ssl_session_id"), NULL, ngx_stream_ssl_variable,
189 (uintptr_t) ngx_ssl_get_session_id, NGX_STREAM_VAR_CHANGEABLE, 0 }, 192 (uintptr_t) ngx_ssl_get_session_id, NGX_STREAM_VAR_CHANGEABLE, 0 },
190 193
191 { ngx_string("ssl_session_reused"), NULL, ngx_stream_ssl_variable, 194 { ngx_string("ssl_session_reused"), NULL, ngx_stream_ssl_variable,
192 (uintptr_t) ngx_ssl_get_session_reused, NGX_STREAM_VAR_CHANGEABLE, 0 }, 195 (uintptr_t) ngx_ssl_get_session_reused, NGX_STREAM_VAR_CHANGEABLE, 0 },