Mercurial > hg > nginx

diff src/event/ngx_event_openssl.c @ 8272:7f0981be07c4 quic

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Fixed client certificate verification. For ngx_http_process_request() part to work, this required to set both r->http_connection->ssl and c->ssl on a QUIC stream. To avoid damaging global SSL object, ngx_ssl_shutdown() is managed to ignore QUIC streams.
author Sergey Kandaurov <pluknet@nginx.com>
date Mon, 23 Mar 2020 20:48:34 +0300
parents 253cf267f95a
children 7995cd199b52
line wrap: on
line diff
--- a/src/event/ngx_event_openssl.c
+++ b/src/event/ngx_event_openssl.c
@@ -2735,6 +2735,11 @@ ngx_ssl_shutdown(ngx_connection_t *c)
     int        n, sslerr, mode;
     ngx_err_t  err;
 
+    if (c->qs) {
+        /* QUIC streams inherit SSL object */
+        return NGX_OK;
+    }
+
     if (SSL_in_init(c->ssl->connection)) {
         /*
          * OpenSSL 1.0.2f complains if SSL_shutdown() is called during