log src/http/modules/ngx_http_ssl_module.c @ 7653:8409f9df6219

age author description
Fri, 22 May 2020 17:30:12 +0300 Roman Arutyunyan SSL: client certificate validation with OCSP (ticket #1534).
Mon, 16 Sep 2019 19:26:42 +0300 Sergey Kandaurov SSL: fixed ssl_verify_client error message.
Sun, 03 Mar 2019 16:48:39 +0300 Maxim Dounin SSL: fixed potential leak on memory allocation errors.
Mon, 25 Feb 2019 21:16:26 +0300 Maxim Dounin SSL: fixed possible segfault with dynamic certificates.
Mon, 25 Feb 2019 16:42:54 +0300 Maxim Dounin SSL: adjusted session id context with dynamic certificates.
Mon, 25 Feb 2019 16:42:23 +0300 Maxim Dounin SSL: passwords support for dynamic certificate loading.
Mon, 25 Feb 2019 16:42:05 +0300 Maxim Dounin SSL: variables support in ssl_certificate and ssl_certificate_key.
Tue, 07 Aug 2018 02:16:07 +0300 Maxim Dounin SSL: support for TLSv1.3 early data with BoringSSL.
Wed, 25 Apr 2018 14:57:24 +0300 Ruslan Ermilov SSL: deprecated the "ssl" directive.
Tue, 24 Apr 2018 15:29:01 +0300 Maxim Dounin SSL: detect "listen ... ssl" without certificates (ticket #178).
Tue, 22 Aug 2017 15:18:10 +0300 Maxim Dounin SSL: the $ssl_client_escaped_cert variable (ticket #857).
Tue, 01 Aug 2017 14:28:33 +0300 Ruslan Ermilov Variables: macros for null variables.
Tue, 18 Apr 2017 15:12:38 +0300 Sergey Kandaurov SSL: added support for TLSv1.3 in ssl_protocols directive.
Mon, 05 Dec 2016 22:23:23 +0300 Maxim Dounin SSL: $ssl_curves (ticket #1088).
Mon, 05 Dec 2016 22:23:23 +0300 Maxim Dounin SSL: $ssl_ciphers (ticket #870).
Mon, 05 Dec 2016 22:23:23 +0300 Maxim Dounin SSL: $ssl_client_v_start, $ssl_client_v_end, $ssl_client_v_remain.
Fri, 21 Oct 2016 16:28:39 +0300 Dmitry Volyntsev SSL: RFC2253 compliant $ssl_client_s_dn and $ssl_client_i_dn.
Wed, 15 Jun 2016 21:05:30 +0100 Tim Taubert SSL: ngx_ssl_ciphers() to set list of ciphers.
Thu, 19 May 2016 14:46:32 +0300 Maxim Dounin SSL: support for multiple curves (ticket #885).
Thu, 19 May 2016 14:46:32 +0300 Maxim Dounin SSL: support for multiple certificates (ticket #814).
Thu, 31 Mar 2016 23:38:34 +0300 Maxim Dounin SSL: RSA_generate_key() is deprecated in OpenSSL 1.1.0.
Thu, 31 Mar 2016 02:33:53 +0300 Sergey Kandaurov Fixed logging with variable field width.
Wed, 30 Mar 2016 11:52:16 +0300 Ruslan Ermilov Style.
Fri, 11 Sep 2015 20:13:06 +0300 Valentin Bartenev The HTTP/2 implementation (RFC 7240, 7241).
Mon, 25 May 2015 17:58:20 +0300 Maxim Dounin Disabled SSLv3 by default (ticket #653).
Mon, 23 Mar 2015 02:42:34 +0300 Maxim Dounin SSL: avoid SSL_CTX_set_tmp_rsa_callback() call with LibreSSL.
Mon, 16 Jun 2014 19:43:25 +0400 Valentin Bartenev SSL: the "ssl_password_file" directive.
Tue, 20 May 2014 14:03:03 +0400 Sergey Budnevitch SSL: $ssl_client_fingerprint variable.
Fri, 18 Apr 2014 20:13:21 +0400 Maxim Dounin SSL: $ssl_server_name variable.
Tue, 11 Feb 2014 19:20:25 +0400 Maxim Dounin SSL: the $ssl_session_reused variable.
Tue, 28 Jan 2014 15:33:49 -0800 Piotr Sikora SSL: support ALPN (IETF's successor to NPN).
Tue, 14 Jan 2014 15:56:40 +0400 Maxim Dounin SSL: fixed ssl_verify_depth to take only one argument.
Fri, 10 Jan 2014 16:12:40 +0100 Dirkjan Bussink SSL: ssl_session_tickets directive.
Fri, 20 Dec 2013 16:18:25 +0400 Maxim Dounin SSL: ssl_buffer_size directive.
Fri, 11 Oct 2013 16:05:24 -0700 Piotr Sikora SSL: added ability to set keys used for Session Tickets (RFC5077).
Sun, 22 Sep 2013 22:36:11 -0700 Piotr Sikora SSL: stop loading configs with invalid "ssl_ciphers" values.
Fri, 29 Mar 2013 17:15:34 +0000 Maxim Dounin Merge of r5078: removed zero termination of shm zone names. stable-1.2
Wed, 20 Mar 2013 10:36:57 +0000 Valentin Bartenev Preliminary experimental support for SPDY draft 2.
Thu, 07 Mar 2013 18:21:28 +0000 Valentin Bartenev SSL: Next Protocol Negotiation extension support.
Tue, 19 Feb 2013 17:48:45 +0000 Valentin Bartenev Removed zero termination of shm zone names.
Tue, 13 Nov 2012 10:42:16 +0000 Maxim Dounin Merge of r4885: ssl_verify_client optional_no_ca. stable-1.2
Fri, 05 Oct 2012 11:09:14 +0000 Maxim Dounin OCSP stapling: properly check if there is ssl.ctx.
Wed, 03 Oct 2012 15:24:08 +0000 Maxim Dounin SSL: the "ssl_verify_client" directive parameter "optional_no_ca".
Mon, 01 Oct 2012 12:53:11 +0000 Maxim Dounin OCSP stapling: ssl_stapling_verify directive.
Mon, 01 Oct 2012 12:47:55 +0000 Maxim Dounin OCSP stapling: loading OCSP responses.
Mon, 01 Oct 2012 12:41:08 +0000 Maxim Dounin OCSP stapling: ssl_stapling_file support.
Mon, 01 Oct 2012 12:39:36 +0000 Maxim Dounin OCSP stapling: ssl_trusted_certificate directive.
Sun, 05 Feb 2012 20:02:59 +0000 Maxim Dounin Merge of r4406, r4413: copyrights updated. stable-1.0
Sun, 05 Feb 2012 19:15:09 +0000 Maxim Dounin Merge of r4401, r4415: stable-1.0
Wed, 18 Jan 2012 15:07:43 +0000 Maxim Konovalov Copyright updated.
Wed, 11 Jan 2012 11:15:00 +0000 Maxim Dounin Added support for TLSv1.1, TLSv1.2 in ssl_protocols directive.
Wed, 14 Dec 2011 14:31:55 +0000 Maxim Dounin Merge of r4270, r4274: stable-1.0
Mon, 14 Nov 2011 09:12:15 +0000 Sergey Budnevitch Fixed NGX_CONF_TAKE1/NGX_CONF_FLAG misuse.
Tue, 01 Nov 2011 13:00:30 +0000 Igor Sysoev Merging r4034, r4186, r4187, r4229, r4235, r4237: stable-1.0
Mon, 31 Oct 2011 09:57:14 +0000 Maxim Dounin Fixed segfault on configuration testing with ssl (ticket #37).
Fri, 30 Sep 2011 13:36:33 +0000 Igor Sysoev Merging r3933, r4154: stable-1.0
Tue, 27 Sep 2011 12:06:07 +0000 Maxim Dounin Fix for "ssl_session_cache builtin" (broken since 1.1.1, r3993).
Mon, 29 Aug 2011 12:35:53 +0000 Igor Sysoev Merge of r3960, r3961, r3962, r3963, r3965: stable-1.0
Thu, 04 Aug 2011 11:12:30 +0000 Igor Sysoev A new fix for the case when ssl_session_cache defined, but ssl is not
Wed, 20 Jul 2011 15:42:40 +0000 Igor Sysoev ECDHE support
Wed, 20 Jul 2011 12:59:24 +0000 Igor Sysoev MSIE export versions are rare now, so RSA 512 key is generated on demand
Mon, 27 Jun 2011 15:47:51 +0000 Igor Sysoev use !aNULL to disable all anonymous cipher suites
Fri, 14 May 2010 09:56:37 +0000 Igor Sysoev ngx_str_set() and ngx_str_null()
Mon, 01 Feb 2010 14:39:16 +0000 Igor Sysoev merge r3155, r3156, r3160, r969, r3191, r3197, r3358: stable-0.7
Mon, 26 Oct 2009 16:53:34 +0000 Igor Sysoev merge r2995, r2996, r2997, r2998, r3003, r3141, r3210, r3211, r3232: stable-0.7
Mon, 19 Oct 2009 12:33:09 +0000 Igor Sysoev fix typo
Wed, 07 Oct 2009 14:46:13 +0000 Igor Sysoev use only strong ciphers by default
Tue, 06 Oct 2009 14:24:53 +0000 Igor Sysoev disable SSLv2 and low ciphers by default
Thu, 24 Sep 2009 14:45:28 +0000 Igor Sysoev $ssl_session_id
Fri, 18 Sep 2009 09:10:16 +0000 Igor Sysoev *) issue warning instead of failure: this is too common case
Thu, 23 Jul 2009 12:54:20 +0000 Igor Sysoev delete OpenSSL pre-0.9.7 compatibility: the sources were not actually
Thu, 23 Jul 2009 12:21:26 +0000 Igor Sysoev ssl_crl
Wed, 22 Jul 2009 17:41:42 +0000 Igor Sysoev *) $ssl_client_verify
Tue, 02 Jun 2009 16:09:44 +0000 Igor Sysoev return NULL instead of NGX_CONF_ERROR on a create conf failure
Thu, 16 Apr 2009 19:25:09 +0000 Igor Sysoev move zone name from ngx_shm_zone_t to ngx_shm_t to use Win32 shared memory
Wed, 15 Apr 2009 19:28:10 +0000 Igor Sysoev fix building by MSVC8
Mon, 01 Sep 2008 14:19:01 +0000 Igor Sysoev *) listen ssl
Tue, 29 Jul 2008 14:31:03 +0000 Igor Sysoev fix typo
Tue, 29 Jul 2008 14:29:02 +0000 Igor Sysoev *) ssl_verify_client ask
Mon, 16 Jun 2008 05:54:18 +0000 Igor Sysoev $ssl_client_cert
Mon, 16 Jun 2008 05:51:32 +0000 Igor Sysoev DH parameters, ssl_dhparam
Mon, 26 May 2008 07:14:13 +0000 Igor Sysoev ssl_session_cache none
Wed, 26 Dec 2007 20:27:22 +0000 Igor Sysoev ssl_session_cache off
Sun, 14 Oct 2007 18:56:15 +0000 Igor Sysoev fix English grammar
Tue, 17 Jul 2007 09:23:23 +0000 Igor Sysoev Sun Studio on sparc uses different bit order
Tue, 29 May 2007 15:21:09 +0000 Igor Sysoev SNI support
Wed, 03 Jan 2007 15:25:40 +0000 Igor Sysoev move the session cache callbacks to the ngx_openssl_module
Tue, 02 Jan 2007 23:55:05 +0000 Igor Sysoev ssl_session_cache
Tue, 02 Jan 2007 23:50:10 +0000 Igor Sysoev style fix: scf > sscf
Tue, 02 Jan 2007 23:41:54 +0000 Igor Sysoev style fix
Tue, 02 Jan 2007 23:37:25 +0000 Igor Sysoev ngx_ssl_get_server_conf()
Wed, 09 Aug 2006 19:59:45 +0000 Igor Sysoev nginx-0.3.57-RELEASE import release-0.3.57
Fri, 04 Aug 2006 16:04:04 +0000 Igor Sysoev nginx-0.3.56-RELEASE import release-0.3.56
Fri, 28 Jul 2006 15:16:17 +0000 Igor Sysoev nginx-0.3.55-RELEASE import release-0.3.55
Sat, 06 May 2006 16:28:56 +0000 Igor Sysoev nginx-0.3.45-RELEASE import release-0.3.45
Wed, 19 Apr 2006 15:30:56 +0000 Igor Sysoev nginx-0.3.40-RELEASE import release-0.3.40
Wed, 08 Feb 2006 15:33:12 +0000 Igor Sysoev nginx-0.3.27-RELEASE import release-0.3.27
Mon, 16 Jan 2006 14:56:53 +0000 Igor Sysoev nginx-0.3.21-RELEASE import release-0.3.21
Wed, 09 Nov 2005 17:25:55 +0000 Igor Sysoev nginx-0.3.8-RELEASE import release-0.3.8
Wed, 19 Oct 2005 12:33:58 +0000 Igor Sysoev nginx-0.3.3-RELEASE import release-0.3.3
Fri, 30 Sep 2005 14:41:25 +0000 Igor Sysoev nginx-0.2.2-RELEASE import release-0.2.2
Fri, 23 Sep 2005 11:02:22 +0000 Igor Sysoev nginx-0.2.0-RELEASE import release-0.2.0
Thu, 08 Sep 2005 14:36:09 +0000 Igor Sysoev nginx-0.1.45-RELEASE import release-0.1.45
Thu, 14 Jul 2005 12:51:53 +0000 Igor Sysoev nginx-0.1.39-RELEASE import release-0.1.39
Thu, 12 May 2005 14:58:06 +0000 Igor Sysoev nginx-0.1.29-RELEASE import release-0.1.29
Fri, 08 Apr 2005 15:18:55 +0000 Igor Sysoev nginx-0.1.28-RELEASE import release-0.1.28
Sat, 19 Mar 2005 12:38:37 +0000 Igor Sysoev nginx-0.1.25-RELEASE import release-0.1.25
Thu, 03 Feb 2005 19:33:37 +0000 Igor Sysoev nginx-0.1.17-RELEASE import release-0.1.17
Tue, 18 Jan 2005 13:03:58 +0000 Igor Sysoev nginx-0.1.14-RELEASE import release-0.1.14
Wed, 29 Sep 2004 16:00:49 +0000 Igor Sysoev nginx-0.1.0-2004-09-29-20:00:49 import; remove years from copyright
Tue, 28 Sep 2004 08:34:51 +0000 Igor Sysoev nginx-0.1.0-2004-09-28-12:34:51 import; set copyright and remove unused files
Sun, 18 Jul 2004 19:11:20 +0000 Igor Sysoev nginx-0.0.7-2004-07-18-23:11:20 import
Fri, 16 Jul 2004 17:11:43 +0000 Igor Sysoev nginx-0.0.7-2004-07-16-21:11:43 import base src/http/modules/ngx_http_ssl_filter.c@0fb7b189d66f