Fri, 24 Mar 2023 02:57:43 +0300 |
Maxim Dounin |
SSL: enabled TLSv1.3 by default.
|
Mon, 17 Oct 2022 16:24:53 +0400 |
Sergey Kandaurov |
SSL: improved validation of ssl_session_cache and ssl_ocsp_cache.
|
Mon, 01 Nov 2021 18:09:34 +0300 |
Sergey Kandaurov |
SSL: $ssl_curve (ticket #2135).
|
Wed, 20 Oct 2021 09:50:02 +0300 |
Vladimir Homutov |
HTTP: connections with wrong ALPN protocols are now rejected.
|
Thu, 14 Oct 2021 11:46:23 +0300 |
Vladimir Homutov |
SSL: added $ssl_alpn_protocol variable.
|
Fri, 15 Oct 2021 10:02:15 +0300 |
Vladimir Homutov |
HTTP/2: removed support for NPN.
|
Mon, 16 Aug 2021 22:40:31 +0300 |
Maxim Dounin |
SSL: ciphers now set before loading certificates (ticket #2035).
|
Fri, 05 Mar 2021 17:16:13 +0300 |
Maxim Dounin |
SSL: fixed build by Sun C with old OpenSSL versions.
|
Thu, 22 Oct 2020 18:02:28 +0300 |
Maxim Dounin |
SSL: ssl_reject_handshake directive (ticket #195).
|
Thu, 22 Oct 2020 18:00:22 +0300 |
Maxim Dounin |
SSL: ssl_conf_command directive.
|
Fri, 22 May 2020 17:25:27 +0300 |
Roman Arutyunyan |
OCSP: certificate status cache.
|
Fri, 22 May 2020 17:30:12 +0300 |
Roman Arutyunyan |
SSL: client certificate validation with OCSP (ticket #1534).
|
Mon, 16 Sep 2019 19:26:42 +0300 |
Sergey Kandaurov |
SSL: fixed ssl_verify_client error message.
|
Sun, 03 Mar 2019 16:48:39 +0300 |
Maxim Dounin |
SSL: fixed potential leak on memory allocation errors.
|
Mon, 25 Feb 2019 21:16:26 +0300 |
Maxim Dounin |
SSL: fixed possible segfault with dynamic certificates.
|
Mon, 25 Feb 2019 16:42:54 +0300 |
Maxim Dounin |
SSL: adjusted session id context with dynamic certificates.
|
Mon, 25 Feb 2019 16:42:23 +0300 |
Maxim Dounin |
SSL: passwords support for dynamic certificate loading.
|
Mon, 25 Feb 2019 16:42:05 +0300 |
Maxim Dounin |
SSL: variables support in ssl_certificate and ssl_certificate_key.
|
Tue, 07 Aug 2018 02:16:07 +0300 |
Maxim Dounin |
SSL: support for TLSv1.3 early data with BoringSSL.
|
Wed, 25 Apr 2018 14:57:24 +0300 |
Ruslan Ermilov |
SSL: deprecated the "ssl" directive.
|
Tue, 24 Apr 2018 15:29:01 +0300 |
Maxim Dounin |
SSL: detect "listen ... ssl" without certificates (ticket #178).
|
Tue, 22 Aug 2017 15:18:10 +0300 |
Maxim Dounin |
SSL: the $ssl_client_escaped_cert variable (ticket #857).
|
Tue, 01 Aug 2017 14:28:33 +0300 |
Ruslan Ermilov |
Variables: macros for null variables.
|
Tue, 18 Apr 2017 15:12:38 +0300 |
Sergey Kandaurov |
SSL: added support for TLSv1.3 in ssl_protocols directive.
|
Mon, 05 Dec 2016 22:23:23 +0300 |
Maxim Dounin |
SSL: $ssl_curves (ticket #1088).
|
Mon, 05 Dec 2016 22:23:23 +0300 |
Maxim Dounin |
SSL: $ssl_ciphers (ticket #870).
|
Mon, 05 Dec 2016 22:23:23 +0300 |
Maxim Dounin |
SSL: $ssl_client_v_start, $ssl_client_v_end, $ssl_client_v_remain.
|
Fri, 21 Oct 2016 16:28:39 +0300 |
Dmitry Volyntsev |
SSL: RFC2253 compliant $ssl_client_s_dn and $ssl_client_i_dn.
|
Wed, 15 Jun 2016 21:05:30 +0100 |
Tim Taubert |
SSL: ngx_ssl_ciphers() to set list of ciphers.
|
Thu, 19 May 2016 14:46:32 +0300 |
Maxim Dounin |
SSL: support for multiple curves (ticket #885).
|
Thu, 19 May 2016 14:46:32 +0300 |
Maxim Dounin |
SSL: support for multiple certificates (ticket #814).
|
Thu, 31 Mar 2016 23:38:34 +0300 |
Maxim Dounin |
SSL: RSA_generate_key() is deprecated in OpenSSL 1.1.0.
|
Thu, 31 Mar 2016 02:33:53 +0300 |
Sergey Kandaurov |
Fixed logging with variable field width.
|
Wed, 30 Mar 2016 11:52:16 +0300 |
Ruslan Ermilov |
Style.
|
Fri, 11 Sep 2015 20:13:06 +0300 |
Valentin Bartenev |
The HTTP/2 implementation (RFC 7240, 7241).
|
Mon, 25 May 2015 17:58:20 +0300 |
Maxim Dounin |
Disabled SSLv3 by default (ticket #653).
|
Mon, 23 Mar 2015 02:42:34 +0300 |
Maxim Dounin |
SSL: avoid SSL_CTX_set_tmp_rsa_callback() call with LibreSSL.
|
Mon, 16 Jun 2014 19:43:25 +0400 |
Valentin Bartenev |
SSL: the "ssl_password_file" directive.
|
Tue, 20 May 2014 14:03:03 +0400 |
Sergey Budnevitch |
SSL: $ssl_client_fingerprint variable.
|
Fri, 18 Apr 2014 20:13:21 +0400 |
Maxim Dounin |
SSL: $ssl_server_name variable.
|
Tue, 11 Feb 2014 19:20:25 +0400 |
Maxim Dounin |
SSL: the $ssl_session_reused variable.
|
Tue, 28 Jan 2014 15:33:49 -0800 |
Piotr Sikora |
SSL: support ALPN (IETF's successor to NPN).
|
Tue, 14 Jan 2014 15:56:40 +0400 |
Maxim Dounin |
SSL: fixed ssl_verify_depth to take only one argument.
|
Fri, 10 Jan 2014 16:12:40 +0100 |
Dirkjan Bussink |
SSL: ssl_session_tickets directive.
|
Fri, 20 Dec 2013 16:18:25 +0400 |
Maxim Dounin |
SSL: ssl_buffer_size directive.
|
Fri, 11 Oct 2013 16:05:24 -0700 |
Piotr Sikora |
SSL: added ability to set keys used for Session Tickets (RFC5077).
|
Sun, 22 Sep 2013 22:36:11 -0700 |
Piotr Sikora |
SSL: stop loading configs with invalid "ssl_ciphers" values.
|
Fri, 29 Mar 2013 17:15:34 +0000 |
Maxim Dounin |
Merge of r5078: removed zero termination of shm zone names.
stable-1.2
|
Wed, 20 Mar 2013 10:36:57 +0000 |
Valentin Bartenev |
Preliminary experimental support for SPDY draft 2.
|
Thu, 07 Mar 2013 18:21:28 +0000 |
Valentin Bartenev |
SSL: Next Protocol Negotiation extension support.
|
Tue, 19 Feb 2013 17:48:45 +0000 |
Valentin Bartenev |
Removed zero termination of shm zone names.
|
Tue, 13 Nov 2012 10:42:16 +0000 |
Maxim Dounin |
Merge of r4885: ssl_verify_client optional_no_ca.
stable-1.2
|
Fri, 05 Oct 2012 11:09:14 +0000 |
Maxim Dounin |
OCSP stapling: properly check if there is ssl.ctx.
|
Wed, 03 Oct 2012 15:24:08 +0000 |
Maxim Dounin |
SSL: the "ssl_verify_client" directive parameter "optional_no_ca".
|
Mon, 01 Oct 2012 12:53:11 +0000 |
Maxim Dounin |
OCSP stapling: ssl_stapling_verify directive.
|
Mon, 01 Oct 2012 12:47:55 +0000 |
Maxim Dounin |
OCSP stapling: loading OCSP responses.
|