| Mon, 06 May 2024 00:07:18 +0300 |
Maxim Dounin |
SSL: logging level of "invalid alert" errors.
|
| Mon, 06 May 2024 00:06:15 +0300 |
Maxim Dounin |
SSL: logging level of all "SSL alert number N" errors.
|
| Tue, 30 Jan 2024 19:18:31 +0400 |
Sergey Kandaurov |
SSL: fixed $ssl_curves allocation error handling.
|
| Mon, 25 Dec 2023 21:15:47 +0400 |
Sergey Kandaurov |
SSL: disabled renegotiation checks with LibreSSL.
|
| Wed, 21 Jun 2023 01:29:53 +0300 |
Maxim Dounin |
SSL: avoid using OpenSSL config in build directory (ticket #2404).
|
| Wed, 21 Jun 2023 01:29:55 +0300 |
Maxim Dounin |
SSL: provided "nginx" appname when loading OpenSSL configs.
|
| Wed, 29 Mar 2023 11:14:25 +0400 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Thu, 23 Feb 2023 16:17:29 +0400 |
Sergey Kandaurov |
QUIC: using ngx_ssl_handshake_log().
quic
|
| Thu, 15 Dec 2022 19:40:44 +0400 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Thu, 20 Oct 2022 16:41:36 +0400 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Tue, 26 Jul 2022 19:54:11 +0400 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Mon, 14 Feb 2022 10:14:07 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Tue, 25 Jan 2022 23:42:48 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Wed, 29 Dec 2021 15:17:26 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Fri, 24 Dec 2021 15:53:59 +0300 |
Ruslan Ermilov |
Merged with the default branch.
quic
|
| Wed, 03 Nov 2021 11:22:07 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Wed, 01 Sep 2021 10:57:25 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Thu, 15 Jul 2021 16:28:21 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Wed, 10 Mar 2021 15:39:01 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Tue, 15 Dec 2020 16:55:43 +0000 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Tue, 24 Nov 2020 17:19:40 +0000 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Tue, 10 Nov 2020 19:40:00 +0000 |
Roman Arutyunyan |
QUIC: renamed c->qs to c->quic.
quic
|
| Thu, 29 Oct 2020 14:53:58 +0000 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Mon, 19 Oct 2020 10:32:53 +0300 |
Vladimir Homutov |
QUIC: reverted previous 3 commits.
quic
|
| Tue, 15 Sep 2020 22:44:46 +0300 |
Vladimir Homutov |
SSL: added the "ssl_keys_file" directive.
quic
|
| Thu, 01 Oct 2020 12:21:11 +0100 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Tue, 18 Aug 2020 16:22:00 +0300 |
Roman Arutyunyan |
Merged with the default branch.
quic
|
| Wed, 22 Jul 2020 13:34:48 +0300 |
Roman Arutyunyan |
SSL: fixed compilation without QUIC after 0d2b2664b41c.
quic
|
| Mon, 13 Jul 2020 15:34:22 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Tue, 26 May 2020 20:26:44 +0300 |
Sergey Kandaurov |
Merged with the default branch.
quic
|
| Mon, 23 Mar 2020 20:48:34 +0300 |
Sergey Kandaurov |
Fixed client certificate verification.
quic
|
| Wed, 18 Mar 2020 16:37:16 +0300 |
Roman Arutyunyan |
Moved setting QUIC methods to runtime.
quic
|
| Fri, 28 Feb 2020 16:23:25 +0300 |
Vladimir Homutov |
Moved all QUIC code into ngx_event_quic.c
quic
|
| Fri, 28 Feb 2020 13:09:52 +0300 |
Sergey Kandaurov |
Introduced quic_version macro, uint16/uint32 routines ported.
quic
|
| Fri, 28 Feb 2020 13:09:52 +0300 |
Sergey Kandaurov |
Cleanup.
quic
|
| Wed, 26 Feb 2020 16:56:47 +0300 |
Vladimir Homutov |
Generic function for HKDF expansion.
quic
|
| Fri, 28 Feb 2020 13:09:52 +0300 |
Sergey Kandaurov |
QUIC header protection routines, introduced ngx_quic_tls_hp().
quic
|
| Fri, 28 Feb 2020 13:09:52 +0300 |
Sergey Kandaurov |
AEAD routines, introduced ngx_quic_tls_open()/ngx_quic_tls_seal().
quic
|
| Fri, 28 Feb 2020 13:09:52 +0300 |
Sergey Kandaurov |
Introduced ngx_quic_secret_t.
quic
|
| Fri, 28 Feb 2020 13:09:52 +0300 |
Sergey Kandaurov |
QUIC handshake handler, draft 24 bump.
quic
|
| Fri, 28 Feb 2020 13:09:52 +0300 |
Sergey Kandaurov |
PN-aware AEAD nonce, feeding proper CRYPTO length.
quic
|
| Fri, 28 Feb 2020 13:09:51 +0300 |
Sergey Kandaurov |
OpenSSL compatibility.
quic
|
| Fri, 28 Feb 2020 13:09:51 +0300 |
Sergey Kandaurov |
QUIC add_handshake_data callback, varint routines.
quic
|
| Fri, 28 Feb 2020 13:09:51 +0300 |
Sergey Kandaurov |
QUIC set_encryption_secrets callback.
quic
|
| Fri, 28 Feb 2020 13:09:51 +0300 |
Sergey Kandaurov |
Initial QUIC support in http.
quic
|
| Wed, 08 Mar 2023 22:22:47 +0300 |
Maxim Dounin |
SSL: logging levels of errors observed with BoringSSL.
|
| Wed, 08 Mar 2023 22:22:34 +0300 |
Maxim Dounin |
SSL: logging levels of errors observed with tlsfuzzer and LibreSSL.
|
| Wed, 08 Mar 2023 22:21:59 +0300 |
Maxim Dounin |
SSL: logging levels of various errors reported with tlsfuzzer.
|
| Wed, 08 Mar 2023 22:21:53 +0300 |
Maxim Dounin |
SSL: switched to detect log level based on the last error.
|
| Thu, 01 Dec 2022 04:22:31 +0300 |
Maxim Dounin |
SSL: fixed ngx_ssl_recv() to reset c->read->ready after errors.
|
| Thu, 24 Nov 2022 23:08:30 +0400 |
Sergey Kandaurov |
SSL: fixed debug logging of SSL_sendfile() return value.
|
| Thu, 13 Oct 2022 16:18:56 +0400 |
Sergey Kandaurov |
SSL: removed cast not needed after 5ffd76a9ccf3.
|
| Wed, 12 Oct 2022 20:14:57 +0300 |
Maxim Dounin |
SSL: workaround for session timeout handling with TLSv1.3.
|
| Wed, 12 Oct 2022 20:14:55 +0300 |
Maxim Dounin |
SSL: optimized rotation of session ticket keys.
|
| Wed, 12 Oct 2022 20:14:53 +0300 |
Maxim Dounin |
SSL: automatic rotation of session ticket keys.
|
| Wed, 12 Oct 2022 20:14:51 +0300 |
Maxim Dounin |
SSL: shorter debug messages about session tickets.
|
| Wed, 12 Oct 2022 20:14:49 +0300 |
Maxim Dounin |
SSL: renamed session ticket key functions and data index.
|
| Wed, 12 Oct 2022 20:14:47 +0300 |
Maxim Dounin |
SSL: renamed session ticket key type.
|
| Wed, 12 Oct 2022 20:14:43 +0300 |
Maxim Dounin |
SSL: explicit clearing of expired sessions.
|
| Wed, 12 Oct 2022 20:14:40 +0300 |
Maxim Dounin |
SSL: single allocation in session cache on 32-bit platforms.
|
| Wed, 12 Oct 2022 20:14:39 +0300 |
Maxim Dounin |
SSL: explicit session id length checking.
|
| Wed, 12 Oct 2022 20:14:37 +0300 |
Maxim Dounin |
SSL: updated comment about session sizes.
|
| Wed, 12 Oct 2022 20:14:36 +0300 |
Maxim Dounin |
SSL: reduced logging of session cache failures (ticket #621).
|
| Wed, 12 Oct 2022 20:14:34 +0300 |
Maxim Dounin |
SSL: disabled saving tickets to session cache.
|
| Thu, 08 Sep 2022 13:53:49 +0400 |
Sergey Kandaurov |
SSL: silenced GCC warnings when building with BoringSSL.
|
| Wed, 07 Sep 2022 00:47:17 +0300 |
Maxim Dounin |
Win32: fixed build on Windows with OpenSSL 3.0.x (ticket #2379).
|
| Wed, 07 Sep 2022 00:44:10 +0300 |
Maxim Dounin |
SSL: fixed incorrect usage of #if instead of #ifdef.
|
| Tue, 09 Aug 2022 17:13:46 -0300 |
Murilo Andrade |
SSL: logging level of "bad record type" errors.
|
| Tue, 12 Jul 2022 15:55:22 +0300 |
Maxim Dounin |
SSL: logging levels of various errors added in OpenSSL 1.1.1.
|
| Tue, 08 Feb 2022 17:35:27 +0300 |
Sergey Kandaurov |
SSL: logging level of "application data after close notify".
|
| Mon, 24 Jan 2022 17:18:50 +0300 |
Maxim Dounin |
SSL: always renewing tickets with TLSv1.3 (ticket #1892).
|
| Mon, 17 Jan 2022 17:05:12 +0300 |
Sergey Kandaurov |
SSL: free pkey on SSL_CTX_set0_tmp_dh_pkey() failure.
|
| Mon, 27 Dec 2021 19:49:26 +0300 |
Maxim Dounin |
Support for sendfile(SF_NOCACHE).
|
| Mon, 27 Dec 2021 19:48:42 +0300 |
Maxim Dounin |
SSL: SSL_sendfile(SF_NODISKIO) support.
|
| Mon, 01 Nov 2021 18:09:34 +0300 |
Sergey Kandaurov |
SSL: $ssl_curve (ticket #2135).
|
| Thu, 21 Oct 2021 18:44:07 +0300 |
Maxim Dounin |
SSL: SSL_sendfile() support with kernel TLS.
|
| Thu, 21 Oct 2021 18:43:13 +0300 |
Maxim Dounin |
Style: added missing "static" specifiers.
|
| Tue, 19 Oct 2021 12:19:59 +0300 |
Vladimir Homutov |
Stream: the "ssl_alpn" directive.
|
| Thu, 14 Oct 2021 11:46:23 +0300 |
Vladimir Homutov |
SSL: added $ssl_alpn_protocol variable.
|
| Tue, 10 Aug 2021 23:43:17 +0300 |
Sergey Kandaurov |
SSL: removed use of the SSL_OP_MSIE_SSLV2_RSA_PADDING option.
|
| Tue, 10 Aug 2021 23:43:17 +0300 |
Sergey Kandaurov |
SSL: removed export ciphers support.
|
| Tue, 10 Aug 2021 23:43:17 +0300 |
Sergey Kandaurov |
SSL: use of the SSL_OP_IGNORE_UNEXPECTED_EOF option.
|
| Tue, 10 Aug 2021 23:43:16 +0300 |
Sergey Kandaurov |
SSL: ERR_peek_error_line_data() compatibility with OpenSSL 3.0.
|
| Tue, 10 Aug 2021 23:43:16 +0300 |
Sergey Kandaurov |
SSL: using SSL_CTX_set0_tmp_dh_pkey() with OpenSSL 3.0 in dhparam.
|
| Tue, 10 Aug 2021 23:42:59 +0300 |
Sergey Kandaurov |
SSL: RSA data type is deprecated in OpenSSL 3.0.
|
| Wed, 04 Aug 2021 21:27:51 +0300 |
Sergey Kandaurov |
SSL: SSL_CTX_set_tmp_dh() error handling.
|
| Tue, 03 Aug 2021 20:50:30 +0300 |
Maxim Dounin |
SSL: set events ready flags after handshake.
|
| Tue, 01 Jun 2021 17:37:51 +0300 |
Maxim Dounin |
Fixed SSL logging with lingering close.
|
| Tue, 01 Jun 2021 17:37:49 +0300 |
Maxim Dounin |
SSL: ngx_ssl_shutdown() rework.
|
| Sat, 20 Feb 2021 18:03:04 +0300 |
Maxim Dounin |
SSL: added check for debugging.
|
| Sat, 20 Feb 2021 18:02:54 +0300 |
Maxim Dounin |
SSL: added missed error reporting during variables evaluation.
|
| Sat, 20 Feb 2021 18:02:49 +0300 |
Maxim Dounin |
SSL: X509_NAME_oneline() error handling.
|
| Tue, 08 Dec 2020 01:43:36 +0300 |
Ruslan Ermilov |
SSL: fixed SSL shutdown on lingering close.
|
| Wed, 28 Oct 2020 10:56:11 +0300 |
Vladimir Homutov |
Core: added format specifiers to output binary data as hex.
|
| Thu, 22 Oct 2020 18:02:28 +0300 |
Maxim Dounin |
SSL: ssl_reject_handshake directive (ticket #195).
|
| Thu, 22 Oct 2020 18:00:22 +0300 |
Maxim Dounin |
SSL: ssl_conf_command directive.
|
| Wed, 16 Sep 2020 18:26:25 +0300 |
Maxim Dounin |
SSL: disabled shutdown when there are buffered data.
|
| Wed, 16 Sep 2020 18:26:24 +0300 |
Maxim Dounin |
SSL: disabled shutdown after connection errors.
|
| Wed, 16 Sep 2020 18:26:23 +0300 |
Maxim Dounin |
SSL: fixed event handling during shutdown.
|
| Wed, 16 Sep 2020 18:26:22 +0300 |
Maxim Dounin |
SSL: workaround for incorrect SSL_write() errors in OpenSSL 1.1.1.
|
| Mon, 10 Aug 2020 18:52:09 +0300 |
Maxim Dounin |
SSL: fixed shutdown handling.
|
| Mon, 29 Jun 2020 17:15:51 +0300 |
Maxim Dounin |
SSL: fixed unexpected certificate requests (ticket #2008).
|
| Wed, 03 Jun 2020 19:11:32 +0300 |
Maxim Dounin |
SSL: added verify callback to ngx_ssl_trusted_certificate().
|
| Fri, 22 May 2020 17:30:12 +0300 |
Roman Arutyunyan |
SSL: client certificate validation with OCSP (ticket #1534).
|
| Fri, 27 Dec 2019 19:43:01 +0300 |
Maxim Dounin |
SSL: reworked posted next events again.
|
| Tue, 24 Dec 2019 17:24:59 +0300 |
Maxim Dounin |
SSL: reworked posted next events.
|
| Thu, 17 Oct 2019 16:02:24 +0300 |
Maxim Dounin |
SSL: available bytes handling (ticket #1431).
|
| Thu, 17 Oct 2019 16:02:13 +0300 |
Maxim Dounin |
SSL: improved ngx_ssl_recv_chain() to stop if c->read->ready is 0.
|
| Fri, 16 Aug 2019 18:16:21 +0300 |
Maxim Dounin |
SSL: lowered log level for WSAECONNABORTED errors on Windows.
|
| Mon, 11 Apr 2016 15:46:36 +0300 |
Sergey Kandaurov |
SSL: removed OpenSSL 0.9.7 compatibility.
|
| Tue, 26 Mar 2019 09:33:57 +0300 |
Nikolay Morozov |
SSL: missing free calls in $ssl_client_s_dn and $ssl_client_i_dn.
|
| Sat, 09 Mar 2019 03:03:56 +0300 |
Maxim Dounin |
SSL: support for parsing PEM certificates from memory.
|
| Sat, 09 Mar 2019 02:55:43 +0300 |
Maxim Dounin |
SSL: removed redundant "pkey" variable.
|
| Sun, 03 Mar 2019 16:49:02 +0300 |
Maxim Dounin |
SSL: use of the SSL_OP_NO_CLIENT_RENEGOTIATION option.
|
| Sun, 03 Mar 2019 16:48:06 +0300 |
Maxim Dounin |
SSL: server name callback changed to return fatal errors.
|
| Mon, 25 Feb 2019 16:42:54 +0300 |
Maxim Dounin |
SSL: adjusted session id context with dynamic certificates.
|
| Mon, 25 Feb 2019 16:42:23 +0300 |
Maxim Dounin |
SSL: passwords support for dynamic certificate loading.
|
| Mon, 25 Feb 2019 16:41:44 +0300 |
Maxim Dounin |
SSL: loading of connection-specific certificates.
|
| Mon, 25 Feb 2019 16:41:28 +0300 |
Maxim Dounin |
SSL: reworked ngx_ssl_certificate().
|
| Mon, 25 Feb 2019 16:41:15 +0300 |
Maxim Dounin |
SSL: removed logging of empty "(SSL:)" in ngx_ssl_error().
|
