nginx.git/src/event, branch release-1.5.10

SSL: fixed $ssl_session_id possible segfault after 97e3769637a7.

2014-01-23T14:32:26+00:00

Even during execution of a request it is possible that there will be
no session available, notably in case of renegotiation.  As a result
logging of $ssl_session_id in some cases caused NULL pointer dereference
after revision 97e3769637a7 (1.5.9).  The check added returns an empty
string if there is no session available.

SSL: fixed $ssl_session_id variable.

2014-01-22T12:05:06+00:00

Previously, it used to contain full session serialized instead of just
a session id, making it almost impossible to use the variable in a safe
way.

Thanks to Ivan Ristić.

SSL: ssl_buffer_size directive.

2013-12-20T12:18:25+00:00

Resolver: implemented IPv6 name to address resolving.

2013-12-09T06:53:28+00:00

Changed resolver API to use ngx_addr_t.

2013-12-06T10:30:27+00:00

Use ngx_chain_get_free_buf() in pipe input filters.

2013-12-11T17:30:38+00:00

No functional changes.

Core: keep the length of the local sockaddr.

2013-12-09T06:14:51+00:00

SSL: fixed c->read->ready handling in ngx_ssl_recv().

2013-11-29T13:16:06+00:00

If c->read->ready was reset, but later some data were read from a socket
buffer due to a call to ngx_ssl_recv(), the c->read->ready flag should
be restored if not all data were read from OpenSSL buffers (as kernel
won't notify us about the data anymore).

More details are available here:
http://mailman.nginx.org/pipermail/nginx/2013-November/041178.html

SSL: added ability to set keys used for Session Tickets (RFC5077).

2013-10-11T23:05:24+00:00

In order to support key rollover, ssl_session_ticket_key can be defined
multiple times. The first key will be used to issue and resume Session
Tickets, while the rest will be used only to resume them.

    ssl_session_ticket_key  session_tickets/current.key;
    ssl_session_ticket_key  session_tickets/prev-1h.key;
    ssl_session_ticket_key  session_tickets/prev-2h.key;

Please note that nginx supports Session Tickets even without explicit
configuration of the keys and this feature should be only used in setups
where SSL traffic is distributed across multiple nginx servers.

Signed-off-by: Piotr Sikora

SSL: SSL_CTX_set_timeout() now always called.

2013-10-14T09:59:35+00:00

The timeout set is used by OpenSSL as a hint for clients in TLS Session
Tickets.  Previous code resulted in a default timeout (5m) used for TLS
Sessions Tickets if there was no session cache configured.

Prodded by Piotr Sikora.