nginx.git/src/event, branch release-1.7.6

SSL: session id context now includes certificate hash.

2014-09-15T13:59:47+00:00

This prevents inappropriate session reuse in unrelated server{}
blocks, while preserving ability to restore sessions on other servers
when using TLS Session Tickets.

Additionally, session context is now set even if there is no session cache
configured.  This is needed as it's also used for TLS Session Tickets.

Thanks to Antoine Delignat-Lavaud and Piotr Sikora.

Upstream: limited next_upstream time and tries (ticket #544).

2014-09-12T14:50:47+00:00

The new directives {proxy,fastcgi,scgi,uwsgi,memcached}_next_upstream_tries
and {proxy,fastcgi,scgi,uwsgi,memcached}_next_upstream_timeout limit
the number of upstreams tried and the maximum time spent for these tries
when searching for a valid upstream.

SSL: guard use of all SSL options for bug workarounds.

2014-09-03T21:49:55+00:00

Some of the OpenSSL forks (read: BoringSSL) started removing unused,
no longer necessary and/or not really working bug workarounds along
with the SSL options and defines for them.

Instead of fixing nginx build after each removal, be proactive
and guard use of all SSL options for bug workarounds.

Signed-off-by: Piotr Sikora

Events: processing of posted events changed from LIFO to FIFO.

2014-09-01T14:20:18+00:00

In theory, this can provide a bit better distribution of latencies.

Also it simplifies the code, since ngx_queue_t is now used instead
of custom implementation.

Events: removed broken thread support from posted events.

2014-09-01T14:20:03+00:00

It's mostly dead code.  And the idea of thread support for this task has
been deprecated.

Events: removed unused variable in ngx_poll_process_events().

2014-08-10T13:44:46+00:00

Events: format specifier fixes.

2014-08-07T13:04:43+00:00

Events: changed nevents type to unsigned in poll module.

2014-08-07T12:56:57+00:00

SSL: let it build against LibreSSL.

2014-07-30T11:32:16+00:00

LibreSSL developers decided that LibreSSL is OpenSSL-2.0.0, so tests
for OpenSSL-1.0.2+ are now passing, even though the library doesn't
provide functions that are expected from that version of OpenSSL.

Signed-off-by: Piotr Sikora

SSL: let it build against BoringSSL.

2014-07-30T11:32:15+00:00

This change adds support for using BoringSSL as a drop-in replacement
for OpenSSL without adding support for any of the BoringSSL-specific
features.

Signed-off-by: Piotr Sikora