nginx.git/src/stream/ngx_stream_ssl_preread_module.c, branch release-1.29.7 nginx Stream ssl_preread: do not reallocate a parsed SNI host. 2024-08-09T15:12:26+00:00 Sergey Kandaurov pluknet@nginx.com 2024-08-09T15:12:26+00:00 0fa8434957dcecef934a70e9c92d40a0a08988bd We own this memory from the session pool. 
We own this memory from the session pool.
Stream: virtual servers. 2023-12-14T17:58:39+00:00 Roman Arutyunyan arut@nginx.com 2023-12-14T17:58:39+00:00 d21675228a0ba8d4331e05c60660228a5d3326de Server name is taken either from ngx_stream_ssl_module or ngx_stream_ssl_preread_module. The change adds "default_server" parameter to the "listen" directive, as well as the following directives: "server_names_hash_max_size", "server_names_hash_bucket_size", "server_name" and "ssl_reject_handshake". 
Server name is taken either from ngx_stream_ssl_module or
ngx_stream_ssl_preread_module.

The change adds "default_server" parameter to the "listen" directive,
as well as the following directives: "server_names_hash_max_size",
"server_names_hash_bucket_size", "server_name" and "ssl_reject_handshake".
Stream ssl_preread: added SSLv2 Client Hello support. 2018-07-18T15:51:25+00:00 Sergey Kandaurov pluknet@nginx.com 2018-07-18T15:51:25+00:00 b93931ae8292a485e045c36f963d843a74507d1e In particular, it was not possible to obtain SSLv2 protocol version. 
In particular, it was not possible to obtain SSLv2 protocol version.
Stream ssl_preread: $ssl_preread_protocol variable. 2018-07-11T14:56:51+00:00 Roman Arutyunyan arut@nginx.com 2018-07-11T14:56:51+00:00 a8e38e2a9c1c9f3afb22fdb196e85fb2f28c192c The variable keeps the latest SSL protocol version supported by the client. The variable has the same format as $ssl_protocol. The version is read from the client_version field of ClientHello. If the supported_versions extension is present in the ClientHello, then the version is set to TLSv1.3. 
The variable keeps the latest SSL protocol version supported by the client.
The variable has the same format as $ssl_protocol.

The version is read from the client_version field of ClientHello.  If the
supported_versions extension is present in the ClientHello, then the version
is set to TLSv1.3.
Style. 2018-03-12T15:38:53+00:00 Roman Arutyunyan arut@nginx.com 2018-03-12T15:38:53+00:00 b84b67bc0f434747f3e13c5faf8ddf71acd11049 






Stream ssl_preread: $ssl_preread_alpn_protocols variable.
2018-03-12T13:03:08+00:00

Roman Arutyunyan
arut@nginx.com

2018-03-12T13:03:08+00:00

1a5604bedd98b5f58a0b42d4fbb4223759e6c0c9

The variable keeps a comma-separated list of protocol names from ALPN TLS
extension defined by RFC 7301.





The variable keeps a comma-separated list of protocol names from ALPN TLS
extension defined by RFC 7301.







Variables: macros for null variables.
2017-08-01T11:28:33+00:00

Ruslan Ermilov
ru@nginx.com

2017-08-01T11:28:33+00:00

b992f7259ba4763178f9d394b320bcc5de88818b

No functional changes.





No functional changes.







Stream ssl_preread: relaxed SSL version check.
2016-12-19T11:02:39+00:00

Roman Arutyunyan
arut@nginx.com

2016-12-19T11:02:39+00:00

393636d79c836e360b14ca99f76996935ee02236

SSL version 3.0 can be specified by the client at the record level for
compatibility reasons.  Previously, ssl_preread module rejected such
connections, presuming they don't have SNI.  Now SSL 3.0 is allowed at
the record level.





SSL version 3.0 can be specified by the client at the record level for
compatibility reasons.  Previously, ssl_preread module rejected such
connections, presuming they don't have SNI.  Now SSL 3.0 is allowed at
the record level.







Stream ssl_preread: fixed $ssl_preread_server_name variable.
2016-10-05T15:11:39+00:00

Sergey Kandaurov
pluknet@nginx.com

2016-10-05T15:11:39+00:00

88dc647481a9280fa6cedb0bed61a34123119b3c

Made sure to set the variable length only after successful SNI parsing.





Made sure to set the variable length only after successful SNI parsing.







Stream ssl_preread: removed internal macro.
2016-09-15T12:36:02+00:00

Vladimir Homutov
vl@nginx.com

2016-09-15T12:36:02+00:00

7f57804fe2573dd45dfac4fd79d70e616a760c53

The ngx_log_debug() macro is internal and should not be used.





The ngx_log_debug() macro is internal and should not be used.