summaryrefslogtreecommitdiffhomepage
path: root/auto/lib/openssl/conf (follow)
AgeCommit message (Collapse)AuthorFilesLines
2025-05-23QUIC: using QUIC API introduced in OpenSSL 3.5.Sergey Kandaurov1-2/+8
Similarly to the QUIC API originated in BoringSSL, this API allows to register custom TLS callbacks for an external QUIC implementation. See the SSL_set_quic_tls_cbs manual page for details. Due to a different approach used in OpenSSL 3.5, handling of CRYPTO frames was streamlined to always write an incoming CRYPTO buffer to the crypto context. Using SSL_provide_quic_data(), this results in transient allocation of chain links and buffers for CRYPTO frames received in order. Testing didn't reveal performance degradation of QUIC handshakes, https://github.com/nginx/nginx/pull/646 provides specific results.
2025-05-23QUIC: defined SSL API macros in a single place.Sergey Kandaurov1-3/+0
All definitions now set in ngx_event_quic.h, this includes moving NGX_QUIC_OPENSSL_COMPAT from autotests to compile time. Further, to improve code readability, a new NGX_QUIC_QUICTLS_API macro is used for QuicTLS that provides old BoringSSL QUIC API.
2024-02-26Configure: added support for Homebrew on Apple Silicon.Piotr Sikora1-0/+18
Signed-off-by: Piotr Sikora <piotr@aviatrix.com>
2023-06-21SSL: avoid using OpenSSL config in build directory (ticket #2404).Maxim Dounin1-0/+2
With this change, the NGX_OPENSSL_NO_CONFIG macro is defined when nginx is asked to build OpenSSL itself. And with this macro automatic loading of OpenSSL configuration (from the build directory) is prevented unless the OPENSSL_CONF environment variable is explicitly set. Note that not loading configuration is broken in OpenSSL 1.1.1 and 1.1.1a (fixed in OpenSSL 1.1.1b, see https://github.com/openssl/openssl/issues/7350). If nginx is used to compile these OpenSSL versions, configuring nginx with NGX_OPENSSL_NO_CONFIG explicitly set to 0 might be used as a workaround.
2023-02-22QUIC: OpenSSL compatibility layer.Roman Arutyunyan1-24/+30
The change allows to compile QUIC with OpenSSL which lacks BoringSSL QUIC API. This implementation does not support 0-RTT.
2021-09-27Configure: fixed QUIC support test.Ruslan Ermilov1-23/+22
OpenSSL library QUIC support cannot be tested at configure time when using the --with-openssl option so assume it's present if requested. While here, fixed the error message in case QUIC support is missing.
2021-09-27Configure: check for QUIC 0-RTT support at compile time.Ruslan Ermilov1-9/+0
2021-09-21Configure: simplified condition.Ruslan Ermilov1-3/+0
2021-09-14Removed NGX_OPENSSL_QUIC macro, NGX_QUIC is enough.Ruslan Ermilov1-3/+1
2021-09-09Changed the OpenSSL QUIC support detection.Ruslan Ermilov1-1/+1
As was changed in 253cf267f95a.
2020-07-21QUIC: added "quic" listen parameter.Roman Arutyunyan1-0/+1
The parameter allows processing HTTP/0.9-2 over QUIC. Also, introduced ngx_http_quic_module and moved QUIC settings there
2020-06-01Compatibility with BoringSSL master branch.Sergey Kandaurov1-0/+12
Recently BoringSSL introduced SSL_set_quic_early_data_context() that serves as an additional constrain to enable 0-RTT in QUIC. Relevant changes: * https://boringssl.googlesource.com/boringssl/+/7c52299%5E!/ * https://boringssl.googlesource.com/boringssl/+/8519432%5E!/
2020-05-01Configure: fixed static compilation with OpenSSL 1.1.1 / BoringSSL.Sergey Kandaurov1-1/+1
See 7246:04ebf29eaf5b for details.
2020-04-30Configure: unbreak with old OpenSSL, --with-http_v3_module added.Sergey Kandaurov1-8/+26
2020-02-28HTTP UDP layer, QUIC support autotest.Sergey Kandaurov1-0/+9
2018-03-22Configure: fixed static compilation with OpenSSL 1.1.1.Maxim Dounin1-7/+14
OpenSSL now uses pthread_atfork(), and this requires -lpthread on Linux to compile. Introduced NGX_LIBPTHREAD to add it as appropriate, similar to existing NGX_LIBDL.
2016-12-24Win32: compatiblity with OpenSSL 1.1.0.Maxim Dounin1-2/+10
OpenSSL 1.1.0 now uses normal "nmake; nmake install" instead of using custom "ms\do_ms.bat" script and "ms\nt.mak" makefile. And Configure now requires --prefix to be absolute, and no longer derives --openssldir from prefix (so it's specified explicitly). Generated libraries are now called "libcrypto.lib" and "libssl.lib" instead of "libeay32.lib" and "ssleay32.lib". Appropriate tests added to support both old and new variants. Additionally, openssl/lhash.h now triggers warning C4090 ('function' : different 'const' qualifiers), so the warning was disabled.
2016-03-31SSL: initialization changes for OpenSSL 1.1.0.Maxim Dounin1-1/+1
OPENSSL_config() deprecated in OpenSSL 1.1.0. Additionally, SSL_library_init(), SSL_load_error_strings() and OpenSSL_add_all_algorithms() are no longer available if OPENSSL_API_COMPAT is set to 0x10100000L. The OPENSSL_init_ssl() function is now used instead with appropriate arguments to trigger the same behaviour. The configure test changed to use SSL_CTX_set_options(). Deinitialization now happens automatically in OPENSSL_cleanup() called via atexit(3), so we no longer call EVP_cleanup() and ENGINE_cleanup() directly.
2016-02-18Configure: fixed static nginx build with OpenSSL (ticket #903).Ruslan Ermilov1-7/+8
Before 7142b04337d6, it was possible to build the OpenSSL library along with nginx, and link nginx statically with this library (--with-openssl=DIR --with-ld-opt=-static --with-http_ssl_module). This was broken on Linux by not adding -ldl after -lcrypto. The fix also makes it possible to link nginx statically on Linux with the system OpenSSL library, which never worked before.
2016-02-04Dynamic modules: dlopen() support.Maxim Dounin1-2/+1
2015-11-23Configure: fixed using OpenSSL include paths.Maxim Dounin1-0/+1
2015-06-10Configure: search OpenSSL in a bunch of standard places.Ruslan Ermilov1-0/+48
2013-09-04Win32: MinGW GCC compatibility.Maxim Dounin1-0/+4
Several warnings silenced, notably (ngx_socket_t) -1 is now checked on socket operations instead of -1, as ngx_socket_t is unsigned on win32 and gcc complains on comparison. With this patch, it's now possible to compile nginx using mingw gcc, with options we normally compile on win32.
2012-01-18Copyright updated.Maxim Konovalov1-0/+1
2010-07-08stop ./configure on Win32 if no library sources was specified,Igor Sysoev1-3/+5
the bug has been introduced in r2894
2010-07-08do not use prebuild OpenSSL Win32 librariesIgor Sysoev1-34/+18
2010-04-01MSVC8 compatibility with OpenSSL 1.0.0Igor Sysoev1-0/+2
2009-09-28allow "make clean" for OpenSSL, the bug was introduced in r2874Igor Sysoev1-4/+4
2009-05-26stop ./configure at once on library failureIgor Sysoev1-0/+11
2009-05-22use -ldl for any OS that needs itIgor Sysoev1-13/+1
2009-05-19fix building OpenSSL on UnixIgor Sysoev1-3/+4
2009-05-14fix building OpenSSL on Win32Igor Sysoev1-6/+8
2009-05-08test whether libdl is required for dynamic linking:Igor Sysoev1-2/+2
Solaris 10 has dlopen()/etc. in libc
2009-04-21*) move advapi32.lib to core libs since it's required for Registry and Event LogIgor Sysoev1-4/+4
*) delete shell32.lib since we do not use tray icon anymore
2009-04-15OpenSSL building by MSVC and BCC from sourcesIgor Sysoev1-4/+17
2006-11-27test PCRE in FreeBSD, Linux, and NetBSDIgor Sysoev1-0/+1
2005-12-05nginx-0.3.13-RELEASE importrelease-0.3.13Igor Sysoev1-20/+38
*) Feature: the IMAP/POP3 proxy supports STARTTLS and STLS. *) Bugfix: the IMAP/POP3 proxy did not work with the select, poll, and /dev/poll methods. *) Bugfix: in SSI handling. *) Bugfix: now Solaris sendfilev() is not used to transfer the client request body to FastCGI-server via the unix domain socket. *) Bugfix: the "auth_basic" directive did not disable the authorization; the bug had appeared in 0.3.11.
2005-11-15nginx-0.3.10-RELEASE importrelease-0.3.10Igor Sysoev1-0/+2
*) Change: the "valid_referers" directive and the "$invalid_referer" variable were moved to the new ngx_http_referer_module from the ngx_http_rewrite_module. *) Change: the "$apache_bytes_sent" variable name was changed to "$body_bytes_sent". *) Feature: the "$sent_http_..." variables. *) Feature: the "if" directive supports the "=" and "!=" operations. *) Feature: the "proxy_pass" directive supports the HTTPS protocol. *) Feature: the "proxy_set_body" directive. *) Feature: the "post_action" directive. *) Feature: the ngx_http_empty_gif_module. *) Feature: the "worker_cpu_affinity" directive for Linux. *) Bugfix: the "rewrite" directive did not unescape URI part in redirect, now it is unescaped except the %00-%25 and %7F-%FF characters. *) Bugfix: nginx could not be built by the icc 9.0 compiler. *) Bugfix: if the SSI was enabled for zero size static file, then the chunked response was encoded incorrectly.
2005-10-12nginx-0.3.2-RELEASE importrelease-0.3.2Igor Sysoev1-0/+6
*) Feature: the Sun Studio 10 C compiler support. *) Feature: the "proxy_upstream_max_fails", "proxy_upstream_fail_timeout", "fastcgi_upstream_max_fails", and "fastcgi_upstream_fail_timeout" directives.
2005-09-08nginx-0.1.45-RELEASE importrelease-0.1.45Igor Sysoev1-4/+0
*) Change: the "ssl_engine" directive was canceled in the ngx_http_ssl_module and now is introduced at global level. *) Bugfix: the responses with SSI subrequests did not transferred via SSL connection. *) Various bug fixes in the IMAP/POP3 proxy.
2005-02-22nginx-0.1.21-RELEASE importrelease-0.1.21Igor Sysoev1-1/+1
*) Bugfix: the ngx_http_stub_status_module showed incorrect statistics if "rtsig" method was used or if several worker process ran on SMP. *) Bugfix: nginx could not be built by the icc compiler on Linux or if the zlib-1.2.x library was building from sources. *) Bugfix: nginx could not be built on NetBSD 2.0.
2005-01-18nginx-0.1.14-RELEASE importrelease-0.1.14Igor Sysoev1-0/+6
*) Feature: the autoconfiguration directives: --http-client-body-temp-path=PATH, --http-proxy-temp-path=PATH, and --http-fastcgi-temp-path=PATH *) Change: the directory name for the temporary files with the client request body is specified by directive client_body_temp_path, by default it is <prefix>/client_body_temp. *) Feature: the ngx_http_fastcgi_module and the directives: fastcgi_pass, fastcgi_root, fastcgi_index, fastcgi_params, fastcgi_connect_timeout, fastcgi_send_timeout, fastcgi_read_timeout, fastcgi_send_lowat, fastcgi_header_buffer_size, fastcgi_buffers, fastcgi_busy_buffers_size, fastcgi_temp_path, fastcgi_max_temp_file_size, fastcgi_temp_file_write_size, fastcgi_next_upstream, and fastcgi_x_powered_by. *) Bugfix: the "[alert] zero size buf" error; the bug had appeared in 0.1.3. *) Change: the URI must be specified after the host name in the proxy_pass directive. *) Change: the %3F symbol in the URI was considered as the argument string start. *) Feature: the unix domain sockets support in the ngx_http_proxy_module. *) Feature: the ssl_engine and ssl_ciphers directives. Thanks to Sergey Skvortsov for SSL-accelerator.
2004-11-25nginx-0.1.9-RELEASE importrelease-0.1.9Igor Sysoev1-3/+2
*) Bugfix: the proxied request was sent without arguments if the request contains "//", "/./", "/../" or "%XX". *) Bugfix: the large compressed responses may be transferred not completely. *) Bugfix: the files bigger than 2G was not transferred on Linux that does not support sendfile64(). *) Bugfix: while the build configuration on Linux the --with-poll_module parameter was required; the bug had appeared in 0.1.8.
2004-10-21nginx-0.1.2-RELEASE importrelease-0.1.2Igor Sysoev1-10/+9
*) Feature: the --user=USER, --group=GROUP, and --with-ld-opt=OPTIONS options in configure. *) Feature: the server_name directive supports *.domain.tld. *) Bugfix: the portability improvements. *) Bugfix: if configuration file was set in command line, the reconfiguration was impossible; the bug had appeared in 0.1.1. *) Bugfix: proxy module may get caught in an endless loop when sendfile is not used. *) Bugfix: with sendfile the response was not recoded according to the charset module directives; the bug had appeared in 0.1.1. *) Bugfix: very seldom bug in the kqueue processing. *) Bugfix: the gzip module compressed the proxied responses that was already compressed.
2004-09-29nginx-0.1.0-2004-09-29-20:00:49 import; remove years from copyrightIgor Sysoev1-0/+3
2004-07-25nginx-0.0.7-2004-07-25-22:34:14 importIgor Sysoev1-0/+40
generated by cgit (git 2.34.1) at 2025-12-06 16:17:14 +0000