summaryrefslogtreecommitdiffhomepage
path: root/src/event/ngx_event_openssl.c (follow)
AgeCommit message (Expand)AuthorFilesLines
2017-08-22SSL: fixed possible use-after-free in $ssl_server_name.Maxim Dounin1-6/+15
2017-08-22SSL: the $ssl_client_escaped_cert variable (ticket #857).Maxim Dounin1-0/+30
2017-08-09Fixed calls to ngx_open_file() in certain places.Sergey Kandaurov1-1/+2
2017-08-09Style.Sergey Kandaurov1-0/+2
2017-07-25SSL: fixed typo in the error message.Sergey Kandaurov1-1/+1
2017-05-03SSL: allowed renegotiation in client mode with OpenSSL < 1.1.0.Sergey Kandaurov1-1/+1
2017-04-18SSL: compatibility with OpenSSL master branch.Sergey Kandaurov1-1/+1
2017-04-18SSL: disabled renegotiation detection in client mode.Sergey Kandaurov1-1/+3
2017-04-18SSL: added support for TLSv1.3 in ssl_protocols directive.Sergey Kandaurov1-0/+6
2017-02-06SSL: clear error queue after OPENSSL_init_ssl().Sergey Kandaurov1-1/+11
2016-12-23SSL: support AES256 encryption of tickets.Maxim Dounin1-14/+44
2016-12-15SSL: backed out changeset e7cb5deb951d, reimplemented properly.Maxim Dounin1-3/+3
2016-12-13SSL: fix call to BIO_get_mem_data().Piotr Sikora1-1/+1
2016-12-05SSL: $ssl_curves (ticket #1088).Maxim Dounin1-0/+68
2016-12-05SSL: $ssl_ciphers (ticket #870).Maxim Dounin1-0/+84
2016-12-05SSL: $ssl_client_v_start, $ssl_client_v_end, $ssl_client_v_remain.Maxim Dounin1-0/+178
2016-12-05SSL: $ssl_client_verify extended with a failure reason.Maxim Dounin1-8/+18
2016-12-05OCSP stapling: added certificate name to warnings.Maxim Dounin1-0/+18
2016-10-21SSL: RFC2253 compliant $ssl_client_s_dn and $ssl_client_i_dn.Dmitry Volyntsev1-1/+105
2016-10-18SSL: overcame possible buffer over-read in ngx_ssl_error().Valentin Bartenev1-1/+3
2016-10-04SSL: use X509_check_host() with LibreSSL.Maxim Dounin1-3/+3
2016-09-20Fixed log levels of configuration parsing errors.Valentin Bartenev1-2/+2
2016-09-12SSL: improved session ticket callback error handling.Sergey Kandaurov1-3/+32
2016-09-12SSL: factored out digest and cipher in session ticket callback.Sergey Kandaurov1-14/+14
2016-08-22SSL: adopted session ticket handling for OpenSSL 1.1.0.Sergey Kandaurov1-1/+1
2016-08-18SSL: remove no longer needed workaround for BoringSSL.Piotr Sikora1-2/+0
2016-08-08SSL: guarded SSL_R_NO_CIPHERS_PASSED not present in OpenSSL 1.1.0.Sergey Kandaurov1-0/+2
2016-06-15SSL: ngx_ssl_ciphers() to set list of ciphers.Tim Taubert1-0/+24
2016-05-19SSL: removed default DH parameters.Maxim Dounin1-45/+0
2016-05-19SSL: support for multiple curves (ticket #885).Maxim Dounin1-5/+48
2016-05-19SSL: style.Maxim Dounin1-4/+4
2016-05-19SSL: error messages style.Maxim Dounin1-2/+2
2016-05-19SSL: support for multiple certificates (ticket #814).Maxim Dounin1-0/+23
2016-05-19SSL: support for per-certificate chains.Maxim Dounin1-0/+19
2016-05-19SSL: made it possible to iterate though all certificates.Maxim Dounin1-14/+49
2016-05-19OCSP stapling: staple now stored in certificate, not SSL context.Maxim Dounin1-4/+3
2016-03-31SSL: EVP_MD_CTX was made opaque in OpenSSL 1.1.0.Sergey Kandaurov1-9/+12
2016-03-31SSL: RSA_generate_key() is deprecated in OpenSSL 1.1.0.Maxim Dounin1-1/+1
2016-03-31SSL: initialization changes for OpenSSL 1.1.0.Maxim Dounin1-0/+12
2016-03-31SSL: get_session callback changed in OpenSSL 1.1.0.Maxim Dounin1-4/+11
2016-03-31SSL: guarded error codes not present in OpenSSL 1.1.0.Maxim Dounin1-1/+4
2016-03-31SSL: reasonable version for LibreSSL.Maxim Dounin1-3/+3
2016-03-31Fixed logging.Sergey Kandaurov1-2/+2
2016-03-30Style.Ruslan Ermilov1-2/+2
2016-02-19SSL: avoid calling SSL_shutdown() during handshake (ticket #901).Maxim Dounin1-0/+13
2016-02-19SSL: fixed SSL_shutdown() comment.Maxim Dounin1-1/+1
2015-10-19SSL: preserve default server context in connection (ticket #235).Maxim Dounin1-12/+7
2015-10-07SSL: handled long string truncation in ngx_ssl_error().Vladimir Homutov1-1/+1
2015-09-24SSL: compatibility with OpenSSL master branch.Maxim Dounin1-1/+3
2015-03-23SSL: use of SSL_MODE_NO_AUTO_CHAIN.Maxim Dounin1-0/+4