summaryrefslogtreecommitdiffhomepage
path: root/src/event (follow)
AgeCommit message (Collapse)AuthorFilesLines
2009-02-16load SSL engine before certificates,Igor Sysoev1-34/+25
otherwise RSA keys will use built-in RSA methods
2008-12-09use "!= NGX_OK" instead of "== NGX_ERROR"Igor Sysoev2-12/+12
2008-11-18low some SSL handshake errors levelIgor Sysoev1-16/+30
2008-10-23always use buffer, if connection is buffered,Igor Sysoev1-15/+1
this fixes OpenSSL "bad write retry" error, when *) nginx passed a single buf greater than our buffer (say 32K) to OpenSSL, *) OpenSSL returns SSL_ERROR_WANT_WRITE, *) after some time nginx has to send a new data, *) so there are at least two bufs nginx does pass them directly to OpenSSL, *) but copies the first buf part to buffer, and sends the buffer to OpenSSL. *) because the data length is lesser than it was in previous SSL_write(): 16K < 32K, OpenSSL returns SSL_R_BAD_WRITE_RETRY.
2008-09-19dynamic accept thresholdIgor Sysoev1-1/+1
2008-08-26*) refactor ngx_ptocidr()Igor Sysoev1-7/+0
*) allow address without bitmask *) thus now ngx_http_geo_module accepts addresses without bitmask
2008-08-21ngx_sock_ntop() takes family from sockaddr, remove duplicate fieldIgor Sysoev2-5/+3
2008-08-12backout both r2162 and r2128 and implement a new fixIgor Sysoev1-6/+0
2008-08-11SSL connection readiness is required for level-triggered events only,Igor Sysoev1-1/+4
broken in r2128
2008-07-30update connection readiness after SSL handshake,Igor Sysoev1-0/+3
this fixes mail proxy SSL connection hanging if level-triggered event is used
2008-07-29*) ssl_verify_client askIgor Sysoev2-1/+47
*) test ssl_client_certificate for ssl_verify_client *) $ssl_client_cert adds TAB before each line except first one *) $ssl_client_raw_cert contains certificate as is
2008-07-09handle connect()'s EAGAIN on LinuxIgor Sysoev1-3/+14
2008-06-23prepare to allow various number of connections in child processesIgor Sysoev3-44/+32
2008-06-20fix "proxy_pass https://..." broken in r1427Igor Sysoev1-0/+5
2008-06-17*) back out r2040Igor Sysoev3-7/+7
*) refactor ngx_palloc() *) introduce ngx_pnalloc() *) additional pool blocks have smaller header
2008-06-16$ssl_client_certIgor Sysoev2-0/+52
2008-06-16DH parameters, ssl_dhparamIgor Sysoev2-0/+85
2008-05-26ssl_session_cache noneIgor Sysoev2-3/+27
2008-05-22style fixIgor Sysoev3-4/+4
2008-04-28get certificate info only for debug buildIgor Sysoev1-0/+2
2008-04-28fix memory leak when ssl_verify_client is onIgor Sysoev1-5/+13
2008-04-23fix memory leak when ssl_verify_client is onIgor Sysoev1-0/+9
2008-03-18low some SSL handshake errors levelIgor Sysoev1-1/+11
2008-03-13restore building --test-build-rtsig and --test-build-eventport on FreeBSD 6Igor Sysoev2-1/+16
2008-03-10invalidate SSL session if there is no valid client certificateIgor Sysoev2-0/+14
2008-02-28left open sockets were not really testedIgor Sysoev1-0/+1
2008-02-04low SSL handshake close notify alert error levelIgor Sysoev1-0/+1
2008-02-01low SSL handshake errors levelIgor Sysoev1-0/+29
2008-01-31backout r1757, we really need SSL_MODE_ACCEPT_MOVING_WRITE_BUFFERIgor Sysoev1-0/+7
2008-01-28fix building --test-build-rtsig and --test-build-eventport on FreeBSD 7Igor Sysoev2-10/+4
2008-01-25add NGX_ENETDOWN, NGX_ENETUNREACH, and NGX_EHOSTDOWNIgor Sysoev2-1/+10
2008-01-25pull all errorsIgor Sysoev1-1/+3
2008-01-22fix bogus crit log message "SSL_shutdown() failed" introduced in r1755Igor Sysoev1-5/+2
2008-01-10pull all errorsIgor Sysoev1-4/+9
2008-01-10grammar fixIgor Sysoev1-1/+1
2007-12-29fix commentIgor Sysoev1-3/+3
2007-12-27fix segfault introduced in r1780Igor Sysoev1-2/+4
2007-12-26create ssl buffer on demand and free it before keep-aliveIgor Sysoev2-9/+32
2007-12-26ssl_session_cache offIgor Sysoev2-1/+7
2007-12-20use ngx_queue.hIgor Sysoev2-24/+16
2007-12-20embed session_rbtree and sentinel inside ngx_ssl_session_cache_tIgor Sysoev2-23/+13
2007-12-20omit useless testIgor Sysoev1-4/+0
2007-12-20use ngx_time() instead of ngx_timeofday()Igor Sysoev1-11/+5
2007-12-20remove SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER, we never need it,Igor Sysoev1-2/+0
the "bad write retry" error was caused by SSL_shutdown() error
2007-12-20cleaning stale global SSL errorIgor Sysoev1-0/+18
2007-12-20SSL_shutdown() never returns -1, on error it returns 0.Igor Sysoev1-27/+18
This fixes incidental "bad write retry" errors.
2007-12-17optimize rbtree initialization and insertIgor Sysoev2-40/+17
2007-12-10move condition declarations inside blocks where they are usedIgor Sysoev2-17/+13
2007-12-03ngx_udp_recv()Igor Sysoev3-0/+3
2007-11-11TransmitPackets(), ConnectEx(), and DisconnectEx()Igor Sysoev1-12/+13