Sergey Kandaurov d5a27006e0 SSL: save sessions for upstream peers using a callback function. ...

In TLSv1.3, NewSessionTicket messages arrive after the handshake and
can come at any time.  Therefore we use a callback to save the session
when we know about it.  This approach works for < TLSv1.3 as well.
The callback function is set once per location on merge phase.

Since SSL_get_session() in BoringSSL returns an unresumable session for
TLSv1.3, peer save_session() methods have been updated as well to use a
session supplied within the callback.  To preserve API, the session is
cached in c->ssl->session.  It is preferably accessed in save_session()
methods by ngx_ssl_get_session() and ngx_ssl_get0_session() wrappers.

2018-07-17 12:53:23 +03:00

auto

Upstream: ngx_http_upstream_random module.

2018-06-15 11:46:14 +03:00

conf

MIME: added font/woff2 type (ticket #1243).

2018-06-15 17:29:55 +03:00

contrib

Contrib: vim syntax, update core and 3rd party module directives.

2018-03-18 11:11:14 +02:00

docs

nginx-1.15.1-RELEASE

2018-07-03 18:07:43 +03:00

misc

Updated OpenSSL and PCRE used for win32 builds.

2018-04-03 03:54:09 +03:00

src

SSL: save sessions for upstream peers using a callback function.

2018-07-17 12:53:23 +03:00

.hgtags

release-1.15.1 tag

2018-07-03 18:07:44 +03:00

S

Description

An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html

BSD-2-Clause

105 MiB

0 Stars 3 Watchers 0 Forks

Languages

C 97.8%

Vim Script 1.6%

XS 0.4%

Perl 0.1%