Maxim Dounin fa2f2e3508 SSL: fixed unexpected certificate requests (ticket #2008). ...

Using SSL_CTX_set_verify(SSL_VERIFY_PEER) implies that OpenSSL will
send a certificate request during an SSL handshake, leading to unexpected
certificate requests from browsers as long as there are any client
certificates installed.  Given that ngx_ssl_trusted_certificate()
is called unconditionally by the ngx_http_ssl_module, this affected
all HTTPS servers.  Broken by 699f6e55bbb4 (not released yet).

Fix is to set verify callback in the ngx_ssl_trusted_certificate() function
without changing the verify mode.

2020-06-29 17:15:51 +03:00

auto

Events: available bytes calculation via ioctl(FIONREAD).

2019-10-17 16:02:19 +03:00

conf

MIME: added font/woff2 type (ticket #1243).

2018-06-15 17:29:55 +03:00

contrib

Contrib: vim syntax, update core and 3rd party module directives.

2020-05-26 19:17:11 +03:00

docs

nginx-1.19.0-RELEASE

2020-05-26 18:00:20 +03:00

misc

Updated OpenSSL used for win32 builds.

2020-05-25 22:10:37 +03:00

src

SSL: fixed unexpected certificate requests (ticket #2008).

2020-06-29 17:15:51 +03:00

.hgtags

release-1.19.0 tag

2020-05-26 18:00:20 +03:00

Description

An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html

78 MiB

Languages

C 97.6%

Vim Script 1.8%

XS 0.4%

Perl 0.1%