An official read-only mirror of http://hg.nginx.org/nginx/ which is updated hourly. Pull requests on GitHub cannot be accepted and will be automatically closed. The proper way to submit changes to nginx is via the nginx development mailing list, see http://nginx.org/en/docs/contributing_changes.html
Go to file
Maxim Dounin fa2f2e3508 SSL: fixed unexpected certificate requests (ticket #2008).
Using SSL_CTX_set_verify(SSL_VERIFY_PEER) implies that OpenSSL will
send a certificate request during an SSL handshake, leading to unexpected
certificate requests from browsers as long as there are any client
certificates installed.  Given that ngx_ssl_trusted_certificate()
is called unconditionally by the ngx_http_ssl_module, this affected
all HTTPS servers.  Broken by 699f6e55bbb4 (not released yet).

Fix is to set verify callback in the ngx_ssl_trusted_certificate() function
without changing the verify mode.
2020-06-29 17:15:51 +03:00
auto Events: available bytes calculation via ioctl(FIONREAD). 2019-10-17 16:02:19 +03:00
conf MIME: added font/woff2 type (ticket #1243). 2018-06-15 17:29:55 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2020-05-26 19:17:11 +03:00
docs nginx-1.19.0-RELEASE 2020-05-26 18:00:20 +03:00
misc Updated OpenSSL used for win32 builds. 2020-05-25 22:10:37 +03:00
src SSL: fixed unexpected certificate requests (ticket #2008). 2020-06-29 17:15:51 +03:00
.hgtags release-1.19.0 tag 2020-05-26 18:00:20 +03:00