[nginx] SSL: added ability to set keys used for Session Tickets ...

2013-10-14 Thread Maxim Dounin
details: http://hg.nginx.org/nginx/rev/1356a3b96924 branches: changeset: 5425:1356a3b96924 user: Piotr Sikora date: Fri Oct 11 16:05:24 2013 -0700 description: SSL: added ability to set keys used for Session Tickets (RFC5077). In order to support key rollover, ssl_session_ticket_key

Re: [PATCH] SSL: added support for TLS Session Tickets (RFC5077).

2013-10-14 Thread Maxim Dounin
Hello! On Fri, Oct 11, 2013 at 04:22:07PM -0700, Piotr Sikora wrote: > Hey Maxim, > > > Wouldn't it better to move ngx_ssl_session_ticket_md defines > > to ngx_ssl_session_ticket_key_callback() implementation? > > You mean inside the function or just above it? I moved them just above it. I'm f

[nginx] SSL: fixed build with OpenSSL 0.9.7.

2013-10-14 Thread Maxim Dounin
details: http://hg.nginx.org/nginx/rev/5b5a486bd40e branches: changeset: 5423:5b5a486bd40e user: Maxim Dounin date: Mon Oct 14 13:44:09 2013 +0400 description: SSL: fixed build with OpenSSL 0.9.7. SSL_get_rbio() and SSL_get_wbio() functions used to get non-const pointer in OpenSSL 0

[nginx] SSL: SSL_CTX_set_timeout() now always called.

2013-10-14 Thread Maxim Dounin
details: http://hg.nginx.org/nginx/rev/767aa37f12de branches: changeset: 5424:767aa37f12de user: Maxim Dounin date: Mon Oct 14 13:59:35 2013 +0400 description: SSL: SSL_CTX_set_timeout() now always called. The timeout set is used by OpenSSL as a hint for clients in TLS Session Ticke