Hakase/nginx-build
2
1 Fork 1
Code Issues Pull Requests Releases Activity

Changes in session time between TLS 1.3 and TLS 1.3 when using sessions, Disabling TLSv1.1 and TLSv1

Browse Source
This commit is contained in:
Hakase
2019-04-13 23:15:49 +09:00
parent 08dd8bbd68
commit 0118903869
8 changed files with 51 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/event/ngx_event_openssl.c
+2 -1
View File
@@ -3109,11 +3109,12 @@ ngx_ssl_error(ngx_uint_t level, ngx_log_t *log, ngx_err_t err, char *fmt, ...)
ngx_int_t
ngx_ssl_session_cache(ngx_ssl_t *ssl, ngx_str_t *sess_ctx,
ngx_array_t *certificates, ssize_t builtin_session_cache,
ngx_shm_zone_t *shm_zone, time_t timeout)
ngx_shm_zone_t *shm_zone, time_t timeout, time_t timeout_tls13)
{
long cache_mode;
SSL_CTX_set_timeout(ssl->ctx, (long) timeout);
SSL_CTX_set_timeout_tls13(ssl->ctx, (long) timeout_tls13);
if (ngx_ssl_session_id_context(ssl, sess_ctx, certificates) != NGX_OK) {
return NGX_ERROR;
src/event/ngx_event_openssl.h
+1 -1
View File
@@ -206,7 +206,7 @@ ngx_int_t ngx_ssl_client_session_cache(ngx_conf_t *cf, ngx_ssl_t *ssl,
ngx_uint_t enable);
ngx_int_t ngx_ssl_session_cache(ngx_ssl_t *ssl, ngx_str_t *sess_ctx,
ngx_array_t *certificates, ssize_t builtin_session_cache,
ngx_shm_zone_t *shm_zone, time_t timeout);
ngx_shm_zone_t *shm_zone, time_t timeout, time_t timeout_tls13);
ngx_int_t ngx_ssl_session_ticket_keys(ngx_conf_t *cf, ngx_ssl_t *ssl,
ngx_array_t *paths);
ngx_int_t ngx_ssl_session_cache_init(ngx_shm_zone_t *shm_zone, void *data);