Skip to content

Commit 6293be1

Browse files
fix reject-in-handshake patch
1 parent b1294e5 commit 6293be1

File tree

1 file changed

+20
-2
lines changed

1 file changed

+20
-2
lines changed

patch/1.27.1.1/ngx_lua-reject-in-handshake.patch

Lines changed: 20 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,26 @@
11
diff --git src/ngx_http_lua_ssl_certby.c src/ngx_http_lua_ssl_certby.c
2-
index b8e70dd..44a1dcd 100644
2+
index 0901f06e..a5714226 100644
33
--- src/ngx_http_lua_ssl_certby.c
44
+++ src/ngx_http_lua_ssl_certby.c
5-
@@ -1407,7 +1414,14 @@ ngx_http_lua_ffi_ssl_verify_client(ngx_http_request_t *r, void *ca_certs,
5+
@@ -1467,9 +1467,16 @@ ngx_http_lua_ssl_verify_callback(int ok, X509_STORE_CTX *x509_store)
6+
#endif
7+
8+
9+
+static int
10+
+ngx_http_lua_ssl_verify_reject_in_handshake_callback(int ok, X509_STORE_CTX *x509_store)
11+
+{
12+
+ return ok;
13+
+}
14+
+
15+
+
16+
int
17+
ngx_http_lua_ffi_ssl_verify_client(ngx_http_request_t *r, void *client_certs,
18+
- void *trusted_certs, int depth, char **err)
19+
+ void *trusted_certs, int depth, int reject_in_handshake, char **err)
20+
{
21+
#ifdef LIBRESSL_VERSION_NUMBER
22+
23+
@@ -1517,7 +1524,14 @@ ngx_http_lua_ffi_ssl_verify_client(ngx_http_request_t *r, void *client_certs,
624

725
/* enable verify */
826

0 commit comments

Comments
 (0)