mirror of
				https://github.com/openresty/openresty.git
				synced 2024-10-13 00:29:41 +00:00 
			
		
		
		
	patches: added the nginx-1.17.4 patches.
This commit is contained in:
		
							
								
								
									
										41
									
								
								patches/nginx-1.17.4-ssl_sess_cb_yield.patch
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										41
									
								
								patches/nginx-1.17.4-ssl_sess_cb_yield.patch
									
									
									
									
									
										Normal file
									
								
							@ -0,0 +1,41 @@
 | 
			
		||||
diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c
 | 
			
		||||
--- a/src/event/ngx_event_openssl.c
 | 
			
		||||
+++ b/src/event/ngx_event_openssl.c
 | 
			
		||||
@@ -1446,7 +1446,12 @@ ngx_ssl_handshake(ngx_connection_t *c)
 | 
			
		||||
     }
 | 
			
		||||
 
 | 
			
		||||
 #if OPENSSL_VERSION_NUMBER >= 0x10002000L
 | 
			
		||||
-    if (sslerr == SSL_ERROR_WANT_X509_LOOKUP) {
 | 
			
		||||
+    if (sslerr == SSL_ERROR_WANT_X509_LOOKUP
 | 
			
		||||
+#   ifdef SSL_ERROR_PENDING_SESSION
 | 
			
		||||
+        || sslerr == SSL_ERROR_PENDING_SESSION
 | 
			
		||||
+#   endif
 | 
			
		||||
+       )
 | 
			
		||||
+    {
 | 
			
		||||
         c->read->handler = ngx_ssl_handshake_handler;
 | 
			
		||||
         c->write->handler = ngx_ssl_handshake_handler;
 | 
			
		||||
 
 | 
			
		||||
@@ -1575,6 +1580,23 @@ ngx_ssl_try_early_data(ngx_connection_t *c)
 | 
			
		||||
         return NGX_AGAIN;
 | 
			
		||||
     }
 | 
			
		||||
 
 | 
			
		||||
+#ifdef SSL_ERROR_PENDING_SESSION
 | 
			
		||||
+    if (sslerr == SSL_ERROR_PENDING_SESSION) {
 | 
			
		||||
+        c->read->handler = ngx_ssl_handshake_handler;
 | 
			
		||||
+        c->write->handler = ngx_ssl_handshake_handler;
 | 
			
		||||
+
 | 
			
		||||
+        if (ngx_handle_read_event(c->read, 0) != NGX_OK) {
 | 
			
		||||
+            return NGX_ERROR;
 | 
			
		||||
+        }
 | 
			
		||||
+
 | 
			
		||||
+        if (ngx_handle_write_event(c->write, 0) != NGX_OK) {
 | 
			
		||||
+            return NGX_ERROR;
 | 
			
		||||
+        }
 | 
			
		||||
+
 | 
			
		||||
+        return NGX_AGAIN;
 | 
			
		||||
+    }
 | 
			
		||||
+#endif
 | 
			
		||||
+
 | 
			
		||||
     err = (sslerr == SSL_ERROR_SYSCALL) ? ngx_errno : 0;
 | 
			
		||||
 
 | 
			
		||||
     c->ssl->no_wait_shutdown = 1;
 | 
			
		||||
		Reference in New Issue
	
	Block a user