Skip to content

Conversation

@dongbeiouba
Copy link
Contributor

@dongbeiouba dongbeiouba commented Apr 1, 2023

Update to nginx 1.22.1 (#1719) add reject_handshake, but not fully consider the NTLS. That's okay if no ssl_certificate is configured but ssl_sign_certificate and ssl_enc_certificate are configured when NTLS is enabled.

Move sign_certificate, enc_certificate to upstream to adapt to nginx 1.22.1.

Rename ngx_openssl_ntls to ngx_tongsuo_ntls.

Add test-ntls CI.

@dongbeiouba dongbeiouba force-pushed the fix/ntls_cert branch 3 times, most recently from 75409d2 to cc58476 Compare April 1, 2023 10:18
@dongbeiouba dongbeiouba changed the title Fix NTLS cert check, should be prior to reject_handshake Bugfix: fix NTLS cert check, move sign/enc certficate to upstream Apr 1, 2023
@dongbeiouba dongbeiouba force-pushed the fix/ntls_cert branch 20 times, most recently from 464a403 to 66ec559 Compare April 2, 2023 03:15
Update to nginx 1.22.1 (alibaba#1719) add reject_handshake, but not fully
consider the NTLS. That's okay if no ssl_certificate is
configured but ssl_sign_certificate and ssl_enc_certificate are
configured when NTLS is enabled.

Move sign_certificate, enc_certificate to upstream to adapt to
nginx 1.22.1.

Rename ngx_openssl_ntls to ngx_tongsuo_ntls.

Add test-nginx-ntls CI.
@wa5i
Copy link
Contributor

wa5i commented Apr 18, 2023

LGTM

@wa5i wa5i merged commit d324ecc into alibaba:master Apr 18, 2023
@@ -0,0 +1,63 @@
name: test tengine ntls
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍b( ̄▽ ̄)d

@chobits chobits added this to the 2.4.1 milestone Jun 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants