lukechilds/node - node - Gitea: Git with a cup of tea

13878 Commits

131 Branches

446 Tags

325 MiB

Tree: b8573d0555

Commit Graph

Author	SHA1	Message	Date
Fedor Indutny	550c2638c0	tls: use `SSL_set_cert_cb` for async SNI/OCSP Do not enable ClientHello parser for async SNI/OCSP. Use new OpenSSL-1.0.2's API `SSL_set_cert_cb` to pause the handshake process and load the cert/OCSP response asynchronously. Hopefuly this will make whole async SNI/OCSP process much faster and will eventually let us remove the ClientHello parser itself (which is currently used only for async session, see #1462 for the discussion of removing it). NOTE: Ported our code to `SSL_CTX_add1_chain_cert` to use `SSL_CTX_get0_chain_certs` in `CertCbDone`. Test provided for this feature. Fix: https://github.com/iojs/io.js/issues/1423 PR-URL: https://github.com/iojs/io.js/pull/1464 Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>	10 years ago
Ryan Dahl	778fb859c6	New keys, agent1-cert.pem was expired	14 years ago
Ryan Dahl	ee5366a410	Fix CNs for agent keys; can't be the same as CA's CN Also add makefile for easy tweaking.	14 years ago

Author

SHA1

Message

Date

Fedor Indutny

550c2638c0

tls: use `SSL_set_cert_cb` for async SNI/OCSP

Do not enable ClientHello parser for async SNI/OCSP. Use new
OpenSSL-1.0.2's API `SSL_set_cert_cb` to pause the handshake process and
load the cert/OCSP response asynchronously. Hopefuly this will make
whole async SNI/OCSP process much faster and will eventually let us
remove the ClientHello parser itself (which is currently used only for
async session, see #1462 for the discussion of removing it).

NOTE: Ported our code to `SSL_CTX_add1_chain_cert` to use
`SSL_CTX_get0_chain_certs` in `CertCbDone`. Test provided for this
feature.

Fix: https://github.com/iojs/io.js/issues/1423
PR-URL: https://github.com/iojs/io.js/pull/1464
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>

10 years ago

Ryan Dahl

778fb859c6

New keys, agent1-cert.pem was expired

14 years ago

Ryan Dahl

ee5366a410

Fix CNs for agent keys; can't be the same as CA's CN

Also add makefile for easy tweaking.

14 years ago

1 Commits (b8573d05552b7df6c496ab5e56a1fe2a7c82eda6)