Searched hist:1921 (Results 1 – 2 of 2) sorted by last modified time
/unit/docs/ |
H A D | changes.xml | diff 1921:b0deb6fa9219 Thu Jul 22 18:23:00 UTC 2021 Andrey Suvorov <a.suvorov@f5.com> Changing SNI callback return code if a client sends no SNI.
When a client sends no SNI is a common situation. But currently the server processes it as an error and returns SSL_TLSEXT_ERR_ALERT_FATAL causing termination of a current TLS session. The problem occurs if configuration has more than one certificate bundle in a listener.
This fix changes the return code to SSL_TLSEXT_ERR_OK and the log level of a message.
|
/unit/src/ |
H A D | nxt_openssl.c | diff 1921:b0deb6fa9219 Thu Jul 22 18:23:00 UTC 2021 Andrey Suvorov <a.suvorov@f5.com> Changing SNI callback return code if a client sends no SNI.
When a client sends no SNI is a common situation. But currently the server processes it as an error and returns SSL_TLSEXT_ERR_ALERT_FATAL causing termination of a current TLS session. The problem occurs if configuration has more than one certificate bundle in a listener.
This fix changes the return code to SSL_TLSEXT_ERR_OK and the log level of a message.
|