diff options
| author | Sergey Kandaurov <pluknet@nginx.com> | 2024-12-18 20:09:58 +0400 |
|---|---|---|
| committer | pluknet <pluknet@nginx.com> | 2025-01-17 04:37:46 +0400 |
| commit | 7677d5646aeb761b8b9da5af3eb10c008aae3f90 (patch) | |
| tree | f4262cb9b0402499727e2a3d7a9bf0b43121c15f /src/http/ngx_http_request.c | |
| parent | 8311e14ae614529aabe9e72e87051d191b723fb4 (diff) | |
| download | nginx-7677d5646aeb761b8b9da5af3eb10c008aae3f90.tar.gz nginx-7677d5646aeb761b8b9da5af3eb10c008aae3f90.zip | |
SSL: encrypted certificate keys are exempt from object cache.
SSL object cache, as previously introduced in 1.27.2, did not take
into account encrypted certificate keys that might be unexpectedly
fetched from the cache regardless of the matching passphrase. To
avoid this, caching of encrypted certificate keys is now disabled
based on the passphrase callback invocation.
A notable exception is encrypted certificate keys configured without
ssl_password_file. They are loaded once resulting in the passphrase
prompt on startup and reused in other contexts as applicable.
Diffstat (limited to 'src/http/ngx_http_request.c')
0 files changed, 0 insertions, 0 deletions