This is an automated email from the ASF dual-hosted git repository.
zwoop pushed a change to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git.
from f0ba454 Remove unused index for SSL application specific data
new c986f64 Rework server side SSL_CTX creation to better handle
dual_cert mismatches (#6483)
new 7c08b05 Fixes memory leak loading certs
new d18538b Fix SDK_API_TSSslServerContextCreate
new 31d4958 Do not fail multicert load if line does not create entry
(#6760)
new 5be94b6 Fixes crash loading combined(cert+key) certs
new 1264746 Add TXN_CLOSE hook to CPPAPI TransactionPlugin (#6800)
The 6 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
include/tscpp/api/Plugin.h | 12 +-
include/tscpp/api/TransactionPlugin.h | 4 +
iocore/net/P_SSLCertLookup.h | 2 +-
iocore/net/P_SSLUtils.h | 26 +-
iocore/net/QUICMultiCertConfigLoader.cc | 114 ++-----
iocore/net/QUICMultiCertConfigLoader.h | 6 +-
iocore/net/SSLUtils.cc | 371 ++++++++++++++-------
src/tscpp/api/GlobalPlugin.cc | 1 +
src/tscpp/api/utils_internal.cc | 39 ++-
tests/gold_tests/tls/ssl/signed-foo-ec.key | 8 +
tests/gold_tests/tls/ssl/signed-foo-ec.pem | 14 +
tests/gold_tests/tls/ssl/signed-san-ec.key | 5 +
tests/gold_tests/tls/ssl/signed-san-ec.pem | 15 +
tests/gold_tests/tls/ssl/signed-san.key | 28 ++
tests/gold_tests/tls/ssl/signed-san.pem | 19 ++
tests/gold_tests/tls/ssl/signer.pem | 15 -
.../tls/tls_check_dual_cert_selection.test.py | 127 +++++++
17 files changed, 576 insertions(+), 230 deletions(-)
create mode 100644 tests/gold_tests/tls/ssl/signed-foo-ec.key
create mode 100644 tests/gold_tests/tls/ssl/signed-foo-ec.pem
create mode 100644 tests/gold_tests/tls/ssl/signed-san-ec.key
create mode 100644 tests/gold_tests/tls/ssl/signed-san-ec.pem
create mode 100644 tests/gold_tests/tls/ssl/signed-san.key
create mode 100644 tests/gold_tests/tls/ssl/signed-san.pem
create mode 100644 tests/gold_tests/tls/tls_check_dual_cert_selection.test.py
