[nginx-tests] Tests: tests for SSL verification context checks.

2025-03-23 Thread Maxim Dounin
details: http://freenginx.org/hg/nginx-tests/rev/a23ab99972ae branches: changeset: 2006:a23ab99972ae user: Maxim Dounin date: Sat Mar 08 21:20:04 2025 +0300 description: Tests: tests for SSL verification context checks. diffstat: ssl_verify_context.t | 290 +++

[nginx-tests] Tests: fixed LibreSSL TODOs in h3_ssl_early_data.t.

2025-03-23 Thread Maxim Dounin
details: http://freenginx.org/hg/nginx-tests/rev/a84cf984d25e branches: changeset: 2004:a84cf984d25e user: Maxim Dounin date: Sat Mar 08 04:44:20 2025 +0300 description: Tests: fixed LibreSSL TODOs in h3_ssl_early_data.t. Previously, the last test wasn't properly excluded from the T

[nginx] SSL: reworked restriction on hosts other than negotiated.

2025-03-23 Thread Maxim Dounin
details: http://freenginx.org/hg/nginx/rev/4dc9fb4dd952 branches: changeset: 9335:4dc9fb4dd952 user: Maxim Dounin date: Sat Mar 08 20:44:41 2025 +0300 description: SSL: reworked restriction on hosts other than negotiated. Following 5095:4fbef397c753, attempts to request hosts other

[nginx] SSL: added trusted certificates into session id context.

2025-03-23 Thread Maxim Dounin
details: http://freenginx.org/hg/nginx/rev/48cff1a93a0e branches: changeset: 9334:48cff1a93a0e user: Maxim Dounin date: Sat Mar 08 16:54:10 2025 +0300 description: SSL: added trusted certificates into session id context. This ensures that sessions cannot be incorrectly restored betw

[nginx] SSL: added additional verify context check for OpenSSL.

2025-03-23 Thread Maxim Dounin
details: http://freenginx.org/hg/nginx/rev/094e0ea330f5 branches: changeset: 9336:094e0ea330f5 user: Maxim Dounin date: Sat Mar 08 21:11:07 2025 +0300 description: SSL: added additional verify context check for OpenSSL. When using TLSv1.3, OpenSSL 1.1.1e+ allows session resumption w