Re: [PATCH 1 of 6] SSL: moved certificate storage out of SSL_CTX exdata

On Tue, Jul 23, 2024 at 07:30:24PM +, Mini Hawthorne wrote: > # HG changeset patch > # User Mini Hawthorne > # Date 1721762810 0 > # Tue Jul 23 19:26:50 2024 + > # Node ID 59ac183dfee8e9641563e043eb19480d91dd7cc0 > # Parent d1b8568f3042f6019a2302dda4afbadd051fe54b > SSL: moved certif

Re: [nginx] CONF: Make ssl_client_certificate directive optional with TLSv1.3

@a.bavs...@nginx.com Gentle Reminder for review. This feature to make ssl_client_certificate optional may help us here at Nvidia. Thanks in advance. Kindly let me know if any more modification is needed in fix. Note: AFAIK, mTLS was not supported with SSLv2. I kept the NGX_SSL_SSLv2 flag in fix,

[njs] Add badges to README.md

details: https://github.com/nginx/njs/commit/0d2b8b53168261d8bc2fb9ceb15244e2bccd9c70 branches: master commit:0d2b8b53168261d8bc2fb9ceb15244e2bccd9c70 user: Elijah Zupancic date: Tue, 20 Aug 2024 11:41:44 -0700 description: Add badges to README.md This change adds two badges ind

[PATCH 1 of 6] SSL: moved certificate storage out of exdata

# HG changeset patch # User Sergey Kandaurov # Date 1721762810 0 # Tue Jul 23 19:26:50 2024 + # Node ID 6baaa6efe6f0a2e8b95374717cd5f73db8a3a862 # Parent 8796dfbe7177cb0be2a53bcdb4d25cc64a58d2a7 SSL: moved certificate storage out of exdata. Instead of cross-linking the objects using exd

[PATCH 0 of 6] SSL object cache

Largely updated series based on my comments. ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx.org/mailman/listinfo/nginx-devel

[PATCH 2 of 6] SSL: object caching

# HG changeset patch # User Sergey Kandaurov # Date 1721762842 0 # Tue Jul 23 19:27:22 2024 + # Node ID 6fbe0bcb81696bba12d186e5c15323046bcac2d9 # Parent 6baaa6efe6f0a2e8b95374717cd5f73db8a3a862 SSL: object caching. Added ngx_openssl_cache_module, which indexes a type-aware object cache

[PATCH 3 of 6] SSL: caching certificates

# HG changeset patch # User Sergey Kandaurov # Date 1721762857 0 # Tue Jul 23 19:27:37 2024 + # Node ID 0d87e1495981ca541d8cdb947d94f20a686545a3 # Parent 6fbe0bcb81696bba12d186e5c15323046bcac2d9 SSL: caching certificates. Certificate chains are now loaded once. The certificate cache pr

[PATCH 4 of 6] SSL: caching certificate keys

# HG changeset patch # User Sergey Kandaurov # Date 1721762945 0 # Tue Jul 23 19:29:05 2024 + # Node ID de586726466a08cbdecb8d70f5f42e9067e9ccb8 # Parent 0d87e1495981ca541d8cdb947d94f20a686545a3 SSL: caching certificate keys. EVP_KEY objects are a reference-counted container for key mat

[PATCH 6 of 6] SSL: caching CA certificates

# HG changeset patch # User Sergey Kandaurov # Date 1721762968 0 # Tue Jul 23 19:29:28 2024 + # Node ID 5768ea868d214021c7774ffa7d67d17f022fdb58 # Parent 09a8f17d87eccf5ae735815b50c9ee701d2a4ff7 SSL: caching CA certificates. This can potentially provide a large amount of savings, becaus

[PATCH 5 of 6] SSL: caching CRLs

# HG changeset patch # User Sergey Kandaurov # Date 1721762914 0 # Tue Jul 23 19:28:34 2024 + # Node ID 09a8f17d87eccf5ae735815b50c9ee701d2a4ff7 # Parent de586726466a08cbdecb8d70f5f42e9067e9ccb8 SSL: caching CRLs. Based on previous work by Mini Hawthorne. diff --git a/src/event/ngx_eve

[nginx] Version bump.

details: https://hg.nginx.org/nginx/rev/331eae3dccf8 branches: changeset: 9288:331eae3dccf8 user: Sergey Kandaurov date: Tue Aug 20 21:18:30 2024 +0400 description: Version bump. diffstat: src/core/nginx.h | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) diffs (14 line

Re: [PATCH 1 of 2] Stream: client certificate validation with OCSP

On 8/15/2024 8:56 AM, Sergey Kandaurov wrote: # HG changeset patch # User Sergey Kandaurov # Date 1723737051 -14400 # Thu Aug 15 19:50:51 2024 +0400 # Node ID 7d94e3fcad21b90fb13734ed0f9a2f019e23f882 # Parent 8796dfbe7177cb0be2a53bcdb4d25cc64a58d2a7 Stream: client certificate validation wi

Re: [PATCH 0 of 6] SSL object cache

On 8/21/2024 3:04 PM, Sergey Kandaurov wrote: Largely updated series based on my comments. Tests: # HG changeset patch # User Aleksei Bavshin # Date 1724280833 25200 # Wed Aug 21 15:53:53 2024 -0700 # Node ID 2a79edf2beb86ab81af8663ecd27fe632eb9e174 # Parent f5ef37b2e2604afb0dc155e1ae92