CERBERUS/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-05-13 09:36:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2

Stream: evaluate proxy_ssl_alpn once

Browse source 
To avoid disagreement with non-cacheable variables.
This commit is contained in:
Sergey Kandaurov 2026-04-28 13:31:03 +04:00 • committed by Sergey Kandaurov
parent 297b096464
commit 484a9863e7
1 changed files with 22 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

35
src/stream/ngx_stream_proxy_module.c
View file

@ -1479,8 +1479,9 @@ ngx_stream_proxy_ssl_alpn(ngx_stream_session_t *s)
size_t len;
u_char *p, *buf;
ngx_str_t proto;
ngx_str_t proto, *value;
ngx_uint_t i;
ngx_array_t *values;
ngx_connection_t *c;
ngx_stream_upstream_t *u;
ngx_stream_complex_value_t *cv;
@ -1491,6 +1492,7 @@ ngx_stream_proxy_ssl_alpn(ngx_stream_session_t *s)
u = s->upstream;
c = u->peer.connection;
values = NULL;
len = 0;
cv = pscf->ssl_alpn->elts;
@ -1505,6 +1507,20 @@ ngx_stream_proxy_ssl_alpn(ngx_stream_session_t *s)
continue;
}
if (values == NULL) {
values = ngx_array_create(c->pool, 1, sizeof(ngx_str_t));
if (values == NULL) {
return NGX_ERROR;
}
}
value = ngx_array_push(values);
if (value == NULL) {
return NGX_ERROR;
}
*value = proto;
len += 1 + proto.len;
}
@ -1518,22 +1534,15 @@ ngx_stream_proxy_ssl_alpn(ngx_stream_session_t *s)
}
p = buf;
value = values->elts;
for (i = 0; i < pscf->ssl_alpn->nelts; i++) {
if (ngx_stream_complex_value(s, &cv[i], &proto) != NGX_OK) {
return NGX_ERROR;
}
if (proto.len == 0 || proto.len > 255) {
continue;
}
for (i = 0; i < values->nelts; i++) {
ngx_log_debug1(NGX_LOG_DEBUG_STREAM, c->log, 0,
"upstream SSL ALPN: \"%V\"", &proto);
"upstream SSL ALPN: \"%V\"", &value[i]);
*p++ = proto.len;
p = ngx_cpymem(p, proto.data, proto.len);
*p++ = value[i].len;
p = ngx_cpymem(p, value[i].data, value[i].len);
}
if (SSL_set_alpn_protos(c->ssl->connection, buf, p - buf) != 0) {