CERBERUS/nginx
1
0
Fork 0
mirror of https://github.com/nginx/nginx.git synced 2026-05-13 09:36:42 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
The official NGINX Open Source repository. https://nginx.org/
6518 commits 23 branches 585 tags 84 MiB
Find a file
Maxim Dounin ecfab06cb2 SSL: adjusted session id context with dynamic certificates. 
Dynamic certificates re-introduce problem with incorrect session
reuse (AKA "virtual host confusion", CVE-2014-3616), since there are
no server certificates to generate session id context from.

To prevent this, session id context is now generated from ssl_certificate
directives as specified in the configuration.  This approach prevents
incorrect session reuse in most cases, while still allowing sharing
sessions across multiple machines with ssl_session_ticket_key set as
long as configurations are identical.
2019-02-25 16:42:54 +03:00
auto Configure: added explicit ngx_binext to the linker output argument. 2019-01-30 19:28:27 +03:00
conf MIME: added font/woff2 type (ticket #1243). 2018-06-15 17:29:55 +03:00
contrib Contrib: vim syntax, update core and 3rd party module directives. 2018-12-24 16:30:10 +02:00
docs Year 2019. 2019-01-28 13:23:37 +03:00
misc Win32: properly enabled select on Windows. 2019-01-24 21:51:00 +03:00
src SSL: adjusted session id context with dynamic certificates. 2019-02-25 16:42:54 +03:00
.hgtags release-1.15.8 tag 2018-12-25 17:53:03 +03:00