pluknet
pluknet
I don't feel application/manifest+json is popular enough to be included. If this will change in future, this PR can be reopened.
changes: - restored to always use the full name to avoid object duplicates and relative paths in logs - restored to support "data:" special value only for certificates/keys - removed...
changes: - restored ngx_ssl_certificate_name_index - misc.
changes: - applied ngx_ssl_cache_fetch() simplification - added comment about ngx_ssl_cert_already_in_hash (requested by @arut in private), and some style
What is the evidence of use-after-free, can you post the exact message? What is the exact nginx `configure` command and the minimal nginx configuration you are able to reproduce on.
I reproduced this in both alpine-based docker and FreeBSD with 2.13.4, looks like something has changed in libxml2 2.13.
See review for the patches initially posted by Piotr Sikora in the nginx-devel mailing list: - https://mailman.nginx.org/pipermail/nginx-devel/2024-March/2JRAR2JEHWUTVQIAQJZEHHILR6JNXQ6S.html - https://mailman.nginx.org/pipermail/nginx-devel/2024-March/RAS6R7UE3ZK6K6EQQVA4AHVV4WYNYX3P.html I still don't think the proposed changes deserve its complexity. So...
> The patch looks ok. But commit log should be more precise. Removed Safari and Edge (Chrome clone).
Updated to exempt OpenSSL
Changed to SSL_OP_NO_TLSv1_2.