罗泽轩

Results 404 comments of 罗泽轩

AFAIK, server side SSL renegotiation is disable in Nginx. Maybe you are using OpenSSL 1.1.0+, so the renegotiation is not disable yet. This was fixed in the master branch of...

@tokers > for the Nginx older than 1.15.2, there is a time window between Nginx detects SSL renegotiation and takes the corresponding action, so this segmentation fault can still happens....

@tokers What about wrapping this change with specific version macro? This change is only required for some versions of Nginx built with some versions of OpenSSL.

@tokers What about running the OpenSSL client manually? https://github.com/openresty/lua-resty-core/blob/master/t/ssl.t#L2176