罗泽轩
罗泽轩
AFAIK, server side SSL renegotiation is disable in Nginx. Maybe you are using OpenSSL 1.1.0+, so the renegotiation is not disable yet. This was fixed in the master branch of...
@tokers > for the Nginx older than 1.15.2, there is a time window between Nginx detects SSL renegotiation and takes the corresponding action, so this segmentation fault can still happens....
@tokers What about wrapping this change with specific version macro? This change is only required for some versions of Nginx built with some versions of OpenSSL.
@tokers What about running the OpenSSL client manually? https://github.com/openresty/lua-resty-core/blob/master/t/ssl.t#L2176