Skip to content

Commit

Permalink
Stream ssl_preread: relaxed SSL version check.
Browse files Browse the repository at this point in the history
SSL version 3.0 can be specified by the client at the record level for
compatibility reasons.  Previously, ssl_preread module rejected such
connections, presuming they don't have SNI.  Now SSL 3.0 is allowed at
the record level.
  • Loading branch information
arut committed Dec 19, 2016
1 parent 853c208 commit 393636d
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion src/stream/ngx_stream_ssl_preread_module.c
Original file line number Diff line number Diff line change
Expand Up @@ -142,7 +142,7 @@ ngx_stream_ssl_preread_handler(ngx_stream_session_t *s)
return NGX_DECLINED;
}

if (p[1] != 3 || p[2] == 0) {
if (p[1] != 3) {
ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
"ssl preread: unsupported SSL version");
return NGX_DECLINED;
Expand Down

0 comments on commit 393636d

Please sign in to comment.