RepoMirrors/haproxy
1
0
Fork 0
mirror of http://git.haproxy.org/git/haproxy.git/ synced 2025-01-21 05:00:42 +00:00
Code Issues Packages Projects Releases Wiki Activity

MEDIUM: ssl: replace OpenSSL's session cache with the shared cache

Browse Source 
OpenSSL's session cache is now totally disabled and we use our own
implementation instead.
This commit is contained in:
Emeric Brun 2012-09-03 11:53:36 +02:00 committed by Willy Tarreau
parent 3e541d1c03
commit aa35f1fad7
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/cfgparse.c
View File

@ -62,6 +62,7 @@
#include <proto/sample.h>
#include <proto/server.h>
#include <proto/session.h>
#include <proto/shctx.h>
#include <proto/raw_sock.h>
#ifdef USE_OPENSSL
#include <proto/ssl_sock.h>
@ -6703,7 +6704,13 @@ out_uri_auth_compat:
SSL_CTX_set_options(listener->ssl_ctx.ctx, ssloptions);
SSL_CTX_set_mode(listener->ssl_ctx.ctx, sslmode);
SSL_CTX_set_verify(listener->ssl_ctx.ctx, SSL_VERIFY_NONE, NULL);
SSL_CTX_set_session_cache_mode(listener->ssl_ctx.ctx, SSL_SESS_CACHE_SERVER);
if (shared_context_init(0) < 0) {
Alert("Unable to allocate SSL session cache.\n");
cfgerr++;
goto skip_ssl;
}
shared_context_set_cache(listener->ssl_ctx.ctx);
SSL_CTX_set_info_callback(listener->ssl_ctx.ctx, ssl_sock_infocbk);
if (SSL_CTX_use_PrivateKey_file(listener->ssl_ctx.ctx, listener->ssl_cert, SSL_FILETYPE_PEM) <= 0) {