haproxy/include
Grant Zhang fa6c7ee702 MAJOR: ssl: add openssl async mode support
ssl-mode-async is a global configuration parameter which enables
asynchronous processing in OPENSSL for all SSL connections haproxy
handles. With SSL_MODE_ASYNC set, TLS I/O operations may indicate a
retry with SSL_ERROR_WANT_ASYNC with this mode set if an asynchronous
capable engine is used to perform cryptographic operations. Currently
async mode only supports one async-capable engine.

This is the latest version of the patchset which includes Emeric's
updates :
  - improved async fd cleaning when openssl reports an fd to delete
  - prevent conn_fd_handler from calling SSL_{read,write,handshake} until
    the async fd is ready, as these operations are very slow and waste CPU
  - postpone of SSL_free to ensure the async operation can complete and
    does not cause a dereference a released SSL.
  - proper removal of async fd from the fdtab and removal of the unused async
    flag.
2017-05-27 07:05:54 +02:00
..
common DOC: update RFC references 2017-04-28 18:58:11 +02:00
import CLEANUP: da: move global settings out of the global section 2016-12-21 21:30:54 +01:00
proto MAJOR: ssl: add openssl async mode support 2017-05-27 07:05:54 +02:00
types MAJOR: ssl: add openssl async mode support 2017-05-27 07:05:54 +02:00