You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@trafficserver.apache.org by "ASF GitHub Bot (JIRA)" <ji...@apache.org> on 2016/04/21 19:08:25 UTC

[jira] [Commented] (TS-4373) Add TSSslContextCreate and TSSslContextDestroy to the API.

    [ https://issues.apache.org/jira/browse/TS-4373?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15252211#comment-15252211 ] 

ASF GitHub Bot commented on TS-4373:
------------------------------------

GitHub user calavera opened a pull request:

    https://github.com/apache/trafficserver/pull/594

    [TS-4373] Add TSSslContextCreate and TSSslContextDestroy to the API.

    This PR supersedes #402. I added documentation and rebased the code
    on top of the current master. I'm going to send an email to the DEV@ list to formally propose this change.

You can merge this pull request into a Git repository by running:

    $ git pull https://github.com/calavera/trafficserver ssl_context_create

Alternatively you can review and apply these changes as the patch at:

    https://github.com/apache/trafficserver/pull/594.patch

To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:

    This closes #594
    
----
commit f993c0cab614c77b7bea109c27448a5d2f898978
Author: Mathias Biilmann Christensen <in...@mathias-biilmann.net>
Date:   2015-12-29T06:45:03Z

    Add TSSslContextCreate method
    
    This method returns a new SSL Context that's configured according to
    the settings in records.config
    
    This is useful if an extension wants to use the TS_SSL_CERT_HOOK to
    control loading of SNI certificates, and still want to respect the
    cipher suite and related SSL settings.
    
    (cherry picked from commit cdc051d2478da8dc6c1076a6c01ee5d9c7de7db1)

commit 0094a73e21c9fa5083a1167847dc5e879285bf08
Author: Mathias Biilmann Christensen <in...@mathias-biilmann.net>
Date:   2016-01-05T07:13:11Z

    Change signature to TSSslContextCreate(void)
    
    (cherry picked from commit 2897ecd973029d3277b0e773d3f94b6052719054)

commit dabc70bc35bffaa54aacf60bd6aa5d160eecf37c
Author: Mathias Biilmann Christensen <in...@mathias-biilmann.net>
Date:   2016-01-16T03:26:40Z

    Add TSSslContextDestroy method
    
    (cherry picked from commit 22fc89be93d5bb1af09d4b98667cf2cc40bdeb07)

commit fd30f573942ca2575b1246f08c6932476df74b41
Author: David Calavera <da...@gmail.com>
Date:   2016-04-21T16:59:19Z

    Move SSL_CTX setup out of ssl_store_ssl_context.
    
    Refactor ssl_store_ssl_context method to separate context initialization
    and configuration from inserting the context into the SSLCertLookup.
    
    (cherry picked from commit 8b248f4493c0e6e53c4fbc8cbdf618fabc0e818f)
    
    Signed-off-by: David Calavera <da...@gmail.com>

commit 523e9e703ecd835dc84e829d4539a1bf40e3ee3c
Author: David Calavera <da...@gmail.com>
Date:   2016-04-21T16:08:19Z

    Add documentation for TSSslContextCreate and TSSslContextDestroy.
    
    Signed-off-by: David Calavera <da...@gmail.com>

----


> Add TSSslContextCreate and TSSslContextDestroy to the API.
> ----------------------------------------------------------
>
>                 Key: TS-4373
>                 URL: https://issues.apache.org/jira/browse/TS-4373
>             Project: Traffic Server
>          Issue Type: Improvement
>            Reporter: David Calavera
>
> As described in https://github.com/apache/trafficserver/pull/402:
> > The current experimental plugin for loading SSL certificates just use SSL_CTX_new(SSLv23_client_method()) to create a new context, and doesn't respect the cipher suite settings in records.config.
> This issue is tracking the progress in that improvement. I'll open a new Pull Request with documentation and the code rebased.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)