]> git.feebdaed.xyz Git - 0xmirror/nginx.git/commit
SSL: fixed "key values mismatch" with object cache inheritance.
authorSergey Kandaurov <pluknet@nginx.com>
Thu, 29 May 2025 13:49:48 +0000 (17:49 +0400)
committerpluknet <s.kandaurov@f5.com>
Mon, 6 Oct 2025 08:56:42 +0000 (12:56 +0400)
commita144d828cb70f788e2f8b06e820af95ae2e28f75
tree25e52bf6848885f390b068c497a1353b439c911d
parentc2a266fa7859bf4dc242a1b029077b72afe93184
SSL: fixed "key values mismatch" with object cache inheritance.

In rare cases, it was possible to get into this error state on reload
with improperly updated file timestamps for certificate and key pairs.

The fix is to retry on X509_R_KEY_VALUES_MISMATCH, similar to 5d5d9adcc.
Additionally, loading SSL certificate is updated to avoid certificates
discarded on retry to appear in ssl->certs and in extra chain.
src/event/ngx_event_openssl.c
src/event/ngx_event_openssl_cache.c