diff options
| author | Maxim Dounin <mdounin@mdounin.ru> | 2012-10-01 16:47:55 +0400 |
|---|---|---|
| committer | Maxim Dounin <mdounin@mdounin.ru> | 2012-10-01 16:47:55 +0400 |
| commit | 74ad4494a66d7ea5201c37f6628707404df723fe (patch) | |
| tree | c5c012ff1465ea50b8d6c2597660b40ef592afe4 /src/core/ngx_core.h | |
| parent | f7ec295fb4bd81d8840e51021d44270ccd9ab222 (diff) | |
OCSP stapling: loading OCSP responses.
This includes the ssl_stapling_responder directive (defaults to OCSP
responder set in certificate's AIA extension).
OCSP response for a given certificate is requested once we get at least
one connection with certificate_status extension in ClientHello, and
certificate status won't be sent in the connection in question. This due
to limitations in the OpenSSL API (certificate status callback is blocking).
Note: SSL_CTX_use_certificate_chain_file() was reimplemented as it doesn't
allow to access the certificate loaded via SSL_CTX.
Diffstat (limited to 'src/core/ngx_core.h')
| -rw-r--r-- | src/core/ngx_core.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/core/ngx_core.h b/src/core/ngx_core.h index 435ce64e7..bccc60341 100644 --- a/src/core/ngx_core.h +++ b/src/core/ngx_core.h @@ -69,12 +69,12 @@ typedef void (*ngx_connection_handler_pt)(ngx_connection_t *c); #include <ngx_slab.h> #include <ngx_inet.h> #include <ngx_cycle.h> +#include <ngx_resolver.h> #if (NGX_OPENSSL) #include <ngx_event_openssl.h> #endif #include <ngx_process_cycle.h> #include <ngx_conf_file.h> -#include <ngx_resolver.h> #include <ngx_open_file_cache.h> #include <ngx_os.h> #include <ngx_connection.h> |