gitroo-admin/node
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
node/test/fixtures/keys
History
Exact
Fedor Indutny 550c2638c0 tls: use SSL_set_cert_cb for async SNI/OCSP 
Do not enable ClientHello parser for async SNI/OCSP. Use new
OpenSSL-1.0.2's API `SSL_set_cert_cb` to pause the handshake process and
load the cert/OCSP response asynchronously. Hopefuly this will make
whole async SNI/OCSP process much faster and will eventually let us
remove the ClientHello parser itself (which is currently used only for
async session, see #1462 for the discussion of removing it).

NOTE: Ported our code to `SSL_CTX_add1_chain_cert` to use
`SSL_CTX_get0_chain_certs` in `CertCbDone`. Test provided for this
feature.

Fix: https://github.com/iojs/io.js/issues/1423
PR-URL: https://github.com/iojs/io.js/pull/1464
Reviewed-By: Shigeki Ohtsu <ohtsu@iij.ad.jp>
2015-05-01 16:56:55 +02:00
..
0-dns-cert.pem crypto: separate altname extensions with ", " 2014-12-11 00:07:58 +07:00
0-dns-key.pem crypto: escape DNS altname 2014-11-08 02:24:07 +03:00
agent1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent1-csr.pem tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent1-key.pem tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent1.cnf tls: support OCSP on client and server 2014-04-18 02:21:16 +04:00
agent2-cert.pem
agent2-csr.pem
agent2-key.pem
agent2.cnf
agent3-cert.pem
agent3-csr.pem
agent3-key.pem
agent3.cnf
agent4-cert.pem
agent4-csr.pem
agent4-key.pem
agent4.cnf
agent5-cert.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5-csr.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5-key.pem tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent5.cnf tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
agent6-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
agent6.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca1.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca2-cert.pem
ca2-cert.srl tls: fix encoding in certificate-related functions 2014-09-15 17:42:20 +04:00
ca2-crl.pem
ca2-database.txt
ca2-key.pem
ca2-serial
ca2.cnf
ca3-cert.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-cert.srl tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-csr.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3-key.pem tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
ca3.cnf tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
dh512.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
dh1024.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
dh2048.pem tls, crypto: add DHE support 2014-08-29 00:36:48 +04:00
ec-cert.pem
ec-csr.pem
ec-key.pem
ec.cnf
Makefile tls: use SSL_set_cert_cb for async SNI/OCSP 2015-05-01 16:56:55 +02:00
rsa_private_1024.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_private_2048.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_private_4096.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_1024.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_2048.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00
rsa_public_4096.pem benchmark: add rsa/aes-gcm performance test 2015-04-04 12:37:26 +09:00