Skip to content

adjust ssl verification and options after context change#3317

Open
snar wants to merge 3 commits intowarmcat:mainfrom
snar:ssl-verify-and-options
Open

adjust ssl verification and options after context change#3317
snar wants to merge 3 commits intowarmcat:mainfrom
snar:ssl-verify-and-options

Conversation

@snar
Copy link
Copy Markdown
Contributor

@snar snar commented Jan 22, 2025

Fix for a well-known glitch in OpenSSL: when reassigning SSL to a different SSL_CTX certificates gets updated from a new context, but verification mode/depth and options are not updated.

Based on nginx implementation (https://mailman.nginx.org/pipermail/nginx-devel/2011-February/000728.html).

lws-team and others added 3 commits January 22, 2025 10:10
Google's fuzzer platform blows a warning

/src/libwebsockets/lib/plat/unix/unix-sockets.c:497:21: warning: implicit conversion loses integer precision: 'uint32_t' (aka 'unsigned int') to '__be16' (aka 'unsigned short') [-Wimplicit-int-conversion]
  497 |         sll.sll_protocol = (uint32_t)(htons((uint16_t)0x800));
@lws-team lws-team force-pushed the main branch 9 times, most recently from aca2548 to 20263de Compare July 9, 2025 18:51
@lws-team lws-team force-pushed the main branch 6 times, most recently from e028532 to 5867044 Compare August 1, 2025 12:39
@lws-team lws-team force-pushed the main branch 4 times, most recently from 36ef2d6 to c9bf70c Compare August 11, 2025 08:07
@lws-team lws-team force-pushed the main branch 9 times, most recently from e50f2bd to 10d3ba4 Compare August 23, 2025 05:45
@lws-team lws-team force-pushed the main branch 2 times, most recently from 0f65cc9 to c5ef352 Compare August 24, 2025 12:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants