@@ -1527,6 +1527,7 @@ ngx_http_lua_socket_tcp_check_busy(ngx_http_request_t *r,
1527
1527
return NULL ;
1528
1528
}
1529
1529
1530
+
1530
1531
int
1531
1532
ngx_http_lua_ffi_socket_tcp_tlshandshake (ngx_http_request_t * r ,
1532
1533
ngx_http_lua_socket_tcp_upstream_t * u , ngx_ssl_session_t * sess ,
@@ -1568,7 +1569,7 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1568
1569
}
1569
1570
1570
1571
if (u -> raw_downstream || u -> body_downstream ) {
1571
- * errmsg = "not supported for downstream" ;
1572
+ * errmsg = "not supported for downstream sockets " ;
1572
1573
return NGX_ERROR ;
1573
1574
}
1574
1575
@@ -1609,7 +1610,7 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1609
1610
1610
1611
if (sess != NULL ) {
1611
1612
if (ngx_ssl_set_session (c , sess ) != NGX_OK ) {
1612
- * errmsg = "lua tls set session failed" ;
1613
+ * errmsg = "tls set session failed" ;
1613
1614
return NGX_ERROR ;
1614
1615
}
1615
1616
@@ -1632,13 +1633,13 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1632
1633
x509 = sk_X509_value (chain , 0 );
1633
1634
if (x509 == NULL ) {
1634
1635
ERR_clear_error ();
1635
- * errmsg = "lua tls fetch client certificate from chain failed" ;
1636
+ * errmsg = "tls fetch client certificate from chain failed" ;
1636
1637
return NGX_ERROR ;
1637
1638
}
1638
1639
1639
1640
if (SSL_use_certificate (ssl_conn , x509 ) == 0 ) {
1640
1641
ERR_clear_error ();
1641
- * errmsg = "lua tls set client certificate failed" ;
1642
+ * errmsg = "tls set client certificate failed" ;
1642
1643
return NGX_ERROR ;
1643
1644
}
1644
1645
@@ -1648,21 +1649,21 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1648
1649
x509 = sk_X509_value (chain , i );
1649
1650
if (x509 == NULL ) {
1650
1651
ERR_clear_error ();
1651
- * errmsg = "lua tls fetch client intermediate certificate "
1652
- "from chain failed" ;
1652
+ * errmsg = "tls fetch client intermediate certificate from "
1653
+ "chain failed" ;
1653
1654
return NGX_ERROR ;
1654
1655
}
1655
1656
1656
1657
if (SSL_add1_chain_cert (ssl_conn , x509 ) == 0 ) {
1657
1658
ERR_clear_error ();
1658
- * errmsg = "lua tls set client intermediate certificate failed" ;
1659
+ * errmsg = "tls set client intermediate certificate failed" ;
1659
1660
return NGX_ERROR ;
1660
1661
}
1661
1662
}
1662
1663
1663
1664
if (SSL_use_PrivateKey (ssl_conn , pkey ) == 0 ) {
1664
1665
ERR_clear_error ();
1665
- * errmsg = "lua ssl set client private key failed" ;
1666
+ * errmsg = "tls set client private key failed" ;
1666
1667
return NGX_ERROR ;
1667
1668
}
1668
1669
}
@@ -1681,7 +1682,7 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1681
1682
}
1682
1683
1683
1684
#else
1684
- * errmsg = "OpenSSL has no SNI support" ;
1685
+ * errmsg = "no TLS extension support" ;
1685
1686
return NGX_ERROR ;
1686
1687
#endif
1687
1688
}
@@ -1724,7 +1725,6 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1724
1725
u -> ssl_name .data = ngx_alloc (server_name -> len , ngx_cycle -> log );
1725
1726
if (u -> ssl_name .data == NULL ) {
1726
1727
u -> ssl_name .len = 0 ;
1727
-
1728
1728
* errmsg = "no memory" ;
1729
1729
return NGX_ERROR ;
1730
1730
}
@@ -1745,7 +1745,7 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1745
1745
rc = ngx_ssl_handshake (c );
1746
1746
1747
1747
ngx_log_debug1 (NGX_LOG_DEBUG_HTTP , r -> connection -> log , 0 ,
1748
- "ngx_ssl_handshake returned %d" , rc );
1748
+ "ngx_ssl_handshake returned: %d" , rc );
1749
1749
1750
1750
if (rc == NGX_AGAIN ) {
1751
1751
if (c -> write -> timer_set ) {
@@ -1777,7 +1777,6 @@ ngx_http_lua_ffi_socket_tcp_tlshandshake(ngx_http_request_t *r,
1777
1777
1778
1778
if (rc == NGX_ERROR ) {
1779
1779
* errmsg = u -> error_ret ;
1780
-
1781
1780
return NGX_ERROR ;
1782
1781
}
1783
1782
@@ -1891,7 +1890,6 @@ ngx_http_lua_tls_handshake_handler(ngx_connection_t *c)
1891
1890
}
1892
1891
1893
1892
1894
-
1895
1893
int
1896
1894
ngx_http_lua_ffi_socket_tcp_get_tlshandshake_result (ngx_http_request_t * r ,
1897
1895
ngx_http_lua_socket_tcp_upstream_t * u , ngx_ssl_session_t * * sess ,
0 commit comments