commit 0394207a59c255861ec5d208229665b5d09c473f
author Lukas Tribus <luky-37@hotmail.com> Wed Dec 17 15:12:50 2014 +0100
committer Lukas Tribus <luky-37@hotmail.com> Wed Dec 17 15:12:50 2014 +0100
tree 5cf16963ce79883f4f1273a1033bd94005e29860
parent 649350c0266b9f2c43dd4a725e7fc1b3dff0f398

SSL: safeguard use of SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS.

The flag was recently removed by BoringSSL.

src/event/ngx_event_openssl.c

diff --git a/src/event/ngx_event_openssl.c b/src/event/ngx_event_openssl.c
index 20f9eea..d5d4a1a 100644
--- a/src/event/ngx_event_openssl.c
+++ b/src/event/ngx_event_openssl.c
@@ -1146,11 +1146,15 @@
         c->recv_chain = ngx_ssl_recv_chain;
         c->send_chain = ngx_ssl_send_chain;
 
+#ifdef SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS
+
         /* initial handshake done, disable renegotiation (CVE-2009-3555) */
         if (c->ssl->connection->s3) {
             c->ssl->connection->s3->flags |= SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS;
         }
 
+#endif
+
         return NGX_OK;
     }