Skip to content

Commit 38d4042

Browse files
committed
Bugfix & Support TLSv1.1+
Verify SSL capability.
1 parent 6bc2f99 commit 38d4042

File tree

1 file changed

+7
-1
lines changed

1 file changed

+7
-1
lines changed

ngx_http_upstream_check_module.c

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1092,9 +1092,11 @@ ngx_http_upstream_check_add_timers(ngx_cycle_t *cycle) {
10921092

10931093
ucscf = peer[i].conf;
10941094
cf = ucscf->check_type_conf;
1095+
#if (NGX_HTTP_SSL)
10951096
if (is_https_check(&peer[i])) {
1096-
ngx_ssl_create(&ucscf->ssl, NGX_SSL_SSLv3 | NGX_SSL_TLSv1,0);
1097+
ngx_ssl_create(&ucscf->ssl, NGX_SSL_SSLv3|NGX_SSL_TLSv1|NGX_SSL_TLSv1_1|NGX_SSL_TLSv1_2, 0);
10971098
}
1099+
#endif
10981100

10991101
if (cf->need_pool) {
11001102
peer[i].pool = ngx_create_pool(ngx_pagesize, cycle->log);
@@ -1220,7 +1222,11 @@ ngx_http_upstream_check_connect_handler(ngx_event_t *event) {
12201222

12211223
peer = event->data;
12221224
ucscf = peer->conf;
1225+
#if (NGX_HTTP_SSL)
12231226
int is_https_check_type = is_https_check(peer);
1227+
#else
1228+
int is_https_check_type = 0;
1229+
#endif
12241230

12251231
if (peer->pc.connection != NULL) {
12261232
c = peer->pc.connection;

0 commit comments

Comments
 (0)