[PATCH] SSL: respect session timeout in configs without session cache.

Piotr Sikora piotr at cloudflare.com
Thu Oct 10 20:17:14 UTC 2013


Hey Maxim,

> I don't see a real reason for the API change, and direct use of
> SSL_CTX_set_timeout() in http/mail ssl modules.  What about this
> instead:

While your patch fixes the issue, I personally don't like the fact
that session timeout is being set within code block responsible for
session cache logic because it simply doesn't belong there.

Having said that, feel free to commit whichever patch you find more appropriate.

Best regards,
Piotr Sikora



More information about the nginx-devel mailing list