bugfix: ssl: do not access SSL struct directly for tlsext_status_type.

ghedo · agentzh · commit d14f90ed98c3 · 2016-11-27T20:14:56.000-08:00
In OpenSSL 1.1.0 it was made opaque, and a getter function was added.
diff --git a/src/ngx_http_lua_ssl_ocsp.c b/src/ngx_http_lua_ssl_ocsp.c
@@ -468,7 +468,11 @@ ngx_http_lua_ffi_ssl_set_ocsp_status_resp(ngx_http_request_t *r,
         return NGX_ERROR;
     }
 
+#ifdef SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE
+    if (SSL_get_tlsext_status_type(ssl_conn) == -1) {
+#else
     if (ssl_conn->tlsext_status_type == -1) {
+#endif
         dd("no ocsp status req from client");
         return NGX_DECLINED;
     }

Original file line number	Diff line number	Diff line change
`@@ -468,7 +468,11 @@ ngx_http_lua_ffi_ssl_set_ocsp_status_resp(ngx_http_request_t *r,`
`468`	`468`	`return NGX_ERROR;`
`469`	`469`	`}`
`470`	`470`
	`471`	`+#ifdef SSL_CTRL_GET_TLSEXT_STATUS_REQ_TYPE`
	`472`	`+ if (SSL_get_tlsext_status_type(ssl_conn) == -1) {`
	`473`	`+#else`
`471`	`474`	`if (ssl_conn->tlsext_status_type == -1) {`
	`475`	`+#endif`
`472`	`476`	`dd("no ocsp status req from client");`
`473`	`477`	`return NGX_DECLINED;`
`474`	`478`	`}`