1. 客户端报SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN错误时,不作为maybe pinning; 2. ssl policy中增加protocol_errors的bypass开关。

This commit is contained in:
zhengchao
2019-05-21 11:47:09 +08:00
parent 1f73b4832d
commit 4cd42b9f95
5 changed files with 68 additions and 25 deletions

View File

@@ -13,6 +13,7 @@ struct ssl_service_status
char is_ev;
char is_ct;
char is_mutual_auth;
char has_protocol_errors;
};
struct ssl_service_cache;
@@ -25,6 +26,7 @@ struct ssl_service_cache_statistics
{
long long pinning_cli_cnt;
long long mutual_auth_cli_cnt;
long long proto_err_cli_cnt;
long long ev_srv_cnt;
long long ct_srv_cnt;
};