1. 客户端报SSL_R_SSLV3_ALERT_CERTIFICATE_UNKNOWN错误时,不作为maybe pinning; 2. ssl policy中增加protocol_errors的bypass开关。
This commit is contained in:
@@ -13,6 +13,7 @@ struct ssl_service_status
|
||||
char is_ev;
|
||||
char is_ct;
|
||||
char is_mutual_auth;
|
||||
char has_protocol_errors;
|
||||
};
|
||||
|
||||
struct ssl_service_cache;
|
||||
@@ -25,6 +26,7 @@ struct ssl_service_cache_statistics
|
||||
{
|
||||
long long pinning_cli_cnt;
|
||||
long long mutual_auth_cli_cnt;
|
||||
long long proto_err_cli_cnt;
|
||||
long long ev_srv_cnt;
|
||||
long long ct_srv_cnt;
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user