Re: Adding OpenSSL ciphersuites at compile time

If I remember correctly, the available cipher suites to NGINX are based on what's compiled into the underlying SSL libraries that NGINX builds against.  So if the underlying OpenSSL has access to ChaCha ciphers in its ciphers that're compiled into it, then NGINX can utilize those ChaCha ciphers. I

Re: nginx 1.20.0 coverity errors

You should probably be sending development related questions like this one to nginx-devel@nginx.org. Additionally, what I've learned as a developer and a Security person is that **coverity static testing issues** are not always actual *issues* that need addressed.  Without details specifically

Inquiry: Are nginx.org repos migrating from mercurial to git?

Seeing a lot of messages related to moving from mercurial to git here in the mailing list. Are the nginx.org code repos shifting to Git instead of Mercurial? Sent from my Galaxy ___ nginx-devel mailing list nginx-devel@nginx.org https://mailman.nginx

Proposal: Change `ssl_client_certificate` to `ssl_client_ca_certificate`

In line with a recent nginx mailing list thread I had with a user about how to properly secure a site with SSL/TLS Client Certificates, the user indicated that "ssl_client_certificate" is a confusing misnomer.  It implies that the certificate(s) provided are a bundle of certs that are *individu