Update for nginx PR 562.

Author: bavshin-f5

.github/workflows/ci.yaml

@@ -37,7 +37,7 @@ jobs:
         rust-version:
           - stable
         nginx-ref:
-          - master
+          - e5de81af07b9495b8e439a9ff4f129e9f9e904ea
           - stable-1.28
         build:
           - debug

build.rs

@@ -54,13 +54,18 @@ fn detect_nginx_features() {
     // Generate cfg values for version checks
 
     println!("cargo::rustc-check-cfg=cfg(ngx_ssl_cache)");
+    println!("cargo::rustc-check-cfg=cfg(ngx_ssl_client_hello_cb)");
     println!("cargo::rerun-if-env-changed=DEP_NGINX_VERSION_NUMBER");
     if let Ok(version) = env::var("DEP_NGINX_VERSION_NUMBER") {
         let version: u64 = version.parse().unwrap();
 
         if version >= 1_027_002 {
             println!("cargo::rustc-cfg=ngx_ssl_cache");
         }
+
+        if version >= 1_029_002 {
+            println!("cargo::rustc-cfg=ngx_ssl_client_hello_cb");
+        }
     }
 }
 

src/acme/solvers/tls_alpn.rs

@@ -216,6 +216,10 @@ impl SslClientHello {
         let this = Self(ssl);
 
         match this.handler() {
+            #[cfg(ngx_ssl_client_hello_cb)]
+            Ok(false) => unsafe {
+                nginx_sys::ngx_ssl_client_hello_callback(this.ssl().cast(), alert, ptr::null_mut())
+            },
             Ok(_) => SSL_CLIENT_HELLO_SUCCESS,
             Err(Error::Decode) => {
                 unsafe { *alert = openssl_sys::SSL_AD_DECODE_ERROR };
@@ -270,6 +274,10 @@ impl SslClientHello {
             .expect("SSL_CLIENT_HELLO is always valid in SSL_CTX callbacks");
 
         match this.handler() {
+            #[cfg(ngx_ssl_client_hello_cb)]
+            Ok(false) => unsafe {
+                nginx_sys::ngx_ssl_select_certificate(ptr::from_ref(&this.0).cast())
+            },
             Ok(_) => openssl_sys::ssl_select_cert_result_t_ssl_select_cert_success,
             Err(err) => {
                 ngx_log_error!(