tls: keep per-connection TLS state on the owner, not in SSL ex_data - #43863

Merged

Jarred-Sumner merged 9 commits into

mainfrom

claude/tls-state-on-owner

Sep 24, 2026

Commits on Sep 24, 2026

tls: keep per-connection TLS state on the socket owner, not in SSL ex_data
Jarred-Sumner
committed
649bef2
tls: store the listener on every accepted socket
Jarred-Sumner
committed
13ff14d
http: put the safety comment on the unsafe block
Jarred-Sumner
committed
940dcbd
tls: keep parked events on the socket, drop the listener when a socket leaves its group
Jarred-Sumner
committed
879056b
tls: point the SSL at its SSLWrapper, drop the thread-local
Jarred-Sumner
committed
7b5e96a
http: compile the socket-independent part of ProxyTunnel::adopt once
Jarred-Sumner
committed
bcf19a6
tls: check the server name once, in the verify step, for native clients
Jarred-Sumner
committed
7e076cf
crypto: X509Certificate.checkHost returns the matched name as a string
Jarred-Sumner
committed
28ec410
tls: remove the test for a renegotiation that starts before the name check
Jarred-Sumner
committed
f4f7b27