Mercurial > hg > nginx-quic
annotate src/os/unix/ngx_sunpro_x86.il @ 5989:ec01b1d1fff1
Mail: client SSL certificates support.
The "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate",
"ssl_trusted_certificate", and "ssl_crl" directives introduced to control
SSL client certificate verification in mail proxy module.
If there is a certificate, detail of the certificate are passed to
the auth_http script configured via Auth-SSL-Verify, Auth-SSL-Subject,
Auth-SSL-Issuer, Auth-SSL-Serial, Auth-SSL-Fingerprint headers. If
the auth_http_pass_client_cert directive is set, client certificate
in PEM format will be passed in the Auth-SSL-Cert header (urlencoded).
If there is no required certificate provided during an SSL handshake
or certificate verification fails then a protocol-specific error is
returned after the SSL handshake and the connection is closed.
Based on previous work by Sven Peter, Franck Levionnois and Filipe Da Silva.
| author | Maxim Dounin <mdounin@mdounin.ru> |
|---|---|
| date | Wed, 25 Feb 2015 17:48:05 +0300 |
| parents | d620f497c50f |
| children | 2cd019520210 |
| rev | line source |
|---|---|
| 561 | 1 / |
| 2 / Copyright (C) Igor Sysoev | |
| 4412 | 3 / Copyright (C) Nginx, Inc. |
| 561 | 4 / |
| 5 | |
| 6 / ngx_atomic_uint_t ngx_atomic_cmp_set(ngx_atomic_t *lock, | |
| 7 / ngx_atomic_uint_t old, ngx_atomic_uint_t set); | |
| 8 / | |
|
2818
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
9 / the arguments are passed on stack (%esp), 4(%esp), 8(%esp) |
| 561 | 10 |
| 11 .inline ngx_atomic_cmp_set,0 | |
| 12 movl (%esp), %ecx | |
| 13 movl 4(%esp), %eax | |
| 14 movl 8(%esp), %edx | |
| 15 lock | |
| 16 cmpxchgl %edx, (%ecx) | |
| 17 setz %al | |
| 18 movzbl %al, %eax | |
| 19 .end | |
| 20 | |
| 21 | |
| 22 / ngx_atomic_int_t ngx_atomic_fetch_add(ngx_atomic_t *value, | |
| 23 / ngx_atomic_int_t add); | |
| 24 / | |
|
2818
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
25 / the arguments are passed on stack (%esp), 4(%esp) |
| 561 | 26 |
| 27 .inline ngx_atomic_fetch_add,0 | |
| 28 movl (%esp), %ecx | |
| 29 movl 4(%esp), %eax | |
| 30 lock | |
| 31 xaddl %eax, (%ecx) | |
| 32 .end | |
| 1309 | 33 |
| 34 | |
| 35 / ngx_cpu_pause() | |
|
2818
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
36 / |
|
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
37 / the "rep; nop" is used instead of "pause" to avoid the "[ PAUSE ]" hardware |
|
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
38 / capability added by linker because Solaris/i386 does not know about it: |
|
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
39 / |
|
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
40 / ld.so.1: nginx: fatal: hardware capability unsupported: 0x2000 [ PAUSE ] |
| 1309 | 41 |
| 42 .inline ngx_cpu_pause,0 | |
|
2818
7e02df612521
preserve Solaris binary hardware capabilities
Igor Sysoev <igor@sysoev.ru>
parents:
1309
diff
changeset
|
43 rep; nop |
| 1309 | 44 .end |