view src/mysql/config @ 5094:e0a3714a36f8

SNI: reset to default server if requested host was not found. Not only this is consistent with a case without SNI, but this also prevents abusing configurations that assume that the $host variable is limited to one of the configured names for a server. An example of potentially unsafe configuration: server { listen 443 ssl default_server; ... } server { listen 443; server_name example.com; location / { proxy_pass http://$host; } } Note: it is possible to negotiate "example.com" by SNI, and to request arbitrary host name that does not exist in the configuration above.
author Valentin Bartenev <vbart@nginx.com>
date Wed, 27 Feb 2013 17:38:54 +0000
parents 7cbef16c71a1
children
line wrap: on
line source


ngx_addon_name=ngx_mysql

HTTP_MODULES="$HTTP_MODULES ngx_http_mysql_test_module"

HTTP_INCS="$HTTP_INCS $ngx_addon_dir"
HTTP_DEPS="$HTTP_DEPS $ngx_addon_dir/ngx_mysql.h"
#CORE_LIBS="$CORE_LIBS -lmd"

USE_SHA1=YES

NGX_ADDON_SRCS="$NGX_ADDON_SRCS $ngx_addon_dir/ngx_mysql.c"
NGX_ADDON_SRCS="$NGX_ADDON_SRCS $ngx_addon_dir/ngx_http_mysql_test.c"