Mercurial > hg > nginx-quic
view src/os/unix/rfork_thread.S @ 5989:ec01b1d1fff1
Mail: client SSL certificates support.
The "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate",
"ssl_trusted_certificate", and "ssl_crl" directives introduced to control
SSL client certificate verification in mail proxy module.
If there is a certificate, detail of the certificate are passed to
the auth_http script configured via Auth-SSL-Verify, Auth-SSL-Subject,
Auth-SSL-Issuer, Auth-SSL-Serial, Auth-SSL-Fingerprint headers. If
the auth_http_pass_client_cert directive is set, client certificate
in PEM format will be passed in the Auth-SSL-Cert header (urlencoded).
If there is no required certificate provided during an SSL handshake
or certificate verification fails then a protocol-specific error is
returned after the SSL handshake and the connection is closed.
Based on previous work by Sven Peter, Franck Levionnois and Filipe Da Silva.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Wed, 25 Feb 2015 17:48:05 +0300 |
parents | d620f497c50f |
children |
line wrap: on
line source
/* * Copyright (C) Igor Sysoev * Copyright (C) Nginx, Inc. */ #include <sys/syscall.h> #include <machine/asm.h> /* * rfork_thread(3) - rfork_thread(flags, stack, func, arg); */ #define KERNCALL int $0x80 ENTRY(rfork_thread) push %ebp mov %esp, %ebp push %esi mov 12(%ebp), %esi # the thread stack address sub $4, %esi mov 20(%ebp), %eax # the thread argument mov %eax, (%esi) sub $4, %esi mov 16(%ebp), %eax # the thread start address mov %eax, (%esi) push 8(%ebp) # rfork(2) flags push $0 mov $SYS_rfork, %eax KERNCALL jc error cmp $0, %edx jne child parent: add $8, %esp pop %esi leave ret child: mov %esi, %esp pop %eax call *%eax # call a thread start address ... add $4, %esp push %eax push $0 mov $SYS_exit, %eax # ... and exit(2) after a thread would return KERNCALL error: add $8, %esp pop %esi leave PIC_PROLOGUE /* libc's cerror: jmp PIC_PLT(HIDENAME(cerror)) */ push %eax call PIC_PLT(CNAME(__error)) pop %ecx PIC_EPILOGUE mov %ecx, (%eax) mov $-1, %eax mov $-1, %edx ret