annotate src/imap/ngx_imap_ssl_module.c @ 92:45945fa8b8ba NGINX_0_2_0

nginx 0.2.0 *) The pid-file names used during online upgrade was changed and now is not required a manual rename operation. The old master process adds the ".oldbin" suffix to its pid-file and executes a new binary file. The new master process creates usual pid-file without the ".newbin" suffix. If the master process exits, then old master process renames back its pid-file with the ".oldbin" suffix to the pid-file without suffix. *) Change: the "worker_connections" directive, new name of the "connections" directive; now the directive specifies maximum number of connections, but not maximum socket descriptor number. *) Feature: SSL supports the session cache inside one worker process. *) Feature: the "satisfy_any" directive. *) Change: the ngx_http_access_module and ngx_http_auth_basic_module do not run for subrequests. *) Feature: the "worker_rlimit_nofile" and "worker_rlimit_sigpending" directives. *) Bugfix: if all backend using in load-balancing failed after one error, then nginx did not try do connect to them during 60 seconds. *) Bugfix: in IMAP/POP3 command argument parsing. Thanks to Rob Mueller. *) Bugfix: errors while using SSL in IMAP/POP3 proxy. *) Bugfix: errors while using SSI and gzipping. *) Bugfix: the "Expires" and "Cache-Control" header lines were omitted from the 304 responses. Thanks to Alexandr Kukushkin.
author Igor Sysoev <http://sysoev.ru>
date Fri, 23 Sep 2005 00:00:00 +0400
parents 71c46860eb55
children ca4f70b3ccc6
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
88
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
1
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
2 /*
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
3 * Copyright (C) Igor Sysoev
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
4 */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
5
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
6
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
7 #include <ngx_config.h>
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
8 #include <ngx_core.h>
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
9 #include <ngx_imap.h>
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
10
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
11
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
12 #define NGX_DEFLAUT_CERTIFICATE "cert.pem"
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
13 #define NGX_DEFLAUT_CERTIFICATE_KEY "cert.pem"
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
14
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
15
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
16 static void *ngx_imap_ssl_create_conf(ngx_conf_t *cf);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
17 static char *ngx_imap_ssl_merge_conf(ngx_conf_t *cf, void *parent, void *child);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
18
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
19
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
20 static ngx_command_t ngx_imap_ssl_commands[] = {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
21
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
22 { ngx_string("ssl"),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
23 NGX_IMAP_MAIN_CONF|NGX_IMAP_SRV_CONF|NGX_CONF_FLAG,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
24 ngx_conf_set_flag_slot,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
25 NGX_IMAP_SRV_CONF_OFFSET,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
26 offsetof(ngx_imap_ssl_conf_t, enable),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
27 NULL },
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
28
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
29 { ngx_string("ssl_certificate"),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
30 NGX_IMAP_MAIN_CONF|NGX_IMAP_SRV_CONF|NGX_CONF_TAKE1,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
31 ngx_conf_set_str_slot,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
32 NGX_IMAP_SRV_CONF_OFFSET,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
33 offsetof(ngx_imap_ssl_conf_t, certificate),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
34 NULL },
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
35
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
36 { ngx_string("ssl_certificate_key"),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
37 NGX_IMAP_MAIN_CONF|NGX_IMAP_SRV_CONF|NGX_CONF_TAKE1,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
38 ngx_conf_set_str_slot,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
39 NGX_IMAP_SRV_CONF_OFFSET,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
40 offsetof(ngx_imap_ssl_conf_t, certificate_key),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
41 NULL },
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
42
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
43 { ngx_string("ssl_ciphers"),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
44 NGX_IMAP_MAIN_CONF|NGX_IMAP_SRV_CONF|NGX_CONF_TAKE1,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
45 ngx_conf_set_str_slot,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
46 NGX_IMAP_SRV_CONF_OFFSET,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
47 offsetof(ngx_imap_ssl_conf_t, ciphers),
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
48 NULL },
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
49
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
50 ngx_null_command
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
51 };
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
52
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
53
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
54 static ngx_imap_module_t ngx_imap_ssl_module_ctx = {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
55 NULL, /* create main configuration */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
56 NULL, /* init main configuration */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
57
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
58 ngx_imap_ssl_create_conf, /* create server configuration */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
59 ngx_imap_ssl_merge_conf /* merge server configuration */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
60 };
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
61
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
62
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
63 ngx_module_t ngx_imap_ssl_module = {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
64 NGX_MODULE_V1,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
65 &ngx_imap_ssl_module_ctx, /* module context */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
66 ngx_imap_ssl_commands, /* module directives */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
67 NGX_IMAP_MODULE, /* module type */
90
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
68 NULL, /* init master */
88
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
69 NULL, /* init module */
90
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
70 NULL, /* init process */
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
71 NULL, /* init thread */
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
72 NULL, /* exit thread */
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
73 NULL, /* exit process */
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
74 NULL, /* exit master */
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
75 NGX_MODULE_V1_PADDING
88
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
76 };
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
77
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
78
92
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
79 static u_char ngx_imap_session_id_ctx[] = "IMAP";
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
80
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
81
88
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
82 static void *
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
83 ngx_imap_ssl_create_conf(ngx_conf_t *cf)
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
84 {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
85 ngx_imap_ssl_conf_t *scf;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
86
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
87 scf = ngx_pcalloc(cf->pool, sizeof(ngx_imap_ssl_conf_t));
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
88 if (scf == NULL) {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
89 return NGX_CONF_ERROR;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
90 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
91
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
92 /*
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
93 * set by ngx_pcalloc():
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
94 *
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
95 * scf->certificate.len = 0;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
96 * scf->certificate.data = NULL;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
97 * scf->certificate_key.len = 0;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
98 * scf->certificate_key.data = NULL;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
99 * scf->ciphers.len = 0;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
100 * scf->ciphers.data = NULL;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
101 */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
102
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
103 scf->enable = NGX_CONF_UNSET;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
104
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
105 return scf;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
106 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
107
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
108
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
109 static char *
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
110 ngx_imap_ssl_merge_conf(ngx_conf_t *cf, void *parent, void *child)
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
111 {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
112 ngx_imap_ssl_conf_t *prev = parent;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
113 ngx_imap_ssl_conf_t *conf = child;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
114
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
115 ngx_conf_merge_value(conf->enable, prev->enable, 0);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
116
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
117 if (conf->enable == 0) {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
118 return NGX_CONF_OK;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
119 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
120
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
121 ngx_conf_merge_str_value(conf->certificate, prev->certificate,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
122 NGX_DEFLAUT_CERTIFICATE);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
123
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
124 ngx_conf_merge_str_value(conf->certificate_key, prev->certificate_key,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
125 NGX_DEFLAUT_CERTIFICATE_KEY);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
126
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
127 ngx_conf_merge_str_value(conf->ciphers, prev->ciphers, "");
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
128
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
129
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
130 /* TODO: configure methods */
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
131
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
132 conf->ssl_ctx = SSL_CTX_new(SSLv23_server_method());
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
133
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
134 if (conf->ssl_ctx == NULL) {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
135 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0, "SSL_CTX_new() failed");
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
136 return NGX_CONF_ERROR;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
137 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
138
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
139 if (ngx_pool_cleanup_add(cf->pool, ngx_ssl_cleanup_ctx, conf->ssl_ctx)
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
140 == NULL)
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
141 {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
142 return NGX_CONF_ERROR;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
143 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
144
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
145
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
146 #if 0
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
147 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_ALL);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
148 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_NO_SSLv3);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
149 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_SINGLE_DH_USE);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
150 #endif
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
151
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
152 if (conf->ciphers.len) {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
153 if (SSL_CTX_set_cipher_list(conf->ssl_ctx,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
154 (const char *) conf->ciphers.data) == 0)
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
155 {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
156 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
157 "SSL_CTX_set_cipher_list(\"%V\") failed",
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
158 &conf->ciphers);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
159 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
160 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
161
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
162 if (SSL_CTX_use_certificate_chain_file(conf->ssl_ctx,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
163 (char *) conf->certificate.data) == 0)
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
164 {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
165 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
166 "SSL_CTX_use_certificate_chain_file(\"%s\") failed",
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
167 conf->certificate.data);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
168 return NGX_CONF_ERROR;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
169 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
170
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
171
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
172 if (SSL_CTX_use_PrivateKey_file(conf->ssl_ctx,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
173 (char *) conf->certificate_key.data,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
174 SSL_FILETYPE_PEM) == 0)
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
175 {
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
176 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0,
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
177 "SSL_CTX_use_PrivateKey_file(\"%s\") failed",
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
178 conf->certificate_key.data);
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
179 return NGX_CONF_ERROR;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
180 }
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
181
92
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
182 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_ALL);
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
183
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
184 SSL_CTX_set_mode(conf->ssl_ctx, SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER);
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
185
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
186 SSL_CTX_set_read_ahead(conf->ssl_ctx, 1);
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
187
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
188 SSL_CTX_set_session_cache_mode(conf->ssl_ctx, SSL_SESS_CACHE_SERVER);
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
189
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
190 SSL_CTX_set_session_id_context(conf->ssl_ctx, ngx_imap_session_id_ctx,
45945fa8b8ba nginx 0.2.0
Igor Sysoev <http://sysoev.ru>
parents: 90
diff changeset
191 sizeof(ngx_imap_session_id_ctx) - 1);
90
71c46860eb55 nginx 0.1.45
Igor Sysoev <http://sysoev.ru>
parents: 88
diff changeset
192
88
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
193 return NGX_CONF_OK;
e916a291e9aa nginx 0.1.44
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
194 }