Mercurial > hg > nginx
annotate src/http/modules/ngx_http_ssi_filter_module.h @ 7361:c09c7d47acb9
SSL: logging level of "no suitable signature algorithm".
The "no suitable signature algorithm" errors are reported by OpenSSL 1.1.1
when using TLSv1.3 if there are no shared signature algorithms. In
particular, this can happen if the client limits available signature
algorithms to something we don't have a certificate for, or to an empty
list. For example, the following command:
openssl s_client -connect 127.0.0.1:8443 -sigalgs rsa_pkcs1_sha1
will always result in the "no suitable signature algorithm" error
as the "rsa_pkcs1_sha1" algorithm refers solely to signatures which
appear in certificates and not defined for use in TLS 1.3 handshake
messages.
The SSL_R_NO_COMMON_SIGNATURE_ALGORITHMS error is what BoringSSL returns
in the same situation.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Tue, 25 Sep 2018 14:00:04 +0300 |
parents | d620f497c50f |
children | 49e7db44b57c |
rev | line source |
---|---|
597 | 1 |
2 /* | |
3 * Copyright (C) Igor Sysoev | |
4412 | 4 * Copyright (C) Nginx, Inc. |
597 | 5 */ |
6 | |
7 | |
8 #ifndef _NGX_HTTP_SSI_FILTER_H_INCLUDED_ | |
9 #define _NGX_HTTP_SSI_FILTER_H_INCLUDED_ | |
10 | |
11 | |
12 #include <ngx_config.h> | |
13 #include <ngx_core.h> | |
14 #include <ngx_http.h> | |
15 | |
16 | |
1545 | 17 #define NGX_HTTP_SSI_MAX_PARAMS 16 |
597 | 18 |
1545 | 19 #define NGX_HTTP_SSI_COMMAND_LEN 32 |
20 #define NGX_HTTP_SSI_PARAM_LEN 32 | |
21 #define NGX_HTTP_SSI_PARAMS_N 4 | |
597 | 22 |
23 | |
1545 | 24 #define NGX_HTTP_SSI_COND_IF 1 |
25 #define NGX_HTTP_SSI_COND_ELSE 2 | |
26 | |
27 | |
28 #define NGX_HTTP_SSI_NO_ENCODING 0 | |
29 #define NGX_HTTP_SSI_URL_ENCODING 1 | |
30 #define NGX_HTTP_SSI_ENTITY_ENCODING 2 | |
629 | 31 |
32 | |
597 | 33 typedef struct { |
34 ngx_hash_t hash; | |
35 ngx_hash_keys_arrays_t commands; | |
36 } ngx_http_ssi_main_conf_t; | |
37 | |
38 | |
39 typedef struct { | |
40 ngx_buf_t *buf; | |
41 | |
42 u_char *pos; | |
43 u_char *copy_start; | |
44 u_char *copy_end; | |
45 | |
46 ngx_uint_t key; | |
47 ngx_str_t command; | |
48 ngx_array_t params; | |
49 ngx_table_elt_t *param; | |
50 ngx_table_elt_t params_array[NGX_HTTP_SSI_PARAMS_N]; | |
51 | |
52 ngx_chain_t *in; | |
53 ngx_chain_t *out; | |
54 ngx_chain_t **last_out; | |
55 ngx_chain_t *busy; | |
56 ngx_chain_t *free; | |
57 | |
58 ngx_uint_t state; | |
59 ngx_uint_t saved_state; | |
60 size_t saved; | |
61 size_t looked; | |
62 | |
63 size_t value_len; | |
64 | |
777
4ab852b691f5
<!--#include virtual=... set=... -->
Igor Sysoev <igor@sysoev.ru>
parents:
758
diff
changeset
|
65 ngx_list_t *variables; |
667 | 66 ngx_array_t *blocks; |
597 | 67 |
4381
e9a0427f4139
SSI: added regex captures support in the expression of the "if" command.
Valentin Bartenev <vbart@nginx.com>
parents:
1545
diff
changeset
|
68 #if (NGX_PCRE) |
e9a0427f4139
SSI: added regex captures support in the expression of the "if" command.
Valentin Bartenev <vbart@nginx.com>
parents:
1545
diff
changeset
|
69 ngx_uint_t ncaptures; |
e9a0427f4139
SSI: added regex captures support in the expression of the "if" command.
Valentin Bartenev <vbart@nginx.com>
parents:
1545
diff
changeset
|
70 int *captures; |
e9a0427f4139
SSI: added regex captures support in the expression of the "if" command.
Valentin Bartenev <vbart@nginx.com>
parents:
1545
diff
changeset
|
71 u_char *captures_data; |
e9a0427f4139
SSI: added regex captures support in the expression of the "if" command.
Valentin Bartenev <vbart@nginx.com>
parents:
1545
diff
changeset
|
72 #endif |
e9a0427f4139
SSI: added regex captures support in the expression of the "if" command.
Valentin Bartenev <vbart@nginx.com>
parents:
1545
diff
changeset
|
73 |
629 | 74 unsigned conditional:2; |
1545 | 75 unsigned encoding:2; |
667 | 76 unsigned block:1; |
629 | 77 unsigned output:1; |
78 unsigned output_chosen:1; | |
597 | 79 |
758
86bb73dc8d40
fix <!--#include virtual=... wait="yes" -->
Igor Sysoev <igor@sysoev.ru>
parents:
667
diff
changeset
|
80 ngx_http_request_t *wait; |
609 | 81 void *value_buf; |
597 | 82 ngx_str_t timefmt; |
83 ngx_str_t errmsg; | |
84 } ngx_http_ssi_ctx_t; | |
85 | |
86 | |
87 typedef ngx_int_t (*ngx_http_ssi_command_pt) (ngx_http_request_t *r, | |
88 ngx_http_ssi_ctx_t *ctx, ngx_str_t **); | |
89 | |
90 | |
91 typedef struct { | |
92 ngx_str_t name; | |
93 ngx_uint_t index; | |
94 | |
95 unsigned mandatory:1; | |
96 unsigned multiple:1; | |
97 } ngx_http_ssi_param_t; | |
98 | |
99 | |
100 typedef struct { | |
101 ngx_str_t name; | |
102 ngx_http_ssi_command_pt handler; | |
103 ngx_http_ssi_param_t *params; | |
104 | |
629 | 105 unsigned conditional:2; |
667 | 106 unsigned block:1; |
597 | 107 unsigned flush:1; |
108 } ngx_http_ssi_command_t; | |
109 | |
110 | |
111 extern ngx_module_t ngx_http_ssi_filter_module; | |
112 | |
113 | |
114 #endif /* _NGX_HTTP_SSI_FILTER_H_INCLUDED_ */ |