nginx: src/stream/ngx_stream_ssl_preread

annotate src/stream/ngx_stream_ssl_preread_module.c @ 7660:d33e17499088

Version bump.

author	Maxim Dounin <mdounin@mdounin.ru>
date	Tue, 26 May 2020 22:03:00 +0300
parents	6649d4433266
children

rev	line source
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	1
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	2 /*
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	3 * Copyright (C) Nginx, Inc.
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	4 */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	5
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	6
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	7 #include <ngx_config.h>
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	8 #include <ngx_core.h>
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	9 #include <ngx_stream.h>
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	10
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	11
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	12 typedef struct {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	13 ngx_flag_t enabled;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	14 } ngx_stream_ssl_preread_srv_conf_t;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	15
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	16
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	17 typedef struct {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	18 size_t left;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	19 size_t size;
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	20 size_t ext;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	21 u_char *pos;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	22 u_char *dst;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	23 u_char buf[4];
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	24 u_char version[2];
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	25 ngx_str_t host;
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	26 ngx_str_t alpn;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	27 ngx_log_t *log;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	28 ngx_pool_t *pool;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	29 ngx_uint_t state;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	30 } ngx_stream_ssl_preread_ctx_t;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	31
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	32
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	33 static ngx_int_t ngx_stream_ssl_preread_handler(ngx_stream_session_t *s);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	34 static ngx_int_t ngx_stream_ssl_preread_parse_record(
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	35 ngx_stream_ssl_preread_ctx_t ctx, u_char pos, u_char *last);
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	36 static ngx_int_t ngx_stream_ssl_preread_protocol_variable(
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	37 ngx_stream_session_t s, ngx_stream_variable_value_t v, uintptr_t data);
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	38 static ngx_int_t ngx_stream_ssl_preread_server_name_variable(
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	39 ngx_stream_session_t s, ngx_stream_variable_value_t v, uintptr_t data);
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	40 static ngx_int_t ngx_stream_ssl_preread_alpn_protocols_variable(
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	41 ngx_stream_session_t s, ngx_stream_variable_value_t v, uintptr_t data);
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	42 static ngx_int_t ngx_stream_ssl_preread_add_variables(ngx_conf_t *cf);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	43 static void ngx_stream_ssl_preread_create_srv_conf(ngx_conf_t cf);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	44 static char ngx_stream_ssl_preread_merge_srv_conf(ngx_conf_t cf, void *parent,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	45 void *child);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	46 static ngx_int_t ngx_stream_ssl_preread_init(ngx_conf_t *cf);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	47
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	48
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	49 static ngx_command_t ngx_stream_ssl_preread_commands[] = {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	50
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	51 { ngx_string("ssl_preread"),
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	52 NGX_STREAM_MAIN_CONF\|NGX_STREAM_SRV_CONF\|NGX_CONF_FLAG,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	53 ngx_conf_set_flag_slot,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	54 NGX_STREAM_SRV_CONF_OFFSET,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	55 offsetof(ngx_stream_ssl_preread_srv_conf_t, enabled),
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	56 NULL },
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	57
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	58 ngx_null_command
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	59 };
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	60
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	61
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	62 static ngx_stream_module_t ngx_stream_ssl_preread_module_ctx = {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	63 ngx_stream_ssl_preread_add_variables, /* preconfiguration */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	64 ngx_stream_ssl_preread_init, /* postconfiguration */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	65
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	66 NULL, /* create main configuration */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	67 NULL, /* init main configuration */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	68
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	69 ngx_stream_ssl_preread_create_srv_conf, /* create server configuration */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	70 ngx_stream_ssl_preread_merge_srv_conf /* merge server configuration */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	71 };
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	72
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	73
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	74 ngx_module_t ngx_stream_ssl_preread_module = {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	75 NGX_MODULE_V1,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	76 &ngx_stream_ssl_preread_module_ctx, /* module context */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	77 ngx_stream_ssl_preread_commands, /* module directives */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	78 NGX_STREAM_MODULE, /* module type */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	79 NULL, /* init master */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	80 NULL, /* init module */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	81 NULL, /* init process */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	82 NULL, /* init thread */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	83 NULL, /* exit thread */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	84 NULL, /* exit process */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	85 NULL, /* exit master */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	86 NGX_MODULE_V1_PADDING
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	87 };
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	88
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	89
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	90 static ngx_stream_variable_t ngx_stream_ssl_preread_vars[] = {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	91
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	92 { ngx_string("ssl_preread_protocol"), NULL,
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	93 ngx_stream_ssl_preread_protocol_variable, 0, 0, 0 },
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	94
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	95 { ngx_string("ssl_preread_server_name"), NULL,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	96 ngx_stream_ssl_preread_server_name_variable, 0, 0, 0 },
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	97
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	98 { ngx_string("ssl_preread_alpn_protocols"), NULL,
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	99 ngx_stream_ssl_preread_alpn_protocols_variable, 0, 0, 0 },
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	100
7077 2a288909abc6 Variables: macros for null variables. Ruslan Ermilov <ru@nginx.com> parents: 6849 diff changeset	101 ngx_stream_null_variable
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	102 };
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	103
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	104
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	105 static ngx_int_t
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	106 ngx_stream_ssl_preread_handler(ngx_stream_session_t *s)
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	107 {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	108 u_char last, p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	109 size_t len;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	110 ngx_int_t rc;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	111 ngx_connection_t *c;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	112 ngx_stream_ssl_preread_ctx_t *ctx;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	113 ngx_stream_ssl_preread_srv_conf_t *sscf;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	114
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	115 c = s->connection;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	116
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	117 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, c->log, 0, "ssl preread handler");
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	118
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	119 sscf = ngx_stream_get_module_srv_conf(s, ngx_stream_ssl_preread_module);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	120
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	121 if (!sscf->enabled) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	122 return NGX_DECLINED;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	123 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	124
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	125 if (c->type != SOCK_STREAM) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	126 return NGX_DECLINED;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	127 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	128
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	129 if (c->buffer == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	130 return NGX_AGAIN;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	131 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	132
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	133 ctx = ngx_stream_get_module_ctx(s, ngx_stream_ssl_preread_module);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	134 if (ctx == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	135 ctx = ngx_pcalloc(c->pool, sizeof(ngx_stream_ssl_preread_ctx_t));
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	136 if (ctx == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	137 return NGX_ERROR;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	138 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	139
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	140 ngx_stream_set_ctx(s, ctx, ngx_stream_ssl_preread_module);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	141
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	142 ctx->pool = c->pool;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	143 ctx->log = c->log;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	144 ctx->pos = c->buffer->pos;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	145 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	146
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	147 p = ctx->pos;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	148 last = c->buffer->last;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	149
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	150 while (last - p >= 5) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	151
7322 6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	152 if ((p[0] & 0x80) && p[2] == 1 && (p[3] == 0 \|\| p[3] == 3)) {
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	153 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	154 "ssl preread: version 2 ClientHello");
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	155 ctx->version[0] = p[3];
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	156 ctx->version[1] = p[4];
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	157 return NGX_OK;
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	158 }
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	159
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	160 if (p[0] != 0x16) {
6696 e83540f825cd Stream ssl_preread: removed internal macro. Vladimir Homutov <vl@nginx.com> parents: 6695 diff changeset	161 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
e83540f825cd Stream ssl_preread: removed internal macro. Vladimir Homutov <vl@nginx.com> parents: 6695 diff changeset	162 "ssl preread: not a handshake");
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	163 ngx_stream_set_ctx(s, NULL, ngx_stream_ssl_preread_module);
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	164 return NGX_DECLINED;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	165 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	166
6849 01adb18a5d23 Stream ssl_preread: relaxed SSL version check. Roman Arutyunyan <arut@nginx.com> parents: 6728 diff changeset	167 if (p[1] != 3) {
6696 e83540f825cd Stream ssl_preread: removed internal macro. Vladimir Homutov <vl@nginx.com> parents: 6695 diff changeset	168 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
e83540f825cd Stream ssl_preread: removed internal macro. Vladimir Homutov <vl@nginx.com> parents: 6695 diff changeset	169 "ssl preread: unsupported SSL version");
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	170 ngx_stream_set_ctx(s, NULL, ngx_stream_ssl_preread_module);
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	171 return NGX_DECLINED;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	172 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	173
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	174 len = (p[3] << 8) + p[4];
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	175
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	176 /* read the whole record before parsing */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	177 if ((size_t) (last - p) < len + 5) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	178 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	179 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	180
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	181 p += 5;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	182
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	183 rc = ngx_stream_ssl_preread_parse_record(ctx, p, p + len);
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	184
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	185 if (rc == NGX_DECLINED) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	186 ngx_stream_set_ctx(s, NULL, ngx_stream_ssl_preread_module);
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	187 return NGX_DECLINED;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	188 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	189
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	190 if (rc != NGX_AGAIN) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	191 return rc;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	192 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	193
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	194 p += len;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	195 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	196
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	197 ctx->pos = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	198
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	199 return NGX_AGAIN;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	200 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	201
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	202
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	203 static ngx_int_t
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	204 ngx_stream_ssl_preread_parse_record(ngx_stream_ssl_preread_ctx_t *ctx,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	205 u_char pos, u_char last)
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	206 {
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	207 size_t left, n, size, ext;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	208 u_char dst, p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	209
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	210 enum {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	211 sw_start = 0,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	212 sw_header, /* handshake msg_type, length */
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	213 sw_version, /* client_version */
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	214 sw_random, /* random */
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	215 sw_sid_len, /* session_id length */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	216 sw_sid, /* session_id */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	217 sw_cs_len, /* cipher_suites length */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	218 sw_cs, /* cipher_suites */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	219 sw_cm_len, /* compression_methods length */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	220 sw_cm, /* compression_methods */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	221 sw_ext, /* extension */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	222 sw_ext_header, /* extension_type, extension_data length */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	223 sw_sni_len, /* SNI length */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	224 sw_sni_host_head, /* SNI name_type, host_name length */
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	225 sw_sni_host, /* SNI host_name */
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	226 sw_alpn_len, /* ALPN length */
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	227 sw_alpn_proto_len, /* ALPN protocol_name length */
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	228 sw_alpn_proto_data, /* ALPN protocol_name */
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	229 sw_supver_len /* supported_versions length */
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	230 } state;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	231
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	232 ngx_log_debug2(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	233 "ssl preread: state %ui left %z", ctx->state, ctx->left);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	234
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	235 state = ctx->state;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	236 size = ctx->size;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	237 left = ctx->left;
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	238 ext = ctx->ext;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	239 dst = ctx->dst;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	240 p = ctx->buf;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	241
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	242 for ( ;; ) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	243 n = ngx_min((size_t) (last - pos), size);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	244
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	245 if (dst) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	246 dst = ngx_cpymem(dst, pos, n);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	247 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	248
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	249 pos += n;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	250 size -= n;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	251 left -= n;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	252
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	253 if (size != 0) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	254 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	255 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	256
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	257 switch (state) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	258
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	259 case sw_start:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	260 state = sw_header;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	261 dst = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	262 size = 4;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	263 left = size;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	264 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	265
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	266 case sw_header:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	267 if (p[0] != 1) {
6696 e83540f825cd Stream ssl_preread: removed internal macro. Vladimir Homutov <vl@nginx.com> parents: 6695 diff changeset	268 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
e83540f825cd Stream ssl_preread: removed internal macro. Vladimir Homutov <vl@nginx.com> parents: 6695 diff changeset	269 "ssl preread: not a client hello");
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	270 return NGX_DECLINED;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	271 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	272
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	273 state = sw_version;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	274 dst = ctx->version;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	275 size = 2;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	276 left = (p[1] << 16) + (p[2] << 8) + p[3];
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	277 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	278
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	279 case sw_version:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	280 state = sw_random;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	281 dst = NULL;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	282 size = 32;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	283 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	284
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	285 case sw_random:
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	286 state = sw_sid_len;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	287 dst = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	288 size = 1;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	289 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	290
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	291 case sw_sid_len:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	292 state = sw_sid;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	293 dst = NULL;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	294 size = p[0];
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	295 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	296
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	297 case sw_sid:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	298 state = sw_cs_len;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	299 dst = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	300 size = 2;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	301 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	302
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	303 case sw_cs_len:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	304 state = sw_cs;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	305 dst = NULL;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	306 size = (p[0] << 8) + p[1];
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	307 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	308
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	309 case sw_cs:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	310 state = sw_cm_len;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	311 dst = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	312 size = 1;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	313 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	314
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	315 case sw_cm_len:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	316 state = sw_cm;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	317 dst = NULL;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	318 size = p[0];
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	319 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	320
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	321 case sw_cm:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	322 if (left == 0) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	323 /* no extensions */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	324 return NGX_OK;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	325 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	326
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	327 state = sw_ext;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	328 dst = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	329 size = 2;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	330 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	331
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	332 case sw_ext:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	333 if (left == 0) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	334 return NGX_OK;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	335 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	336
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	337 state = sw_ext_header;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	338 dst = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	339 size = 4;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	340 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	341
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	342 case sw_ext_header:
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	343 if (p[0] == 0 && p[1] == 0 && ctx->host.data == NULL) {
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	344 /* SNI extension */
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	345 state = sw_sni_len;
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	346 dst = p;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	347 size = 2;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	348 break;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	349 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	350
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	351 if (p[0] == 0 && p[1] == 16 && ctx->alpn.data == NULL) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	352 /* ALPN extension */
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	353 state = sw_alpn_len;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	354 dst = p;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	355 size = 2;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	356 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	357 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	358
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	359 if (p[0] == 0 && p[1] == 43) {
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	360 /* supported_versions extension */
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	361 state = sw_supver_len;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	362 dst = p;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	363 size = 1;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	364 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	365 }
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	366
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	367 state = sw_ext;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	368 dst = NULL;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	369 size = (p[2] << 8) + p[3];
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	370 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	371
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	372 case sw_sni_len:
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	373 ext = (p[0] << 8) + p[1];
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	374 state = sw_sni_host_head;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	375 dst = p;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	376 size = 3;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	377 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	378
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	379 case sw_sni_host_head:
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	380 if (p[0] != 0) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	381 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	382 "ssl preread: SNI hostname type is not DNS");
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	383 return NGX_DECLINED;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	384 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	385
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	386 size = (p[1] << 8) + p[2];
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	387
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	388 if (ext < 3 + size) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	389 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	390 "ssl preread: SNI format error");
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	391 return NGX_DECLINED;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	392 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	393 ext -= 3 + size;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	394
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	395 ctx->host.data = ngx_pnalloc(ctx->pool, size);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	396 if (ctx->host.data == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	397 return NGX_ERROR;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	398 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	399
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	400 state = sw_sni_host;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	401 dst = ctx->host.data;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	402 break;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	403
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	404 case sw_sni_host:
6728 8f75d9883730 Stream ssl_preread: fixed $ssl_preread_server_name variable. Sergey Kandaurov <pluknet@nginx.com> parents: 6696 diff changeset	405 ctx->host.len = (p[1] << 8) + p[2];
8f75d9883730 Stream ssl_preread: fixed $ssl_preread_server_name variable. Sergey Kandaurov <pluknet@nginx.com> parents: 6696 diff changeset	406
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	407 ngx_log_debug1(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	408 "ssl preread: SNI hostname \"%V\"", &ctx->host);
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	409
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	410 state = sw_ext;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	411 dst = NULL;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	412 size = ext;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	413 break;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	414
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	415 case sw_alpn_len:
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	416 ext = (p[0] << 8) + p[1];
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	417
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	418 ctx->alpn.data = ngx_pnalloc(ctx->pool, ext);
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	419 if (ctx->alpn.data == NULL) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	420 return NGX_ERROR;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	421 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	422
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	423 state = sw_alpn_proto_len;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	424 dst = p;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	425 size = 1;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	426 break;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	427
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	428 case sw_alpn_proto_len:
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	429 size = p[0];
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	430
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	431 if (size == 0) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	432 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	433 "ssl preread: ALPN empty protocol");
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	434 return NGX_DECLINED;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	435 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	436
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	437 if (ext < 1 + size) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	438 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	439 "ssl preread: ALPN format error");
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	440 return NGX_DECLINED;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	441 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	442 ext -= 1 + size;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	443
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	444 state = sw_alpn_proto_data;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	445 dst = ctx->alpn.data + ctx->alpn.len;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	446 break;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	447
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	448 case sw_alpn_proto_data:
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	449 ctx->alpn.len += p[0];
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	450
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	451 ngx_log_debug1(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	452 "ssl preread: ALPN protocols \"%V\"", &ctx->alpn);
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	453
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	454 if (ext) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	455 ctx->alpn.data[ctx->alpn.len++] = ',';
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	456
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	457 state = sw_alpn_proto_len;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	458 dst = p;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	459 size = 1;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	460 break;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	461 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	462
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	463 state = sw_ext;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	464 dst = NULL;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	465 size = 0;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	466 break;
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	467
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	468 case sw_supver_len:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	469 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	470 "ssl preread: supported_versions");
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	471
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	472 /* set TLSv1.3 */
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	473 ctx->version[0] = 3;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	474 ctx->version[1] = 4;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	475
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	476 state = sw_ext;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	477 dst = NULL;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	478 size = p[0];
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	479 break;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	480 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	481
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	482 if (left < size) {
7228 0f811890f2f0 Style. Roman Arutyunyan <arut@nginx.com> parents: 7227 diff changeset	483 ngx_log_debug0(NGX_LOG_DEBUG_STREAM, ctx->log, 0,
0f811890f2f0 Style. Roman Arutyunyan <arut@nginx.com> parents: 7227 diff changeset	484 "ssl preread: failed to parse handshake");
0f811890f2f0 Style. Roman Arutyunyan <arut@nginx.com> parents: 7227 diff changeset	485 return NGX_DECLINED;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	486 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	487 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	488
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	489 ctx->state = state;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	490 ctx->size = size;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	491 ctx->left = left;
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	492 ctx->ext = ext;
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	493 ctx->dst = dst;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	494
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	495 return NGX_AGAIN;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	496 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	497
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	498
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	499 static ngx_int_t
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	500 ngx_stream_ssl_preread_protocol_variable(ngx_stream_session_t *s,
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	501 ngx_variable_value_t *v, uintptr_t data)
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	502 {
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	503 ngx_str_t version;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	504 ngx_stream_ssl_preread_ctx_t *ctx;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	505
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	506 ctx = ngx_stream_get_module_ctx(s, ngx_stream_ssl_preread_module);
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	507
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	508 if (ctx == NULL) {
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	509 v->not_found = 1;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	510 return NGX_OK;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	511 }
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	512
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	513 /* SSL_get_version() format */
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	514
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	515 ngx_str_null(&version);
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	516
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	517 switch (ctx->version[0]) {
7322 6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	518 case 0:
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	519 switch (ctx->version[1]) {
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	520 case 2:
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	521 ngx_str_set(&version, "SSLv2");
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	522 break;
6649d4433266 Stream ssl_preread: added SSLv2 Client Hello support. Sergey Kandaurov <pluknet@nginx.com> parents: 7314 diff changeset	523 }
7314 3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	524 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	525 case 3:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	526 switch (ctx->version[1]) {
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	527 case 0:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	528 ngx_str_set(&version, "SSLv3");
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	529 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	530 case 1:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	531 ngx_str_set(&version, "TLSv1");
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	532 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	533 case 2:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	534 ngx_str_set(&version, "TLSv1.1");
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	535 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	536 case 3:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	537 ngx_str_set(&version, "TLSv1.2");
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	538 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	539 case 4:
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	540 ngx_str_set(&version, "TLSv1.3");
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	541 break;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	542 }
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	543 }
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	544
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	545 v->valid = 1;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	546 v->no_cacheable = 0;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	547 v->not_found = 0;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	548 v->len = version.len;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	549 v->data = version.data;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	550
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	551 return NGX_OK;
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	552 }
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	553
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	554
3dfc1584ad75 Stream ssl_preread: $ssl_preread_protocol variable. Roman Arutyunyan <arut@nginx.com> parents: 7228 diff changeset	555 static ngx_int_t
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	556 ngx_stream_ssl_preread_server_name_variable(ngx_stream_session_t *s,
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	557 ngx_variable_value_t *v, uintptr_t data)
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	558 {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	559 ngx_stream_ssl_preread_ctx_t *ctx;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	560
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	561 ctx = ngx_stream_get_module_ctx(s, ngx_stream_ssl_preread_module);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	562
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	563 if (ctx == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	564 v->not_found = 1;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	565 return NGX_OK;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	566 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	567
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	568 v->valid = 1;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	569 v->no_cacheable = 0;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	570 v->not_found = 0;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	571 v->len = ctx->host.len;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	572 v->data = ctx->host.data;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	573
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	574 return NGX_OK;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	575 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	576
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	577
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	578 static ngx_int_t
7227 79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	579 ngx_stream_ssl_preread_alpn_protocols_variable(ngx_stream_session_t *s,
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	580 ngx_variable_value_t *v, uintptr_t data)
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	581 {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	582 ngx_stream_ssl_preread_ctx_t *ctx;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	583
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	584 ctx = ngx_stream_get_module_ctx(s, ngx_stream_ssl_preread_module);
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	585
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	586 if (ctx == NULL) {
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	587 v->not_found = 1;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	588 return NGX_OK;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	589 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	590
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	591 v->valid = 1;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	592 v->no_cacheable = 0;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	593 v->not_found = 0;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	594 v->len = ctx->alpn.len;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	595 v->data = ctx->alpn.data;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	596
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	597 return NGX_OK;
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	598 }
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	599
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	600
79eb4f7b6725 Stream ssl_preread: $ssl_preread_alpn_protocols variable. Roman Arutyunyan <arut@nginx.com> parents: 7077 diff changeset	601 static ngx_int_t
6695 060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	602 ngx_stream_ssl_preread_add_variables(ngx_conf_t *cf)
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	603 {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	604 ngx_stream_variable_t var, v;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	605
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	606 for (v = ngx_stream_ssl_preread_vars; v->name.len; v++) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	607 var = ngx_stream_add_variable(cf, &v->name, v->flags);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	608 if (var == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	609 return NGX_ERROR;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	610 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	611
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	612 var->get_handler = v->get_handler;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	613 var->data = v->data;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	614 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	615
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	616 return NGX_OK;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	617 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	618
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	619
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	620 static void *
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	621 ngx_stream_ssl_preread_create_srv_conf(ngx_conf_t *cf)
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	622 {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	623 ngx_stream_ssl_preread_srv_conf_t *conf;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	624
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	625 conf = ngx_pcalloc(cf->pool, sizeof(ngx_stream_ssl_preread_srv_conf_t));
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	626 if (conf == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	627 return NULL;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	628 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	629
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	630 conf->enabled = NGX_CONF_UNSET;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	631
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	632 return conf;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	633 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	634
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	635
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	636 static char *
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	637 ngx_stream_ssl_preread_merge_srv_conf(ngx_conf_t cf, void parent, void *child)
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	638 {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	639 ngx_stream_ssl_preread_srv_conf_t *prev = parent;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	640 ngx_stream_ssl_preread_srv_conf_t *conf = child;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	641
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	642 ngx_conf_merge_value(conf->enabled, prev->enabled, 0);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	643
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	644 return NGX_CONF_OK;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	645 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	646
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	647
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	648 static ngx_int_t
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	649 ngx_stream_ssl_preread_init(ngx_conf_t *cf)
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	650 {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	651 ngx_stream_handler_pt *h;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	652 ngx_stream_core_main_conf_t *cmcf;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	653
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	654 cmcf = ngx_stream_conf_get_module_main_conf(cf, ngx_stream_core_module);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	655
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	656 h = ngx_array_push(&cmcf->phases[NGX_STREAM_PREREAD_PHASE].handlers);
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	657 if (h == NULL) {
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	658 return NGX_ERROR;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	659 }
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	660
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	661 *h = ngx_stream_ssl_preread_handler;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	662
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	663 return NGX_OK;
060d71292b69 Stream: ssl_preread module. Vladimir Homutov <vl@nginx.com> parents: diff changeset	664 }

Mercurial > hg > nginx

annotate src/stream/ngx_stream_ssl_preread_module.c @ 7660:d33e17499088