comparison src/stream/ngx_stream_ssl_module.h @ 7269:7f955d3b9a0d

SSL: detect "listen ... ssl" without certificates (ticket #178). In mail and stream modules, no certificate provided is a fatal condition, much like with the "ssl" and "starttls" directives. In http, "listen ... ssl" can be used in a non-default server without certificates as long as there is a certificate in the default one, so missing certificate is only fatal for default servers.
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 24 Apr 2018 15:29:01 +0300
parents 41cb1b64561d
children e970de27966a
comparison
equal deleted inserted replaced
7268:0d8c72ff62dd 7269:7f955d3b9a0d
19 19
20 ngx_flag_t prefer_server_ciphers; 20 ngx_flag_t prefer_server_ciphers;
21 21
22 ngx_ssl_t ssl; 22 ngx_ssl_t ssl;
23 23
24 ngx_uint_t listen;
24 ngx_uint_t protocols; 25 ngx_uint_t protocols;
25 26
26 ngx_uint_t verify; 27 ngx_uint_t verify;
27 ngx_uint_t verify_depth; 28 ngx_uint_t verify_depth;
28 29
45 46
46 ngx_shm_zone_t *shm_zone; 47 ngx_shm_zone_t *shm_zone;
47 48
48 ngx_flag_t session_tickets; 49 ngx_flag_t session_tickets;
49 ngx_array_t *session_ticket_keys; 50 ngx_array_t *session_ticket_keys;
51
52 u_char *file;
53 ngx_uint_t line;
50 } ngx_stream_ssl_conf_t; 54 } ngx_stream_ssl_conf_t;
51 55
52 56
53 extern ngx_module_t ngx_stream_ssl_module; 57 extern ngx_module_t ngx_stream_ssl_module;
54 58