Mercurial > hg > nginx
comparison src/stream/ngx_stream_ssl_module.h @ 7269:7f955d3b9a0d
SSL: detect "listen ... ssl" without certificates (ticket #178).
In mail and stream modules, no certificate provided is a fatal condition,
much like with the "ssl" and "starttls" directives.
In http, "listen ... ssl" can be used in a non-default server without
certificates as long as there is a certificate in the default one, so
missing certificate is only fatal for default servers.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Tue, 24 Apr 2018 15:29:01 +0300 |
parents | 41cb1b64561d |
children | e970de27966a |
comparison
equal
deleted
inserted
replaced
7268:0d8c72ff62dd | 7269:7f955d3b9a0d |
---|---|
19 | 19 |
20 ngx_flag_t prefer_server_ciphers; | 20 ngx_flag_t prefer_server_ciphers; |
21 | 21 |
22 ngx_ssl_t ssl; | 22 ngx_ssl_t ssl; |
23 | 23 |
24 ngx_uint_t listen; | |
24 ngx_uint_t protocols; | 25 ngx_uint_t protocols; |
25 | 26 |
26 ngx_uint_t verify; | 27 ngx_uint_t verify; |
27 ngx_uint_t verify_depth; | 28 ngx_uint_t verify_depth; |
28 | 29 |
45 | 46 |
46 ngx_shm_zone_t *shm_zone; | 47 ngx_shm_zone_t *shm_zone; |
47 | 48 |
48 ngx_flag_t session_tickets; | 49 ngx_flag_t session_tickets; |
49 ngx_array_t *session_ticket_keys; | 50 ngx_array_t *session_ticket_keys; |
51 | |
52 u_char *file; | |
53 ngx_uint_t line; | |
50 } ngx_stream_ssl_conf_t; | 54 } ngx_stream_ssl_conf_t; |
51 | 55 |
52 | 56 |
53 extern ngx_module_t ngx_stream_ssl_module; | 57 extern ngx_module_t ngx_stream_ssl_module; |
54 | 58 |