comparison src/http/modules/ngx_http_ssl_module.c @ 509:9b8c906f6e63 release-0.1.29

nginx-0.1.29-RELEASE import *) Feature: the ngx_http_ssi_module supports "include virtual" command. *) Feature: the ngx_http_ssi_module supports the condition command like 'if expr="$NAME"' and "else" and "endif" commands. Only one nested level is supported. *) Feature: the ngx_http_ssi_module supports the DATE_LOCAL and DATE_GMT variables and "config timefmt" command. *) Feature: the "ssi_ignore_recycled_buffers" directive. *) Bugfix: the "echo" command did not show the default value for the empty QUERY_STRING variable. *) Change: the ngx_http_proxy_module was rewritten. *) Feature: the "proxy_redirect", "proxy_pass_request_headers", "proxy_pass_request_body", and "proxy_method" directives. *) Feature: the "proxy_set_header" directive. The "proxy_x_var" was canceled and must be replaced with the proxy_set_header directive. *) Change: the "proxy_preserve_host" is canceled and must be replaced with the "proxy_set_header Host $host" and the "proxy_redirect off" directives, the "proxy_set_header Host $host:$proxy_port" directive and the appropriate proxy_redirect directives. *) Change: the "proxy_set_x_real_ip" is canceled and must be replaced with the "proxy_set_header X-Real-IP $remote_addr" directive. *) Change: the "proxy_add_x_forwarded_for" is canceled and must be replaced with the "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for" directive. *) Change: the "proxy_set_x_url" is canceled and must be replaced with the "proxy_set_header X-URL http://$host:$server_port$request_uri" directive. *) Feature: the "fastcgi_param" directive. *) Change: the "fastcgi_root", "fastcgi_set_var" and "fastcgi_params" directive are canceled and must be replaced with the fastcgi_param directives. *) Feature: the "index" directive can use the variables. *) Feature: the "index" directive can be used at http and server levels. *) Change: the last index only in the "index" directive can be absolute. *) Feature: the "rewrite" directive can use the variables. *) Feature: the "internal" directive. *) Feature: the CONTENT_LENGTH, CONTENT_TYPE, REMOTE_PORT, SERVER_ADDR, SERVER_PORT, SERVER_PROTOCOL, DOCUMENT_ROOT, SERVER_NAME, REQUEST_METHOD, REQUEST_URI, and REMOTE_USER variables. *) Change: nginx now passes the invalid lines in a client request headers or a backend response header. *) Bugfix: if the backend did not transfer response for a long time and the "send_timeout" was less than "proxy_read_timeout", then nginx returned the 408 response. *) Bugfix: the segmentation fault was occurred if the backend sent an invalid line in response header; the bug had appeared in 0.1.26. *) Bugfix: the segmentation fault may occurred in FastCGI fault tolerance configuration. *) Bugfix: the "expires" directive did not remove the previous "Expires" and "Cache-Control" headers. *) Bugfix: nginx did not take into account trailing dot in "Host" header line. *) Bugfix: the ngx_http_auth_module did not work under Linux. *) Bugfix: the rewrite directive worked incorrectly, if the arguments were in a request. *) Bugfix: nginx could not be built on MacOS X.
author Igor Sysoev <igor@sysoev.ru>
date Thu, 12 May 2005 14:58:06 +0000
parents cd3117ad9aab
children e5d7d0334fdb
comparison
equal deleted inserted replaced
508:ca1020ce99ba 509:9b8c906f6e63
62 ngx_null_command 62 ngx_null_command
63 }; 63 };
64 64
65 65
66 static ngx_http_module_t ngx_http_ssl_module_ctx = { 66 static ngx_http_module_t ngx_http_ssl_module_ctx = {
67 NULL, /* pre conf */ 67 NULL, /* preconfiguration */
68 NULL, /* postconfiguration */
68 69
69 ngx_http_ssl_create_main_conf, /* create main configuration */ 70 ngx_http_ssl_create_main_conf, /* create main configuration */
70 ngx_http_ssl_init_main_conf, /* init main configuration */ 71 ngx_http_ssl_init_main_conf, /* init main configuration */
71 72
72 ngx_http_ssl_create_srv_conf, /* create server configuration */ 73 ngx_http_ssl_create_srv_conf, /* create server configuration */
76 NULL /* merge location configuration */ 77 NULL /* merge location configuration */
77 }; 78 };
78 79
79 80
80 ngx_module_t ngx_http_ssl_module = { 81 ngx_module_t ngx_http_ssl_module = {
81 NGX_MODULE, 82 NGX_MODULE_V1,
82 &ngx_http_ssl_module_ctx, /* module context */ 83 &ngx_http_ssl_module_ctx, /* module context */
83 ngx_http_ssl_commands, /* module directives */ 84 ngx_http_ssl_commands, /* module directives */
84 NGX_HTTP_MODULE, /* module type */ 85 NGX_HTTP_MODULE, /* module type */
85 NULL, /* init module */ 86 NULL, /* init module */
86 NULL /* init process */ 87 NULL /* init process */
195 if (conf->ssl_ctx == NULL) { 196 if (conf->ssl_ctx == NULL) {
196 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0, "SSL_CTX_new() failed"); 197 ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0, "SSL_CTX_new() failed");
197 return NGX_CONF_ERROR; 198 return NGX_CONF_ERROR;
198 } 199 }
199 200
201 if (ngx_pool_cleanup_add(cf->pool, ngx_ssl_cleanup_ctx, conf->ssl_ctx)
202 == NULL)
203 {
204 return NGX_CONF_ERROR;
205 }
206
207
200 #if 0 208 #if 0
201 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_ALL); 209 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_ALL);
202 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_NO_SSLv3); 210 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_NO_SSLv3);
203 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_SINGLE_DH_USE); 211 SSL_CTX_set_options(conf->ssl_ctx, SSL_OP_SINGLE_DH_USE);
204 #endif 212 #endif