Mercurial > hg > nginx
comparison src/mail/ngx_mail_imap_module.c @ 7938:dc955d274130
Mail: connections with wrong ALPN protocols are now rejected.
This is a recommended behavior by RFC 7301 and is useful
for mitigation of protocol confusion attacks [1].
For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2].
For the SMTP protocol "smtp" is used.
[1] https://alpaca-attack.com/
[2] https://www.iana.org/assignments/tls-extensiontype-values/
| author | Vladimir Homutov <vl@nginx.com> |
|---|---|
| date | Wed, 20 Oct 2021 09:45:34 +0300 |
| parents | bcb107bb89cd |
| children |
comparison
equal
deleted
inserted
replaced
| 7937:db6b630e6086 | 7938:dc955d274130 |
|---|---|
| 44 }; | 44 }; |
| 45 | 45 |
| 46 | 46 |
| 47 static ngx_mail_protocol_t ngx_mail_imap_protocol = { | 47 static ngx_mail_protocol_t ngx_mail_imap_protocol = { |
| 48 ngx_string("imap"), | 48 ngx_string("imap"), |
| 49 ngx_string("\x04imap"), | |
| 49 { 143, 993, 0, 0 }, | 50 { 143, 993, 0, 0 }, |
| 50 NGX_MAIL_IMAP_PROTOCOL, | 51 NGX_MAIL_IMAP_PROTOCOL, |
| 51 | 52 |
| 52 ngx_mail_imap_init_session, | 53 ngx_mail_imap_init_session, |
| 53 ngx_mail_imap_init_protocol, | 54 ngx_mail_imap_init_protocol, |