aboutsummaryrefslogtreecommitdiff
path: root/src/stream/ngx_stream_ssl_module.h
diff options
context:
space:
mode:
authorVladimir Homutov <vl@nginx.com>2016-12-20 12:05:14 +0300
committerVladimir Homutov <vl@nginx.com>2016-12-20 12:05:14 +0300
commit7fab8d046ee170031ad61d4131403e3d5540e98e (patch)
tree830902668d7e01838b941b896531f7d439d7934c /src/stream/ngx_stream_ssl_module.h
parent393636d79c836e360b14ca99f76996935ee02236 (diff)
downloadnginx-7fab8d046ee170031ad61d4131403e3d5540e98e.tar.gz
nginx-7fab8d046ee170031ad61d4131403e3d5540e98e.zip
Stream: client SSL certificates verification support.
New directives: "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate", "ssl_trusted_certificate", and "ssl_crl". New variables: $ssl_client_cert, $ssl_client_raw_cert, $ssl_client_s_dn, $ssl_client_i_dn, $ssl_client_serial, $ssl_client_fingerprint, $ssl_client_verify, $ssl_client_v_start, $ssl_client_v_end, and $ssl_client_v_remain.
Diffstat (limited to 'src/stream/ngx_stream_ssl_module.h')
-rw-r--r--src/stream/ngx_stream_ssl_module.h6
1 files changed, 6 insertions, 0 deletions
diff --git a/src/stream/ngx_stream_ssl_module.h b/src/stream/ngx_stream_ssl_module.h
index 9b1c41a13..65f5d456e 100644
--- a/src/stream/ngx_stream_ssl_module.h
+++ b/src/stream/ngx_stream_ssl_module.h
@@ -23,6 +23,9 @@ typedef struct {
ngx_uint_t protocols;
+ ngx_uint_t verify;
+ ngx_uint_t verify_depth;
+
ssize_t builtin_session_cache;
time_t session_timeout;
@@ -32,6 +35,9 @@ typedef struct {
ngx_str_t dhparam;
ngx_str_t ecdh_curve;
+ ngx_str_t client_certificate;
+ ngx_str_t trusted_certificate;
+ ngx_str_t crl;
ngx_str_t ciphers;