aboutsummaryrefslogtreecommitdiff
path: root/src/mail/ngx_mail_auth_http_module.c
Commit message (Collapse)AuthorAge
* Mail: Auth-SSL-Protocol and Auth-SSL-Cipher headers (ticket #2134).Rob Mueller2021-08-13
| | | | | | | | | | | | This adds new Auth-SSL-Protocol and Auth-SSL-Cipher headers to the mail proxy auth protocol when SSL is enabled. This can be useful for detecting users using older clients that negotiate old ciphers when you want to upgrade to newer TLS versions of remove suppport for old and insecure ciphers. You can use your auth backend to notify these users before the upgrade that they either need to upgrade their client software or contact your support team to work out an upgrade path.
* Mail: fixed build without SSL.Maxim Dounin2021-03-11
| | | | | | Broken by d84f13618277 and 12ea1de7d87c (1.19.8). Reported by Sergey Osokin.
* Mail: parsing of the PROXY protocol from clients.Maxim Dounin2021-03-05
| | | | | | | Activated with the "proxy_protocol" parameter of the "listen" directive. Obtained information is passed to the auth_http script in Proxy-Protocol-Addr, Proxy-Protocol-Port, Proxy-Protocol-Server-Addr, and Proxy-Protocol-Server-Port headers.
* Mail: made auth http creating request easier to extend.Maxim Dounin2021-03-05
|
* Mail: support SASL EXTERNAL (RFC 4422).Rob N ★2016-10-08
| | | | | | | | | | | This is needed to allow TLS client certificate auth to work. With ssl_verify_client configured, the auth daemon can choose to allow the connection to proceed based on the certificate data. This has been tested with Thunderbird for IMAP only. I've not yet found a client that will do client certificate auth for POP3 or SMTP, and the method is not really documented anywhere that I can find. That said, its simple enough that the way I've done is probably right.
* Fixed build on MSVC.Roman Arutyunyan2016-06-20
|
* Introduced ngx_inet_get_port() and ngx_inet_set_port() functions.Roman Arutyunyan2016-06-20
|
* Fixed logging.Sergey Kandaurov2016-03-31
|
* Style: use %*s format, as in 68d21fd1dc64.Ruslan Ermilov2015-03-04
|
* Mail: don't emit Auth-SSL-Verify with disabled ssl_verify_client.Sergey Kandaurov2015-02-27
| | | | | Previously, the Auth-SSL-Verify header with the "NONE" value was always passed to the auth_http script if verification of client certificates is disabled.
* Mail: client SSL certificates support.Maxim Dounin2015-02-25
| | | | | | | | | | | | | | | | | | The "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate", "ssl_trusted_certificate", and "ssl_crl" directives introduced to control SSL client certificate verification in mail proxy module. If there is a certificate, detail of the certificate are passed to the auth_http script configured via Auth-SSL-Verify, Auth-SSL-Subject, Auth-SSL-Issuer, Auth-SSL-Serial, Auth-SSL-Fingerprint headers. If the auth_http_pass_client_cert directive is set, client certificate in PEM format will be passed in the Auth-SSL-Cert header (urlencoded). If there is no required certificate provided during an SSL handshake or certificate verification fails then a protocol-specific error is returned after the SSL handshake and the connection is closed. Based on previous work by Sven Peter, Franck Levionnois and Filipe Da Silva.
* Mail: added Auth-SSL header to indicate SSL.Maxim Dounin2015-02-25
| | | | Based on a patch by Filipe da Silva.
* Mail: fixed buffer allocation for CRLF after Auth-SMTP-* headers.Maxim Dounin2015-02-25
| | | | | There were no buffer overruns in real life as there is extra space allocated for the Auth-Login-Attempt counter.
* Style: use %N instead of '\n' where appropriate.Ruslan Ermilov2014-05-14
|
* Mail: removed surplus ngx_close_connection() call.Filipe Da Silva2013-05-09
| | | | It is already called for a peer connection a few lines above.
* Mail: IPv6 backends (ticket #323).Ruslan Ermilov2013-03-25
|
* Implemented IPv6 support for URLs specified using domain names.Ruslan Ermilov2012-12-17
| | | | | | | | | This includes "debug_connection", upstreams, "proxy_pass", etc. (ticket #92) To preserve compatibility, "listen" specified with a domain name selects the first IPv4 address, if available. If not available, the first IPv6 address will be used (ticket #186).
* Corrected the directive name in the ngx_mail_auth_http_module error message.Ruslan Ermilov2012-08-15
|
* Copyright updated.Maxim Konovalov2012-01-18
|
* Fixed port range checking.Ruslan Ermilov2011-10-25
|
* ngx_str_set() and ngx_str_null()Igor Sysoev2010-05-14
|
* use "localhost" in "Host" header line, if unix socket is used in "auth_http"Igor Sysoev2009-12-25
|
* rename ngx_peer_addr_t to ngx_addr_tIgor Sysoev2009-11-02
|
* replace inet_addr() with ngx_inet_addr()Igor Sysoev2009-11-02
|
* return NULL instead of NGX_CONF_ERROR on a create conf failureIgor Sysoev2009-06-02
|
* mail proxy listen IPv6 supportIgor Sysoev2009-05-18
|
* fix Auth-Method, the bug has been introduced in r2496Igor Sysoev2009-04-24
|
* use "!= NGX_OK" instead of "== NGX_ERROR"Igor Sysoev2008-12-09
|
* remove unused fieldIgor Sysoev2008-11-13
|
* smtp_auth noneIgor Sysoev2008-11-13
| | | | patch by Maxim Dounin
* change useless ngx_pcalloc() to ngx_pnalloc()Igor Sysoev2008-06-23
|
* *) back out r2040Igor Sysoev2008-06-17
| | | | | | *) refactor ngx_palloc() *) introduce ngx_pnalloc() *) additional pool blocks have smaller header
* 64-bit time_t compatibilityIgor Sysoev2007-11-15
|
* use pool instead of ngx_conf_tIgor Sysoev2007-10-08
|
* ngx_mail_pop3_module, ngx_mail_imap_module, and ngx_mail_smtp_moduleIgor Sysoev2007-09-15
|
* small optimizationsIgor Sysoev2007-09-13
|
* style fix and optimizationsIgor Sysoev2007-09-13
|
* escape " ", "%", and %00-%1F in login and passwordIgor Sysoev2007-08-20
|
* test http_auth absenceIgor Sysoev2007-08-14
|
* allow "http://" in auth_http URLIgor Sysoev2007-08-14
|
* stop configuration on errorIgor Sysoev2007-08-14
|
* fix memory allocation for auth_http_headerIgor Sysoev2007-07-10
|
* style fix: remove tabsIgor Sysoev2007-04-18
|
* Many changes:Igor Sysoev2007-03-19
*) rename imap to mail, sort pop3/imap functions *) smtp auth support *) pop3 starttls only *) fix segfault if cram-md5 was used without apop
generated by cgit v1.2.3 (git 2.25.1) at 2025-07-20 03:46:38 +0000