| Commit message (Collapse) | Author | Age | |
|---|---|---|---|
| * | Mail: connections with wrong ALPN protocols are now rejected. | Vladimir Homutov | 2021-10-20 |
| | | | | | | | | | | | | This is a recommended behavior by RFC 7301 and is useful for mitigation of protocol confusion attacks [1]. For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2]. For the SMTP protocol "smtp" is used. [1] https://alpaca-attack.com/ [2] https://www.iana.org/assignments/tls-extensiontype-values/ | ||
| * | Mail: support SASL EXTERNAL (RFC 4422). | Rob N ★ | 2016-10-08 |
| | | | | | | | | | | | | This is needed to allow TLS client certificate auth to work. With ssl_verify_client configured, the auth daemon can choose to allow the connection to proceed based on the certificate data. This has been tested with Thunderbird for IMAP only. I've not yet found a client that will do client certificate auth for POP3 or SMTP, and the method is not really documented anywhere that I can find. That said, its simple enough that the way I've done is probably right. | ||
| * | Mail: client SSL certificates support. | Maxim Dounin | 2015-02-25 |
| | | | | | | | | | | | | | | | | | | | The "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate", "ssl_trusted_certificate", and "ssl_crl" directives introduced to control SSL client certificate verification in mail proxy module. If there is a certificate, detail of the certificate are passed to the auth_http script configured via Auth-SSL-Verify, Auth-SSL-Subject, Auth-SSL-Issuer, Auth-SSL-Serial, Auth-SSL-Fingerprint headers. If the auth_http_pass_client_cert directive is set, client certificate in PEM format will be passed in the Auth-SSL-Cert header (urlencoded). If there is no required certificate provided during an SSL handshake or certificate verification fails then a protocol-specific error is returned after the SSL handshake and the connection is closed. Based on previous work by Sven Peter, Franck Levionnois and Filipe Da Silva. | ||
| * | Copyright updated. | Maxim Konovalov | 2012-01-18 |
| | | |||
| * | smtp_auth none | Igor Sysoev | 2008-11-13 |
| | | | | | patch by Maxim Dounin | ||
| * | *) back out r2040 | Igor Sysoev | 2008-06-17 |
| | | | | | | | *) refactor ngx_palloc() *) introduce ngx_pnalloc() *) additional pool blocks have smaller header | ||
| * | ngx_mail_pop3_module, ngx_mail_imap_module, and ngx_mail_smtp_module | Igor Sysoev | 2007-09-15 |
 |
index : nginx | |
| nginx mirror |
| aboutsummaryrefslogtreecommitdiff |