src/stream/ngx_stream_ssl_module.h


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73

/*
 * Copyright (C) Igor Sysoev
 * Copyright (C) Nginx, Inc.
 */


#ifndef _NGX_STREAM_SSL_H_INCLUDED_
#define _NGX_STREAM_SSL_H_INCLUDED_


#include <ngx_config.h>
#include <ngx_core.h>
#include <ngx_stream.h>


typedef struct {
    ngx_msec_t        handshake_timeout;

    ngx_flag_t        prefer_server_ciphers;
    ngx_flag_t        reject_handshake;

    ngx_ssl_t         ssl;

    ngx_uint_t        protocols;

    ngx_uint_t        verify;
    ngx_uint_t        verify_depth;

    ssize_t           builtin_session_cache;

    time_t            session_timeout;

    ngx_array_t      *certificates;
    ngx_array_t      *certificate_keys;

    ngx_array_t      *certificate_values;
    ngx_array_t      *certificate_key_values;

    ngx_ssl_cache_t  *certificate_cache;

    ngx_str_t         dhparam;
    ngx_str_t         ecdh_curve;
    ngx_str_t         client_certificate;
    ngx_str_t         trusted_certificate;
    ngx_str_t         crl;
    ngx_str_t         alpn;

    ngx_str_t         ciphers;

    ngx_array_t      *passwords;
    ngx_array_t      *conf_commands;

    ngx_shm_zone_t   *shm_zone;

    ngx_flag_t        session_tickets;
    ngx_array_t      *session_ticket_keys;

    ngx_uint_t        ocsp;
    ngx_str_t         ocsp_responder;
    ngx_shm_zone_t   *ocsp_cache_zone;

    ngx_flag_t        stapling;
    ngx_flag_t        stapling_verify;
    ngx_str_t         stapling_file;
    ngx_str_t         stapling_responder;
} ngx_stream_ssl_srv_conf_t;


extern ngx_module_t  ngx_stream_ssl_module;


#endif /* _NGX_STREAM_SSL_H_INCLUDED_ */