]> git.kaiwu.me - nginx.git/commit
Mail: client SSL certificates support.
authorMaxim Dounin <mdounin@mdounin.ru>
Wed, 25 Feb 2015 14:48:05 +0000 (17:48 +0300)
committerMaxim Dounin <mdounin@mdounin.ru>
Wed, 25 Feb 2015 14:48:05 +0000 (17:48 +0300)
commitfaec5477710c4ca15fd2588ee168d8fb2348ef6d
tree389954c725bba33fc08cd44f73a8ed3eedad6379
parent78e1a8ed7f33c55e7a24cbf4d0155bea6430dd59
Mail: client SSL certificates support.

The "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate",
"ssl_trusted_certificate", and "ssl_crl" directives introduced to control
SSL client certificate verification in mail proxy module.

If there is a certificate, detail of the certificate are passed to
the auth_http script configured via Auth-SSL-Verify, Auth-SSL-Subject,
Auth-SSL-Issuer, Auth-SSL-Serial, Auth-SSL-Fingerprint headers.  If
the auth_http_pass_client_cert directive is set, client certificate
in PEM format will be passed in the Auth-SSL-Cert header (urlencoded).

If there is no required certificate provided during an SSL handshake
or certificate verification fails then a protocol-specific error is
returned after the SSL handshake and the connection is closed.

Based on previous work by Sven Peter, Franck Levionnois and Filipe Da Silva.
src/mail/ngx_mail.h
src/mail/ngx_mail_auth_http_module.c
src/mail/ngx_mail_handler.c
src/mail/ngx_mail_imap_module.c
src/mail/ngx_mail_pop3_module.c
src/mail/ngx_mail_smtp_module.c
src/mail/ngx_mail_ssl_module.c
src/mail/ngx_mail_ssl_module.h