summaryrefslogtreecommitdiffhomepage
path: root/src/mail/ngx_mail_auth_http_module.c (follow)
AgeCommit message (Collapse)AuthorFilesLines
2015-03-04Style: use %*s format, as in 68d21fd1dc64.Ruslan Ermilov1-8/+3
2015-02-27Mail: don't emit Auth-SSL-Verify with disabled ssl_verify_client.Sergey Kandaurov1-5/+9
Previously, the Auth-SSL-Verify header with the "NONE" value was always passed to the auth_http script if verification of client certificates is disabled.
2015-02-25Mail: client SSL certificates support.Maxim Dounin1-1/+119
The "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate", "ssl_trusted_certificate", and "ssl_crl" directives introduced to control SSL client certificate verification in mail proxy module. If there is a certificate, detail of the certificate are passed to the auth_http script configured via Auth-SSL-Verify, Auth-SSL-Subject, Auth-SSL-Issuer, Auth-SSL-Serial, Auth-SSL-Fingerprint headers. If the auth_http_pass_client_cert directive is set, client certificate in PEM format will be passed in the Auth-SSL-Cert header (urlencoded). If there is no required certificate provided during an SSL handshake or certificate verification fails then a protocol-specific error is returned after the SSL handshake and the connection is closed. Based on previous work by Sven Peter, Franck Levionnois and Filipe Da Silva.
2015-02-25Mail: added Auth-SSL header to indicate SSL.Maxim Dounin1-0/+12
Based on a patch by Filipe da Silva.
2015-02-25Mail: fixed buffer allocation for CRLF after Auth-SMTP-* headers.Maxim Dounin1-3/+3
There were no buffer overruns in real life as there is extra space allocated for the Auth-Login-Attempt counter.
2014-05-14Style: use %N instead of '\n' where appropriate.Ruslan Ermilov1-1/+1
2013-05-09Mail: removed surplus ngx_close_connection() call.Filipe Da Silva1-1/+0
It is already called for a peer connection a few lines above.
2013-03-25Mail: IPv6 backends (ticket #323).Ruslan Ermilov1-24/+35
2012-12-17Implemented IPv6 support for URLs specified using domain names.Ruslan Ermilov1-1/+0
This includes "debug_connection", upstreams, "proxy_pass", etc. (ticket #92) To preserve compatibility, "listen" specified with a domain name selects the first IPv4 address, if available. If not available, the first IPv6 address will be used (ticket #186).
2012-08-15Corrected the directive name in the ngx_mail_auth_http_module error message.Ruslan Ermilov1-1/+1
2012-01-18Copyright updated.Maxim Konovalov1-0/+1
2011-10-25Fixed port range checking.Ruslan Ermilov1-1/+1
2010-05-14ngx_str_set() and ngx_str_null()Igor Sysoev1-4/+2
2009-12-25use "localhost" in "Host" header line, if unix socket is used in "auth_http"Igor Sysoev1-1/+8
2009-11-02rename ngx_peer_addr_t to ngx_addr_tIgor Sysoev1-3/+3
2009-11-02replace inet_addr() with ngx_inet_addr()Igor Sysoev1-2/+1
2009-06-02return NULL instead of NGX_CONF_ERROR on a create conf failureIgor Sysoev1-1/+1
2009-05-18mail proxy listen IPv6 supportIgor Sysoev1-0/+2
2009-04-24fix Auth-Method, the bug has been introduced in r2496Igor Sysoev1-0/+1
2008-12-09use "!= NGX_OK" instead of "== NGX_ERROR"Igor Sysoev1-4/+4
2008-11-13remove unused fieldIgor Sysoev1-10/+0
2008-11-13smtp_auth noneIgor Sysoev1-2/+35
patch by Maxim Dounin
2008-06-23change useless ngx_pcalloc() to ngx_pnalloc()Igor Sysoev1-1/+1
2008-06-17*) back out r2040Igor Sysoev1-8/+9
*) refactor ngx_palloc() *) introduce ngx_pnalloc() *) additional pool blocks have smaller header
2007-11-1564-bit time_t compatibilityIgor Sysoev1-2/+2
2007-10-08use pool instead of ngx_conf_tIgor Sysoev1-1/+1
2007-09-15ngx_mail_pop3_module, ngx_mail_imap_module, and ngx_mail_smtp_moduleIgor Sysoev1-24/+18
2007-09-13small optimizationsIgor Sysoev1-6/+6
2007-09-13style fix and optimizationsIgor Sysoev1-21/+19
2007-08-20escape " ", "%", and %00-%1F in login and passwordIgor Sysoev1-31/+5
2007-08-14test http_auth absenceIgor Sysoev1-0/+14
2007-08-14allow "http://" in auth_http URLIgor Sysoev1-0/+5
2007-08-14stop configuration on errorIgor Sysoev1-0/+2
2007-07-10fix memory allocation for auth_http_headerIgor Sysoev1-0/+1
2007-04-18style fix: remove tabsIgor Sysoev1-10/+10
2007-03-19Many changes:Igor Sysoev1-0/+1432
*) rename imap to mail, sort pop3/imap functions *) smtp auth support *) pop3 starttls only *) fix segfault if cram-md5 was used without apop