diff src/stream/ngx_stream_ssl_module.h @ 7269:7f955d3b9a0d

SSL: detect "listen ... ssl" without certificates (ticket #178). In mail and stream modules, no certificate provided is a fatal condition, much like with the "ssl" and "starttls" directives. In http, "listen ... ssl" can be used in a non-default server without certificates as long as there is a certificate in the default one, so missing certificate is only fatal for default servers.
author Maxim Dounin <mdounin@mdounin.ru>
date Tue, 24 Apr 2018 15:29:01 +0300
parents 41cb1b64561d
children e970de27966a
line wrap: on
line diff
--- a/src/stream/ngx_stream_ssl_module.h	Tue Apr 24 15:28:58 2018 +0300
+++ b/src/stream/ngx_stream_ssl_module.h	Tue Apr 24 15:29:01 2018 +0300
@@ -21,6 +21,7 @@
 
     ngx_ssl_t        ssl;
 
+    ngx_uint_t       listen;
     ngx_uint_t       protocols;
 
     ngx_uint_t       verify;
@@ -47,6 +48,9 @@
 
     ngx_flag_t       session_tickets;
     ngx_array_t     *session_ticket_keys;
+
+    u_char          *file;
+    ngx_uint_t       line;
 } ngx_stream_ssl_conf_t;