Mercurial > hg > nginx

diff src/mail/ngx_mail_imap_module.c @ 7938:dc955d274130

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Mail: connections with wrong ALPN protocols are now rejected. This is a recommended behavior by RFC 7301 and is useful for mitigation of protocol confusion attacks [1]. For POP3 and IMAP protocols IANA-assigned ALPN IDs are used [2]. For the SMTP protocol "smtp" is used. [1] https://alpaca-attack.com/ [2] https://www.iana.org/assignments/tls-extensiontype-values/
author Vladimir Homutov <vl@nginx.com>
date Wed, 20 Oct 2021 09:45:34 +0300
parents bcb107bb89cd
children 4538c1ffb0f8
line wrap: on
line diff
--- a/src/mail/ngx_mail_imap_module.c	Wed Oct 20 09:50:02 2021 +0300
+++ b/src/mail/ngx_mail_imap_module.c	Wed Oct 20 09:45:34 2021 +0300
@@ -46,6 +46,7 @@
 
 static ngx_mail_protocol_t  ngx_mail_imap_protocol = {
     ngx_string("imap"),
+    ngx_string("\x04imap"),
     { 143, 993, 0, 0 },
     NGX_MAIL_IMAP_PROTOCOL,