Welcome! Log In Create A New Profile

Advanced

Re: New SSL features for Nginx.

July 22, 2009 10:52AM
On Wed, Jul 22, 2009 at 12:21:23PM +0200, Brice Figureau wrote:

> Hi Igor,
>
> On Wed, 2009-07-22 at 12:44 +0400, Igor Sysoev wrote:
> > On Tue, Jul 21, 2009 at 08:02:05PM +0200, Brice Figureau wrote:
> >
> > > Hi,
> > >
> > > For Puppet[1] Nginx deployement (that is using Nginx as a front-end
> > > load-balancers to puppetmasters[2]), I had to create the following two
> > > patches, to match Apache behaviour:
> > >
> > > * The first patch allows:
> > > + a new variant of ssl_client_verify: optional. In this mode, if the
> > > client sends a certificate it is verified, but if the client doesn't
> > > send a certificate, the connection is authorized too.
> > >
> > > + a new variable: $ssl_client_verify which contains, either NONE,
> > > SUCCESS or FAILURE depending on the verification status. It can be used
> > > to send information to the upstream about the client verification.
> > >
> > > * The second patch adds CRL support to the client certificate
> > > verification:
> > >
> > > ssl_crl /path/to/crl.pem;
> > >
> > > Nginx then verifies the client certificate hasn't been revoked in the
> > > given CRL before allowing the connection to proceed.
> > >
> > > For access to the patches, please see my last blog article:
> > > http://www.masterzen.fr/2009/07/21/new-ssl-features-for-nginx/
> > >
> > > It would be great if those patches could be merged in the official Nginx
> > > source tree.

> Thanks for reviewing the patch (at least the first one could be merged,
> isn't it?).

Could you test the attached slightly changed first patch ?


--
Igor Sysoev
http://sysoev.ru/en/
Subject Author Posted

New SSL features for Nginx.

Brice Figureau July 21, 2009 02:02PM

Re: New SSL features for Nginx.

Igor Sysoev July 22, 2009 04:44AM

Re: New SSL features for Nginx.

Brice Figureau July 22, 2009 06:21AM

Re: New SSL features for Nginx.

Brice Figureau July 22, 2009 07:39AM

Re: New SSL features for Nginx.

Igor Sysoev July 22, 2009 08:16AM

Re: New SSL features for Nginx.

Brice Figureau July 22, 2009 01:20PM

Re: New SSL features for Nginx.

Igor Sysoev July 22, 2009 02:43PM

Re: New SSL features for Nginx.

Brice Figureau July 22, 2009 03:13PM

Re: New SSL features for Nginx.

Igor Sysoev July 22, 2009 03:24PM

Re: New SSL features for Nginx.

Brice Figureau July 22, 2009 05:17PM

Vyatta firewall with Nginx

Tom Keyser July 22, 2009 08:50PM

Re: Vyatta firewall with Nginx

Glen Lumanau July 22, 2009 08:59PM

Re: New SSL features for Nginx.

Edward Middleton July 22, 2009 10:26PM

Re: New SSL features for Nginx.

Cliff Wells July 22, 2009 11:22PM

Re: New SSL features for Nginx.

Igor Sysoev July 23, 2009 03:08AM

Re: New SSL features for Nginx.

Igor Sysoev July 23, 2009 03:57AM

Re: New SSL features for Nginx.

Brice Figureau July 23, 2009 07:33AM

Re: New SSL features for Nginx.

Igor Sysoev July 22, 2009 10:52AM

Re: New SSL features for Nginx.

Brice Figureau July 22, 2009 01:15PM

Re: New SSL features for Nginx.

Igor Sysoev July 22, 2009 02:38PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 140
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 500 on July 15, 2024
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready