Hello, I think that the mail haven't been seen by devel forum. Kind regards, Franck. 2014-10-30 19:25 GMT+01:00 Kunal Pariani <kpariani@zimbra.com>: Hello, Any reason for this patch not being committed upstream yet ? Thanks -Kunal 2014-10-30 19:25 GMT+01:00 Kunal Pariani <kpariani@zimbra.com>: > Hello, > Any reason for this patch not being committed upstream yet ? > >by Franck Levionnois - Nginx Development
Hello, The patch below has been submited some months ago. It do about the same, and it support to return a name by the auth script. Kind regards Franck Levionnois. ---------- Forwarded message ---------- From: <flevionnois@gmail.com> Date: 2014-01-24 21:40 GMT+01:00 Subject: Mail: added support for SSL client certificate To: nginx-devel@nginx.org # HG changeset patch # User Franck Leviby Franck Levionnois - Nginx Development
Hello, I forward Filipe's message, because it doesn't appear in forum's stack. I'm ok with the proposal. Kind Regards. Franck Levionnois. 2014-04-07 10:35 GMT+02:00 Filipe Da Silva <fdasilvayy@gmail.com>: > Hi, > > From the mail-auth-http module point of view, the Auth-Verify is a > trivial information. > Its value mostly depends of the current server configuration ( veriby Franck Levionnois - Nginx Development
Hello, It doesn't seem to exist a standard for this header name. Apache and F5 let the user choose it, but this make the configuration more complicated. I don't think that the name is a problem, because it can be set on the authorization server. If the certificate is transmited, all other informations are duplicated (except Auth-Verify). Forwarding the certificate is the most usefull, because itby Franck Levionnois - Nginx Development
Hello, I haven't seen any comment on this patch. Is it ok for you ? Kind regards. Franck. 2014-02-21 12:48 GMT+01:00 <flevionnois@gmail.com>: > # HG changeset patch > # User Franck Levionnois <flevionnois@gmail.com> > # Date 1390577176 -3600 > # Fri Jan 24 16:26:16 2014 +0100 > # Node ID 5c7ccfc96070fc8b5d775643d1e12c4e5a8b438f > # Parent 4dee5ad51e9e5b49085by Franck Levionnois - Nginx Development
# HG changeset patch # User Franck Levionnois <flevionnois@gmail.com> # Date 1390577176 -3600 # Fri Jan 24 16:26:16 2014 +0100 # Node ID 5c7ccfc96070fc8b5d775643d1e12c4e5a8b438f # Parent 4dee5ad51e9e5b49085011e8785001e2d6c02b0d Mail: added support for SSL client certificate. Add support for SSL Mutual Authentification like in mail module. Added mail configuration directives (like httby Franck Levionnois - Nginx Development
Hello, I've forgotten to use the raw certificate and escape it. I'll re-submit Thanks to Filipe for the review. Franck. 2014-02-21 11:11 GMT+01:00 <flevionnois@gmail.com>: > # HG changeset patch > # User Franck Levionnois <flevionnois@gmail.com> > # Date 1390577176 -3600 > # Fri Jan 24 16:26:16 2014 +0100 > # Node ID 0a3fd2d54154c3d56131ee5053df0939db32d7b4 >by Franck Levionnois - Nginx Development
# HG changeset patch # User Franck Levionnois <flevionnois@gmail.com> # Date 1390577176 -3600 # Fri Jan 24 16:26:16 2014 +0100 # Node ID 0a3fd2d54154c3d56131ee5053df0939db32d7b4 # Parent 4dee5ad51e9e5b49085011e8785001e2d6c02b0d Mail: added support for SSL client certificate. Add support for SSL Mutual Authentification like in mail module. Added mail configuration directives (like httby Franck Levionnois - Nginx Development
Hello. 2014-02-11 13:41 GMT+01:00 Maxim Dounin <mdounin@mdounin.ru>: > Hello! > > On Mon, Feb 10, 2014 at 02:08:52PM +0100, Franck Levionnois wrote: > > > > > + b64_cert->len = ngx_base64_encoded_length(pem_cert.len); > > > > + b64_cert->data = ngx_palloc(pool, b64_cert->len); > > > > + if (b64_cert->data == NULL) { >by Franck Levionnois - Nginx Development
Hello, I've just seen that my previous mail was sent with wrong mail address, and without mail copies. I answer on the thread with the good one, and add some clarifications. 2014-01-28 15:18 GMT+01:00 Maxim Dounin <mdounin@mdounin.ru>: > Hello! > > On Sat, Jan 25, 2014 at 09:47:09AM +0100, Filipe da Silva wrote: > > > # HG changeset patch > > # User Franck Levionnby Franck Levionnois - Nginx Development
# HG changeset patch # User Franck Levionnois <flevionnois@gmail.com> # Date 1390577176 -3600 # Fri Jan 24 16:26:16 2014 +0100 # Node ID d7b8381c200e300c2b6729574f4c2ab537804f56 # Parent a387ce36744aa36b50e8171dbf01ef716748327e Mail: added support for SSL client certificate Add support for SSL module like HTTP. Added mail configuration directives (like http): ssl_verify_client, ssl_vby Franck Levionnois - Nginx Development
Add support for mail SSL client auth Take into account Sven Peter patch http://forum.nginx.org/read.php?29,246309,246328#msg-246328 and transmit the client certificate to the backend server _______________________________________________ nginx-devel mailing list nginx-devel@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx-develby Franck Levionnois - Nginx Development