[PATCH 2 of 2] Mail: add SSL stapling resolver and timeout.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1430124786 -7200 # Mon Apr 27 10:53:06 2015 +0200 # Branch stable-1.6 # Node ID 55cca5107f72f4ed950a20265e2627296acfa4a5 # Parent bc8fc02d70953b3e55a10312130f4c22c5adf1b7 Mail: propagate resolver and resolver_timeout

[PATCH 1 of 5] SSL: introduce support of last openssl 1.0.2 features.

server certificate. Reviews and comments are welcome. Regards, Filipe da Silva Ingima --- # HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1430147821 -7200 # Mon Apr 27 17:17:01 2015 +0200 # Node ID 0ac2a8668f852b604d46ff858199650bd3003fdb # Parent

[PATCH 2 of 5] OCSP Stapling: attach one stapling_t context per server certificate.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1430147821 -7200 # Mon Apr 27 17:17:01 2015 +0200 # Node ID caabe5c77b51274237d7c49fffb864a27ca0a25f # Parent 0ac2a8668f852b604d46ff858199650bd3003fdb OCSP Stapling: attach one stapling_t context per server certificate

[PATCH 5 of 5] SSL: add Multiple SSL certificate support to various modules.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1430148930 -7200 # Mon Apr 27 17:35:30 2015 +0200 # Node ID 64aad233af2e71b17d6ef8c7c021b701c83d578d # Parent f4975130e1101c4003a0ce4e5422990b780d50fe SSL: add Multiple SSL certificate support to other modules. Multiple

[PATCH 3 of 5] OCSP Stapling: introduce multiple cert support.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1430147821 -7200 # Mon Apr 27 17:17:01 2015 +0200 # Node ID 1b79826c93a4822fa3c11bc4139ca76e5189b14c # Parent caabe5c77b51274237d7c49fffb864a27ca0a25f OCSP Stapling: introduce multiple cert support. Loop on each

[PATCH 4 of 5] SSL: introduce certificate list support.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1430147821 -7200 # Mon Apr 27 17:17:01 2015 +0200 # Node ID e465a170ec3889eef1ab2d5d9f59cf8b12e97055 # Parent 1b79826c93a4822fa3c11bc4139ca76e5189b14c SSL: introduce certificate list support. Arguments are now a list

RE: Windows shmem fix: makes shared memory fully ASLR and DEP compliant (ea. cache zone, limit zone, etc.)

Hi, A few style remarks about your patch : - LF Line ending only - Only C style comments, so no // … - Indentation is 4 spaces. - Add this setting to your .hgrc /mercurial.ini [diff] showfunc = True - Do not remove existing blank lines . Additional information here :

RE: [PATCH 6 of 6] SSL: add Multiple SSL certificate support to other modules.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1429178262 -7200 # Thu Apr 16 11:57:42 2015 +0200 # Node ID 951b0939ce91f1a274e00e96d1e01481b772b89d # Parent b6a6508616eec10a7d2891d97b27d3bdc784a26b SSL: add Multiple SSL certificate support to other modules. diff -r

RE: [PATCH 5 of 6] SSL : ...

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1429178262 -7200 # Thu Apr 16 11:57:42 2015 +0200 # Node ID b6a6508616eec10a7d2891d97b27d3bdc784a26b # Parent 257767ac10541b1d94e6c93b19a1d5ebd3569abf SSL: introduce Multiple server Cert support. diff -r 257767ac1054 -r

RE: [PATCH 4 of 6] SSL Stapling: ...

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1429178261 -7200 # Thu Apr 16 11:57:41 2015 +0200 # Node ID 257767ac10541b1d94e6c93b19a1d5ebd3569abf # Parent 4b0a7a9e22bd09044cdbc623da815bb14d0d7b4c SSL Stapling: introduce Multiple Cert Management. diff -r

RE: [PATCH 2 of 6] SSL Stapling : ...

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1429178261 -7200 # Thu Apr 16 11:57:41 2015 +0200 # Node ID 85fb1b1e922fd95ef0df3c7f8bc9625af3054002 # Parent d201e4afd59eaf79419836c1dcdec83e141d3f67 SSL Stapling: attach stapling_t context to X509 cert, instead

RE: [PATCH 1 of 6] SSL: SSL: introduce support of new openssl 1.0.2 features.

Hi, This is the new version of 'Multiple server certificate support ' patches. It relies on openssl to maintain a list of server certificates. Reviews and comments are welcome. Regards, Filipe da Silva Ingima --- # HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date

RE: [PATCH 3 of 6] Stapling SSL: ...

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1429178261 -7200 # Thu Apr 16 11:57:41 2015 +0200 # Node ID 4b0a7a9e22bd09044cdbc623da815bb14d0d7b4c # Parent 85fb1b1e922fd95ef0df3c7f8bc9625af3054002 SSL Stapling: replace cert/issuer pair by certid. diff -r

RE: RE : Multiple Cert support ...

DA SILVA wrote: [...] But we don't need to support multiple certs with versions before OpenSSL 1.0.2. Just an appropriate error if user tries to configure this would be enough. (Just in case, there are two basic problems in older versions: no way to specify a chain for each

RE : Multiple Cert support ...

Hi, De : nginx-devel-boun...@nginx.org [nginx-devel-boun...@nginx.org] de la part de Maxim Dounin ... Date d'envoi : lundi 13 avril 2015 13:46 À : nginx-devel@nginx.org Objet : Re: Multiple Cert support ... Hello! On Thu, Apr 09, 2015 at 04:49:06PM +, Filipe DA SILVA wrote: Hi Maxim

Multiple Cert support ( Was: RE : [PATCH 1 of 6] SSL: refactoring of ngx_ssl_certificate method. )

in the stapling context. Instead of keeping reference to cert/issuer certificates. Regards, Filipe Hello! On Thu, Apr 09, 2015 at 09:58:27AM +, Filipe DA SILVA wrote: Hi, This is the cleaned and up to date version of 'Multiple server certificate

[PATCH 6 of 6] SSL: add Multiple SSL certificate support to other modules.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1428509613 -7200 # Wed Apr 08 18:13:33 2015 +0200 # Node ID cce55a4d8cf331ded858829da6fd19c6db6cb2ab # Parent 24cf399885b13221a498160140b3cf82cc208dc7 SSL: add Multiple SSL certificate support to other modules. OpenSSL

[PATCH 2 of 6] SSL: introduce ngx_ssl_certificate_t array list.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1428570644 -7200 # Thu Apr 09 11:10:44 2015 +0200 # Node ID 16ef1eeccdaa5c4dd3f3acbfebf5801e51a418c4 # Parent 853973b61efe9fb5d44f904dcb8baaab58ae5c84 SSL: introduce ngx_ssl_certificate_t array list. Preparation

[PATCH 3 of 6] Stapling SSL: add Multiple SSL certificate support

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1428570686 -7200 # Thu Apr 09 11:11:26 2015 +0200 # Node ID f0020df8b2e181edba80ff8956371f9369d9880b # Parent 16ef1eeccdaa5c4dd3f3acbfebf5801e51a418c4 SSL: introduce ngx_ssl_certificate_t array list. Preparation

[PATCH 4 of 6] SSL: fix indentation of ngx_ssl_certificate_t array loops.

# HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1428509613 -7200 # Wed Apr 08 18:13:33 2015 +0200 # Node ID d79d5e0c7f3dd0151b83a6d37ae2fc4b0ecaf83f # Parent 911ce5a0980b9f82e6540de17304b31aa46de625 SSL: fix indentation of ngx_ssl_certificate_t array loops. Preparation

[PATCH 1 of 6] SSL: refactoring of ngx_ssl_certificate method.

Hi, This is the cleaned and up to date version of 'Multiple server certificate support ' patches. Reviews and comments are welcome. Regards, Filipe da Silva Ingima --- # HG changeset patch # User Filipe da Silva fdasi...@ingima.com # Date 1428509598 -7200 # Wed Apr 08 18:13:18 2015

[PATCH] OCSP stapling: missing free calls.

Hello, As I was working on this code, I see these missing calls. Regards, Filipe www.ingima.com --- # HG changeset patch # User filipe da Silva fdasi...@ingima.com # Date 1427893508 -7200 # Wed Apr 01 15:05:08 2015 +0200 # Node ID aef78b6a0e789521c029694bf3f5f4fccfd43c69 # Parent

RE : [PATCH] Multiple certificate support with OpenSSL = 1.0.2

Hi, Thanks to my company who let me work on this subject, it's done. Additional limitation is : - Only OCSP URL of the first certificate is used to do the OCSP request . Regards, Filipe www.ingima.com From: Filipe da Silva fdasilv...@gmail.com Date

Re: [PATCH] Multiple certificate support with OpenSSL = 1.0.2

Hi. As I'm having some spare time ahead me, i can work on this subject, if you're agree. I will send you a PM, about the details. Regards, Filipe 2015-03-24 22:20 GMT+01:00 kyprizel kypri...@gmail.com: Albert, this patch will not be accepted. Need to write another one, may be I'll try to do

Re: [PATCH] Mail: send starttls flag value to auth script

I think that the half way solution is this one attached : - when an SSL connection is active : Auth-SSL: on ( current code status) - else when it could have been active (using STARTTLS): Auth-SSL: off - else SSL was disabled: there is nothing to send. Regards, Filipe DA SILVA. 2015-03-03 17:28

Re: Development

Hi, In short : http://nginx.org/en/docs/contributing_changes.html And, patch must be made with this option set in your hgrc file : [diff] showfunc = True Rgds, Filipe 2014-06-28 8:22 GMT+02:00 David Carlier dcarl...@afilias.info: HI All, I am working as C/C++ developer for a company which

Re: [PATCH] Mail: send starttls flag value to auth script

Hi, I forget to post the reworked version. Here is it. Regards, Filipe DA SILVA # HG changeset patch # Parent b2b5b1b741290adf60220f44f6e37cd8bd9d3885 Mail: send a secure connection flag to auth script. Allow to do logging (if logging takes place in the auth script) and or force some users

[Patch] OCSP stapling: missing OCSP request free call

Hello, I think there is a free call to do when the OCSP request is well created, and encoded. Or did I miss something ? Regards, Filipe # HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1398802958 -7200 # Tue Apr 29 22:22:38 2014 +0200 # Node ID

Re: [PATCH] Mail: added support for SSL client certificate

, s-connection-log, 0, buffer size exceeded); return NULL; } Please try this patch : # HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1398595855 -7200 # Sun Apr 27 12:50:55 2014 +0200 # Node ID d20159ce27d7f13813178c820c4c74da14b38e11 # Parent

Re: Help with shared memory usage

Hello,, AFAIK, the patch attached here : http://mailman.nginx.org/pipermail/nginx-devel/2013-December/004721.html compile, and should work on 1.6 too. Maybe the merge is a bit tricky with the last changes made on ngx_slab.c I have a up-to-date version on my patch queue. as Maxim stated, it

Re: [PATCH] Mail: added support for SSL client certificate

be the default settings, if not configured. Regards, Filipe da Silva 2014-03-18 18:40 GMT+01:00 Franck Levionnois flevionn...@gmail.com: Hello, It doesn't seem to exist a standard for this header name. Apache and F5 let the user choose it, but this make the configuration more complicated. I don't

[PATCH] MIME: added application/xspf+xml MIME type (ticket #479)

# HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1394099468 -3600 # Thu Mar 06 10:51:08 2014 +0100 # Node ID 24df9fa5868957c1fb9a2d1569271e0958327dad # Parent 68e41f0cb207212b3cff2023fa1723bb0930e2d3 MIME: added application/xspf+xml MIME type (ticket #479). diff -r

[PATCH] Mail: add IMAP ID command support (RFC2971)

# HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1392021996 -3600 # Mon Feb 10 09:46:36 2014 +0100 # Node ID dec4454e6b1327d7737ae95db9f713cc9117ab81 # Parent 887e5abf8446603d9163a8cd011f14fab57e2a3a Mail: add IMAP ID command support (RFC2971). Parse the ID command

[PATCH] Mail: ngx_mail_session_t 'protocol' field resize

# HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1389727364 -3600 # Tue Jan 14 20:22:44 2014 +0100 # Node ID 9e519ec4328ab9b8dd0639e1f9321f62f9bce287 # Parent 188481078faf4b2bff88a4086d6d509730f90099 Mail: ngx_mail_session_t 'protocol' field resize As possible values

[PATCH] Mail: added support for SSL client certificate

# HG changeset patch # User Franck Levionnois flevionnois at gmail.com # Date 1390577176 -3600 # Fri Jan 24 16:26:16 2014 +0100 # Node ID 9dc48eeb8e5cb022676dbbe56e3435d20e822ab3 # Parent a387ce36744aa36b50e8171dbf01ef716748327e Mail: added support for SSL client certificate. Add support

Re: : [PATCH 0 of 1] Mail: add support for SSL client certificate

Hi, and Salut Franck ;) I just fix the typo, indentation, white space, empty lines mistakes, I have seen. I'have been working on this patch with Franck, as part of my last job. Filipe Da Silva 2014/1/25 nginx-devel-requ...@nginx.org: -- Message: 2 Date

[PATCH 3 of 7] Mail: add ID to the 'ngx_mail_imap_default_capabilities' list

# HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1389700241 -3600 # Tue Jan 14 12:50:41 2014 +0100 # Node ID 56df02d0dad9e7746fed311c88787fcb3ea902d7 # Parent ece46b257e8d31a1a7a81bf5fcdd0271c1dc2318 Mail: add ID to the 'ngx_mail_imap_default_capabilities' list. diff

[PATCH 0 of 7 ] Support of IMAP ID command in mail proxy module

Hello, I've been working with the help of Michael on implementing the RFC 2971 Please find attached the result. --- Filipe DA SILVA ___ nginx-devel mailing list nginx-devel@nginx.org http://mailman.nginx.org/mailman/listinfo/nginx-devel

[PATCH 1 of 7] Mail: add IMAP ID command support

# HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1389700210 -3600 # Tue Jan 14 12:50:10 2014 +0100 # Node ID 0ff28c3c519125db11ae3c56fbf34a7a5975a452 # Parent d049b0ea00a388c142627f10a0ee01c5b1bedc43 Mail: add IMAP ID command support. add parsing of IMAP ID command

[PATCH 6 of 7] Mail: add 'Not Enough Arguments' imap error message

# HG changeset patch # User Filipe da Silva fdasilv...@gmail.com # Date 1389700279 -3600 # Tue Jan 14 12:51:19 2014 +0100 # Node ID 4c742929908a54e06516e80493a42846b9b35420 # Parent 147c57844b913f2b1a4dafb44d58e1128039ea03 Mail: add 'Not Enough Arguments' imap error message. It allow

Re: [PATCH] mail_{ssl, auth_http}_module: add support for SSL client certificates

Hi. Some remarks about your patch . 2014/1/13 nginx-devel-requ...@nginx.org: From: Sven Peter s...@ha.cki.ng To: nginx-devel@nginx.org Subject: [PATCH] mail_{ssl, auth_http}_module: add support for SSL client certificates Message-ID: 8744640301ae0f7d4c16.1389608...@123.fritz.box

Re: Support of IMAP ID command in mail proxy module?

Hi, It seems that some people already made requests about this: - imap proxy and untagged commands: http://mailman.nginx.org/pipermail/nginx-devel/2013-March/003490.html - How do I send an ID command (IMAP) in the mail module? :

[PATCH] Limit req: pointer init order issue

Hello, It's a tiny issue as only the next test code about 'shm' is broken. That's my last patch for the moment. Regards. Filipe DA SILVA 5219.patch Description: Binary data ___ nginx-devel mailing list nginx-devel@nginx.org http://mailman.nginx.org

Re: [PATCH] ngx_mail_http_auth_module

Hi, Please find attach this patch as a mercurial changeset, It's based on the current trunk version. Regards, Filipe 2013/5/8 Valentin V. Bartenev vb...@nginx.com On Thursday 02 May 2013 18:01:29 Filipe Da Silva wrote: Hello, Nginx developers, I been working recently on NGinx, as part