[PATCH] SSL support for the mail proxy module

Maxim Dounin mdounin at mdounin.ru
Thu Sep 11 15:09:19 UTC 2014


On Wed, Sep 10, 2014 at 04:29:53PM -0500, Kunal Pariani wrote:

> Based on your comments, Should i add all the ssl related 
> directives in the http proxy module to the mail proxy module as 
> part of this ? Mainly these ones below
>      proxy_ssl_ciphers
>      proxy_ssl_crl
>      proxy_ssl_name
>      proxy_ssl_server_name
>      proxy_ssl_session_reuse
>      proxy_ssl_protocols
>      proxy_ssl_trusted_certificate
>      proxy_ssl_verify
>      proxy_ssl_verify_depth

There is no need to to add all of them, but certificate 
verification seems to be important part of the problem.

Note well that it won't be trivial to port name-related things as 
currently nginx mail module doesn't know backend name at all.  
Instead, it obtains a backend ip address from the auth_http 

Maxim Dounin

More information about the nginx-devel mailing list