Add support for PSK cipher suites patch

[Maxim Dounin]

Hello!

On Thu, Jan 25, 2018 at 05:07:03PM +0100, Sékine Coulibaly wrote:

> Nate,Maxim,
> 
> I found a patch here
> (http://mailman.nginx.org/pipermail/nginx-devel/2017-September/010449.html)
> regarding the PSK spport in Nginx. I can not make the new parameter
> ssl_psk_file work.
> 
> I applied it to release-1.13.5 successfully.
> 
> I updated my nginx.conf to
> 
> stream {
>   upstream dtls_udp_upstreams {
>     hash $remote_addr:remote_port;
>     server preprod.mycorp.com:5685;
>   }
> 
> 
>   server {
>     listen 5684 udp ssl;
>     ssl_protocols DTLSv1.2;
>     ssl_ciphers PSK-AES128-CBC-SHA;
>     ssl_psk_file /tmp/cred.txt;
>     ssl_certificate /tmp/server.pem;
>     ssl_certificate_key /tmp/server.key;
>     proxy_pass dtls_udp_upstreams;
>   }
> 
> My issue is that although /tmp/cred.txt file exists, Nginx returns :
> 
> nginx: [emerg] unknown directive "ssl_psk_file" in /tmp/nginx.conf:26.
> 
> 
> I checked the source files, it looks like the patch has been correctly applied.
> 
> Would you mind posting the complete/corrected patch I could apply and test ?
> 
> I'm using DTLS client with PSK load-balancer and I could experiment the setup.

The patches in question does not try to provide relevant 
functionality to the stream module, they are http-only.

Also please note that DTLS support isn't available either.

-- 
Maxim Dounin
http://mdounin.ru/