rdelaage
/
gmid
mirror of https://github.com/omar-polo/gmid.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

add `protocols' option to `proxy' rule

This commit is contained in:
Omar Polo 2022-01-01 19:04:50 +00:00
parent 5128c0b0e3
commit c7c8ef448b
3 changed files with 13 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
gmid.h
View File

@ -100,6 +100,7 @@ extern struct fcgi fcgi[FCGI_MAX];
struct proxy {
char *host;
const char *port;
uint32_t protocols;
int noverifyname;
uint8_t *cert;
size_t certlen;

12
parse.y
View File

@ -309,6 +309,12 @@ proxy_opt : CERT string {
if (p->key == NULL)
yyerror("can't load key %s", $2);
}
| PROTOCOLS string {
struct proxy *p = &host->proxy;
if (tls_config_parse_protocols(&p->protocols, $2) == -1)
yyerror("invalid protocols string \"%s\"", $2);
}
| RELAY_TO string {
char *at;
const char *errstr;
@ -961,7 +967,11 @@ symget(const char *nam)
struct vhost *
new_vhost(void)
{
return xcalloc(1, sizeof(struct vhost));
struct vhost *v;
v = xcalloc(1, sizeof(*v));
v->proxy.protocols = TLS_PROTOCOLS_DEFAULT;
return v;
}
struct location *

2
proxy.c
View File

@ -295,8 +295,8 @@ proxy_init(struct client *c)
if (p->noverifyname)
tls_config_insecure_noverifyname(conf);
/* TODO: tls_config_set_protocols here */
tls_config_insecure_noverifycert(conf);
tls_config_set_protocols(conf, p->protocols);
if (p->cert != NULL) {
int r;