commit cbc9f4df13b61ebf53cfb7b7a33f99af06188a4f
author Maxim Dounin <mdounin@mdounin.ru> Wed Feb 25 17:48:05 2015 +0300
committer Maxim Dounin <mdounin@mdounin.ru> Wed Feb 25 17:48:05 2015 +0300
tree 389954c725bba33fc08cd44f73a8ed3eedad6379
parent 86fe82e76faecc29f2c95cb09bc338de5579e424

Mail: client SSL certificates support.

The "ssl_verify_client", "ssl_verify_depth", "ssl_client_certificate",
"ssl_trusted_certificate", and "ssl_crl" directives introduced to control
SSL client certificate verification in mail proxy module.

If there is a certificate, detail of the certificate are passed to
the auth_http script configured via Auth-SSL-Verify, Auth-SSL-Subject,
Auth-SSL-Issuer, Auth-SSL-Serial, Auth-SSL-Fingerprint headers.  If
the auth_http_pass_client_cert directive is set, client certificate
in PEM format will be passed in the Auth-SSL-Cert header (urlencoded).

If there is no required certificate provided during an SSL handshake
or certificate verification fails then a protocol-specific error is
returned after the SSL handshake and the connection is closed.

Based on previous work by Sven Peter, Franck Levionnois and Filipe Da Silva.