Changeset 14a6f41 in mod_gnutls


Ignore:
Timestamp:
Apr 24, 2018, 1:47:16 AM (2 years ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
debian/master, master, proxy-ticket
Children:
6c5c2ec
Parents:
de1ceab
Message:

Check for a cache during OCSP setup

File:
1 edited

Legend:

Unmodified
Added
Removed
  • src/gnutls_ocsp.c

    rde1ceab r14a6f41  
    10921092    mgs_srvconf_rec *sc = (mgs_srvconf_rec *)
    10931093        ap_get_module_config(server->module_config, &gnutls_module);
    1094     // TODO: check for cache!
    10951094
    10961095    if (sc->certs_x509_chain_num < 2)
    10971096    {
    1098         ap_log_error(APLOG_MARK, APLOG_STARTUP, 0, server,
     1097        ap_log_error(APLOG_MARK, APLOG_STARTUP, APR_EINVAL, server,
    10991098                     "OCSP stapling is enabled but no CA certificate "
    11001099                     "available for %s:%d, make sure it is included in "
    11011100                     "GnuTLSCertificateFile!",
    11021101                     server->server_hostname, server->addrs->host_port);
     1102        return HTTP_NOT_FOUND;
     1103    }
     1104
     1105    if (sc->cache == NULL)
     1106    {
     1107        ap_log_error(APLOG_MARK, APLOG_STARTUP, APR_EINVAL, server,
     1108                     "OCSP stapling is enabled but no cache configured!");
    11031109        return HTTP_NOT_FOUND;
    11041110    }
Note: See TracChangeset for help on using the changeset viewer.