Changeset 2aaf4f5 in mod_gnutls for include

Timestamp:

Feb 23, 2014, 1:05:31 PM (5 years ago)

Author:

Daniel Kahn Gillmor <dkg@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, upstream

Children:

765cac2

Parents:

999cdec

Message:

implement GnuTLSExportCertificates control over max exported cert size

This patchset implements the proposed modification to
GnuTLSExportCertificates, allowing server administrators to choose the
maximum size of the exported certs.

Some advantages:

• avoids large buffers on the stack
• more configurable for server admins who expect to use larger certs
• better visibilty for users when a too-large-cert is encountered

This also increases the default maximum exported size from 10KiB to
16KiB.

File:

• include/mod_gnutls.h.in (modified) (2 diffs)

include/mod_gnutls.h.in

@@ -127 +127 @@
     int enabled;
     /* Export full certificates to CGI environment: */
-    int export_certificates_enabled;
+    int export_certificates_size;
         /* GnuTLS Priorities */
     gnutls_priority_t priorities;
@@ -360 +360 @@
 const char *mgs_set_enabled(cmd_parms * parms, void *dummy,
                             const char *arg);
-const char *mgs_set_export_certificates_enabled(cmd_parms * parms, void *dummy,
+const char *mgs_set_export_certificates_size(cmd_parms * parms, void *dummy,
                             const char *arg);
 const char *mgs_set_priorities(cmd_parms * parms, void *dummy,