Changeset 4d4a406 in mod_gnutls for src/gnutls_hooks.c


Ignore:
Timestamp:
Jun 16, 2016, 6:47:09 PM (4 years ago)
Author:
Thomas Klute <thomas2.klute@…>
Branches:
debian/master, debian/stretch-backports, master, proxy-ticket, upstream
Children:
a784735
Parents:
70d014b
git-author:
Thomas Klute <thomas2.klute@…> (06/16/16 17:37:53)
git-committer:
Thomas Klute <thomas2.klute@…> (06/16/16 18:47:09)
Message:

New config option: GnuTLSOCSPStapling

This flag option enables/disables OCSP stapling, instead of enabling
stapling if a response file is set.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • src/gnutls_hooks.c

    r70d014b r4d4a406  
    161161    gnutls_credentials_set(session, GNUTLS_CRD_ANON, ctxt->sc->anon_creds);
    162162
    163     if (ctxt->sc->ocsp_response_file != NULL)
     163    if (ctxt->sc->ocsp_staple)
    164164    {
    165165        gnutls_certificate_set_ocsp_status_request_function(ctxt->sc->certs,
     
    402402        }
    403403
     404        if (sc->ocsp_staple == GNUTLS_ENABLED_UNSET)
     405            sc->ocsp_staple = GNUTLS_ENABLED_FALSE;
     406
    404407        sc->ocsp_mutex = sc_base->ocsp_mutex;
    405408        /* init OCSP configuration if OCSP is enabled for this host */
    406         if (sc->ocsp_response_file != NULL)
     409        if (sc->ocsp_staple)
    407410        {
    408411            rv = mgs_ocsp_post_config_server(pconf, ptemp, s);
Note: See TracChangeset for help on using the changeset viewer.