Changeset 809c422 in mod_gnutls for include

Timestamp:

Apr 2, 2015, 8:48:19 PM (4 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, upstream

Children:

bfcff28

Parents:

bd24203

Message:

TLS proxy: Add support for CRLs to back end server verification

When configured as a TLS proxy, mod_gnutls can now use CRLs to check if
the certificate provided by a back end server is still valid. The CRL
file must be provided externally, the new configuration option
"GnuTLSProxyCRLFile" is used to load it.

File:

• include/mod_gnutls.h.in (modified) (1 diff)

include/mod_gnutls.h.in

@@ -113 +113 @@
     const char* proxy_x509_cert_file;
     const char* proxy_x509_ca_file;
+    const char* proxy_x509_crl_file;
     /* SRP Certificate Structure*/
     gnutls_srp_server_credentials_t srp_creds;