Changeset 809c422 in mod_gnutls for src/mod_gnutls.c


Ignore:
Timestamp:
Apr 2, 2015, 8:48:19 PM (5 years ago)
Author:
Thomas Klute <thomas2.klute@…>
Branches:
debian/master, debian/stretch-backports, jessie-backports, master, upstream
Children:
bfcff28
Parents:
bd24203
Message:

TLS proxy: Add support for CRLs to back end server verification

When configured as a TLS proxy, mod_gnutls can now use CRLs to check if
the certificate provided by a back end server is still valid. The CRL
file must be provided externally, the new configuration option
"GnuTLSProxyCRLFile" is used to load it.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • src/mod_gnutls.c

    rbd24203 r809c422  
    236236    RSRC_CONF,
    237237    "X509 trusted CA file for proxy connections"),
     238    AP_INIT_TAKE1("GnuTLSProxyCRLFile", mgs_store_cred_path,
     239    NULL,
     240    RSRC_CONF,
     241    "X509 CRL file for proxy connections"),
    238242    { NULL },
    239243};
Note: See TracChangeset for help on using the changeset viewer.