Changeset 809c422 in mod_gnutls for src/mod_gnutls.c

Timestamp:

Apr 2, 2015, 8:48:19 PM (5 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, upstream

Children:

bfcff28

Parents:

bd24203

Message:

TLS proxy: Add support for CRLs to back end server verification

When configured as a TLS proxy, mod_gnutls can now use CRLs to check if
the certificate provided by a back end server is still valid. The CRL
file must be provided externally, the new configuration option
"GnuTLSProxyCRLFile" is used to load it.

File:

• src/mod_gnutls.c (modified) (1 diff)

src/mod_gnutls.c

@@ -236 +236 @@
     RSRC_CONF,
     "X509 trusted CA file for proxy connections"),
+    AP_INIT_TAKE1("GnuTLSProxyCRLFile", mgs_store_cred_path,
+    NULL,
+    RSRC_CONF,
+    "X509 CRL file for proxy connections"),
     { NULL },
 };