Changeset 994a5fb in mod_gnutls for src/gnutls_hooks.c

Timestamp:

Dec 5, 2017, 2:57:35 AM (3 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, master, proxy-ticket, upstream

Children:

1de1026

Parents:

2a912c3

Message:

Do not reconfigure OCSP status callback on each connection

The callback is a property of the credentials, not the session, so
rewriting it during each handshake will create problems with parallel
connections on one virtual host. Set the callback once during
post_config instead, and get the mod_gnutls session context from the
GnuTLS session pointer instead of the callback pointer.

File:

• src/gnutls_hooks.c (modified) (1 diff)

src/gnutls_hooks.c

@@ -164 +164 @@
     /* Set Anon credentials */
     gnutls_credentials_set(session, GNUTLS_CRD_ANON, ctxt->sc->anon_creds);
-
-    if (ctxt->sc->ocsp_staple)
-    {
-        gnutls_certificate_set_ocsp_status_request_function(ctxt->sc->certs,
-                                                            mgs_get_ocsp_response,
-                                                            ctxt);
-    }
 
 #ifdef ENABLE_SRP