Changeset a3e0f7b in mod_gnutls for src/gnutls_ocsp.h

Timestamp:

Jan 12, 2020, 10:01:55 AM (9 months ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

master, proxy-ticket

Children:

5c9ca6b

Parents:

845c112

git-author:

Fiona Klute <fiona.klute@…> (01/12/20 07:50:52)

git-committer:

Fiona Klute <fiona.klute@…> (01/12/20 10:01:55)

Message:

Support a list of files for the GnuTLSOCSPResponseFile option

This allows users to specify multiple responses for multi-staple. Note
that mod_gnutls will try to send its own requests for certificates
without a matching response.

File:

• src/gnutls_ocsp.h (modified) (2 diffs)

src/gnutls_ocsp.h

@@ -46 +46 @@
     /** OCSP URI extracted from the certificate. NULL if unset. */
     apr_uri_t *uri;
+    /** OCSP response file for the certificate. NULL if unset. Takes
+     * precedence over uri. */
+    char *response_file;
     /** Trust list to verify OCSP responses for stapling. Should
      * usually only contain the CA that signed the certificate. */
@@ -70 +73 @@
 const char *mgs_store_ocsp_response_path(cmd_parms * parms,
                                          void *dummy __attribute__((unused)),
-                                         const char *arg);
+                                         int argc, char *const *argv);
 
 /**