Changeset a3e0f7b in mod_gnutls for src/mod_gnutls.c


Ignore:
Timestamp:
Jan 12, 2020, 10:01:55 AM (9 months ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
master, proxy-ticket
Children:
5c9ca6b
Parents:
845c112
git-author:
Fiona Klute <fiona.klute@…> (01/12/20 07:50:52)
git-committer:
Fiona Klute <fiona.klute@…> (01/12/20 10:01:55)
Message:

Support a list of files for the GnuTLSOCSPResponseFile option

This allows users to specify multiple responses for multi-staple. Note
that mod_gnutls will try to send its own requests for certificates
without a matching response.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • src/mod_gnutls.c

    r845c112 ra3e0f7b  
    33 *  Copyright 2008, 2014 Nikos Mavrogiannopoulos
    44 *  Copyright 2011 Dash Shendy
    5  *  Copyright 2015-2019 Fiona Klute
     5 *  Copyright 2015-2020 Fiona Klute
    66 *
    77 *  Licensed under the Apache License, Version 2.0 (the "License");
     
    379379                 NULL, RSRC_CONF,
    380380                 "Check nonce in OCSP responses?"),
    381     AP_INIT_TAKE1("GnuTLSOCSPResponseFile", mgs_store_ocsp_response_path,
     381    AP_INIT_TAKE_ARGV("GnuTLSOCSPResponseFile", mgs_store_ocsp_response_path,
    382382                  NULL, RSRC_CONF,
    383                   "Read OCSP response for stapling from this file instead "
    384                   "of sending a request over HTTP (must be updated "
    385                   "externally)"),
     383                  "Read OCSP responses for stapling from these files instead "
     384                  "of sending a request over HTTP. Files must be listed in "
     385                  "the same order as listed in GnuTLSX509CertificateFile, "
     386                  "and must be updated externally. Use the empty string "
     387                  "(\"\") to skip a certificate in the list."),
    386388    AP_INIT_TAKE1("GnuTLSOCSPCacheTimeout", mgs_set_timeout,
    387389                  NULL, RSRC_CONF,
Note: See TracChangeset for help on using the changeset viewer.