Changeset a8374f7 in mod_gnutls for src/gnutls_ocsp.h

Timestamp:

Jan 11, 2020, 9:51:53 AM (8 months ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

master, proxy-ticket

Children:

bdd10be

Parents:

20a3915

Message:

Keep a reference to the certificate with OCSP data

When implementing multi-staple there will be a bunch of OCSP data
structures per virtual host. This will make it possible to handle
these without complex algorithms to connect certificate index with
OCSP data.

File:

• src/gnutls_ocsp.h (modified) (1 diff)

src/gnutls_ocsp.h

@@ -40 +40 @@
  */
 struct mgs_ocsp_data {
-    /** OCSP URI extracted from the server certificate. NULL if
-     * unset. */
+    /** The certificate the following elements refer to. */
+    gnutls_x509_crt_t cert;
+    /** OCSP URI extracted from the certificate. NULL if unset. */
     apr_uri_t *uri;
     /** Trust list to verify OCSP responses for stapling. Should
-     * usually only contain the CA that signed the server
-     * certificate. */
+     * usually only contain the CA that signed the certificate. */
     gnutls_x509_trust_list_t *trust;
-    /** Server certificate fingerprint, used as cache key for the OCSP
-     * response */
+    /** Certificate fingerprint, used as cache key for the OCSP
+     * response. */
     gnutls_datum_t fingerprint;
 };