Changeset de9b100 in mod_gnutls for src

Timestamp:

Jan 11, 2020, 11:49:11 AM (13 months ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, master, proxy-ticket

Children:

4e60dd8

Parents:

cf6f974

Message:

OCSP config: Check if cache is available before processing certificate

It doesn't really matter with the current function that handles only
one certificate, but when configuring stapling for the whole
certificate chain it will.

File:

• src/gnutls_ocsp.c (modified) (2 diffs)

src/gnutls_ocsp.c

@@ -1141 +1141 @@
         ap_get_module_config(server->module_config, &gnutls_module);
 
+    if (sc->ocsp_cache == NULL)
+        return "No OCSP response cache available, please check "
+            "the GnuTLSOCSPCache setting.";
+
     if (sc->certs_x509_chain_num < 2)
         return "No issuer (CA) certificate available, cannot enable "
@@ -1152 +1156 @@
         return "No OCSP URI in the certificate nor a GnuTLSOCSPResponseFile "
             "setting, cannot configure OCSP stapling.";
-
-    if (sc->ocsp_cache == NULL)
-        return "No OCSP response cache available, please check "
-            "the GnuTLSOCSPCache setting.";
 
     sc->ocsp = ocsp;