Changeset de9b100 in mod_gnutls for src/gnutls_ocsp.c


Ignore:
Timestamp:
Jan 11, 2020, 11:49:11 AM (8 months ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
master, proxy-ticket
Children:
4e60dd8
Parents:
cf6f974
Message:

OCSP config: Check if cache is available before processing certificate

It doesn't really matter with the current function that handles only
one certificate, but when configuring stapling for the whole
certificate chain it will.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • src/gnutls_ocsp.c

    rcf6f974 rde9b100  
    11411141        ap_get_module_config(server->module_config, &gnutls_module);
    11421142
     1143    if (sc->ocsp_cache == NULL)
     1144        return "No OCSP response cache available, please check "
     1145            "the GnuTLSOCSPCache setting.";
     1146
    11431147    if (sc->certs_x509_chain_num < 2)
    11441148        return "No issuer (CA) certificate available, cannot enable "
     
    11521156        return "No OCSP URI in the certificate nor a GnuTLSOCSPResponseFile "
    11531157            "setting, cannot configure OCSP stapling.";
    1154 
    1155     if (sc->ocsp_cache == NULL)
    1156         return "No OCSP response cache available, please check "
    1157             "the GnuTLSOCSPCache setting.";
    11581158
    11591159    sc->ocsp = ocsp;
Note: See TracChangeset for help on using the changeset viewer.