Changeset efc43b4 in mod_gnutls for src/gnutls_ocsp.h


Ignore:
Timestamp:
Sep 25, 2018, 3:46:26 PM (2 years ago)
Author:
Fiona Klute <fiona.klute@…>
Branches:
debian/master, master, proxy-ticket
Children:
cb6476c
Parents:
994200a
Message:

Split per-vhost post config for OCSP stapling into configuring and enabling

This is preparation for enabling stapling by default: Configuration
failure may be ignored if stapling is not explicitly enabled by the
user (at the cost of not stapling).

File:
1 edited

Legend:

Unmodified
Added
Removed
  • src/gnutls_ocsp.h

    r994200a refc43b4  
    9898
    9999/**
    100  * Initialize server config for OCSP, supposed to be called in the
    101  * post_config hook for each server where OCSP stapling is enabled,
    102  * after certificates have been loaded.
     100 * Try to generate the OCSP stapling configuration for a (virtual)
     101 * host. This function must be called in the post_config hook after
     102 * certificates have been loaded. This method does not actually enable
     103 * stapling, it only prepares the configuration. The reason for
     104 * splitting these tasks is that configuration failure may be ignored
     105 * if stapling is not explicitly enabled but only opportunistically.
     106 *
     107 * @return `NULL` on success, a string describing why configuration
     108 * failed otherwise (static or allocated from ptemp)
     109 */
     110const char* mgs_ocsp_configure_stapling(apr_pool_t *pconf, apr_pool_t *ptemp,
     111                                        server_rec *server);
     112
     113/**
     114 * Enable OCSP stapling for a (virtual) host. Must be called in the
     115 * post_config hook after mgs_ocsp_configure_stapling has returned
     116 * successfully for that host.
    103117 *
    104118 * @return OK or DECLINED on success, any other value on error (like
    105  * the post_config hook itself)
     119 * the post_config hook)
    106120 */
    107 int mgs_ocsp_post_config_server(apr_pool_t *pconf, apr_pool_t *ptemp,
    108                                 server_rec *server);
     121int mgs_ocsp_enable_stapling(apr_pool_t *pconf, apr_pool_t *ptemp,
     122                             server_rec *server);
    109123
    110124int mgs_get_ocsp_response(gnutls_session_t session, void *ptr,
Note: See TracChangeset for help on using the changeset viewer.