Changeset f030883 in mod_gnutls for include

Timestamp:

Apr 9, 2015, 1:02:39 PM (4 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, jessie-backports, master, upstream

Children:

73f6f12

Parents:

8b472af

Message:

Set GnuTLS priorities for proxy connections separately

Until now, proxy connections were configured with the same priorities as
the server side. This commit introduces the new configuration option
"GnuTLSProxyPriorities" to set the priorities for proxy connections
separately. Note that GnuTLSProxyPriorities MUST be set when
SSLProxyEngine is enabled.

Since the parameters to GnuTLSPriorities and GnuTLSProxyPriorities need
the same processing, mgs_set_priorities has been rewritten to select the
priority cache to write to based on the option name, rather than adding
a new function to handle GnuTLSProxyPriorities.

File:

• include/mod_gnutls.h.in (modified) (1 diff)

include/mod_gnutls.h.in

@@ -114 +114 @@
     const char* proxy_x509_ca_file;
     const char* proxy_x509_crl_file;
+    /* GnuTLS priorities for proxy connections */
+    gnutls_priority_t proxy_priorities;
     /* SRP Certificate Structure*/
     gnutls_srp_server_credentials_t srp_creds;