Changeset fad7695 in mod_gnutls for src/gnutls_config.c

Timestamp:

Jun 1, 2016, 12:20:12 PM (4 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, master, upstream

Children:

68ce93c

Parents:

64856fd

Message:

Store OCSP trust list in server config

This avoids recreating the trust list whenever an OCSP response has to
be verified.

File:

• src/gnutls_config.c (modified) (2 diffs)

src/gnutls_config.c

@@ -973 +973 @@
 
     sc->ocsp_response_file = NULL;
+    sc->ocsp_trust = NULL;
 
 /* this relies on GnuTLS never changing the gnutls_certificate_request_t enum to define -1 */
@@ -1030 +1031 @@
     gnutls_srvconf_merge(proxy_priorities, NULL);
 
-    gnutls_srvconf_merge(ocsp_response_file, NULL);
+    gnutls_srvconf_assign(ocsp_response_file);
+    gnutls_srvconf_assign(ocsp_trust);
 
     /* FIXME: the following items are pre-allocated, and should be