Commit 495d5f41 authored by Doug MacEachern's avatar Doug MacEachern
Browse files

add SSLProxyCARevocation{File,Path} directives to support CRLs in the proxy 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@94338 13f79535-47bb-0310-9956-ffa450edef68
parent 7e3f4fe9

mod_ssl.c

+6 −0
Changes for mod_ssl.c: 6 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -175,6 +175,12 @@ static const command_rec ssl_config_cmds[] = { 
    SSL_CMD_SRV(ProxyCACertificatePath, TAKE1,

               "SSL Proxy: directory containing server certificates "

               "(`/path/to/dir' - contains PEM encoded certificates)")

    SSL_CMD_SRV(ProxyCARevocationPath, TAKE1,

                "SSL Proxy: CA Certificate Revocation List (CRL) path "

                "(`/path/to/dir' - contains PEM encoded files)")

    SSL_CMD_SRV(ProxyCARevocationFile, TAKE1,

                "SSL Proxy: CA Certificate Revocation List (CRL) file "

                "(`/path/to/file' - PEM encoded)")

    SSL_CMD_SRV(ProxyMachineCertificateFile, TAKE1,

               "SSL Proxy: file containing client certificates "

               "(`/path/to/file' - PEM encoded certificates)")

mod_ssl.h

+2 −0
Changes for mod_ssl.h: 2 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -598,6 +598,8 @@ const char *ssl_cmd_SSLProxyVerify(cmd_parms *, void *, const char *); 
const char  *ssl_cmd_SSLProxyVerifyDepth(cmd_parms *, void *, const char *);

const char  *ssl_cmd_SSLProxyCACertificatePath(cmd_parms *, void *, const char *);

const char  *ssl_cmd_SSLProxyCACertificateFile(cmd_parms *, void *, const char *);

const char  *ssl_cmd_SSLProxyCARevocationPath(cmd_parms *, void *, const char *);

const char  *ssl_cmd_SSLProxyCARevocationFile(cmd_parms *, void *, const char *);

const char  *ssl_cmd_SSLProxyMachineCertificatePath(cmd_parms *, void *, const char *);

const char  *ssl_cmd_SSLProxyMachineCertificateFile(cmd_parms *, void *, const char *);

ssl_engine_config.c

+32 −0
Changes for ssl_engine_config.c: 32 added lines, 0 removed lines.
Original line number Diff line number Diff line
@@ -1354,6 +1354,38 @@ const char *ssl_cmd_SSLProxyCACertificatePath(cmd_parms *cmd, 
    return NULL;

}



const char *ssl_cmd_SSLProxyCARevocationPath(cmd_parms *cmd,

                                             void *dcfg,

                                             const char *arg)

{

    SSLSrvConfigRec *sc = mySrvConfig(cmd->server);

    const char *err;



    if ((err = ssl_cmd_check_dir(cmd, &arg))) {

        return err;

    }



    sc->proxy->crl_path = arg;



    return NULL;

}



const char *ssl_cmd_SSLProxyCARevocationFile(cmd_parms *cmd,

                                             void *dcfg,

                                             const char *arg)

{

    SSLSrvConfigRec *sc = mySrvConfig(cmd->server);

    const char *err;



    if ((err = ssl_cmd_check_file(cmd, &arg))) {

        return err;

    }



    sc->proxy->crl_file = arg;



    return NULL;

}



const char *ssl_cmd_SSLProxyMachineCertificateFile(cmd_parms *cmd,

                                                   void *dcfg,

                                                   const char *arg)