Commit 776b9d22 authored by Jeff Trawick's avatar Jeff Trawick
Browse files

stop using APLOG_NOERRNO in calls to ap_log_[pr]error() 


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk/modules/ssl@95150 13f79535-47bb-0310-9956-ffa450edef68
parent 0d5382bf

mod_ssl.c

+12 −12
Changes for mod_ssl.c: 12 added lines, 12 removed lines.
Original line number Diff line number Diff line
@@ -244,7 +244,7 @@ int ssl_proxy_enable(conn_rec *c) 
    SSLConnRec *sslconn = ssl_init_connection_ctx(c);



    if (!sc->proxy_enabled) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, c->base_server,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server,

                     "SSL Proxy requested for %s but not enabled "

                     "[Hint: SSLProxyEngine]", sc->vhost_id);
@@ -307,7 +307,7 @@ static int ssl_hook_pre_connection(conn_rec *c, void *csd) 
     * later access inside callback functions

     */



    ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, c->base_server,

    ap_log_error(APLOG_MARK, APLOG_INFO, 0, c->base_server,

                 "Connection to child %ld established "

                 "(server %s, client %s)", c->id, sc->vhost_id, 

                 c->remote_ip ? c->remote_ip : "unknown");
@@ -325,7 +325,7 @@ static int ssl_hook_pre_connection(conn_rec *c, void *csd) 
     * so we can detach later.

     */

    if (!(ssl = SSL_new(mctx->ssl_ctx))) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, c->base_server,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server,

                     "Unable to create a new SSL connection from the SSL "

                     "context");

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, c->base_server);
@@ -340,7 +340,7 @@ static int ssl_hook_pre_connection(conn_rec *c, void *csd) 
    if (!SSL_set_session_id_context(ssl, (unsigned char *)vhost_md5,

                                    MD5_DIGESTSIZE*2))

    {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, c->base_server,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server,

                     "Unable to set session id context to `%s'", vhost_md5);

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, c->base_server);
@@ -408,7 +408,7 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
    if (!SSL_is_init_finished(filter->pssl)) {

        if (sslconn->is_proxy) {

            if ((n = SSL_connect(filter->pssl)) <= 0) {

                ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0,

                ap_log_error(APLOG_MARK, APLOG_ERR, 0,

                             c->base_server,

                             "SSL Proxy connect failed");

                ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, c->base_server);
@@ -427,7 +427,7 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
                 * was transferred. That's not a real error and can occur

                 * sporadically with some clients.

                 */

                ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0,

                ap_log_error(APLOG_MARK, APLOG_INFO, 0,

                             c->base_server,

                             "SSL handshake stopped: connection was closed");

            }
@@ -452,14 +452,14 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
                     (errno != EINTR))

            {

                if (errno > 0) {

                    ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0,

                    ap_log_error(APLOG_MARK, APLOG_ERR, 0,

                                 c->base_server,

                                 "SSL handshake interrupted by system "

                                 "[Hint: Stop button pressed in browser?!]");

                    ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, c->base_server);

                }

                else {

                    ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, 

                    ap_log_error(APLOG_MARK, APLOG_ERR, 0, 

                                 c->base_server,

                                 "Spurious SSL handshake interrupt [Hint: "

                                 "Usually just one of those OpenSSL "
@@ -471,7 +471,7 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
                /*

                 * Ok, anything else is a fatal error

                 */

                ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, 

                ap_log_error(APLOG_MARK, APLOG_ERR, 0, 

                             c->base_server,

                             "SSL handshake failed (server %s, client %s)",

                             ssl_util_vhostid(c->pool, c->base_server),
@@ -501,7 +501,7 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
                 * optional_no_ca doesn't appear to work as advertised

                 * in 1.x

                 */

                ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0,

                ap_log_error(APLOG_MARK, APLOG_ERR, 0,

                             c->base_server,

                             "SSL client authentication failed, "

                             "accepting certificate based on "
@@ -514,7 +514,7 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
                    sslconn->verify_error :

                    X509_verify_cert_error_string(verify_result);



                ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0,

                ap_log_error(APLOG_MARK, APLOG_ERR, 0,

                             c->base_server,

                             "SSL client authentication failed: %s",

                             error ? error : "unknown");
@@ -539,7 +539,7 @@ int ssl_hook_process_connection(SSLFilterRec *filter) 
        if ((sc->server->auth.verify_mode == SSL_CVERIFY_REQUIRE) &&

            !sslconn->client_cert)

        {

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, c->base_server,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server,

                         "No acceptable peer certificate available");



            return ssl_abort(filter, c);

ssl_engine_init.c

+45 −45
Changes for ssl_engine_init.c: 45 added lines, 45 removed lines.
Original line number Diff line number Diff line
@@ -98,7 +98,7 @@ static void ssl_add_version_components(apr_pool_t *p, 
                                            version_components[i]);

    }



    ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_INFO, 0, s,

                 "Server: %s, Interface: %s, Library: %s",

                 AP_SERVER_BASEVERSION,

                 vals[1],  /* SSL_VERSION_INTERFACE */
@@ -111,7 +111,7 @@ static void ssl_add_version_components(apr_pool_t *p, 
 */

static void ssl_init_SSLLibrary(server_rec *s)

{

    ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_INFO, 0, s,

                 "Init: Initializing %s library", SSL_LIBRARY_NAME);



    CRYPTO_malloc_init();
@@ -149,7 +149,7 @@ static void ssl_tmp_key_init_rsa(server_rec *s, 
    if (!(mc->pTmpKeys[idx] =

          RSA_generate_key(bits, RSA_F4, NULL, NULL)))

    {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                     "Init: Failed to generate temporary "

                     "%d bit RSA private key", bits);

        ssl_die();
@@ -165,7 +165,7 @@ static void ssl_tmp_key_init_dh(server_rec *s, 
    if (!(mc->pTmpKeys[idx] =

          ssl_dh_GetTmpParam(bits)))

    {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                     "Init: Failed to generate temporary "

                     "%d bit DH parameters", bits);

        ssl_die();
@@ -180,13 +180,13 @@ static void ssl_tmp_key_init_dh(server_rec *s, 


static void ssl_tmp_keys_init(server_rec *s)

{

    ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_INFO, 0, s,

                 "Init: Generating temporary RSA private keys (512/1024 bits)");



    MODSSL_TMP_KEY_INIT_RSA(s, 512);

    MODSSL_TMP_KEY_INIT_RSA(s, 1024);



    ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_INFO, 0, s,

                 "Init: Generating temporary DH parameters (512/1024 bits)");



    MODSSL_TMP_KEY_INIT_DH(s, 512);
@@ -302,7 +302,7 @@ int ssl_init_Module(apr_pool_t *p, apr_pool_t *plog, 
    /*

     *  initialize servers

     */

    ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, base_server,

    ap_log_error(APLOG_MARK, APLOG_INFO, 0, base_server,

                 "Init: Initializing (virtual) servers for SSL");



    for (s = base_server; s; s = s->next) {
@@ -347,7 +347,7 @@ void ssl_init_Engine(server_rec *s, apr_pool_t *p) 


    if (mc->szCryptoDevice) {

        if (!(e = ENGINE_by_id(mc->szCryptoDevice))) {

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                         "Init: Failed to load Crypto Device API `%s'",

                         mc->szCryptoDevice);

            ssl_die();
@@ -358,7 +358,7 @@ void ssl_init_Engine(server_rec *s, apr_pool_t *p) 
        }



        if (!ENGINE_set_default(e, ENGINE_METHOD_ALL)) {

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                         "Init: Failed to enable Crypto Device API `%s'",

                         mc->szCryptoDevice);

            ssl_die();
@@ -379,7 +379,7 @@ static void ssl_init_server_check(server_rec *s, 
     * possibility that the user forgot to set them.

     */

    if (!mctx->pks->cert_files[0]) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "No SSL Certificate set [hint: SSLCertificateFile]");

        ssl_die();

    }
@@ -390,7 +390,7 @@ static void ssl_init_server_check(server_rec *s, 
    if (mctx->pks->certs[SSL_AIDX_RSA] ||

        mctx->pks->certs[SSL_AIDX_DSA])

    {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Illegal attempt to re-initialise SSL for server "

                "(theoretically shouldn't happen!)");

        ssl_die();
@@ -411,7 +411,7 @@ static void ssl_init_ctx_protocol(server_rec *s, 
     *  Create the new per-server SSL context

     */

    if (protocol == SSL_PROTOCOL_NONE) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "No SSL protocols available [hint: SSLProtocol]");

        ssl_die();

    }
@@ -423,7 +423,7 @@ static void ssl_init_ctx_protocol(server_rec *s, 
                     NULL);

    cp[strlen(cp)-2] = NUL;



    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                 "Creating new SSL context (protocols: %s)", cp);



    if (protocol == SSL_PROTOCOL_SSLV2) {
@@ -540,14 +540,14 @@ static void ssl_init_ctx_verify(server_rec *s, 
     * Configure Client Authentication details

     */

    if (mctx->auth.ca_cert_file || mctx->auth.ca_cert_path) {

        ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                     "Configuring client authentication");



        if (!SSL_CTX_load_verify_locations(ctx,

                                           mctx->auth.ca_cert_file,

                                           mctx->auth.ca_cert_path))

        {

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                    "Unable to configure verify locations "

                    "for client authentication");

            ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);
@@ -558,7 +558,7 @@ static void ssl_init_ctx_verify(server_rec *s, 
                                      mctx->auth.ca_cert_file,

                                      mctx->auth.ca_cert_path);

        if (!ca_list) {

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                    "Unable to determine list of available "

                    "CA certificates for client authentication");

            ssl_die();
@@ -575,7 +575,7 @@ static void ssl_init_ctx_verify(server_rec *s, 
        ca_list = (STACK_OF(X509_NAME) *)SSL_CTX_get_client_CA_list(ctx);



        if (sk_X509_NAME_num(ca_list) == 0) {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s,

                         "Init: Oops, you want to request client "

                         "authentication, but no CAs are known for "

                         "verification!?  [Hint: SSLCACertificate*]");
@@ -598,12 +598,12 @@ static void ssl_init_ctx_cipher_suite(server_rec *s, 
        return;

    }



    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                 "Configuring permitted SSL ciphers [%s]", 

                 suite);



    if (!SSL_CTX_set_cipher_list(ctx, suite)) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Unable to configure permitted SSL ciphers");

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);

        ssl_die();
@@ -623,7 +623,7 @@ static void ssl_init_ctx_crl(server_rec *s, 
        return;

    }



    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                 "Configuring certificate revocation facility");



    mctx->crl =
@@ -631,7 +631,7 @@ static void ssl_init_ctx_crl(server_rec *s, 
                              (char *)mctx->crl_path);



    if (!mctx->crl) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Unable to configure X.509 CRL storage "

                "for certificate revocation");

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);
@@ -677,12 +677,12 @@ static void ssl_init_ctx_cert_chain(server_rec *s, 
                                      (char *)chain, 

                                      skip_first, NULL);

    if (n < 0) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Failed to configure CA certificate chain!");

        ssl_die();

    }



    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                 "Configuring server certificate chain "

                 "(%d CA certificate%s)",

                 n, n == 1 ? "" : "s");
@@ -726,19 +726,19 @@ static int ssl_server_import_cert(server_rec *s, 
        return FALSE;

    }



    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                 "Configuring %s server certificate", type);



    ptr = asn1->cpData;

    if (!(cert = d2i_X509(NULL, &ptr, asn1->nData))) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Unable to import %s server certificate", type);

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);

        ssl_die();

    }



    if (SSL_CTX_use_certificate(mctx->ssl_ctx, cert) <= 0) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Unable to configure %s server certificate", type);

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);

        ssl_die();
@@ -765,20 +765,20 @@ static int ssl_server_import_key(server_rec *s, 
        return FALSE;

    }



    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                 "Configuring %s server private key", type);



    ptr = asn1->cpData;

    if (!(pkey = d2i_PrivateKey(pkey_type, NULL, &ptr, asn1->nData)))

    {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Unable to import %s server private key", type);

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);

        ssl_die();

    }



    if (SSL_CTX_use_PrivateKey(mctx->ssl_ctx, pkey) <= 0) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Unable to configure %s server private key", type);

        ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);

        ssl_die();
@@ -793,7 +793,7 @@ static int ssl_server_import_key(server_rec *s, 


        if (pubkey && EVP_PKEY_missing_parameters(pubkey)) {

            EVP_PKEY_copy_parameters(pubkey, pkey);

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                    "Copying DSA parameters from private key to certificate");

            ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, s);

        }
@@ -821,7 +821,7 @@ static void ssl_check_public_cert(server_rec *s, 
     */



    if (SSL_X509_isSGC(cert)) {

        ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_INFO, 0, s,

                     "%s server certificate enables "

                     "Server Gated Cryptography (SGC)", 

                     ssl_asn1_keystr(type));
@@ -829,14 +829,14 @@ static void ssl_check_public_cert(server_rec *s, 


    if (SSL_X509_getBC(cert, &is_ca, &pathlen)) {

        if (is_ca) {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s,

                         "%s server certificate is a CA certificate "

                         "(BasicConstraints: CA == TRUE !?)",

                         ssl_asn1_keystr(type));

        }



        if (pathlen > 0) {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s,

                         "%s server certificate is not a leaf certificate "

                         "(BasicConstraints: pathlen == %d > 0 !?)",

                         ssl_asn1_keystr(type), pathlen);
@@ -850,13 +850,13 @@ static void ssl_check_public_cert(server_rec *s, 
            (apr_fnmatch(cn, s->server_hostname,

                         fnm_flags) == FNM_NOMATCH))

        {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s,

                         "%s server certificate wildcard CommonName (CN) `%s' "

                         "does NOT match server name!?",

                         ssl_asn1_keystr(type), cn);

        }

        else if (strNE(s->server_hostname, cn)) {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s,

                         "%s server certificate CommonName (CN) `%s' "

                         "does NOT match server name!?",

                         ssl_asn1_keystr(type), cn);
@@ -881,7 +881,7 @@ static void ssl_init_server_certs(server_rec *s, 
    have_dsa = ssl_server_import_cert(s, mctx, dsa_id, SSL_AIDX_DSA);



    if (!(have_rsa || have_dsa)) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Oops, no RSA or DSA server certificate found?!");

        ssl_die();

    }
@@ -894,7 +894,7 @@ static void ssl_init_server_certs(server_rec *s, 
    have_dsa = ssl_server_import_key(s, mctx, dsa_id, SSL_AIDX_DSA);



    if (!(have_rsa || have_dsa)) {

        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, s,

                "Oops, no RSA or DSA server private key found?!");

        ssl_die();

    }
@@ -927,14 +927,14 @@ static void ssl_init_proxy_certs(server_rec *s, 
    }



    if ((ncerts = sk_X509_INFO_num(sk)) > 0) {

        ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                     "loaded %d client certs for SSL proxy",

                     ncerts);



        pkp->certs = sk;

    }

    else {

        ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_WARNING, 0, s,

                     "no client certs found for SSL proxy");

        sk_X509_INFO_free(sk);

    }
@@ -971,7 +971,7 @@ void ssl_init_ConfigureServer(server_rec *s, 
                              SSLSrvConfigRec *sc)

{

    if (sc->enabled) {

        ap_log_error(APLOG_MARK, APLOG_INFO|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_INFO, 0, s,

                     "Configuring server for SSL protocol");

        ssl_init_server_ctx(s, p, ptemp, sc);

    }
@@ -999,7 +999,7 @@ void ssl_init_CheckServers(server_rec *base_server, apr_pool_t *p) 
        sc = mySrvConfig(s);



        if (sc->enabled && (s->port == DEFAULT_HTTP_PORT)) {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0,

                         base_server,

                         "Init: (%s) You configured HTTPS(%d) "

                         "on the standard HTTP(%d) port!",
@@ -1008,7 +1008,7 @@ void ssl_init_CheckServers(server_rec *base_server, apr_pool_t *p) 
        }



        if (!sc->enabled && (s->port == DEFAULT_HTTPS_PORT)) {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0,

                         base_server,

                         "Init: (%s) You configured HTTP(%d) "

                         "on the standard HTTPS(%d) port!",
@@ -1037,7 +1037,7 @@ void ssl_init_CheckServers(server_rec *base_server, apr_pool_t *p) 
        klen = strlen(key);



        if ((ps = (server_rec *)apr_hash_get(table, key, klen))) {

            ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0,

            ap_log_error(APLOG_MARK, APLOG_WARNING, 0,

                         base_server,

                         "Init: SSL server IP/port conflict: "

                         "%s (%s:%d) vs. %s (%s:%d)",
@@ -1055,7 +1055,7 @@ void ssl_init_CheckServers(server_rec *base_server, apr_pool_t *p) 
    }



    if (conflict) {

        ap_log_error(APLOG_MARK, APLOG_WARNING|APLOG_NOERRNO, 0, base_server,

        ap_log_error(APLOG_MARK, APLOG_WARNING, 0, base_server,

                     "Init: You should not use name-based "

                     "virtual hosts in conjunction with SSL!!");

    }
@@ -1082,7 +1082,7 @@ static void ssl_init_PushCAList(STACK_OF(X509_NAME) *ca_list, 
        char name_buf[256];

        X509_NAME *name = sk_X509_NAME_value(sk, n);



        ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

        ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                     "CA certificate: %s",

                     X509_NAME_oneline(name, name_buf, sizeof(name_buf)));

ssl_engine_io.c

+10 −10
Changes for ssl_engine_io.c: 10 added lines, 10 removed lines.
Original line number Diff line number Diff line
@@ -502,7 +502,7 @@ static int ssl_io_hook_read(SSL *ssl, char *buf, int len) 
             * Log SSL errors

             */

            conn_rec *c = (conn_rec *)SSL_get_app_data(ssl);

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, c->base_server,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server,

                    "SSL error on reading data");

            ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, c->base_server);

        }
@@ -535,7 +535,7 @@ static int ssl_io_hook_write(SSL *ssl, unsigned char *buf, int len) 
             * Log SSL errors

             */

            conn_rec *c = (conn_rec *)SSL_get_app_data(ssl);

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, c->base_server,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server,

                    "SSL error on writing data");

            ssl_log_ssl_error(APLOG_MARK, APLOG_ERR, c->base_server);

        }
@@ -567,7 +567,7 @@ static apr_status_t ssl_filter_write(ap_filter_t *f, 
            reason = "likely due to failed renegotiation";

        }



        ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0, c->base_server,

        ap_log_error(APLOG_MARK, APLOG_ERR, 0, c->base_server,

                "failed to write %d of %d bytes (%s)",

                n > 0 ? len - n : len, len, reason);
@@ -765,7 +765,7 @@ static apr_status_t ssl_io_filter_error(ap_filter_t *f, 
    switch (status) {

      case HTTP_BAD_REQUEST:

            /* log the situation */

            ap_log_error(APLOG_MARK, APLOG_ERR|APLOG_NOERRNO, 0,

            ap_log_error(APLOG_MARK, APLOG_ERR, 0,

                         f->c->base_server,

                         "SSL handshake failed: HTTP spoken on HTTPS port; "

                         "trying to send HTML error page");
@@ -959,7 +959,7 @@ static void ssl_io_data_dump(server_rec *srvr, 
    rows = (len / DUMP_WIDTH);

    if ((rows * DUMP_WIDTH) < len)

        rows++;

    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, srvr,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, srvr,

            "+-------------------------------------------------------------------------+");

    for(i = 0 ; i< rows; i++) {

        apr_snprintf(tmp, sizeof(tmp), "| %04x: ", i * DUMP_WIDTH);
@@ -984,13 +984,13 @@ static void ssl_io_data_dump(server_rec *srvr, 
            }

        }

        apr_cpystrn(buf+strlen(buf), " |", sizeof(buf)-strlen(buf));

        ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, srvr,

        ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, srvr,

                     "%s", buf);

    }

    if (trunc > 0)

        ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, srvr,

        ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, srvr,

                "| %04ld - <SPACES/NULS>", len + trunc);

    ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, srvr,

    ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, srvr,

            "+-------------------------------------------------------------------------+");

    return;

}
@@ -1012,7 +1012,7 @@ long ssl_io_data_cb(BIO *bio, int cmd, 
    if (   cmd == (BIO_CB_WRITE|BIO_CB_RETURN)

        || cmd == (BIO_CB_READ |BIO_CB_RETURN) ) {

        if (rc >= 0) {

            ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                    "%s: %s %ld/%d bytes %s BIO#%p [mem: %p] %s",

                    SSL_LIBRARY_NAME,

                    (cmd == (BIO_CB_WRITE|BIO_CB_RETURN) ? "write" : "read"),
@@ -1023,7 +1023,7 @@ long ssl_io_data_cb(BIO *bio, int cmd, 
                ssl_io_data_dump(s, argp, rc);

        }

        else {

            ap_log_error(APLOG_MARK, APLOG_DEBUG|APLOG_NOERRNO, 0, s,

            ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,

                    "%s: I/O error, %d bytes expected to %s on BIO#%p [mem: %p]",

                    SSL_LIBRARY_NAME, argi,

                    (cmd == (BIO_CB_WRITE|BIO_CB_RETURN) ? "write" : "read"),

ssl_engine_kernel.c

+52 −52

File changed.

Preview size limit exceeded, changes collapsed.

ssl_engine_log.c

+2 −2
Changes for ssl_engine_log.c: 2 added lines, 2 removed lines.
Original line number Diff line number Diff line
@@ -123,12 +123,12 @@ void ssl_log_ssl_error(const char *file, int line, int level, server_rec *s) 
        annotation = ssl_log_annotation(err);



        if (annotation) {

            ap_log_error(file, line, level|APLOG_NOERRNO, 0, s,

            ap_log_error(file, line, level, 0, s,

                         "SSL Library Error: %ld %s %s",

                         e, err, annotation); 

        }

        else {

            ap_log_error(file, line, level|APLOG_NOERRNO, 0, s,

            ap_log_error(file, line, level, 0, s,

                         "SSL Library Error: %ld %s",

                         e, err); 

        }