Lines Matching refs:conf
153 plugin_config conf; member
781 if (hctx->conf.pc->trust_inited) return GNUTLS_E_SUCCESS; in mod_gnutls_verify_set_tlist()
789 d = req && hctx->conf.ssl_ca_dn_file in mod_gnutls_verify_set_tlist()
790 ? hctx->conf.ssl_ca_dn_file in mod_gnutls_verify_set_tlist()
791 : hctx->conf.ssl_ca_file; in mod_gnutls_verify_set_tlist()
793 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_gnutls_verify_set_tlist()
803 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_verify_set_tlist()
811 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_verify_set_tlist()
817 d = hctx->conf.ssl_ca_crl_file; in mod_gnutls_verify_set_tlist()
818 if (NULL != d && req && hctx->conf.ssl_ca_dn_file) { in mod_gnutls_verify_set_tlist()
824 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_verify_set_tlist()
833 gnutls_certificate_credentials_t ssl_cred = hctx->conf.pc->ssl_cred; in mod_gnutls_verify_set_tlist()
837 if (NULL == hctx->conf.ssl_ca_dn_file) in mod_gnutls_verify_set_tlist()
838 hctx->conf.pc->trust_inited = 1; in mod_gnutls_verify_set_tlist()
848 if (!hctx->conf.ssl_verifyclient) return 0; in mod_gnutls_verify_cb()
857 if (hctx->conf.ssl_ca_dn_file) { in mod_gnutls_verify_cb()
879 if (hctx->verify_status == 0 && hctx->conf.ssl_ca_dn_file) { in mod_gnutls_verify_cb()
883 (gnutls_x509_crt_t *)(void *)hctx->conf.ssl_ca_dn_file->data; in mod_gnutls_verify_cb()
884 unsigned int len = hctx->conf.ssl_ca_dn_file->size; in mod_gnutls_verify_cb()
906 if (hctx->verify_status != 0 && hctx->conf.ssl_verifyclient_enforce) { in mod_gnutls_verify_cb()
1274 log_error_st * const errh = hctx->r->conf.errh; in mod_gnutls_acme_tls_1()
1278 if (!hctx->conf.ssl_acme_tls_1) in mod_gnutls_acme_tls_1()
1288 if (0 != http_request_host_policy(name, hctx->r->conf.http_parseopts, 443)) in mod_gnutls_acme_tls_1()
1291 buffer_copy_path_len2(b, BUF_PTR_LEN(hctx->conf.ssl_acme_tls_1), in mod_gnutls_acme_tls_1()
1365 elogf(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_acme_tls_1()
1420 if (!hctx->r->conf.h2proto) continue; in mod_gnutls_ALPN()
1475 log_error(r->conf.errh, __FILE__, __LINE__, in mod_gnutls_SNI()
1486 r->conf.http_parseopts, 443)) in mod_gnutls_SNI()
1493 mod_gnutls_patch_config(r, &hctx->conf); in mod_gnutls_SNI()
1550 log_error_st *errh = hctx->r->conf.errh; in mod_gnutls_client_hello_hook()
1563 unsigned int n = hctx->conf.ssl_acme_tls_1 ? 4 : 3; in mod_gnutls_client_hello_hook()
1565 if (!hctx->r->conf.h2proto) { in mod_gnutls_client_hello_hook()
1572 log_error_st *errh = hctx->r->conf.errh; in mod_gnutls_client_hello_hook()
1591 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_client_hello_hook()
1598 if (NULL == hctx->conf.pc->ssl_cred) { in mod_gnutls_client_hello_hook()
1599 rc = mod_gnutls_construct_crt_chain(hctx->conf.pc, in mod_gnutls_client_hello_hook()
1600 hctx->conf.ssl_ca_file, in mod_gnutls_client_hello_hook()
1601 hctx->r->conf.errh); in mod_gnutls_client_hello_hook()
1605 gnutls_certificate_credentials_t ssl_cred = hctx->conf.pc->ssl_cred; in mod_gnutls_client_hello_hook()
1609 if (hctx->conf.ssl_verifyclient) { in mod_gnutls_client_hello_hook()
1612 req = hctx->conf.ssl_verifyclient_enforce in mod_gnutls_client_hello_hook()
1617 hctx->conf.ssl_verifyclient_depth); in mod_gnutls_client_hello_hook()
1624 if (hctx->conf.dh_params) in mod_gnutls_client_hello_hook()
1625 gnutls_certificate_set_dh_params(ssl_cred, hctx->conf.dh_params); in mod_gnutls_client_hello_hook()
1634 elogf(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_client_hello_hook()
1919 plugin_config_socket conf; in mod_gnutls_set_defaults_sockets() local
1920 memcpy(&conf, &defaults, sizeof(conf)); in mod_gnutls_set_defaults_sockets()
1933 conf.ssl_enabled = (0 != cpv->v.u); in mod_gnutls_set_defaults_sockets()
1938 conf.ssl_cipher_list = cpv->v.b; in mod_gnutls_set_defaults_sockets()
1940 conf.ssl_honor_cipher_order = 1; in mod_gnutls_set_defaults_sockets()
1949 *(const array **)&conf.ssl_conf_cmd = cpv->v.a; in mod_gnutls_set_defaults_sockets()
1964 if (0 == i) memcpy(&defaults, &conf, sizeof(conf)); in mod_gnutls_set_defaults_sockets()
1966 if (0 != i && !conf.ssl_enabled) continue; in mod_gnutls_set_defaults_sockets()
1972 conf.ssl_verifyclient = p->defaults.ssl_verifyclient; in mod_gnutls_set_defaults_sockets()
1973 conf.ssl_verifyclient_enforce = p->defaults.ssl_verifyclient_enforce; in mod_gnutls_set_defaults_sockets()
1974 conf.ssl_verifyclient_depth = p->defaults.ssl_verifyclient_depth; in mod_gnutls_set_defaults_sockets()
1986 conf.pc = cpv->v.v; in mod_gnutls_set_defaults_sockets()
1989 conf.ssl_verifyclient = (0 != cpv->v.u); in mod_gnutls_set_defaults_sockets()
1992 conf.ssl_verifyclient_enforce = (0 != cpv->v.u); in mod_gnutls_set_defaults_sockets()
1995 conf.ssl_verifyclient_depth = (unsigned char)cpv->v.shrt; in mod_gnutls_set_defaults_sockets()
2004 if (NULL == conf.pc) { in mod_gnutls_set_defaults_sockets()
2005 if (0 == i && !conf.ssl_enabled) continue; in mod_gnutls_set_defaults_sockets()
2013 || (conf.ssl_enabled in mod_gnutls_set_defaults_sockets()
2043 if (0 == network_init_ssl(srv, &conf, p)) { in mod_gnutls_set_defaults_sockets()
2045 s->ssl_session_ticket = conf.ssl_session_ticket; in mod_gnutls_set_defaults_sockets()
2046 s->priority_cache = conf.priority_cache; in mod_gnutls_set_defaults_sockets()
2048 s->dh_params = conf.dh_params; in mod_gnutls_set_defaults_sockets()
2052 gnutls_priority_deinit(conf.priority_cache); in mod_gnutls_set_defaults_sockets()
2054 gnutls_dh_params_deinit(conf.dh_params); in mod_gnutls_set_defaults_sockets()
2058 free(conf.priority_str.ptr); in mod_gnutls_set_defaults_sockets()
2288 if (hctx->conf.ssl_log_noise) in mod_gnutls_write_err()
2289 elog(hctx->r->conf.errh, __FILE__, __LINE__, wr, __func__); in mod_gnutls_write_err()
2291 elog(hctx->r->conf.errh, __FILE__, __LINE__, wr, __func__); in mod_gnutls_write_err()
2343 if (!hctx->conf.ssl_log_noise) return -1; in mod_gnutls_read_err()
2347 elogf(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_read_err()
2355 if (!hctx->conf.ssl_log_noise) return -1; in mod_gnutls_read_err()
2360 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, __func__); in mod_gnutls_read_err()
2604 hctx->errh = r->conf.errh; in CONNECTION_FUNC()
2614 elog(r->conf.errh, __FILE__, __LINE__, rc, "gnutls_init()"); in CONNECTION_FUNC()
2620 elog(r->conf.errh, __FILE__, __LINE__, rc, "gnutls_priority_set()"); in CONNECTION_FUNC()
2635 mod_gnutls_patch_config(r, &hctx->conf); in CONNECTION_FUNC()
2638 hctx->conf.dh_params = s->dh_params; in CONNECTION_FUNC()
2645 if (hctx->conf.ssl_log_noise) {/* volume level for debug message callback */ in CONNECTION_FUNC()
2647 gnutls_global_set_log_level(hctx->conf.ssl_log_noise); in CONNECTION_FUNC()
2655 elog(r->conf.errh, __FILE__, __LINE__, rc, in CONNECTION_FUNC()
2710 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_gnutls_close_notify()
2791 elog(r->conf.errh, __FILE__, __LINE__, rc, in https_add_ssl_client_subject()
2880 if (hctx->conf.ssl_verifyclient_username) { in https_add_ssl_client_entries()
2886 const buffer *varname = hctx->conf.ssl_verifyclient_username; in https_add_ssl_client_entries()
2899 if (hctx->conf.ssl_verifyclient_export_cert && NULL != crt) in https_add_ssl_client_entries()
2948 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()
2969 mod_gnutls_patch_config(r, &hctx->conf); in REQUEST_FUNC()
2970 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()