Lines Matching refs:conf
200 plugin_config conf; member
665 if (depth > hctx->conf.ssl_verifyclient_depth) { in mod_mbedtls_verify_cb()
666 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_mbedtls_verify_cb()
670 else if (0 == depth && NULL != hctx->conf.ssl_ca_dn_file) { in mod_mbedtls_verify_cb()
675 mbedtls_x509_crt *chain = hctx->conf.ssl_ca_dn_file; in mod_mbedtls_verify_cb()
691 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_mbedtls_verify_cb()
731 log_error(r->conf.errh, __FILE__, __LINE__, in mod_mbedtls_SNI()
742 r->conf.http_parseopts, 443)) in mod_mbedtls_SNI()
746 const buffer * const ssl_pemfile = hctx->conf.pc->ssl_pemfile; in mod_mbedtls_SNI()
751 mod_mbedtls_patch_config(r, &hctx->conf); in mod_mbedtls_SNI()
765 if (!buffer_is_equal(hctx->conf.pc->ssl_pemfile, ssl_pemfile)) { in mod_mbedtls_SNI()
767 if (hctx->conf.pc->need_chain) { in mod_mbedtls_SNI()
768 hctx->conf.pc->need_chain = 0; /*(attempt once to complete chain)*/ in mod_mbedtls_SNI()
769 mbedtls_x509_crt *ssl_cred = &hctx->conf.pc->ssl_pemfile_x509; in mod_mbedtls_SNI()
770 mbedtls_x509_crt *store = hctx->conf.ssl_ca_file; in mod_mbedtls_SNI()
772 r->conf.errh)) in mod_mbedtls_SNI()
778 &hctx->conf.pc->ssl_pemfile_x509, in mod_mbedtls_SNI()
779 &hctx->conf.pc->ssl_pemfile_pkey); in mod_mbedtls_SNI()
781 elogf(r->conf.errh, __FILE__, __LINE__, rc, in mod_mbedtls_SNI()
796 if (NULL == hctx->conf.ssl_ca_file) { in mod_mbedtls_conf_verify()
797 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_mbedtls_conf_verify()
807 int mode = (hctx->conf.ssl_verifyclient_enforce) in mod_mbedtls_conf_verify()
811 mbedtls_ssl_set_hs_ca_chain(ssl, hctx->conf.ssl_ca_file, in mod_mbedtls_conf_verify()
812 hctx->conf.ssl_ca_crl_file); in mod_mbedtls_conf_verify()
813 if (hctx->conf.ssl_ca_dn_file) in mod_mbedtls_conf_verify()
814 mbedtls_ssl_set_hs_dn_hints(ssl, hctx->conf.ssl_ca_dn_file); in mod_mbedtls_conf_verify()
818 mbedtls_x509_crt *ca_certs = hctx->conf.ssl_ca_dn_file in mod_mbedtls_conf_verify()
819 ? hctx->conf.ssl_ca_dn_file in mod_mbedtls_conf_verify()
820 : hctx->conf.ssl_ca_file; in mod_mbedtls_conf_verify()
821 mbedtls_ssl_set_hs_ca_chain(ssl, ca_certs, hctx->conf.ssl_ca_crl_file); in mod_mbedtls_conf_verify()
1077 log_error_st * const errh = hctx->r->conf.errh; in mod_mbedtls_acme_tls_1()
1084 if (!hctx->conf.ssl_acme_tls_1) in mod_mbedtls_acme_tls_1()
1094 if (0 != http_request_host_policy(name,hctx->r->conf.http_parseopts,443)) in mod_mbedtls_acme_tls_1()
1097 buffer_copy_path_len2(b, BUF_PTR_LEN(hctx->conf.ssl_acme_tls_1), in mod_mbedtls_acme_tls_1()
1237 if (!hctx->r->conf.h2proto) continue; in mod_mbedtls_alpn_select_cb()
1303 if (hctx->conf.ssl_verifyclient in mod_mbedtls_cert_cb()
1606 plugin_config_socket conf; in mod_mbedtls_set_defaults_sockets() local
1607 memcpy(&conf, &defaults, sizeof(conf)); in mod_mbedtls_set_defaults_sockets()
1620 conf.ssl_enabled = (0 != cpv->v.u); in mod_mbedtls_set_defaults_sockets()
1625 conf.ssl_cipher_list = cpv->v.b; in mod_mbedtls_set_defaults_sockets()
1627 conf.ssl_honor_cipher_order = 1; in mod_mbedtls_set_defaults_sockets()
1636 *(const array **)&conf.ssl_conf_cmd = cpv->v.a; in mod_mbedtls_set_defaults_sockets()
1657 if (0 == i) memcpy(&defaults, &conf, sizeof(conf)); in mod_mbedtls_set_defaults_sockets()
1659 if (0 != i && !conf.ssl_enabled) continue; in mod_mbedtls_set_defaults_sockets()
1666 conf.ssl_verifyclient = p->defaults.ssl_verifyclient; in mod_mbedtls_set_defaults_sockets()
1667 conf.ssl_verifyclient_enforce = p->defaults.ssl_verifyclient_enforce; in mod_mbedtls_set_defaults_sockets()
1668 conf.ssl_verifyclient_depth = p->defaults.ssl_verifyclient_depth; in mod_mbedtls_set_defaults_sockets()
1669 conf.ssl_acme_tls_1 = p->defaults.ssl_acme_tls_1; in mod_mbedtls_set_defaults_sockets()
1682 conf.pc = pc; in mod_mbedtls_set_defaults_sockets()
1683 conf.ssl_pemfile_pkey = &pc->ssl_pemfile_pkey; in mod_mbedtls_set_defaults_sockets()
1684 conf.ssl_pemfile_x509 = &pc->ssl_pemfile_x509; in mod_mbedtls_set_defaults_sockets()
1685 conf.ssl_pemfile = pc->ssl_pemfile; in mod_mbedtls_set_defaults_sockets()
1686 conf.ssl_privkey = pc->ssl_privkey; in mod_mbedtls_set_defaults_sockets()
1691 conf.ssl_ca_file = cpv->v.v; in mod_mbedtls_set_defaults_sockets()
1694 conf.ssl_verifyclient = (0 != cpv->v.u); in mod_mbedtls_set_defaults_sockets()
1697 conf.ssl_verifyclient_enforce = (0 != cpv->v.u); in mod_mbedtls_set_defaults_sockets()
1700 conf.ssl_verifyclient_depth = (unsigned char)cpv->v.shrt; in mod_mbedtls_set_defaults_sockets()
1703 conf.ssl_acme_tls_1 = cpv->v.b; in mod_mbedtls_set_defaults_sockets()
1715 if (NULL == conf.ssl_pemfile_x509) { in mod_mbedtls_set_defaults_sockets()
1716 if (0 == i && !conf.ssl_enabled) continue; in mod_mbedtls_set_defaults_sockets()
1724 || (conf.ssl_enabled && NULL == p->ssl_ctxs[0].ssl_ctx)) { in mod_mbedtls_set_defaults_sockets()
1753 if (0 == network_init_ssl(srv, &conf, p)) { in mod_mbedtls_set_defaults_sockets()
1755 s->ssl_ctx = conf.ssl_ctx; in mod_mbedtls_set_defaults_sockets()
1756 s->ciphersuites = conf.ciphersuites; in mod_mbedtls_set_defaults_sockets()
1757 s->curves = conf.curves; in mod_mbedtls_set_defaults_sockets()
1760 mbedtls_ssl_config_free(conf.ssl_ctx); in mod_mbedtls_set_defaults_sockets()
1761 free(conf.ciphersuites); in mod_mbedtls_set_defaults_sockets()
1762 free(conf.curves); in mod_mbedtls_set_defaults_sockets()
2001 if (hctx->conf.ssl_log_noise) in mod_mbedtls_ssl_write_err()
2002 elog(hctx->r->conf.errh, __FILE__, __LINE__, wr, in mod_mbedtls_ssl_write_err()
2006 elog(hctx->r->conf.errh, __FILE__, __LINE__, wr, __func__); in mod_mbedtls_ssl_write_err()
2147 if (hctx->conf.ssl_acme_tls_1) { in mod_mbedtls_ssl_handshake()
2167 if (0 == rc && hctx->conf.ssl_verifyclient /*(after SNI and ALPN)*/ in mod_mbedtls_ssl_handshake()
2171 int mode = (hctx->conf.ssl_verifyclient_enforce) in mod_mbedtls_ssl_handshake()
2188 if (0 == rc && hctx->conf.ssl_ca_dn_file in mod_mbedtls_ssl_handshake()
2191 mbedtls_x509_crt *ca_certs = hctx->conf.ssl_ca_file; in mod_mbedtls_ssl_handshake()
2192 mbedtls_x509_crl *ca_crl = hctx->conf.ssl_ca_crl_file; in mod_mbedtls_ssl_handshake()
2233 if (!hctx->conf.ssl_log_noise) return -1; in mod_mbedtls_ssl_handshake()
2236 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, __func__); in mod_mbedtls_ssl_handshake()
2293 if (!hctx->conf.ssl_log_noise) return -1; in connection_read_cq_ssl()
2331 hctx->errh = r->conf.errh; in CONNECTION_FUNC()
2342 mod_mbedtls_patch_config(r, &hctx->conf); in CONNECTION_FUNC()
2345 elog(r->conf.errh, __FILE__, __LINE__, rc, "ssl_setup() failed"); in CONNECTION_FUNC()
2359 if (hctx->conf.ssl_log_noise) {/* volume level for debug message callback */ in CONNECTION_FUNC()
2361 mbedtls_debug_set_threshold(hctx->conf.ssl_log_noise); in CONNECTION_FUNC()
2364 (void *)(intptr_t)hctx->conf.ssl_log_noise); in CONNECTION_FUNC()
2416 elog(hctx->r->conf.errh, __FILE__, __LINE__, rc, in mod_mbedtls_close_notify()
2572 if (hctx->conf.ssl_verifyclient_username) { in https_add_ssl_client_entries()
2578 const buffer *varname = hctx->conf.ssl_verifyclient_username; in https_add_ssl_client_entries()
2592 if (hctx->conf.ssl_verifyclient_export_cert) in https_add_ssl_client_entries()
2671 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()
2692 mod_mbedtls_patch_config(r, &hctx->conf); in REQUEST_FUNC()
2693 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()
4267 if( ssl->conf->transport == MBEDTLS_SSL_TRANSPORT_DATAGRAM ) in ssl_parse_client_hello()
4356 ssl->conf->transport, buf ); in ssl_parse_client_hello()