Lines Matching refs:conf
196 plugin_config conf; member
980 if (!hctx->conf.ssl_verifyclient) return SECSuccess; in mod_nss_verify_cb()
1015 if (hctx->verify_status == 0 && hctx->conf.ssl_ca_dn_file) { in mod_nss_verify_cb()
1020 CERTCertList * const certList = hctx->conf.ssl_ca_dn_file; in mod_nss_verify_cb()
1035 if (hctx->verify_status != 0 && hctx->conf.ssl_verifyclient_enforce) { in mod_nss_verify_cb()
1229 log_error_st * const errh = hctx->r->conf.errh; in mod_nss_acme_tls_1()
1232 if (!hctx->conf.ssl_acme_tls_1) in mod_nss_acme_tls_1()
1242 if (0 != http_request_host_policy(name, hctx->r->conf.http_parseopts, 443)) in mod_nss_acme_tls_1()
1245 buffer_copy_path_len2(b, BUF_PTR_LEN(hctx->conf.ssl_acme_tls_1), in mod_nss_acme_tls_1()
1273 if (hctx->conf.pc) { in mod_nss_acme_tls_1()
1275 NSS_FindCertKEAType(hctx->conf.pc->ssl_pemfile_x509); in mod_nss_acme_tls_1()
1295 if (hctx->conf.ssl_verifyclient) { in mod_nss_acme_tls_1()
1297 hctx->conf.ssl_verifyclient = 0; in mod_nss_acme_tls_1()
1372 if (!hctx->r->conf.h2proto) continue; in mod_nss_alpn_select_cb()
1384 if (!hctx->conf.ssl_acme_tls_1) in mod_nss_alpn_select_cb()
1417 log_error(r->conf.errh, __FILE__, __LINE__, in mod_nss_SNI()
1428 r->conf.http_parseopts, 443)) in mod_nss_SNI()
1435 plugin_cert *pc = hctx->conf.pc; in mod_nss_SNI()
1437 mod_nss_patch_config(r, &hctx->conf); in mod_nss_SNI()
1449 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_nss_SNI()
1456 if (pc == hctx->conf.pc) in mod_nss_SNI()
1463 NSS_FindCertKEAType(hctx->conf.pc->ssl_pemfile_x509); in mod_nss_SNI()
1466 SSL_ConfigServerCert(ssl, hctx->conf.pc->ssl_pemfile_x509, in mod_nss_SNI()
1467 hctx->conf.pc->ssl_pemfile_pkey, in mod_nss_SNI()
1468 &hctx->conf.pc->ssl_credex, in mod_nss_SNI()
1469 sizeof(hctx->conf.pc->ssl_credex)); in mod_nss_SNI()
1471 elogf(r->conf.errh, __FILE__, __LINE__, in mod_nss_SNI()
1477 if (hctx->conf.ssl_verifyclient) { in mod_nss_SNI()
1480 elog(r->conf.errh, __FILE__, __LINE__, "SSL_AuthCertificateHook"); in mod_nss_SNI()
1483 CERTCertList * const certList = hctx->conf.ssl_ca_dn_file in mod_nss_SNI()
1484 ? hctx->conf.ssl_ca_dn_file in mod_nss_SNI()
1485 : hctx->conf.ssl_ca_file; in mod_nss_SNI()
1487 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_nss_SNI()
1492 elog(r->conf.errh, __FILE__, __LINE__, "SSL_SetTrustAnchors"); in mod_nss_SNI()
1497 hctx->conf.ssl_verifyclient_enforce in mod_nss_SNI()
1764 plugin_config_socket conf; in mod_nss_set_defaults_sockets() local
1765 memcpy(&conf, &defaults, sizeof(conf)); in mod_nss_set_defaults_sockets()
1778 conf.ssl_enabled = (0 != cpv->v.u); in mod_nss_set_defaults_sockets()
1783 conf.ssl_cipher_list = cpv->v.b; in mod_nss_set_defaults_sockets()
1785 conf.ssl_honor_cipher_order = 1; in mod_nss_set_defaults_sockets()
1794 *(const array **)&conf.ssl_conf_cmd = cpv->v.a; in mod_nss_set_defaults_sockets()
1809 if (0 == i) memcpy(&defaults, &conf, sizeof(conf)); in mod_nss_set_defaults_sockets()
1811 if (0 != i && !conf.ssl_enabled) continue; in mod_nss_set_defaults_sockets()
1817 conf.ssl_verifyclient = p->defaults.ssl_verifyclient; in mod_nss_set_defaults_sockets()
1818 conf.ssl_verifyclient_enforce = p->defaults.ssl_verifyclient_enforce; in mod_nss_set_defaults_sockets()
1819 conf.ssl_verifyclient_depth = p->defaults.ssl_verifyclient_depth; in mod_nss_set_defaults_sockets()
1831 conf.pc = cpv->v.v; in mod_nss_set_defaults_sockets()
1834 conf.ssl_verifyclient = (0 != cpv->v.u); in mod_nss_set_defaults_sockets()
1837 conf.ssl_verifyclient_enforce = (0 != cpv->v.u); in mod_nss_set_defaults_sockets()
1840 conf.ssl_verifyclient_depth = (unsigned char)cpv->v.shrt; in mod_nss_set_defaults_sockets()
1849 if (NULL == conf.pc) { in mod_nss_set_defaults_sockets()
1850 if (0 == i && !conf.ssl_enabled) continue; in mod_nss_set_defaults_sockets()
1858 || (conf.ssl_enabled && NULL == p->ssl_ctxs[0].model)) { in mod_nss_set_defaults_sockets()
1887 if (0 == network_init_ssl(srv, &conf, p)) { in mod_nss_set_defaults_sockets()
1889 s->model = conf.model; in mod_nss_set_defaults_sockets()
1890 s->protos = conf.protos; in mod_nss_set_defaults_sockets()
1891 s->ssl_compression = conf.ssl_compression; in mod_nss_set_defaults_sockets()
1892 s->ssl_session_ticket = conf.ssl_session_ticket; in mod_nss_set_defaults_sockets()
1895 if (conf.model) PR_Close(conf.model); in mod_nss_set_defaults_sockets()
2133 if (!hctx->conf.ssl_log_noise) return -1; in mod_nss_write_err()
2136 elog(hctx->r->conf.errh, __FILE__, __LINE__, __func__); in mod_nss_write_err()
2161 if (!hctx->conf.ssl_log_noise) return -1; in mod_nss_read_err()
2307 hctx->errh = r->conf.errh; in CONNECTION_FUNC()
2317 mod_nss_patch_config(r, &hctx->conf); in CONNECTION_FUNC()
2319 hctx->ssl = mod_nss_io_ctor(con->fd, s->model, r->conf.errh); in CONNECTION_FUNC()
2327 elog(r->conf.errh, __FILE__, __LINE__, "SSL_ResetHandshake()"); in CONNECTION_FUNC()
2332 elog(r->conf.errh, __FILE__, __LINE__, "SSL_HandshakeCallback()"); in CONNECTION_FUNC()
2337 elog(r->conf.errh, __FILE__, __LINE__, "SSL_SNISocketConfigHook()"); in CONNECTION_FUNC()
2342 elog(r->conf.errh, __FILE__, __LINE__, "SSL_SetNextProtoCallback()"); in CONNECTION_FUNC()
2347 if (hctx->conf.ssl_verifyclient) { in CONNECTION_FUNC()
2349 elog(r->conf.errh, __FILE__, __LINE__, "SSL_AuthCertificateHook()"); in CONNECTION_FUNC()
2352 CERTCertList * const certList = hctx->conf.ssl_ca_dn_file in CONNECTION_FUNC()
2353 ? hctx->conf.ssl_ca_dn_file in CONNECTION_FUNC()
2354 : hctx->conf.ssl_ca_file; in CONNECTION_FUNC()
2356 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in CONNECTION_FUNC()
2360 return hctx->conf.ssl_verifyclient_enforce in CONNECTION_FUNC()
2365 elog(r->conf.errh, __FILE__, __LINE__, "SSL_SetTrustAnchors()"); in CONNECTION_FUNC()
2370 hctx->conf.ssl_verifyclient_enforce in CONNECTION_FUNC()
2429 elog(hctx->r->conf.errh, __FILE__, __LINE__, "PR_Shutdown()"); in mod_nss_close_notify()
2567 if (hctx->conf.ssl_verifyclient_username) { in https_add_ssl_client_entries()
2573 const buffer *varname = hctx->conf.ssl_verifyclient_username; in https_add_ssl_client_entries()
2585 if (hctx->conf.ssl_verifyclient_export_cert) in https_add_ssl_client_entries()
2647 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()
2668 mod_nss_patch_config(r, &hctx->conf); in REQUEST_FUNC()
2669 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()