Lines Matching refs:ssl
188 PRFileDesc *ssl; member
210 static void mod_nss_io_dtor (PRFileDesc *ssl);
215 mod_nss_io_dtor(hctx->ssl); in handler_ctx_free()
294 PRFileDesc *ssl = SSL_ImportFD(model, prfd); in mod_nss_io_ctor() local
295 if (NULL == ssl) { in mod_nss_io_ctor()
301 return ssl; in mod_nss_io_ctor()
306 mod_nss_io_detach (PRFileDesc *ssl) in mod_nss_io_detach() argument
309 PRFileDesc *prfd = PR_PopIOLayer(ssl, PR_NSPR_IO_LAYER); in mod_nss_io_detach()
316 PRFileDesc *prfd = PR_GetIdentitiesLayer(ssl, PR_NSPR_IO_LAYER); in mod_nss_io_detach()
324 mod_nss_io_dtor (PRFileDesc *ssl) in mod_nss_io_dtor() argument
326 if (NULL == ssl) return; in mod_nss_io_dtor()
327 mod_nss_io_detach(ssl); in mod_nss_io_dtor()
328 PR_Close(ssl); in mod_nss_io_dtor()
977 mod_nss_verify_cb (void *arg, PRFileDesc *ssl, PRBool checkSig, PRBool isServer) in mod_nss_verify_cb() argument
996 peer = SSL_PeerCertificate(ssl); in mod_nss_verify_cb()
1004 SSL_RevealPinArg(ssl), NULL) < 0) in mod_nss_verify_cb()
1007 ssl, checkSig, isServer) < 0) in mod_nss_verify_cb()
1018 if (NULL == peer) peer = SSL_PeerCertificate(ssl); in mod_nss_verify_cb()
1276 SSL_ConfigSecureServerWithCertChain(hctx->ssl,NULL,NULL,NULL,certType); in mod_nss_acme_tls_1()
1289 SSL_ConfigServerCert(hctx->ssl, ssl_pemfile_x509, pkey, data, dlen); in mod_nss_acme_tls_1()
1298 SSL_OptionSet(hctx->ssl, SSL_REQUEST_CERTIFICATE, PR_FALSE); in mod_nss_acme_tls_1()
1299 SSL_OptionSet(hctx->ssl, SSL_REQUIRE_CERTIFICATE, SSL_REQUIRE_NEVER); in mod_nss_acme_tls_1()
1324 if (SSL_GetChannelInfo(ssl, &inf, sizeof(inf)) < 0 in mod_nss_alpn_h2_policy()
1345 mod_nss_alpn_select_cb (void *arg, PRFileDesc *ssl, in mod_nss_alpn_select_cb() argument
1357 UNUSED(ssl); in mod_nss_alpn_select_cb()
1404 mod_nss_SNI (PRFileDesc *ssl, const SECItem *srvNameArr, PRUint32 srvNameArrSize, in mod_nss_SNI() argument
1464 SSL_ConfigSecureServerWithCertChain(ssl, NULL, NULL, NULL, certType); in mod_nss_SNI()
1466 SSL_ConfigServerCert(ssl, hctx->conf.pc->ssl_pemfile_x509, in mod_nss_SNI()
1479 if (SSL_AuthCertificateHook(ssl, mod_nss_verify_cb, hctx) < 0) { in mod_nss_SNI()
1491 if (certList && SSL_SetTrustAnchors(ssl, certList) < 0) { in mod_nss_SNI()
1495 SSL_OptionSet(ssl, SSL_REQUEST_CERTIFICATE, PR_TRUE); in mod_nss_SNI()
1496 SSL_OptionSet(ssl, SSL_REQUIRE_CERTIFICATE, in mod_nss_SNI()
1502 SSL_OptionSet(ssl, SSL_REQUEST_CERTIFICATE, PR_FALSE); in mod_nss_SNI()
1503 SSL_OptionSet(ssl, SSL_REQUIRE_CERTIFICATE, SSL_REQUIRE_NEVER); in mod_nss_SNI()
2178 PRFileDesc * const ssl = hctx->ssl; in connection_write_cq_ssl() local
2215 wr = PR_Write(ssl, data, (PRInt32)wr_len); in connection_write_cq_ssl()
2250 PRFileDesc * const ssl = hctx->ssl; in connection_read_cq_ssl() local
2255 int pend = SSL_DataPending(ssl); in connection_read_cq_ssl()
2264 len = PR_Read(ssl, mem, (PRInt32)mem_len); in connection_read_cq_ssl()
2319 hctx->ssl = mod_nss_io_ctor(con->fd, s->model, r->conf.errh); in CONNECTION_FUNC()
2320 if (NULL == hctx->ssl) in CONNECTION_FUNC()
2326 if (SSL_ResetHandshake(hctx->ssl, PR_TRUE) < 0) { in CONNECTION_FUNC()
2331 if (SSL_HandshakeCallback(hctx->ssl, mod_nss_SSLHandshakeCallback, hctx)<0){ in CONNECTION_FUNC()
2336 if (SSL_SNISocketConfigHook(hctx->ssl, mod_nss_SNI, hctx) < 0) { in CONNECTION_FUNC()
2341 if (SSL_SetNextProtoCallback(hctx->ssl, mod_nss_alpn_select_cb, hctx) < 0) { in CONNECTION_FUNC()
2348 if (SSL_AuthCertificateHook(hctx->ssl, mod_nss_verify_cb, hctx) < 0) { in CONNECTION_FUNC()
2364 if (SSL_SetTrustAnchors(hctx->ssl, certList) < 0) { in CONNECTION_FUNC()
2368 SSL_OptionSet(hctx->ssl, SSL_REQUEST_CERTIFICATE, PR_TRUE); in CONNECTION_FUNC()
2369 SSL_OptionSet(hctx->ssl, SSL_REQUIRE_CERTIFICATE, in CONNECTION_FUNC()
2375 SSL_OptionSet(hctx->ssl, SSL_REQUEST_CERTIFICATE, PR_FALSE); in CONNECTION_FUNC()
2376 SSL_OptionSet(hctx->ssl, SSL_REQUIRE_CERTIFICATE, SSL_REQUIRE_NEVER); in CONNECTION_FUNC()
2390 mod_nss_io_detach(hctx->ssl); in mod_nss_detach()
2422 switch (PR_Shutdown(hctx->ssl, PR_SHUTDOWN_SEND)) { in mod_nss_close_notify()
2528 PRFileDesc *ssl = hctx->ssl; in https_add_ssl_client_entries() local
2533 crt = SSL_PeerCertificate(ssl); in https_add_ssl_client_entries()
2595 PRFileDesc *ssl = hctx->ssl; in http_cgi_ssl_env() local
2600 if (SSL_GetChannelInfo(ssl, &inf, sizeof(inf)) < 0) in http_cgi_ssl_env()
2617 if (SSL_SecurityStatus(ssl, NULL, &cipher, &algkeysize, &usekeysize, in http_cgi_ssl_env()