Lines Matching refs:conf
180 plugin_config conf; member
471 if (NULL == hctx->conf.pc) return SSL_TLSEXT_ERR_NOACK;/*should not happen*/ in ssl_tlsext_status_cb()
472 buffer *ssl_stapling = hctx->conf.pc->ssl_stapling; in ssl_tlsext_status_cb()
485 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in ssl_tlsext_status_cb()
992 if (depth > hctx->conf.ssl_verifyclient_depth) { in verify_callback()
998 if (preverify_ok && 0 == depth && NULL != hctx->conf.ssl_ca_dn_file) { in verify_callback()
1001 STACK_OF(X509_NAME) * const cert_names = hctx->conf.ssl_ca_dn_file; in verify_callback()
1008 if (NULL == err_cert) return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1034 if (NULL == err_cert) return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1036 log_error_st *errh = hctx->r->conf.errh; in verify_callback()
1051 return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1065 plugin_cert *pc = hctx->conf.pc; in mod_openssl_cert_cb()
1072 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1082 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1096 else if (hctx->conf.ssl_ca_file && !pc->self_issued) { in mod_openssl_cert_cb()
1101 SSL_set1_chain_cert_store(ssl, hctx->conf.ssl_ca_file->certs); in mod_openssl_cert_cb()
1107 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1124 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1136 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1144 if (hctx->conf.ssl_verifyclient) { in mod_openssl_cert_cb()
1145 if (NULL == hctx->conf.ssl_ca_file) { in mod_openssl_cert_cb()
1146 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1153 SSL_set1_verify_cert_store(ssl, hctx->conf.ssl_ca_file->certs); in mod_openssl_cert_cb()
1160 STACK_OF(X509_NAME) * const cert_names = hctx->conf.ssl_ca_dn_file in mod_openssl_cert_cb()
1161 ? hctx->conf.ssl_ca_dn_file in mod_openssl_cert_cb()
1162 : hctx->conf.ssl_ca_file->names; in mod_openssl_cert_cb()
1165 if (hctx->conf.ssl_verifyclient_enforce) in mod_openssl_cert_cb()
1168 SSL_set_verify_depth(ssl, hctx->conf.ssl_verifyclient_depth + 1); in mod_openssl_cert_cb()
1183 log_error(r->conf.errh, __FILE__, __LINE__, in mod_openssl_SNI()
1194 r->conf.http_parseopts, 443)) in mod_openssl_SNI()
1200 mod_openssl_patch_config(r, &hctx->conf); in mod_openssl_SNI()
1235 int read_ahead = hctx->conf.ssl_read_ahead; in mod_openssl_client_hello_cb()
1237 if (!read_ahead && hctx->conf.ssl_read_ahead) in mod_openssl_client_hello_cb()
1238 SSL_set_read_ahead(ssl, hctx->conf.ssl_read_ahead); in mod_openssl_client_hello_cb()
1259 int read_ahead = hctx->conf.ssl_read_ahead; in network_ssl_servername_callback()
1261 if (!read_ahead && hctx->conf.ssl_read_ahead) in network_ssl_servername_callback()
1262 SSL_set_read_ahead(ssl, hctx->conf.ssl_read_ahead); in network_ssl_servername_callback()
1765 log_error_st * const errh = hctx->r->conf.errh; in mod_openssl_acme_tls_1()
1773 if (!hctx->conf.ssl_acme_tls_1) in mod_openssl_acme_tls_1()
1783 if (0 != http_request_host_policy(name,hctx->r->conf.http_parseopts,443)) in mod_openssl_acme_tls_1()
1786 buffer_copy_path_len2(b, BUF_PTR_LEN(hctx->conf.ssl_acme_tls_1), in mod_openssl_acme_tls_1()
1840 hctx->conf.ssl_verifyclient_enforce = 0; in mod_openssl_acme_tls_1()
1887 if (!hctx->r->conf.h2proto) continue; in mod_openssl_alpn_select_cb()
2526 plugin_config_socket conf; in mod_openssl_set_defaults_sockets() local
2527 memcpy(&conf, &defaults, sizeof(conf)); in mod_openssl_set_defaults_sockets()
2540 conf.ssl_enabled = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2545 conf.ssl_cipher_list = cpv->v.b; in mod_openssl_set_defaults_sockets()
2547 conf.ssl_honor_cipher_order = 1; in mod_openssl_set_defaults_sockets()
2556 *(const array **)&conf.ssl_conf_cmd = cpv->v.a; in mod_openssl_set_defaults_sockets()
2571 if (0 == i) memcpy(&defaults, &conf, sizeof(conf)); in mod_openssl_set_defaults_sockets()
2573 if (0 != i && !conf.ssl_enabled) continue; in mod_openssl_set_defaults_sockets()
2579 conf.ssl_ca_file = p->defaults.ssl_ca_file; in mod_openssl_set_defaults_sockets()
2580 conf.ssl_ca_dn_file = p->defaults.ssl_ca_dn_file; in mod_openssl_set_defaults_sockets()
2581 conf.ssl_ca_crl_file = p->defaults.ssl_ca_crl_file; in mod_openssl_set_defaults_sockets()
2582 conf.ssl_verifyclient = p->defaults.ssl_verifyclient; in mod_openssl_set_defaults_sockets()
2583 conf.ssl_verifyclient_enforce = p->defaults.ssl_verifyclient_enforce; in mod_openssl_set_defaults_sockets()
2584 conf.ssl_verifyclient_depth = p->defaults.ssl_verifyclient_depth; in mod_openssl_set_defaults_sockets()
2585 conf.ssl_read_ahead = p->defaults.ssl_read_ahead; in mod_openssl_set_defaults_sockets()
2597 conf.pc = cpv->v.v; in mod_openssl_set_defaults_sockets()
2601 conf.ssl_ca_file = cpv->v.v; in mod_openssl_set_defaults_sockets()
2605 conf.ssl_ca_dn_file = cpv->v.v; in mod_openssl_set_defaults_sockets()
2608 conf.ssl_ca_crl_file = cpv->v.b; in mod_openssl_set_defaults_sockets()
2611 conf.ssl_read_ahead = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2617 conf.ssl_verifyclient = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2620 conf.ssl_verifyclient_enforce = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2623 conf.ssl_verifyclient_depth = (unsigned char)cpv->v.shrt; in mod_openssl_set_defaults_sockets()
2637 if (NULL == conf.pc) { in mod_openssl_set_defaults_sockets()
2638 if (0 == i && !conf.ssl_enabled) continue; in mod_openssl_set_defaults_sockets()
2646 || (conf.ssl_enabled && NULL == p->ssl_ctxs[0].ssl_ctx)) { in mod_openssl_set_defaults_sockets()
2668 if (0 == network_init_ssl(srv, &conf, p)) { in mod_openssl_set_defaults_sockets()
2670 s->ssl_ctx = conf.ssl_ctx; in mod_openssl_set_defaults_sockets()
2673 SSL_CTX_free(conf.ssl_ctx); in mod_openssl_set_defaults_sockets()
3183 && (hctx->conf.ssl_read_ahead || SSL_pending(hctx->ssl) > 0)); in connection_read_cq_ssl()
3223 if (!hctx->conf.ssl_log_noise) break; in connection_read_cq_ssl()
3231 if (0==oerrno && 0==cq->bytes_in && !hctx->conf.ssl_log_noise) in connection_read_cq_ssl()
3269 if (!hctx->conf.ssl_log_noise) continue; in connection_read_cq_ssl()
3304 hctx->errh = r->conf.errh; in CONNECTION_FUNC()
3317 mod_openssl_patch_config(r, &hctx->conf); in CONNECTION_FUNC()
3321 log_error(r->conf.errh, __FILE__, __LINE__, in CONNECTION_FUNC()
3400 } while (ret > 0 && (hctx->conf.ssl_read_ahead||(ssl_r-=ret))); in mod_openssl_close_notify()
3438 log_perror(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_close_notify()
3446 errh = hctx->r->conf.errh; in mod_openssl_close_notify()
3556 if (hctx->conf.ssl_verifyclient_username) { in https_add_ssl_client_entries()
3562 const buffer *varname = hctx->conf.ssl_verifyclient_username; in https_add_ssl_client_entries()
3574 if (hctx->conf.ssl_verifyclient_export_cert) { in https_add_ssl_client_entries()
3624 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()
3645 mod_openssl_patch_config(r, &hctx->conf); in REQUEST_FUNC()
3646 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()