Lines Matching refs:pc
130 const plugin_cert *pc; member
142 plugin_cert *pc; member
471 if (NULL == hctx->conf.pc) return SSL_TLSEXT_ERR_NOACK;/*should not happen*/ in ssl_tlsext_status_cb()
472 buffer *ssl_stapling = hctx->conf.pc->ssl_stapling; in ssl_tlsext_status_cb()
591 plugin_cert *pc = cpv->v.v; in mod_openssl_free_config() local
592 EVP_PKEY_free(pc->ssl_pemfile_pkey); in mod_openssl_free_config()
593 X509_free(pc->ssl_pemfile_x509); in mod_openssl_free_config()
594 sk_X509_pop_free(pc->ssl_pemfile_chain, X509_free); in mod_openssl_free_config()
595 buffer_free(pc->ssl_stapling); in mod_openssl_free_config()
596 free(pc); in mod_openssl_free_config()
844 pconf->pc = cpv->v.v; in mod_openssl_merge_config_cpv()
1065 plugin_cert *pc = hctx->conf.pc; in mod_openssl_cert_cb() local
1069 if (!pc || NULL == pc->ssl_pemfile_x509 || NULL == pc->ssl_pemfile_pkey) { in mod_openssl_cert_cb()
1081 if (1 != SSL_use_certificate(ssl, pc->ssl_pemfile_x509)) { in mod_openssl_cert_cb()
1091 if (pc->ssl_pemfile_chain) in mod_openssl_cert_cb()
1092 SSL_set1_chain(ssl, pc->ssl_pemfile_chain); in mod_openssl_cert_cb()
1096 else if (hctx->conf.ssl_ca_file && !pc->self_issued) { in mod_openssl_cert_cb()
1116 pc->ssl_pemfile_chain = X509_chain_up_ref(chain); in mod_openssl_cert_cb()
1123 if (1 != SSL_use_PrivateKey(ssl, pc->ssl_pemfile_pkey)) { in mod_openssl_cert_cb()
1133 buffer *ocsp_resp = pc->ssl_stapling; in mod_openssl_cert_cb()
1534 mod_openssl_ocsp_next_update (plugin_cert *pc) in mod_openssl_ocsp_next_update() argument
1537 UNUSED(pc); in mod_openssl_ocsp_next_update()
1540 buffer *der = pc->ssl_stapling; in mod_openssl_ocsp_next_update()
1569 mod_openssl_expire_stapling_file (server *srv, plugin_cert *pc) in mod_openssl_expire_stapling_file() argument
1571 if (NULL == pc->ssl_stapling) /*(previously discarded or never loaded)*/ in mod_openssl_expire_stapling_file()
1575 buffer_free(pc->ssl_stapling); in mod_openssl_expire_stapling_file()
1576 pc->ssl_stapling = NULL; in mod_openssl_expire_stapling_file()
1577 if (pc->must_staple) in mod_openssl_expire_stapling_file()
1581 pc->ssl_stapling_file->ptr); in mod_openssl_expire_stapling_file()
1586 mod_openssl_reload_stapling_file (server *srv, plugin_cert *pc, const unix_time64_t cur_ts) in mod_openssl_reload_stapling_file() argument
1588 buffer *b = mod_openssl_load_stapling_file(pc->ssl_stapling_file->ptr, in mod_openssl_reload_stapling_file()
1589 srv->errh, pc->ssl_stapling); in mod_openssl_reload_stapling_file()
1592 pc->ssl_stapling = b; /*(unchanged unless orig was NULL)*/ in mod_openssl_reload_stapling_file()
1593 pc->ssl_stapling_loadts = cur_ts; in mod_openssl_reload_stapling_file()
1594 pc->ssl_stapling_nextts = mod_openssl_ocsp_next_update(pc); in mod_openssl_reload_stapling_file()
1595 if (pc->ssl_stapling_nextts == -1) { in mod_openssl_reload_stapling_file()
1599 pc->ssl_stapling_nextts = cur_ts + 3600; in mod_openssl_reload_stapling_file()
1600 pc->ssl_stapling_loadts = 0; in mod_openssl_reload_stapling_file()
1602 else if (pc->ssl_stapling_nextts < cur_ts) { in mod_openssl_reload_stapling_file()
1603 mod_openssl_expire_stapling_file(srv, pc); in mod_openssl_reload_stapling_file()
1612 mod_openssl_refresh_stapling_file (server *srv, plugin_cert *pc, const unix_time64_t cur_ts) in mod_openssl_refresh_stapling_file() argument
1614 if (pc->ssl_stapling && pc->ssl_stapling_nextts > cur_ts + 256) in mod_openssl_refresh_stapling_file()
1617 if (0 != stat(pc->ssl_stapling_file->ptr, &st) in mod_openssl_refresh_stapling_file()
1618 || TIME64_CAST(st.st_mtime) <= pc->ssl_stapling_loadts) { in mod_openssl_refresh_stapling_file()
1619 if (pc->ssl_stapling && pc->ssl_stapling_nextts < cur_ts) in mod_openssl_refresh_stapling_file()
1620 mod_openssl_expire_stapling_file(srv, pc); in mod_openssl_refresh_stapling_file()
1623 return mod_openssl_reload_stapling_file(srv, pc, cur_ts); in mod_openssl_refresh_stapling_file()
1639 plugin_cert *pc = cpv->v.v; in mod_openssl_refresh_stapling_files() local
1640 if (pc->ssl_stapling_file) in mod_openssl_refresh_stapling_files()
1641 mod_openssl_refresh_stapling_file(srv, pc, cur_ts); in mod_openssl_refresh_stapling_files()
1711 plugin_cert *pc = ck_malloc(sizeof(plugin_cert)); in network_openssl_load_pemfile() local
1712 pc->ssl_pemfile_pkey = ssl_pemfile_pkey; in network_openssl_load_pemfile()
1713 pc->ssl_pemfile_x509 = ssl_pemfile_x509; in network_openssl_load_pemfile()
1714 pc->ssl_pemfile_chain= ssl_pemfile_chain; in network_openssl_load_pemfile()
1715 pc->ssl_pemfile = pemfile; in network_openssl_load_pemfile()
1716 pc->ssl_privkey = privkey; in network_openssl_load_pemfile()
1717 pc->ssl_stapling = NULL; in network_openssl_load_pemfile()
1718 pc->ssl_stapling_file= ssl_stapling_file; in network_openssl_load_pemfile()
1719 pc->ssl_stapling_loadts = 0; in network_openssl_load_pemfile()
1720 pc->ssl_stapling_nextts = 0; in network_openssl_load_pemfile()
1722 pc->must_staple = mod_openssl_crt_must_staple(ssl_pemfile_x509); in network_openssl_load_pemfile()
1724 pc->must_staple = 0; in network_openssl_load_pemfile()
1726 pc->self_issued = in network_openssl_load_pemfile()
1730 if (pc->ssl_stapling_file) { in network_openssl_load_pemfile()
1732 if (!mod_openssl_reload_stapling_file(srv, pc, log_epoch_secs)) { in network_openssl_load_pemfile()
1738 pc->ssl_stapling_file->ptr); in network_openssl_load_pemfile()
1741 else if (pc->must_staple) { in network_openssl_load_pemfile()
1749 pc->notAfter = mod_openssl_asn1_time_to_posix(notAfter); in network_openssl_load_pemfile()
1752 return pc; in network_openssl_load_pemfile()
2404 s->pc->ssl_pemfile->ptr)) { in network_init_ssl()
2407 s->pc->ssl_pemfile->ptr); in network_init_ssl()
2411 if (1 != SSL_CTX_use_PrivateKey(s->ssl_ctx, s->pc->ssl_pemfile_pkey)) { in network_init_ssl()
2414 s->pc->ssl_pemfile->ptr, s->pc->ssl_privkey->ptr); in network_init_ssl()
2422 s->pc->ssl_pemfile->ptr, s->pc->ssl_privkey->ptr); in network_init_ssl()
2597 conf.pc = cpv->v.v; in mod_openssl_set_defaults_sockets()
2637 if (NULL == conf.pc) { in mod_openssl_set_defaults_sockets()