Lines Matching refs:ssl_ctx
112 SSL_CTX *ssl_ctx; member
121 SSL_CTX *ssl_ctx; /* output from network_init_ssl() */ member
570 SSL_CTX * const ssl_ctx_global_scope = p->ssl_ctxs->ssl_ctx; in mod_openssl_free_config()
574 if (s->ssl_ctx && s->ssl_ctx != ssl_ctx_global_scope) in mod_openssl_free_config()
575 SSL_CTX_free(s->ssl_ctx); in mod_openssl_free_config()
802 mod_openssl_load_verify_locn (SSL_CTX *ssl_ctx, const buffer *b, server *srv) in mod_openssl_load_verify_locn() argument
805 if (1 == SSL_CTX_load_verify_locations(ssl_ctx, fn, NULL)) in mod_openssl_load_verify_locn()
815 mod_openssl_load_ca_files (SSL_CTX *ssl_ctx, plugin_data *p, server *srv) in mod_openssl_load_ca_files() argument
821 if (!mod_openssl_load_verify_locn(ssl_ctx, b, srv)) in mod_openssl_load_ca_files()
1957 SSL_CONF_CTX_set_ssl_ctx(cctx, s->ssl_ctx); in network_openssl_ssl_conf_cmd()
1983 if (level >= 0) SSL_CTX_set_security_level(s->ssl_ctx, level); in network_openssl_ssl_conf_cmd()
2112 SSL_CTX_set_tmp_dh(s->ssl_ctx, dh); in mod_openssl_ssl_conf_dhparameters()
2122 SSL_CTX_set_tmp_dh(s->ssl_ctx, dh); in mod_openssl_ssl_conf_dhparameters()
2146 || !SSL_CTX_set0_tmp_dh_pkey(s->ssl_ctx, dhpkey)) { in mod_openssl_ssl_conf_dhparameters()
2154 SSL_CTX_set_dh_auto(s->ssl_ctx, 1); in mod_openssl_ssl_conf_dhparameters()
2156 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_SINGLE_DH_USE); in mod_openssl_ssl_conf_dhparameters()
2196 if (!SSL_CTX_set_ecdh_auto(s->ssl_ctx, 1)) { in mod_openssl_ssl_conf_curves()
2211 SSL_CTX_set_tmp_ecdh(s->ssl_ctx, ecdh); in mod_openssl_ssl_conf_curves()
2216 if (1 != SSL_CTX_set1_groups(s->ssl_ctx, &nid, 1)) { in mod_openssl_ssl_conf_curves()
2222 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_SINGLE_ECDH_USE); in mod_openssl_ssl_conf_curves()
2251 s->ssl_ctx = SSL_CTX_new(TLS_server_method()); in network_init_ssl()
2253 s->ssl_ctx = SSL_CTX_new(SSLv23_server_method()); in network_init_ssl()
2255 if (NULL == s->ssl_ctx) { in network_init_ssl()
2271 s->ssl_ctx,(const unsigned char*)CONST_STR_LEN("lighttpd"))){ in network_init_ssl()
2282 SSL_CTX_set_session_cache_mode(s->ssl_ctx, in network_init_ssl()
2287 SSL_CTX_set_options(s->ssl_ctx, ssloptions); in network_init_ssl()
2288 SSL_CTX_set_info_callback(s->ssl_ctx, ssl_info_callback); in network_init_ssl()
2293 & SSL_CTX_set_options(s->ssl_ctx, SSL_OP_NO_SSLv2)) in network_init_ssl()
2304 & SSL_CTX_set_options(s->ssl_ctx, SSL_OP_NO_SSLv3)) in network_init_ssl()
2314 if (SSL_CTX_set_cipher_list(s->ssl_ctx,s->ssl_cipher_list->ptr)!=1){ in network_init_ssl()
2321 SSL_CTX_set_options(s->ssl_ctx,SSL_OP_CIPHER_SERVER_PREFERENCE); in network_init_ssl()
2327 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_PRIORITIZE_CHACHA); in network_init_ssl()
2335 SSL_CTX_set_tlsext_ticket_key_cb(s->ssl_ctx, ssl_tlsext_ticket_key_cb); in network_init_ssl()
2337 SSL_CTX_set_tlsext_ticket_key_evp_cb(s->ssl_ctx, in network_init_ssl()
2344 SSL_CTX_set_tlsext_status_cb(s->ssl_ctx, ssl_tlsext_status_cb); in network_init_ssl()
2351 SSL_CTX_set_cert_cb(s->ssl_ctx, mod_openssl_cert_cb, NULL); in network_init_ssl()
2360 SSL_CTX_set_cert_store(s->ssl_ctx, s->ssl_ca_file->certs); in network_init_ssl()
2370 if (!mod_openssl_load_ca_files(s->ssl_ctx, p, srv)) in network_init_ssl()
2389 SSL_CTX_set_client_CA_list(s->ssl_ctx, SSL_dup_CA_list(cert_names)); in network_init_ssl()
2394 SSL_CTX_set_verify(s->ssl_ctx, mode, verify_callback); in network_init_ssl()
2395 SSL_CTX_set_verify_depth(s->ssl_ctx, s->ssl_verifyclient_depth + 1); in network_init_ssl()
2397 X509_STORE *store = SSL_CTX_get_cert_store(s->ssl_ctx); in network_init_ssl()
2403 if (1 != SSL_CTX_use_certificate_chain_file(s->ssl_ctx, in network_init_ssl()
2411 if (1 != SSL_CTX_use_PrivateKey(s->ssl_ctx, s->pc->ssl_pemfile_pkey)) { in network_init_ssl()
2418 if (SSL_CTX_check_private_key(s->ssl_ctx) != 1) { in network_init_ssl()
2432 SSL_CTX_set_default_read_ahead(s->ssl_ctx, s->ssl_read_ahead); in network_init_ssl()
2433 SSL_CTX_set_mode(s->ssl_ctx, SSL_CTX_get_mode(s->ssl_ctx) in network_init_ssl()
2440 SSL_CTX_set_client_hello_cb(s->ssl_ctx,mod_openssl_client_hello_cb,srv); in network_init_ssl()
2443 s->ssl_ctx, network_ssl_servername_callback) || in network_init_ssl()
2444 !SSL_CTX_set_tlsext_servername_arg(s->ssl_ctx, srv)) { in network_init_ssl()
2453 SSL_CTX_set_alpn_select_cb(s->ssl_ctx,mod_openssl_alpn_select_cb,NULL); in network_init_ssl()
2460 if (!SSL_CTX_set_min_proto_version(s->ssl_ctx, TLS1_2_VERSION)) in network_init_ssl()
2468 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_NO_COMPRESSION); in network_init_ssl()
2646 || (conf.ssl_enabled && NULL == p->ssl_ctxs[0].ssl_ctx)) { in mod_openssl_set_defaults_sockets()
2670 s->ssl_ctx = conf.ssl_ctx; in mod_openssl_set_defaults_sockets()
2673 SSL_CTX_free(conf.ssl_ctx); in mod_openssl_set_defaults_sockets()
3309 hctx->ssl = SSL_new(s->ssl_ctx); in CONNECTION_FUNC()
3807 SSL_CTX_set_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3810 SSL_CTX_clear_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3822 SSL_CTX_clear_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3825 SSL_CTX_set_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3833 SSL_CTX_clear_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3836 SSL_CTX_set_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3844 SSL_CTX_set_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3847 SSL_CTX_clear_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3878 if (!SSL_CTX_set_min_proto_version(s->ssl_ctx, n)) in mod_openssl_ssl_conf_cmd()
3884 if (!SSL_CTX_set_max_proto_version(s->ssl_ctx, x)) in mod_openssl_ssl_conf_cmd()
3890 if (SSL_CTX_set_ciphersuites(s->ssl_ctx, ciphersuites->ptr) != 1) { in mod_openssl_ssl_conf_cmd()
3902 if (SSL_CTX_set_cipher_list(s->ssl_ctx, cipherstring->ptr) != 1) { in mod_openssl_ssl_conf_cmd()
3909 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); in mod_openssl_ssl_conf_cmd()