Lines Matching refs:NULL
294 return NULL; in tlsext_ticket_key_get()
311 return NULL; in tlsext_ticket_key_find()
343 if (NULL == k) in ssl_tlsext_ticket_key_cb()
348 EVP_EncryptInit_ex(ctx, EVP_aes_256_cbc(), NULL, k->tick_aes_key, iv); in ssl_tlsext_ticket_key_cb()
350 EVP_sha256(), NULL); in ssl_tlsext_ticket_key_cb()
356 if (NULL == k) in ssl_tlsext_ticket_key_cb()
359 EVP_sha256(), NULL); in ssl_tlsext_ticket_key_cb()
360 EVP_DecryptInit_ex(ctx, EVP_aes_256_cbc(), NULL, k->tick_aes_key, iv); in ssl_tlsext_ticket_key_cb()
403 if (0 != fdevent_load_file_bytes((char *)buf,(off_t)sizeof(buf),0,fn,NULL)) in mod_openssl_session_ticket_key_file()
459 if (NULL == hctx->conf.pc) return SSL_TLSEXT_ERR_NOACK;/*should not happen*/ in ssl_tlsext_status_cb()
461 if (NULL == ssl_stapling) return SSL_TLSEXT_ERR_NOACK; in ssl_tlsext_status_cb()
467 uint8_t *ocsp_resp = XMALLOC(len, NULL, DYNAMIC_TYPE_OPENSSL); in ssl_tlsext_status_cb()
468 if (NULL == ocsp_resp) in ssl_tlsext_status_cb()
475 hctx->r->uri.authority.ptr, ERR_error_string(ERR_get_error(), NULL)); in ssl_tlsext_status_cb()
538 if (NULL == certs) return; in mod_wolfssl_free_der_certs()
539 for (int i = 0; NULL != certs[i]; ++i) in mod_wolfssl_free_der_certs()
550 if (NULL != p->ssl_ctxs) { in mod_openssl_free_config()
564 if (NULL == p->cvlist) return; in mod_openssl_free_config()
611 if (NULL == crt) return 0; in mod_wolfssl_cert_is_active()
660 if (NULL == data) return NULL; in mod_wolfssl_load_pem_file()
662 buffer **certs = NULL; in mod_wolfssl_load_pem_file()
675 if (NULL == strstr(data, "-----")) { in mod_wolfssl_load_pem_file()
679 certs[1] = NULL; in mod_wolfssl_load_pem_file()
686 certs[count] = NULL; in mod_wolfssl_load_pem_file()
697 if (NULL == e) break; in mod_wolfssl_load_pem_file()
702 if (NULL == buffer_append_base64_decode(der,b,len,BASE64_STANDARD)) in mod_wolfssl_load_pem_file()
710 if (NULL == e) break; in mod_wolfssl_load_pem_file()
715 if (NULL == buffer_append_base64_decode(der,b,len,BASE64_STANDARD)) in mod_wolfssl_load_pem_file()
730 certs = NULL; in mod_wolfssl_load_pem_file()
740 return certs ? certs[0] : NULL; in mod_wolfssl_load_pem_file()
749 if (NULL == data) return NULL; in mod_wolfssl_evp_pkey_load_pem_file()
751 buffer *pkey = NULL; in mod_wolfssl_evp_pkey_load_pem_file()
771 else if (NULL == strstr(data, "-----")) { in mod_wolfssl_evp_pkey_load_pem_file()
785 if (NULL == buffer_append_base64_decode(pkey, b, len, BASE64_STANDARD)) in mod_wolfssl_evp_pkey_load_pem_file()
799 return NULL; in mod_wolfssl_evp_pkey_load_pem_file()
814 if (NULL == data) return -1; in mod_wolfssl_CTX_use_certificate_chain_file()
816 int rc = (NULL != strstr(data, "-----")) in mod_wolfssl_CTX_use_certificate_chain_file()
831 "SSL: %s %s", ERR_error_string(rc, NULL), fn); in mod_wolfssl_CTX_use_certificate_chain_file()
840 buffer **certs = NULL; in STACK_OF()
841 if (NULL == mod_wolfssl_load_pem_file(ssl_ca_file->ptr, errh, &certs)) { in STACK_OF()
845 return NULL; in STACK_OF()
848 WOLF_STACK_OF(WOLFSSL_X509_NAME) *canames = wolfSSL_sk_X509_NAME_new(NULL); in STACK_OF()
849 if (NULL == canames) { in STACK_OF()
851 return NULL; in STACK_OF()
857 for (int i = 0; NULL != certs[i]; ++i) { in STACK_OF()
862 WOLFSSL_X509_NAME *subj = NULL; in STACK_OF()
863 if (NULL == ca in STACK_OF()
864 || NULL == (subj = wolfSSL_X509_get_subject_name(ca)) in STACK_OF()
874 return NULL; in STACK_OF()
890 buffer **certs = NULL; in mod_wolfssl_load_cacerts()
891 if (NULL == mod_wolfssl_load_pem_file(ssl_ca_file->ptr, errh, &certs)) { in mod_wolfssl_load_cacerts()
895 return NULL; in mod_wolfssl_load_cacerts()
899 if (NULL == castore) { in mod_wolfssl_load_cacerts()
901 return NULL; in mod_wolfssl_load_cacerts()
904 WOLF_STACK_OF(WOLFSSL_X509_NAME) *canames = wolfSSL_sk_X509_NAME_new(NULL); in mod_wolfssl_load_cacerts()
905 if (NULL == canames) { in mod_wolfssl_load_cacerts()
908 return NULL; in mod_wolfssl_load_cacerts()
914 for (int i = 0; NULL != certs[i]; ++i) { in mod_wolfssl_load_cacerts()
919 WOLFSSL_X509_NAME *subj = NULL; in mod_wolfssl_load_cacerts()
920 if (NULL == ca || !wolfSSL_X509_STORE_add_cert(castore, ca) in mod_wolfssl_load_cacerts()
921 || NULL == (subj = wolfSSL_X509_get_subject_name(ca)) in mod_wolfssl_load_cacerts()
932 return NULL; in mod_wolfssl_load_cacerts()
958 if (NULL == data) return 0; in mod_wolfssl_load_cacrls()
970 "SSL: %s %s", ERR_error_string(rc, NULL), fn); in mod_wolfssl_load_cacrls()
987 if (NULL == data) return 0; in mod_wolfssl_load_verify_locn()
999 "SSL: %s %s", ERR_error_string(rc, NULL), fn); in mod_wolfssl_load_verify_locn()
1021 if (NULL == p->srv) return; in FREE_FUNC()
1187 if (preverify_ok && 0 == depth && NULL != hctx->conf.ssl_ca_dn_file) { in verify_callback()
1193 if (NULL == err_cert) return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1216 if (NULL == err_cert) return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1243 if (!pc || NULL == pc->ssl_pemfile_x509 || NULL == pc->ssl_pemfile_pkey) { in mod_openssl_cert_cb()
1260 hctx->r->uri.authority.ptr, ERR_error_string(ERR_get_error(), NULL)); in mod_openssl_cert_cb()
1270 hctx->r->uri.authority.ptr, ERR_error_string(ERR_get_error(), NULL)); in mod_openssl_cert_cb()
1275 if (NULL == hctx->conf.ssl_ca_file) { in mod_openssl_cert_cb()
1290 wolfSSL_set_verify(ssl, SSL_VERIFY_NONE, NULL); in mod_openssl_cert_cb()
1333 return (mod_openssl_cert_cb(hctx->ssl, NULL) == 1) in mod_openssl_SNI()
1414 if (NULL == data) return NULL; in mod_openssl_load_stapling_file()
1416 if (NULL == b) in mod_openssl_load_stapling_file()
1435 return wolfSSL_ASN1_TIME_diff(&day, &sec, NULL, asn1time) in mod_openssl_asn1_time_to_posix()
1450 (void)mod_openssl_asn1_time_to_posix(NULL); in mod_openssl_ocsp_next_update()
1455 OCSP_RESPONSE *ocsp = d2i_OCSP_RESPONSE(NULL, &p, buffer_clen(der)); in mod_openssl_ocsp_next_update()
1456 if (NULL == ocsp) return -1; in mod_openssl_ocsp_next_update()
1458 if (NULL == bs) { in mod_openssl_ocsp_next_update()
1464 ASN1_TIME *nextupd = NULL; in mod_openssl_ocsp_next_update()
1476 OCSP_CERTID *id = (NULL != pc->ssl_pemfile_chain) in mod_openssl_ocsp_next_update()
1477 ? OCSP_cert_to_id(NULL, pc->ssl_pemfile_x509, in mod_openssl_ocsp_next_update()
1479 : NULL; in mod_openssl_ocsp_next_update()
1480 if (id == NULL) { in mod_openssl_ocsp_next_update()
1485 OCSP_resp_find_status(bs, id, NULL, NULL, NULL, NULL, &nextupd); in mod_openssl_ocsp_next_update()
1488 OCSP_single_get0_status(OCSP_resp_get0(bs, 0), NULL, NULL, NULL, &nextupd); in mod_openssl_ocsp_next_update()
1508 if (NULL == pc->ssl_stapling) /*(previously discarded or never loaded)*/ in mod_openssl_expire_stapling_file()
1513 pc->ssl_stapling = NULL; in mod_openssl_expire_stapling_file()
1570 if (NULL == p->cvlist) return; in mod_openssl_refresh_stapling_files()
1593 wolfSSL_X509_get_ext_d2i(crt, NID_tlsfeature, NULL, NULL); in mod_openssl_crt_must_staple()
1594 if (NULL == tlsf) return 0; in mod_openssl_crt_must_staple()
1626 if (!mod_openssl_init_once_openssl(srv)) return NULL; in network_openssl_load_pemfile()
1628 buffer **ssl_pemfile_chain = NULL; in network_openssl_load_pemfile()
1631 if (NULL == ssl_pemfile_x509) { in network_openssl_load_pemfile()
1635 return NULL; in network_openssl_load_pemfile()
1640 if (NULL == ssl_pemfile_pkey) { in network_openssl_load_pemfile()
1643 return NULL; in network_openssl_load_pemfile()
1655 pc->ssl_stapling = NULL; in network_openssl_load_pemfile()
1710 buffer *ssl_pemfile_x509 = NULL; in mod_openssl_acme_tls_1()
1711 buffer *ssl_pemfile_pkey = NULL; in mod_openssl_acme_tls_1()
1712 buffer **ssl_pemfile_chain = NULL; in mod_openssl_acme_tls_1()
1724 if (NULL != strchr(name->ptr, '/')) return rc; in mod_openssl_acme_tls_1()
1738 if (NULL == ssl_pemfile_x509) { in mod_openssl_acme_tls_1()
1747 if (NULL == ssl_pemfile_pkey) { in mod_openssl_acme_tls_1()
1758 ERR_error_string(ERR_get_error(), NULL), b->ptr); in mod_openssl_acme_tls_1()
1770 "name %s: %s", name->ptr, ERR_error_string(ERR_get_error(),NULL)); in mod_openssl_acme_tls_1()
1787 "name %s: %s", name->ptr, ERR_error_string(ERR_get_error(),NULL)); in mod_openssl_acme_tls_1()
1792 wolfSSL_set_verify(ssl, SSL_VERIFY_NONE, NULL); in mod_openssl_acme_tls_1()
1842 if (hctx->r->handler_module == NULL)/*(e.g. not mod_sockproxy)*/ in mod_openssl_alpn_select_cb()
1902 #define DH_set0_pqg(dh, dh_p, NULL, dh_g) \ argument
1903 ((dh)->p = (dh_p), (dh)->g = (dh_g), (dh_p) != NULL && (dh_g) != NULL)
1947 if (dh == NULL) in get_dh2048()
1948 return NULL; in get_dh2048()
1949 p = BN_bin2bn(dhp_2048, sizeof(dhp_2048), NULL); in get_dh2048()
1950 g = BN_bin2bn(dhg_2048, sizeof(dhg_2048), NULL); in get_dh2048()
1951 if (p == NULL || g == NULL || !DH_set0_pqg(dh, p, NULL, g)) { in get_dh2048()
1955 return NULL; in get_dh2048()
1972 int rc = (NULL != data) ? 0 : -1; in mod_openssl_ssl_conf_dhparameters()
1987 if (dh == NULL) { in mod_openssl_ssl_conf_dhparameters()
2017 if (ecdh == NULL) { in mod_openssl_ssl_conf_curves()
2052 if (NULL == s->ssl_ctx) { in network_init_ssl()
2054 "SSL: %s", ERR_error_string(ERR_get_error(), NULL)); in network_init_ssl()
2068 ERR_error_string(ERR_get_error(), NULL)); in network_init_ssl()
2094 "SSL: %s", ERR_error_string(ERR_get_error(), NULL)); in network_init_ssl()
2103 "SSL: %s", ERR_error_string(ERR_get_error(), NULL)); in network_init_ssl()
2117 if (!mod_openssl_ssl_conf_dhparameters(srv, s, NULL)) in network_init_ssl()
2136 if (NULL == s->ssl_ca_file) { in network_init_ssl()
2181 "SSL: %s %s %s", ERR_error_string(ERR_get_error(), NULL), in network_init_ssl()
2189 "reason: %s %s %s", ERR_error_string(ERR_get_error(), NULL), in network_init_ssl()
2237 SSL_CTX_set_alpn_select_cb(s->ssl_ctx,mod_openssl_alpn_select_cb,NULL); in network_init_ssl()
2280 ,{ NULL, 0, in mod_openssl_set_defaults_sockets()
2420 if (NULL == conf.pc) { in mod_openssl_set_defaults_sockets()
2429 || (conf.ssl_enabled && NULL == p->ssl_ctxs[0].ssl_ctx)) { in mod_openssl_set_defaults_sockets()
2528 ,{ NULL, 0, in SETDEFAULTS_FUNC()
2539 const buffer *default_ssl_ca_crl_file = NULL; in SETDEFAULTS_FUNC()
2545 config_plugin_value_t *pemfile = NULL; in SETDEFAULTS_FUNC()
2546 config_plugin_value_t *privkey = NULL; in SETDEFAULTS_FUNC()
2547 const buffer *ssl_stapling_file = NULL; in SETDEFAULTS_FUNC()
2548 const buffer *ssl_ca_file = NULL; in SETDEFAULTS_FUNC()
2549 const buffer *ssl_ca_dn_file = NULL; in SETDEFAULTS_FUNC()
2550 const buffer *ssl_ca_crl_file = NULL; in SETDEFAULTS_FUNC()
2551 X509_STORE *ca_store = NULL; in SETDEFAULTS_FUNC()
2568 if (NULL != cpv->v.v) { in SETDEFAULTS_FUNC()
2574 ERR_error_string(ERR_get_error(), NULL), in SETDEFAULTS_FUNC()
2596 if (NULL != cpv->v.v) { in SETDEFAULTS_FUNC()
2601 ERR_error_string(ERR_get_error(), NULL), in SETDEFAULTS_FUNC()
2630 cpv->v.b = NULL; in SETDEFAULTS_FUNC()
2636 cpv->v.b = NULL; in SETDEFAULTS_FUNC()
2683 if (NULL == privkey) privkey = pemfile; in SETDEFAULTS_FUNC()
2788 "SSL: %d %d %s",ssl_r,wr,ERR_error_string(err,NULL)); in connection_write_cq_ssl()
2817 "SSL: %d %d %s", ssl_r, wr, ERR_error_string(err, NULL)); in connection_write_cq_ssl()
2839 char *mem = NULL; in connection_read_cq_ssl()
2919 "SSL: %d %s", rc, ERR_error_string(ssl_err, NULL)); in connection_read_cq_ssl()
2977 "SSL: %d %s", rc, ERR_error_string(ssl_err, NULL)); in connection_read_cq_ssl()
3010 if (NULL != hctx->ssl in CONNECTION_FUNC()
3022 "SSL: %s", ERR_error_string(ERR_get_error(), NULL)); in CONNECTION_FUNC()
3045 if (NULL == hctx) return HANDLER_GO_ON; in CONNECTION_FUNC()
3149 "SSL: %d %d %s", ssl_r, ret, ERR_error_string(err, NULL)); in mod_openssl_close_notify()
3165 if (NULL != hctx) { in CONNECTION_FUNC()
3166 con->plugin_ctx[p->id] = NULL; in CONNECTION_FUNC()
3285 pemsz = der ? wc_DerToPemEx(der, dersz, NULL, 0, NULL, CERT_TYPE) : 0; in https_add_ssl_client_entries()
3290 pemsz, NULL, CERT_TYPE)) in https_add_ssl_client_entries()
3335 if (NULL == hctx) return HANDLER_GO_ON; in REQUEST_FUNC()
3358 if (NULL == hctx) return HANDLER_GO_ON; in REQUEST_FUNC()
3372 r->plugin_ctx[p->id] = NULL; /* simple flag for request_env_patched */ in REQUEST_FUNC()
3421 if (NULL == b) /* default: min TLSv1.2, max TLSv1.3 */ in mod_openssl_ssl_conf_proto_val()
3454 buffer *cipherstring = NULL; in mod_openssl_ssl_conf_cmd()
3456 buffer *minb = NULL; in mod_openssl_ssl_conf_cmd()
3457 buffer *maxb = NULL; in mod_openssl_ssl_conf_cmd()
3458 buffer *curves = NULL; in mod_openssl_ssl_conf_cmd()
3598 "SSL: %s", ERR_error_string(ERR_get_error(), NULL)); in mod_openssl_ssl_conf_cmd()