Lines Matching refs:conf
201 plugin_config conf; member
459 if (NULL == hctx->conf.pc) return SSL_TLSEXT_ERR_NOACK;/*should not happen*/ in ssl_tlsext_status_cb()
460 buffer *ssl_stapling = hctx->conf.pc->ssl_stapling; in ssl_tlsext_status_cb()
473 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in ssl_tlsext_status_cb()
1181 if (depth > hctx->conf.ssl_verifyclient_depth) { in verify_callback()
1187 if (preverify_ok && 0 == depth && NULL != hctx->conf.ssl_ca_dn_file) { in verify_callback()
1190 STACK_OF(X509_NAME) * const cert_names = hctx->conf.ssl_ca_dn_file; in verify_callback()
1193 if (NULL == err_cert) return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1216 if (NULL == err_cert) return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1218 log_error_st *errh = hctx->r->conf.errh; in verify_callback()
1233 return !hctx->conf.ssl_verifyclient_enforce; in verify_callback()
1240 plugin_cert *pc = hctx->conf.pc; in mod_openssl_cert_cb()
1246 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1258 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1268 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1274 if (hctx->conf.ssl_verifyclient) { in mod_openssl_cert_cb()
1275 if (NULL == hctx->conf.ssl_ca_file) { in mod_openssl_cert_cb()
1276 log_error(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_cert_cb()
1284 if (hctx->conf.ssl_verifyclient_enforce) in mod_openssl_cert_cb()
1287 wolfSSL_set_verify_depth(ssl, hctx->conf.ssl_verifyclient_depth + 1); in mod_openssl_cert_cb()
1310 log_error(r->conf.errh, __FILE__, __LINE__, in mod_openssl_SNI()
1321 r->conf.http_parseopts, 443)) in mod_openssl_SNI()
1327 mod_openssl_patch_config(r, &hctx->conf); in mod_openssl_SNI()
1366 int read_ahead = hctx->conf.ssl_read_ahead; in network_ssl_servername_callback()
1368 if (!read_ahead && hctx->conf.ssl_read_ahead) in network_ssl_servername_callback()
1369 SSL_set_read_ahead(ssl, hctx->conf.ssl_read_ahead); in network_ssl_servername_callback()
1709 log_error_st * const errh = hctx->r->conf.errh; in mod_openssl_acme_tls_1()
1717 if (!hctx->conf.ssl_acme_tls_1) in mod_openssl_acme_tls_1()
1727 if (0 != http_request_host_policy(name,hctx->r->conf.http_parseopts,443)) in mod_openssl_acme_tls_1()
1730 buffer_copy_path_len2(b, BUF_PTR_LEN(hctx->conf.ssl_acme_tls_1), in mod_openssl_acme_tls_1()
1791 hctx->conf.ssl_verifyclient_enforce = 0; in mod_openssl_acme_tls_1()
1840 if (!hctx->r->conf.h2proto) continue; in mod_openssl_alpn_select_cb()
2308 plugin_config_socket conf; in mod_openssl_set_defaults_sockets() local
2309 memcpy(&conf, &defaults, sizeof(conf)); in mod_openssl_set_defaults_sockets()
2322 conf.ssl_enabled = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2327 conf.ssl_cipher_list = cpv->v.b; in mod_openssl_set_defaults_sockets()
2329 conf.ssl_honor_cipher_order = 1; in mod_openssl_set_defaults_sockets()
2338 *(const array **)&conf.ssl_conf_cmd = cpv->v.a; in mod_openssl_set_defaults_sockets()
2353 if (0 == i) memcpy(&defaults, &conf, sizeof(conf)); in mod_openssl_set_defaults_sockets()
2355 if (0 != i && !conf.ssl_enabled) continue; in mod_openssl_set_defaults_sockets()
2361 conf.ssl_ca_file = p->defaults.ssl_ca_file; in mod_openssl_set_defaults_sockets()
2362 conf.ssl_ca_dn_file = p->defaults.ssl_ca_dn_file; in mod_openssl_set_defaults_sockets()
2363 conf.ssl_ca_crl_file = p->defaults.ssl_ca_crl_file; in mod_openssl_set_defaults_sockets()
2364 conf.ssl_verifyclient = p->defaults.ssl_verifyclient; in mod_openssl_set_defaults_sockets()
2365 conf.ssl_verifyclient_enforce = p->defaults.ssl_verifyclient_enforce; in mod_openssl_set_defaults_sockets()
2366 conf.ssl_verifyclient_depth = p->defaults.ssl_verifyclient_depth; in mod_openssl_set_defaults_sockets()
2367 conf.ssl_read_ahead = p->defaults.ssl_read_ahead; in mod_openssl_set_defaults_sockets()
2379 conf.pc = cpv->v.v; in mod_openssl_set_defaults_sockets()
2383 conf.ssl_ca_file = cpv->v.v; in mod_openssl_set_defaults_sockets()
2387 conf.ssl_ca_dn_file = cpv->v.v; in mod_openssl_set_defaults_sockets()
2391 conf.ssl_ca_crl_file = cpv->v.b; in mod_openssl_set_defaults_sockets()
2394 conf.ssl_read_ahead = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2400 conf.ssl_verifyclient = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2403 conf.ssl_verifyclient_enforce = (0 != cpv->v.u); in mod_openssl_set_defaults_sockets()
2406 conf.ssl_verifyclient_depth = (unsigned char)cpv->v.shrt; in mod_openssl_set_defaults_sockets()
2420 if (NULL == conf.pc) { in mod_openssl_set_defaults_sockets()
2421 if (0 == i && !conf.ssl_enabled) continue; in mod_openssl_set_defaults_sockets()
2429 || (conf.ssl_enabled && NULL == p->ssl_ctxs[0].ssl_ctx)) { in mod_openssl_set_defaults_sockets()
2451 if (0 == network_init_ssl(srv, &conf, p)) { in mod_openssl_set_defaults_sockets()
2453 s->ssl_ctx = conf.ssl_ctx; in mod_openssl_set_defaults_sockets()
2456 SSL_CTX_free(conf.ssl_ctx); in mod_openssl_set_defaults_sockets()
2884 && (hctx->conf.ssl_read_ahead || SSL_pending(hctx->ssl) > 0)); in connection_read_cq_ssl()
2924 if (!hctx->conf.ssl_log_noise) break; in connection_read_cq_ssl()
2932 if (0==oerrno && 0==cq->bytes_in && !hctx->conf.ssl_log_noise) in connection_read_cq_ssl()
2970 if (!hctx->conf.ssl_log_noise) continue; in connection_read_cq_ssl()
3004 hctx->errh = r->conf.errh; in CONNECTION_FUNC()
3017 mod_openssl_patch_config(r, &hctx->conf); in CONNECTION_FUNC()
3021 log_error(r->conf.errh, __FILE__, __LINE__, in CONNECTION_FUNC()
3100 } while (ret > 0 && (hctx->conf.ssl_read_ahead||(ssl_r-=ret))); in mod_openssl_close_notify()
3138 log_perror(hctx->r->conf.errh, __FILE__, __LINE__, in mod_openssl_close_notify()
3146 errh = hctx->r->conf.errh; in mod_openssl_close_notify()
3264 if (hctx->conf.ssl_verifyclient_username) { in https_add_ssl_client_entries()
3270 const buffer *varname = hctx->conf.ssl_verifyclient_username; in https_add_ssl_client_entries()
3282 if (hctx->conf.ssl_verifyclient_export_cert) { in https_add_ssl_client_entries()
3339 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()
3360 mod_openssl_patch_config(r, &hctx->conf); in REQUEST_FUNC()
3361 if (hctx->conf.ssl_verifyclient) { in REQUEST_FUNC()