Lines Matching refs:s
336 ssl_tlsext_ticket_key_cb (SSL *s, unsigned char key_name[16], in ssl_tlsext_ticket_key_cb() argument
340 UNUSED(s); in ssl_tlsext_ticket_key_cb()
554 plugin_ssl_ctx * const s = p->ssl_ctxs + i; in mod_openssl_free_config() local
555 if (s->ssl_ctx && s->ssl_ctx != ssl_ctx_global_scope) in mod_openssl_free_config()
556 SSL_CTX_free(s->ssl_ctx); in mod_openssl_free_config()
1891 mod_openssl_ssl_conf_cmd (server *srv, plugin_config_socket *s);
1963 mod_openssl_ssl_conf_dhparameters(server *srv, plugin_config_socket *s, const buffer *dhparameters) in mod_openssl_ssl_conf_dhparameters() argument
1974 wolfSSL_CTX_SetTmpDH_buffer(s->ssl_ctx, (unsigned char *)data, in mod_openssl_ssl_conf_dhparameters()
1992 SSL_CTX_set_tmp_dh(s->ssl_ctx, dh); in mod_openssl_ssl_conf_dhparameters()
1995 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_SINGLE_DH_USE); in mod_openssl_ssl_conf_dhparameters()
2009 mod_openssl_ssl_conf_curves(server *srv, plugin_config_socket *s, const buffer *ssl_ec_curve) in mod_openssl_ssl_conf_curves() argument
2022 wolfSSL_SSL_CTX_set_tmp_ecdh(s->ssl_ctx, ecdh); in mod_openssl_ssl_conf_curves()
2023 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_SINGLE_ECDH_USE); in mod_openssl_ssl_conf_curves()
2036 network_init_ssl (server *srv, plugin_config_socket *s, plugin_data *p) in network_init_ssl() argument
2048 s->ssl_ctx = SSL_CTX_new(TLS_server_method()); in network_init_ssl()
2050 s->ssl_ctx = SSL_CTX_new(SSLv23_server_method()); in network_init_ssl()
2052 if (NULL == s->ssl_ctx) { in network_init_ssl()
2065 s->ssl_ctx,(const unsigned char*)CONST_STR_LEN("lighttpd"))){ in network_init_ssl()
2077 SSL_CTX_set_session_cache_mode(s->ssl_ctx, in network_init_ssl()
2083 SSL_CTX_set_options(s->ssl_ctx, ssloptions); in network_init_ssl()
2084 SSL_CTX_set_info_callback(s->ssl_ctx, ssl_info_callback); in network_init_ssl()
2091 & SSL_CTX_set_options(s->ssl_ctx, SSL_OP_NO_SSLv3)) in network_init_ssl()
2099 if (s->ssl_cipher_list) { in network_init_ssl()
2101 if (SSL_CTX_set_cipher_list(s->ssl_ctx,s->ssl_cipher_list->ptr)!=1){ in network_init_ssl()
2107 if (s->ssl_honor_cipher_order) { in network_init_ssl()
2108 SSL_CTX_set_options(s->ssl_ctx,SSL_OP_CIPHER_SERVER_PREFERENCE); in network_init_ssl()
2113 if (s->ssl_honor_cipher_order) in network_init_ssl()
2114 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_PRIORITIZE_CHACHA); in network_init_ssl()
2117 if (!mod_openssl_ssl_conf_dhparameters(srv, s, NULL)) in network_init_ssl()
2121 wolfSSL_CTX_set_tlsext_ticket_key_cb(s->ssl_ctx, ssl_tlsext_ticket_key_cb); in network_init_ssl()
2125 wolfSSL_CTX_set_tlsext_status_cb(s->ssl_ctx, ssl_tlsext_status_cb); in network_init_ssl()
2132 if (!mod_wolfssl_load_ca_files(s->ssl_ctx, p, srv)) in network_init_ssl()
2135 if (s->ssl_verifyclient) { in network_init_ssl()
2136 if (NULL == s->ssl_ca_file) { in network_init_ssl()
2152 STACK_OF(X509_NAME) * const cert_names = s->ssl_ca_dn_file in network_init_ssl()
2153 ? s->ssl_ca_dn_file in network_init_ssl()
2154 : s->ssl_ca_file->names; in network_init_ssl()
2155 wolfSSL_CTX_set_client_CA_list(s->ssl_ctx, in network_init_ssl()
2158 if (s->ssl_verifyclient_enforce) { in network_init_ssl()
2161 wolfSSL_CTX_set_verify(s->ssl_ctx, mode, verify_callback); in network_init_ssl()
2162 wolfSSL_CTX_set_verify_depth(s->ssl_ctx, in network_init_ssl()
2163 s->ssl_verifyclient_depth + 1); in network_init_ssl()
2165 if (s->ssl_ca_crl_file) { in network_init_ssl()
2166 if (!mod_wolfssl_load_cacrls(s->ssl_ctx,s->ssl_ca_crl_file,srv)) in network_init_ssl()
2172 s->ssl_ctx, s->pc->ssl_pemfile->ptr, srv->errh)) in network_init_ssl()
2175 buffer *k = s->pc->ssl_pemfile_pkey; in network_init_ssl()
2176 if (1 != wolfSSL_CTX_use_PrivateKey_buffer(s->ssl_ctx, in network_init_ssl()
2182 s->pc->ssl_pemfile->ptr, s->pc->ssl_privkey->ptr); in network_init_ssl()
2186 if (SSL_CTX_check_private_key(s->ssl_ctx) != 1) { in network_init_ssl()
2190 s->pc->ssl_pemfile->ptr, s->pc->ssl_privkey->ptr); in network_init_ssl()
2194 SSL_CTX_set_default_read_ahead(s->ssl_ctx, s->ssl_read_ahead); in network_init_ssl()
2195 wolfSSL_CTX_set_mode(s->ssl_ctx, in network_init_ssl()
2197 wolfSSL_CTX_set_mode(s->ssl_ctx, /*(wolfSSL default mode)*/ in network_init_ssl()
2200 wolfSSL_CTX_set_mode(s->ssl_ctx, /*(not currently implemented)*/ in network_init_ssl()
2227 s->ssl_ctx, network_ssl_servername_callback); in network_init_ssl()
2228 wolfSSL_CTX_set_servername_arg(s->ssl_ctx, srv); in network_init_ssl()
2237 SSL_CTX_set_alpn_select_cb(s->ssl_ctx,mod_openssl_alpn_select_cb,NULL); in network_init_ssl()
2242 if (wolfSSL_CTX_SetMinVersion(s->ssl_ctx, WOLFSSL_TLSV1_2) in network_init_ssl()
2246 if (s->ssl_conf_cmd && s->ssl_conf_cmd->used) { in network_init_ssl()
2247 if (0 != mod_openssl_ssl_conf_cmd(srv, s)) return -1; in network_init_ssl()
2437 plugin_ssl_ctx * const s = p->ssl_ctxs + sidx; in mod_openssl_set_defaults_sockets() local
2438 *s = *p->ssl_ctxs;/*(copy struct of ssl_ctx from global scope)*/ in mod_openssl_set_defaults_sockets()
2452 plugin_ssl_ctx * const s = p->ssl_ctxs + sidx; in mod_openssl_set_defaults_sockets() local
2453 s->ssl_ctx = conf.ssl_ctx; in mod_openssl_set_defaults_sockets()
3008 plugin_ssl_ctx * const s = p->ssl_ctxs + srv_sock->sidx; in CONNECTION_FUNC() local
3009 hctx->ssl = SSL_new(s->ssl_ctx); in CONNECTION_FUNC()
3301 const char *s; in http_cgi_ssl_env() local
3304 s = SSL_get_version(hctx->ssl); in http_cgi_ssl_env()
3305 http_header_env_set(r, CONST_STR_LEN("SSL_PROTOCOL"), s, strlen(s)); in http_cgi_ssl_env()
3308 s = SSL_CIPHER_get_name(cipher); in http_cgi_ssl_env()
3309 http_header_env_set(r, CONST_STR_LEN("SSL_CIPHER"), s, strlen(s)); in http_cgi_ssl_env()
3449 mod_openssl_ssl_conf_cmd (server *srv, plugin_config_socket *s) in mod_openssl_ssl_conf_cmd() argument
3460 for (size_t i = 0; i < s->ssl_conf_cmd->used; ++i) { in mod_openssl_ssl_conf_cmd()
3461 data_string *ds = (data_string *)s->ssl_conf_cmd->data[i]; in mod_openssl_ssl_conf_cmd()
3473 if (!mod_openssl_ssl_conf_dhparameters(srv, s, &ds->value)) in mod_openssl_ssl_conf_cmd()
3506 SSL_CTX_clear_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3509 SSL_CTX_set_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3517 SSL_CTX_clear_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3520 SSL_CTX_set_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3528 SSL_CTX_set_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3531 SSL_CTX_clear_options(s->ssl_ctx, in mod_openssl_ssl_conf_cmd()
3533 s->ssl_honor_cipher_order = flag; in mod_openssl_ssl_conf_cmd()
3562 if (wolfSSL_CTX_SetMinVersion(s->ssl_ctx, n) != WOLFSSL_SUCCESS) in mod_openssl_ssl_conf_cmd()
3574 wolfSSL_CTX_set_options(s->ssl_ctx, WOLFSSL_OP_NO_TLSv1); in mod_openssl_ssl_conf_cmd()
3577 wolfSSL_CTX_set_options(s->ssl_ctx, WOLFSSL_OP_NO_TLSv1_1); in mod_openssl_ssl_conf_cmd()
3580 wolfSSL_CTX_set_options(s->ssl_ctx, WOLFSSL_OP_NO_TLSv1_2); in mod_openssl_ssl_conf_cmd()
3583 wolfSSL_CTX_set_options(s->ssl_ctx, WOLFSSL_OP_NO_TLSv1_3); in mod_openssl_ssl_conf_cmd()
3596 if (SSL_CTX_set_cipher_list(s->ssl_ctx, cipherstring->ptr) != 1) { in mod_openssl_ssl_conf_cmd()
3602 if (s->ssl_honor_cipher_order) in mod_openssl_ssl_conf_cmd()
3603 SSL_CTX_set_options(s->ssl_ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); in mod_openssl_ssl_conf_cmd()
3607 if (!mod_openssl_ssl_conf_curves(srv, s, curves)) in mod_openssl_ssl_conf_cmd()