www/apache
1
0
Fork 0
mirror of https://github.com/apache/httpd.git synced 2025-08-07 04:02:58 +03:00
Code Activity

Add SSLProxyMachineCertificateChainFile directive and documentation for bug 50812

Browse Source 
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1160863 13f79535-47bb-0310-9956-ffa450edef68
This commit is contained in:
Daniel Ruggeri
2011-08-23 19:35:07 +00:00
parent 840f787b31
commit e5df36d18a
8 changed files with 135 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
modules/ssl/ssl_engine_init.c
View File

@@ -1086,6 +1086,7 @@ static void ssl_init_proxy_certs(server_rec *s,
int n, ncerts = 0;
STACK_OF(X509_INFO) *sk;
modssl_pk_proxy_t *pkp = mctx->pkp;
STACK_OF(X509_INFO) *chain;
SSL_CTX_set_client_cert_cb(mctx->ssl_ctx,
ssl_callback_proxy_cert);
@@ -1130,6 +1131,30 @@ static void ssl_init_proxy_certs(server_rec *s,
"loaded %d client certs for SSL proxy",
ncerts);
pkp->certs = sk;
if (!pkp->ca_cert_file) {
return;
}
/* Load all of the CA certs and construct a chain */
sk = sk_X509_INFO_new_null();
SSL_X509_INFO_load_file(ptemp, sk, pkp->ca_cert_file);
pkp->ca_certs = (STACK_OF(X509_INFO) **) apr_pcalloc(p, ncerts * sizeof(sk));
for (n = 0; n < ncerts; n++) {
int len;
X509_INFO *inf = sk_X509_INFO_value(pkp->certs, n);
chain = sk_X509_INFO_new_null();
len = SSL_X509_INFO_create_chain(inf->x509, sk, chain);
pkp->ca_certs[n] = chain;
ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s,
"client certificate %i has loaded %i "
"intermediary signers ", n, len);
}
sk_X509_INFO_free(sk);
}
static void ssl_init_proxy_ctx(server_rec *s,