]> granicus.if.org Git - apache/commit
mod_ssl: Add support for loading private keys from ENGINEs. Support
authorJoe Orton <jorton@apache.org>
Thu, 3 May 2018 13:06:46 +0000 (13:06 +0000)
committerJoe Orton <jorton@apache.org>
Thu, 3 May 2018 13:06:46 +0000 (13:06 +0000)
commit04294308f698e36fe138fe7984f19bdcacfd4b2b
tree40154cfb3135724a21e2cec6bad890bcda13e60b
parent7603230ed1bedfdfc22f8eddab0fda1c47dfd901
mod_ssl: Add support for loading private keys from ENGINEs.  Support
for PKCS#11 URIs only, and PIN entry is not threaded through
SSLPassPhraseDialog config yet.

* modules/ssl/ssl_util.c (modssl_is_engine_key): New function.

* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLCertificateKeyFile):
  Use it, skip check for file existence for engine keys.

* modules/ssl/ssl_engine_pphrase.c (modssl_load_engine_pkey):
  New function.

* modules/ssl/ssl_engine_init.c (ssl_init_server_certs):
  For engine keys, load via modssl_load_engine_pkey.

Submitted by: Anderson Sasaki <ansasaki redhat.com>, jorton

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1830819 13f79535-47bb-0310-9956-ffa450edef68
CHANGES
docs/log-message-tags/next-number
docs/manual/mod/mod_ssl.xml
modules/ssl/ssl_engine_config.c
modules/ssl/ssl_engine_init.c
modules/ssl/ssl_engine_pphrase.c
modules/ssl/ssl_private.h
modules/ssl/ssl_util.c