* modules/ssl/ssl_engine_ocsp.c, modules/ssl/ssl_private.h: Comment

  tweaks, no functional change.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@599497 13f79535-47bb-0310-9956-ffa450edef68

diff --git a/modules/ssl/ssl_engine_ocsp.c b/modules/ssl/ssl_engine_ocsp.c
index 718137d58d9417428896ae66506febd1e32ff566..042ad0341c109848c84b5d124c9bff4073a8dbbd 100644 (file)
--- a/modules/ssl/ssl_engine_ocsp.c
+++ b/modules/ssl/ssl_engine_ocsp.c
@@ -223,8 +223,8 @@ int modssl_verify_ocsp(X509_STORE_CTX *ctx, SSLSrvConfigRec *sc,
     apr_pool_t *vpool;
     int rv;
     
-    /* Since the passed-inpool is likely to be the connection pool,
-     * create a temporary pool to constrain memory use. */
+    /* Create a temporary pool to constrain memory use (the passed-in
+     * pool may be e.g. a connection pool). */
     apr_pool_create(&vpool, pool);
 
     rv = verify_ocsp_status(cert, ctx, c, sc, s, vpool);

diff --git a/modules/ssl/ssl_private.h b/modules/ssl/ssl_private.h
index 97613947581c16c73fea5f8afa3c7d5f123e2adc..3ef08f48a49fc66f1893f76c6381b5fc5dc003e1 100644 (file)
--- a/modules/ssl/ssl_private.h
+++ b/modules/ssl/ssl_private.h
@@ -711,12 +711,11 @@ void         ssl_var_log_config_register(apr_pool_t *p);
 #define APR_SHM_MAXSIZE (64 * 1024 * 1024)
 
 #ifdef HAVE_OCSP
-/* Perform OCSP verification using the given context and
- * configuration.  Returns non-zero on success or zero on failure.  On
- * failure, the context error code is set. */
-int modssl_verify_ocsp(X509_STORE_CTX *ctx, 
-                       SSLSrvConfigRec *sc, server_rec *s, conn_rec *c, 
-                       apr_pool_t *pool);
+/* Perform OCSP validation of the current cert in the given context.
+ * Returns non-zero on success or zero on failure.  On failure, the
+ * context error code is set. */
+int modssl_verify_ocsp(X509_STORE_CTX *ctx, SSLSrvConfigRec *sc, 
+                       server_rec *s, conn_rec *c, apr_pool_t *pool);
 
 /* OCSP helper interface; dispatches the given OCSP request to the
  * responder at the given URI.  Returns the decoded OCSP response