typedef struct NWSSLSrvConfigRec NWSSLSrvConfigRec;
typedef struct seclisten_rec seclisten_rec;
typedef struct seclistenup_rec seclistenup_rec;
+typedef struct secsocket_data secsocket_data;
struct seclisten_rec {
seclisten_rec *next;
apr_pool_t *pPool;
};
+struct secsocket_data {
+ apr_socket_t* csd;
+ int is_secure;
+};
+
static apr_array_header_t *certlist = NULL;
static unicode_t** certarray = NULL;
static int numcerts = 0;
convert_secure_socket(c, (apr_socket_t*)csd);
}
else {
- ap_set_module_config(c->conn_config, &nwssl_module, csd);
+ secsocket_data *csd_data = apr_palloc(c->pool, sizeof(secsocket_data));
+
+ csd_data->csd = (apr_socket_t*)csd;
+ csd_data->is_secure = 0;
+ ap_set_module_config(c->conn_config, &nwssl_module, (void*)csd_data);
}
return OK;
return isSecureConnUpgradeable (r->server, r->connection);
}
+static int isSecureUpgraded (const request_rec *r)
+{
+ secsocket_data *csd_data = (secsocket_data*)ap_get_module_config(r->connection->conn_config, &nwssl_module);
+
+ return csd_data->is_secure;
+}
+
static int nwssl_hook_Fixup(request_rec *r)
{
int i;
- if (!isSecure(r))
+ if (!isSecure(r) && !isSecureUpgraded(r))
return DECLINED;
apr_table_set(r->subprocess_env, "HTTPS", "on");
static const char *nwssl_hook_http_method (const request_rec *r)
{
- if (isSecure(r))
+ if (isSecure(r) && !isSecureUpgraded(r))
return "https";
return NULL;
char *token_string;
char *token;
char *token_state;
+ secsocket_data *csd_data;
/* Just remove the filter, if it doesn't work the first time, it won't
* work at all for this request.
apr_table_unset(r->headers_out, "Upgrade");
if (r) {
- csd = (apr_socket_t*)ap_get_module_config(r->connection->conn_config, &nwssl_module);
+ csd_data = (secsocket_data*)ap_get_module_config(r->connection->conn_config, &nwssl_module);
+ csd = csd_data->csd;
}
else {
ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server,
ret = SSLize_Socket(sockdes, key, r);
+ if (!ret) {
+ csd_data->is_secure = 1;
+ }
}
else {
ap_log_error(APLOG_MARK, APLOG_ERR, 0, r->server,