* CFLAGS="-DSSL_EXPERIMENTAL_xxxx_IGNORE".
*/
#ifdef SSL_EXPERIMENTAL
-#ifndef SSL_EXPERIMENTAL_PROXY_IGNORE
-#define SSL_EXPERIMENTAL_PROXY
-#endif
#ifdef SSL_ENGINE
#ifndef SSL_EXPERIMENTAL_ENGINE_IGNORE
#define SSL_EXPERIMENTAL_ENGINE
const char *szCARevocationPath;
const char *szCARevocationFile;
X509_STORE *pRevocationStore;
-#ifdef SSL_EXPERIMENTAL_PROXY
- /* Configuration details for proxy operation */
- ssl_proto_t nProxyProtocol;
- int bProxyVerify;
- int nProxyVerifyDepth;
- const char *szProxyCACertificatePath;
- const char *szProxyCACertificateFile;
- const char *szProxyClientCertificateFile;
- const char *szProxyClientCertificatePath;
- const char *szProxyCipherSuite;
- SSL_CTX *pSSLProxyCtx;
- STACK_OF(X509_INFO) *skProxyClientCerts;
-#endif
} SSLSrvConfigRec;
/*
conn_rec *, request_rec *,
char *));
-/* Proxy Extensions */
-#if 0 /* XXX */
-void ssl_ext_proxy_register(apr_pool_t *p);
-#endif /* -0- */
-
/* I/O */
void ssl_io_filter_init(conn_rec *, SSL *);
void ssl_io_filter_register(apr_pool_t *);
sc->szCARevocationFile = NULL;
sc->pRevocationStore = NULL;
-#ifdef SSL_EXPERIMENTAL_PROXY
- sc->nProxyVerifyDepth = UNSET;
- sc->szProxyCACertificatePath = NULL;
- sc->szProxyCACertificateFile = NULL;
- sc->szProxyClientCertificateFile = NULL;
- sc->szProxyClientCertificatePath = NULL;
- sc->szProxyCipherSuite = NULL;
- sc->nProxyProtocol = SSL_PROTOCOL_ALL & ~SSL_PROTOCOL_TLSV1;
- sc->bProxyVerify = UNSET;
- sc->pSSLProxyCtx = NULL;
-#endif
-
memset((void*)sc->szPublicCertFiles, 0, sizeof(sc->szPublicCertFiles));
memset((void*)sc->szPrivateKeyFiles, 0, sizeof(sc->szPrivateKeyFiles));
memset(sc->pPublicCert, 0, sizeof(sc->pPublicCert));
cfgMerge(pPrivateKey[i], NULL);
}
-#ifdef SSL_EXPERIMENTAL_PROXY
- cfgMergeInt(nProxyVerifyDepth);
- cfgMergeString(szProxyCACertificatePath);
- cfgMergeString(szProxyCACertificateFile);
- cfgMergeString(szProxyClientCertificateFile);
- cfgMergeString(szProxyClientCertificatePath);
- cfgMergeString(szProxyCipherSuite);
- cfgMerge(nProxyProtocol, (SSL_PROTOCOL_ALL & ~SSL_PROTOCOL_TLSV1));
- cfgMergeBool(bProxyVerify);
- cfgMerge(pSSLProxyCtx, NULL);
-#endif
-
return mrg;
}