47 #define APR_WANT_STRFUNC 48 #define APR_WANT_MEMFUNC 65 #if APR_HAVE_SYS_TIME_H 81 #define BOOL unsigned int 87 #include <openssl/opensslv.h> 88 #if (OPENSSL_VERSION_NUMBER >= 0x10001000) 90 #define OPENSSL_NO_SSL_INTERN 92 #if OPENSSL_VERSION_NUMBER >= 0x30000000 93 #include <openssl/core_names.h> 95 #include <openssl/ssl.h> 96 #include <openssl/err.h> 97 #include <openssl/x509.h> 98 #include <openssl/pem.h> 99 #include <openssl/crypto.h> 100 #include <openssl/evp.h> 101 #include <openssl/rand.h> 102 #include <openssl/x509v3.h> 103 #include <openssl/x509_vfy.h> 104 #include <openssl/ocsp.h> 109 #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) 110 #include <openssl/engine.h> 113 #if (OPENSSL_VERSION_NUMBER < 0x0090801f) 114 #error mod_ssl requires OpenSSL 0.9.8a or later 123 #if (OPENSSL_VERSION_NUMBER >= 0x10000000) 124 #define MODSSL_SSL_CIPHER_CONST const 125 #define MODSSL_SSL_METHOD_CONST const 127 #define MODSSL_SSL_CIPHER_CONST 128 #define MODSSL_SSL_METHOD_CONST 131 #if defined(LIBRESSL_VERSION_NUMBER) 133 #if LIBRESSL_VERSION_NUMBER < 0x2060000f 134 #define SSL_CTRL_SET_MIN_PROTO_VERSION 123 135 #define SSL_CTRL_SET_MAX_PROTO_VERSION 124 136 #define SSL_CTX_set_min_proto_version(ctx, version) \ 137 SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MIN_PROTO_VERSION, version, NULL) 138 #define SSL_CTX_set_max_proto_version(ctx, version) \ 139 SSL_CTX_ctrl(ctx, SSL_CTRL_SET_MAX_PROTO_VERSION, version, NULL) 140 #elif LIBRESSL_VERSION_NUMBER < 0x2070000f 145 #define MODSSL_USE_OPENSSL_PRE_1_1_API (1) 148 #define MODSSL_USE_OPENSSL_PRE_1_1_API (OPENSSL_VERSION_NUMBER < 0x10100000L) 151 #if OPENSSL_VERSION_NUMBER < 0x10101000 152 #define MODSSL_USE_SSLRAND 155 #if defined(OPENSSL_FIPS) 159 #if defined(SSL_OP_NO_TLSv1_2) 163 #if defined(SSL_CONF_FLAG_FILE) 164 #define HAVE_SSL_CONF_CMD 168 #if MODSSL_USE_OPENSSL_PRE_1_1_API 171 #define IDCONST const 178 #if !defined(OPENSSL_NO_TLSEXT) && defined(SSL_set_tlsext_host_name) 183 #if !defined(OPENSSL_NO_EC) && defined(TLSEXT_ECPOINTFORMAT_uncompressed) 188 #if !defined(OPENSSL_NO_OCSP) && defined(SSL_CTX_set_tlsext_status_cb) 189 #define HAVE_OCSP_STAPLING 191 #if OPENSSL_VERSION_NUMBER < 0x10100000L 193 #ifndef sk_OPENSSL_STRING_num 194 #define sk_OPENSSL_STRING_num sk_num 196 #ifndef sk_OPENSSL_STRING_value 197 #define sk_OPENSSL_STRING_value sk_value 199 #ifndef sk_OPENSSL_STRING_pop 200 #define sk_OPENSSL_STRING_pop sk_pop 206 #if defined(SSL_CTX_set_tlsext_ticket_key_cb) 207 #define HAVE_TLS_SESSION_TICKETS 208 #define TLSEXT_TICKET_KEY_LEN 48 209 #ifndef tlsext_tick_md 210 #ifdef OPENSSL_NO_SHA256 211 #define tlsext_tick_md EVP_sha1 213 #define tlsext_tick_md EVP_sha256 219 #if !defined(OPENSSL_NO_SRP) && defined(SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB) 221 #include <openssl/srp.h> 225 #if defined(TLSEXT_TYPE_application_layer_protocol_negotiation) 226 #define HAVE_TLS_ALPN 231 #if MODSSL_USE_OPENSSL_PRE_1_1_API 232 #define BN_get_rfc2409_prime_768 get_rfc2409_prime_768 233 #define BN_get_rfc2409_prime_1024 get_rfc2409_prime_1024 234 #define BN_get_rfc3526_prime_1536 get_rfc3526_prime_1536 235 #define BN_get_rfc3526_prime_2048 get_rfc3526_prime_2048 236 #define BN_get_rfc3526_prime_3072 get_rfc3526_prime_3072 237 #define BN_get_rfc3526_prime_4096 get_rfc3526_prime_4096 238 #define BN_get_rfc3526_prime_6144 get_rfc3526_prime_6144 239 #define BN_get_rfc3526_prime_8192 get_rfc3526_prime_8192 240 #if !defined(LIBRESSL_VERSION_NUMBER) || LIBRESSL_VERSION_NUMBER < 0x2070000fL 241 #define BIO_set_init(x,v) (x->init=v) 242 #define BIO_get_data(x) (x->ptr) 243 #define BIO_set_data(x,v) (x->ptr=v) 245 #define BIO_get_shutdown(x) (x->shutdown) 246 #define BIO_set_shutdown(x,v) (x->shutdown=v) 247 #define DH_bits(x) (BN_num_bits(x->p)) 248 #define X509_up_ref(x) (CRYPTO_add(&(x)->references, +1, CRYPTO_LOCK_X509)) 249 #define EVP_PKEY_up_ref(pk) (CRYPTO_add(&(pk)->references, +1, CRYPTO_LOCK_EVP_PKEY)) 251 void init_bio_methods(
void);
252 void free_bio_methods(
void);
255 #if OPENSSL_VERSION_NUMBER < 0x10002000L || \ 256 (defined(LIBRESSL_VERSION_NUMBER) && LIBRESSL_VERSION_NUMBER < 0x2070000f) 257 #define X509_STORE_CTX_get0_store(x) (x->ctx) 260 #if OPENSSL_VERSION_NUMBER < 0x10000000L 261 #ifndef X509_STORE_CTX_get0_current_issuer 262 #define X509_STORE_CTX_get0_current_issuer(x) (x->current_issuer) 266 #if OPENSSL_VERSION_NUMBER >= 0x10101000L && !defined(LIBRESSL_VERSION_NUMBER) 267 #define HAVE_OPENSSL_KEYLOG 286 #define RAND_MAX INT_MAX 293 #define UCHAR unsigned char 299 #define strEQ(s1,s2) (strcmp(s1,s2) == 0) 300 #define strNE(s1,s2) (strcmp(s1,s2) != 0) 301 #define strEQn(s1,s2,n) (strncmp(s1,s2,n) == 0) 302 #define strNEn(s1,s2,n) (strncmp(s1,s2,n) != 0) 304 #define strcEQ(s1,s2) (strcasecmp(s1,s2) == 0) 305 #define strcNE(s1,s2) (strcasecmp(s1,s2) != 0) 306 #define strcEQn(s1,s2,n) (strncasecmp(s1,s2,n) == 0) 307 #define strcNEn(s1,s2,n) (strncasecmp(s1,s2,n) != 0) 309 #define strIsEmpty(s) (s == NULL || s[0] == NUL) 311 #define myConnConfig(c) \ 312 ((SSLConnRec *)ap_get_module_config(c->conn_config, &ssl_module)) 313 #define myConnConfigSet(c, val) \ 314 ap_set_module_config(c->conn_config, &ssl_module, val) 315 #define mySrvConfig(srv) \ 316 ((SSLSrvConfigRec *)ap_get_module_config(srv->module_config, &ssl_module)) 317 #define myDirConfig(req) \ 318 ((SSLDirConfigRec *)ap_get_module_config(req->per_dir_config, &ssl_module)) 319 #define myCtxConfig(sslconn, sc) \ 320 (sslconn->is_proxy ? sslconn->dc->proxy : sc->server) 321 #define myModConfig(srv) mySrvConfig((srv))->mc 322 #define mySrvFromConn(c) myConnConfig(c)->server 323 #define myDirConfigFromConn(c) myConnConfig(c)->dc 324 #define mySrvConfigFromConn(c) mySrvConfig(mySrvFromConn(c)) 325 #define myModConfigFromConn(c) myModConfig(mySrvFromConn(c)) 330 #ifndef SSL_SESSION_CACHE_TIMEOUT 331 #define SSL_SESSION_CACHE_TIMEOUT 300 335 #ifndef DEFAULT_RENEG_BUFFER_SIZE 336 #define DEFAULT_RENEG_BUFFER_SIZE (128 * 1024) 340 #ifndef DEFAULT_OCSP_MAX_SKEW 341 #define DEFAULT_OCSP_MAX_SKEW (60 * 5) 345 #ifndef DEFAULT_OCSP_TIMEOUT 346 #define DEFAULT_OCSP_TIMEOUT 10 352 #define SSL_OPT_NONE (0) 353 #define SSL_OPT_RELSET (1<<0) 354 #define SSL_OPT_STDENVVARS (1<<1) 355 #define SSL_OPT_EXPORTCERTDATA (1<<3) 356 #define SSL_OPT_FAKEBASICAUTH (1<<4) 357 #define SSL_OPT_STRICTREQUIRE (1<<5) 358 #define SSL_OPT_OPTRENEGOTIATE (1<<6) 359 #define SSL_OPT_LEGACYDNFORMAT (1<<7) 360 #define SSL_OPT_EXPORTCB64DATA (1<<8) 366 #define SSL_PROTOCOL_NONE (0) 367 #ifndef OPENSSL_NO_SSL3 368 #define SSL_PROTOCOL_SSLV3 (1<<1) 370 #define SSL_PROTOCOL_TLSV1 (1<<2) 371 #ifndef OPENSSL_NO_SSL3 372 #define SSL_PROTOCOL_BASIC (SSL_PROTOCOL_SSLV3|SSL_PROTOCOL_TLSV1) 374 #define SSL_PROTOCOL_BASIC (SSL_PROTOCOL_TLSV1) 377 #define SSL_PROTOCOL_TLSV1_1 (1<<3) 378 #define SSL_PROTOCOL_TLSV1_2 (1<<4) 379 #define SSL_PROTOCOL_TLSV1_3 (1<<5) 381 #ifdef SSL_OP_NO_TLSv1_3 382 #define SSL_HAVE_PROTOCOL_TLSV1_3 (1) 383 #define SSL_PROTOCOL_ALL (SSL_PROTOCOL_BASIC| \ 384 SSL_PROTOCOL_TLSV1_1|SSL_PROTOCOL_TLSV1_2|SSL_PROTOCOL_TLSV1_3) 386 #define SSL_HAVE_PROTOCOL_TLSV1_3 (0) 387 #define SSL_PROTOCOL_ALL (SSL_PROTOCOL_BASIC| \ 388 SSL_PROTOCOL_TLSV1_1|SSL_PROTOCOL_TLSV1_2) 391 #define SSL_PROTOCOL_ALL (SSL_PROTOCOL_BASIC) 393 #ifndef OPENSSL_NO_SSL3 394 #define SSL_PROTOCOL_DEFAULT (SSL_PROTOCOL_ALL & ~SSL_PROTOCOL_SSLV3) 396 #define SSL_PROTOCOL_DEFAULT (SSL_PROTOCOL_ALL) 411 #define SSL_VERIFY_PEER_STRICT \ 412 (SSL_VERIFY_PEER|SSL_VERIFY_FAIL_IF_NO_PEER_CERT) 414 #define ssl_verify_error_is_optional(errnum) \ 415 ((errnum == X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT) \ 416 || (errnum == X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN) \ 417 || (errnum == X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY) \ 418 || (errnum == X509_V_ERR_CERT_UNTRUSTED) \ 419 || (errnum == X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE)) 456 #define SSL_PCM_EXISTS 1 457 #define SSL_PCM_ISREG 2 458 #define SSL_PCM_ISDIR 4 459 #define SSL_PCM_ISNONZERO 8 548 NON_SSL_SET_ERROR_MSG
551 #ifndef SSL_OP_NO_RENEGOTIATION 577 #define MODSSL_RETAINED_KEY "mod_ssl-retained-1" 614 #ifdef MODSSL_USE_SSLRAND 619 #if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT) 620 const char *szCryptoDevice;
623 #ifdef HAVE_OCSP_STAPLING 630 #ifdef HAVE_OPENSSL_KEYLOG 688 #ifdef HAVE_TLS_SESSION_TICKETS 690 const char *file_path;
691 unsigned char key_name[16];
692 #if OPENSSL_VERSION_NUMBER < 0x30000000L 693 unsigned char hmac_secret[16];
695 OSSL_PARAM mac_params[3];
697 unsigned char aes_key[16];
698 } modssl_ticket_key_t;
701 #ifdef HAVE_SSL_CONF_CMD 716 #ifdef HAVE_TLS_SESSION_TICKETS 717 modssl_ticket_key_t *ticket_key;
734 #ifdef HAVE_OCSP_STAPLING 736 BOOL stapling_enabled;
737 long stapling_resptime_skew;
738 long stapling_resp_maxage;
739 int stapling_cache_timeout;
740 BOOL stapling_return_errors;
741 BOOL stapling_fake_trylater;
742 int stapling_errcache_timeout;
744 const char *stapling_force_url;
749 char *srp_unknown_user_seed;
750 SRP_VBASE *srp_vbase;
771 #ifdef HAVE_SSL_CONF_CMD 772 SSL_CONF_CTX *ssl_ctx_config;
793 #ifndef OPENSSL_NO_COMP 885 #ifdef HAVE_TLS_SESSION_TICKETS 886 const char *ssl_cmd_SSLSessionTicketKeyFile(
cmd_parms *cmd,
void *dcfg,
const char *arg);
906 #ifdef HAVE_SSL_CONF_CMD 907 const char *ssl_cmd_SSLOpenSSLConfCmd(
cmd_parms *cmd,
void *dcfg,
const char *arg1,
const char *arg2);
911 const char *ssl_cmd_SSLSRPVerifierFile(
cmd_parms *cmd,
void *dcfg,
const char *arg);
912 const char *ssl_cmd_SSLSRPUnknownUserSeed(
cmd_parms *cmd,
void *dcfg,
const char *arg);
954 int ssl_callback_ServerNameIndication(SSL *,
int *,
modssl_ctx_t *);
956 #if OPENSSL_VERSION_NUMBER >= 0x10101000L && !defined(LIBRESSL_VERSION_NUMBER) 957 int ssl_callback_ClientHello(SSL *,
int *,
void *);
959 #ifdef HAVE_TLS_SESSION_TICKETS 960 int ssl_callback_SessionTicket(SSL *ssl,
961 unsigned char *keyname,
963 EVP_CIPHER_CTX *cipher_ctx,
964 #
if OPENSSL_VERSION_NUMBER < 0x30000000L
967 EVP_MAC_CTX *mac_ctx,
973 int ssl_callback_alpn_select(SSL *ssl,
const unsigned char **out,
974 unsigned char *outlen,
const unsigned char *in,
975 unsigned int inlen,
void *arg);
989 #ifdef HAVE_OCSP_STAPLING 990 const char *ssl_cmd_SSLStaplingCache(
cmd_parms *,
void *,
const char *);
991 const char *ssl_cmd_SSLUseStapling(
cmd_parms *,
void *,
int);
992 const char *ssl_cmd_SSLStaplingResponseTimeSkew(
cmd_parms *,
void *,
const char *);
993 const char *ssl_cmd_SSLStaplingResponseMaxAge(
cmd_parms *,
void *,
const char *);
994 const char *ssl_cmd_SSLStaplingStandardCacheTimeout(
cmd_parms *,
void *,
const char *);
995 const char *ssl_cmd_SSLStaplingErrorCacheTimeout(
cmd_parms *,
void *,
const char *);
996 const char *ssl_cmd_SSLStaplingReturnResponderErrors(
cmd_parms *,
void *,
int);
997 const char *ssl_cmd_SSLStaplingFakeTryLater(
cmd_parms *,
void *,
int);
998 const char *ssl_cmd_SSLStaplingResponderTimeout(
cmd_parms *,
void *,
const char *);
999 const char *ssl_cmd_SSLStaplingForceURL(
cmd_parms *,
void *,
const char *);
1001 void ssl_stapling_certinfo_hash_init(
apr_pool_t *);
1006 int ssl_callback_SRPServerParams(SSL *,
int *,
void *);
1009 #ifdef HAVE_OPENSSL_KEYLOG 1011 void modssl_callback_keylog(
const SSL *ssl,
const char *line);
1023 #ifdef MODSSL_USE_SSLRAND 1027 #define ssl_rand_seed(s, p, ctx, c) 1033 const char *
const *);
1036 const char *
const *);
1038 #if APR_HAS_THREADS && MODSSL_USE_OPENSSL_PRE_1_1_API 1054 const char *vhostid,
1055 const char *certid,
const char *keyid,
1056 X509 **pubkey, EVP_PKEY **privkey);
1061 EC_GROUP *ssl_ec_GetParamFromFile(
const char *);
1080 #define SSL_CACHE_MUTEX_TYPE "ssl-cache" 1081 #define SSL_STAPLING_CACHE_MUTEX_TYPE "ssl-stapling" 1082 #define SSL_STAPLING_REFRESH_MUTEX_TYPE "ssl-stapling-refresh" 1096 X509 *cert,
const char *format, ...)
1101 const
char *format, ...)
1106 const
char *format, ...)
1109 #define SSLLOG_MARK __FILE__,__LINE__ 1134 #ifndef OPENSSL_NO_OCSP 1170 extern int ssl_running_on_valgrind;
1174 X509 **pcert, EVP_PKEY **pkey,
1175 const char **pcert_file,
const char **pkey_file);
Definition: ssl_private.h:488
const char * ssl_cmd_SSLRequire(cmd_parms *, void *, const char *)
Definition: ap_socache.h:89
ssl_rsctx_t nCtx
Definition: ssl_private.h:494
Definition: ssl_private.h:408
Definition: ssl_private.h:430
ssl_proto_t protocol
Definition: ssl_private.h:720
const char * ca_name_path
Definition: ssl_private.h:649
Definition: ssl_private.h:448
const char * cpExpr
Definition: ssl_private.h:476
Definition: ssl_private.h:406
apr_status_t modssl_load_engine_keypair(server_rec *s, apr_pool_t *p, const char *vhostid, const char *certid, const char *keyid, X509 **pubkey, EVP_PKEY **privkey)
Definition: ssl_private.h:427
const char * ssl_cmd_SSLOCSPEnable(cmd_parms *cmd, void *dcfg, const char *arg)
const char * ssl_cmd_SSLSessionCache(cmd_parms *, void *, const char *)
void ssl_init_Child(apr_pool_t *, server_rec *)
Definition: ssl_private.h:656
server_rec * server
Definition: ssl_private.h:559
apr_array_header_t * aRandSeed
Definition: ssl_private.h:616
SSL_SESSION * ssl_scache_retrieve(server_rec *, IDCONST UCHAR *, int, apr_pool_t *)
int ssl_hook_Upgrade(request_rec *)
int verify_depth
Definition: ssl_private.h:541
int is_proxy
Definition: ssl_private.h:542
DH * ssl_dh_GetParamFromFile(const char *)
const unsigned char * vhost_md5
Definition: ssl_private.h:785
const char * ssl_cmd_SSLProxyProtocol(cmd_parms *, void *, const char *)
const char * ocsp_responder
Definition: ssl_private.h:758
int ssl_callback_SSLVerify(int, X509_STORE_CTX *)
const char * ssl_cmd_SSLCADNRequestFile(cmd_parms *, void *, const char *)
modssl_ctx_t * proxy
Definition: ssl_private.h:817
#define IDCONST
Definition: ssl_private.h:169
Definition: ssl_private.h:426
const char * ssl_cmd_SSLProxyCACertificatePath(cmd_parms *, void *, const char *)
ssl_opt_t nOptions
Definition: ssl_private.h:808
const char * ssl_cmd_SSLProxyMachineCertificateFile(cmd_parms *, void *, const char *)
Definition: apr_arch_file_io.h:107
const char * ssl_cmd_SSLProxyCheckPeerCN(cmd_parms *cmd, void *dcfg, int flag)
module AP_MODULE_DECLARE_DATA ssl_module
const char * ca_cert_file
Definition: ssl_private.h:660
ssl_enabled_t enabled
Definition: ssl_private.h:783
const ap_socache_provider_t * sesscache
Definition: ssl_private.h:609
Definition: ssl_private.h:466
const char * ssl_cmd_SSLFIPS(cmd_parms *cmd, void *dcfg, int flag)
void * ssl_config_perdir_merge(apr_pool_t *, void *, void *)
apr_size_t nRenegBufferSize
Definition: ssl_private.h:815
Definition: ssl_private.h:579
Definition: ssl_private.h:450
Definition: ssl_private.h:439
ap_socache_instance_t * sesscache_context
Definition: ssl_private.h:610
const char * ssl_cmd_SSLPolicyApply(cmd_parms *, void *, const char *)
const char * ssl_cmd_SSLCryptoDevice(cmd_parms *, void *, const char *)
const char * cert_chain
Definition: ssl_private.h:727
apr_bucket_brigade request_rec apr_pool_t * pool
Definition: mod_dav.h:555
ssl_verify_t nVerifyClient
Definition: ssl_private.h:812
long ssl_io_data_cb(BIO *, int, const char *, int, long, long)
void ssl_config_global_fix(SSLModConfigRec *)
long ocsp_resp_maxage
Definition: ssl_private.h:760
BOOL insecure_reneg
Definition: ssl_private.h:788
const char * ssl_cmd_SSLOCSPNoVerify(cmd_parms *cmd, void *dcfg, int flag)
ssl_verify_t verify_mode
Definition: ssl_private.h:680
const char * ssl_cmd_SSLCertificateChainFile(cmd_parms *, void *, const char *)
long int nData
Definition: ssl_private.h:504
const dav_resource dav_lockdb dav_lock * request
Definition: mod_dav.h:1438
const char * ssl_cmd_SSLSessionTickets(cmd_parms *, void *, int flag)
const char * ssl_cmd_SSLOCSPResponseTimeSkew(cmd_parms *cmd, void *dcfg, const char *arg)
BOOL compression
Definition: ssl_private.h:794
BOOL proxy_post_config
Definition: ssl_private.h:819
const char * ssl_cmd_SSLHonorCipherOrder(cmd_parms *cmd, void *dcfg, int flag)
const char * verify_info
Definition: ssl_private.h:539
SSLSrvConfigRec * sc
Definition: ssl_private.h:709
apr_status_t ssl_die(server_rec *)
int modssl_request_is_tls(const request_rec *r, SSLConnRec **sslconn)
Definition: ssl_private.h:447
void ssl_var_register(apr_pool_t *p)
apr_status_t ssl_init_Engine(server_rec *, apr_pool_t *)
SSL * ssl
Definition: ssl_private.h:535
const char * ocsp_certs_file
Definition: ssl_private.h:768
void ssl_util_ppclose(server_rec *, apr_pool_t *, apr_file_t *)
const char * ssl_cmd_SSLOCSPResponderTimeout(cmd_parms *cmd, void *dcfg, const char *arg)
AP_FN_ATTR_NONNULL((1, 2, 5)) AP_FN_ATTR_WARN_UNUSED_RESULT
APR Standard Headers Support.
apr_status_t ssl_init_ConfigureServer(server_rec *, apr_pool_t *, apr_pool_t *, SSLSrvConfigRec *, apr_array_header_t *)
const char * crl_path
Definition: ssl_private.h:730
modssl_ctx_t * server
Definition: ssl_private.h:789
ssl_asn1_t * ssl_asn1_table_get(apr_hash_t *table, const char *key)
ssl_shutdown_type_e shutdown_type
Definition: ssl_private.h:538
int nVerifyDepth
Definition: ssl_private.h:813
Apache connection library.
const char * ssl_cmd_SSLProxyCipherSuite(cmd_parms *, void *, const char *, const char *)
int ssl_hook_Auth(request_rec *)
Utilities for EBCDIC conversion.
const char * ssl_cmd_SSLProxyVerify(cmd_parms *, void *, const char *)
const char * szCipherSuite
Definition: ssl_private.h:811
apr_array_header_t * key_files
Definition: ssl_private.h:645
const char const char * uri
Definition: mod_dav.h:631
Definition: mod_auth.h:104
const char * ssl_var_lookup(apr_pool_t *p, server_rec *s, conn_rec *c, request_rec *r, const char *name) AP_FN_ATTR_NONNULL((1
Definition: ssl_private.h:491
void ssl_callback_DelSessionCacheEntry(SSL_CTX *, SSL_SESSION *)
const char * ssl_cmd_SSLSessionCacheTimeout(cmd_parms *, void *, const char *)
const char * ca_name_file
Definition: ssl_private.h:650
Definition: ssl_private.h:805
apr_int64_t apr_interval_time_t
Definition: apr_time.h:55
void void ssl_log_cxerror(const char *file, int line, int level, apr_status_t rv, conn_rec *c, X509 *cert, const char *format,...) __attribute__((format(printf
BOOL ocsp_noverify
Definition: ssl_private.h:765
void modssl_var_extract_dns(apr_table_t *t, SSL *ssl, apr_pool_t *p)
int modssl_is_engine_id(const char *name)
Structure to store things which are per connection.
Definition: httpd.h:1183
Definition: ssl_private.h:489
modssl_reneg_state reneg_state
Definition: ssl_private.h:556
int modssl_verify_ocsp(X509_STORE_CTX *ctx, SSLSrvConfigRec *sc, server_rec *s, conn_rec *c, apr_pool_t *pool)
const char * ssl_cmd_SSLInsecureRenegotiation(cmd_parms *cmd, void *dcfg, int flag)
APR-UTIL registration of functions exported by modules.
const char * ssl_cmd_SSLCertificateFile(cmd_parms *, void *, const char *)
modssl_pk_proxy_t * pkp
Definition: ssl_private.h:714
const char * cert_file
Definition: ssl_private.h:658
int verify_depth
Definition: ssl_private.h:679
Symbol export macros and hook functions.
const char * ssl_cmd_SSLOptions(cmd_parms *, void *, const char *)
Definition: ssl_private.h:511
Definition: ssl_private.h:407
ssl_rssrc_t
Definition: ssl_private.h:487
void ssl_io_filter_init(conn_rec *, request_rec *r, SSL *)
apr_file_t * ssl_util_ppopen(server_rec *, apr_pool_t *, const char *, const char *const *)
Definition: ssl_private.h:405
BOOL ssl_util_vhost_matches(const char *servername, server_rec *s)
apr_global_mutex_t * pMutex
Definition: ssl_private.h:612
Definition: ssl_private.h:485
Definition: apr_arch_global_mutex.h:23
Definition: ssl_private.h:529
const char * ssl_cmd_SSLProxyCARevocationPath(cmd_parms *, void *, const char *)
void * ssl_config_perdir_create(apr_pool_t *, char *)
const char * ssl_cmd_SSLCARevocationFile(cmd_parms *, void *, const char *)
BOOL proxy_enabled
Definition: ssl_private.h:818
const char * ssl_cmd_SSLCADNRequestPath(cmd_parms *, void *, const char *)
Definition: http_config.h:295
apr_status_t ssl_load_encrypted_pkey(server_rec *, apr_pool_t *, int, const char *, apr_array_header_t **)
apr_int64_t apr_time_t
Definition: apr_time.h:45
const char * ssl_cmd_SSLProtocol(cmd_parms *, void *, const char *)
void ssl_util_thread_setup(apr_pool_t *)
ssl_enabled_t
Definition: ssl_private.h:465
APR Global Locking Routines.
Definition: ssl_private.h:528
ssl_rssrc_t nSrc
Definition: ssl_private.h:495
void ssl_config_proxy_merge(apr_pool_t *, SSLDirConfigRec *, SSLDirConfigRec *)
apr_array_header_t * aRequirement
Definition: ssl_private.h:807
const char * cipher_suite
Definition: ssl_private.h:562
modssl_auth_ctx_t auth
Definition: ssl_private.h:753
Definition: ssl_private.h:467
int ssl_opt_t
Definition: ssl_private.h:361
Definition: ssl_private.h:671
const char * ssl_cmd_SSLCARevocationPath(cmd_parms *, void *, const char *)
int ocsp_verify_flags
Definition: ssl_private.h:767
ssl_shutdown_type_e
Definition: ssl_private.h:527
modssl_pk_server_t * pks
Definition: ssl_private.h:713
SSLModConfigRec * mc
Definition: ssl_private.h:782
A structure to store information for each virtual server.
Definition: httpd.h:1370
const char * ssl_cmd_SSLOCSPDefaultResponder(cmd_parms *cmd, void *dcfg, const char *arg)
const char * ssl_cmd_SSLOCSPResponseMaxAge(cmd_parms *cmd, void *dcfg, const char *arg)
const char * ca_cert_file
Definition: ssl_private.h:674
const char * ssl_cmd_SSLRandomSeed(cmd_parms *, void *, const char *, const char *, const char *)
int protocol_set
Definition: ssl_private.h:721
Definition: ssl_private.h:531
const char * ssl_cmd_SSLStrictSNIVHostCheck(cmd_parms *cmd, void *dcfg, int flag)
Definition: ssl_private.h:642
BOOL session_tickets
Definition: ssl_private.h:796
void ssl_var_log_config_register(apr_pool_t *p)
const char * ssl_cmd_SSLEngine(cmd_parms *, void *, const char *)
int service_unavailable
Definition: ssl_private.h:563
int nBytes
Definition: ssl_private.h:497
void ssl_util_thread_id_setup(apr_pool_t *)
const char * verify_error
Definition: ssl_private.h:540
const char * tls13_ciphers
Definition: ssl_private.h:685
const char * ssl_cmd_SSLProxyCARevocationFile(cmd_parms *, void *, const char *)
const char * ssl_cmd_SSLVerifyClient(cmd_parms *, void *, const char *)
int ssl_hook_Access(request_rec *)
BOOL bFixed
Definition: ssl_private.h:599
int ssl_hook_Fixup(request_rec *)
Definition: ssl_private.h:546
pid_t pid
Definition: ssl_private.h:615
Small object cache provider interface.
char * cpPath
Definition: ssl_private.h:496
modssl_retained_data_t * retained
Definition: ssl_private.h:605
const char * ssl_cmd_SSLRenegBufferSize(cmd_parms *cmd, void *dcfg, const char *arg)
Definition: ssl_private.h:484
Definition: ssl_private.h:438
ssl_verify_t
Definition: ssl_private.h:403
DH * ssl_callback_TmpDH(SSL *, int, int)
const char * ssl_cmd_SSLPassPhraseDialog(cmd_parms *, void *, const char *)
BOOL ssl_util_path_check(ssl_pathcheck_t, const char *, apr_pool_t *)
Definition: ssl_private.h:490
X509 * client_cert
Definition: ssl_private.h:537
APR Platform Definitions.
void ssl_init_ocsp_certificates(server_rec *s, modssl_ctx_t *mctx)
Definition: ssl_private.h:708
const authz_provider ssl_authz_provider_verify_client
void ssl_callback_Info(const SSL *, int, int)
apr_uri_t * proxy_uri
Definition: ssl_private.h:763
APR general purpose library routines.
const char * ssl_cmd_SSLCARevocationCheck(cmd_parms *, void *, const char *)
SSLDirConfigRec * dc
Definition: ssl_private.h:560
OCSP_RESPONSE * modssl_dispatch_ocsp_request(const apr_uri_t *uri, apr_interval_time_t timeout, OCSP_REQUEST *request, conn_rec *c, apr_pool_t *p)
const char * ssl_cmd_SSLRequireSSL(cmd_parms *, void *)
#define BOOL
Definition: ssl_private.h:81
int ssl_stapling_mutex_reinit(server_rec *, apr_pool_t *)
Authentication and Authorization Extension for Apache.
const char * ssl_cmd_SSLProxyVerifyDepth(cmd_parms *, void *, const char *)
BOOL cipher_server_pref
Definition: ssl_private.h:787
char * ssl_util_vhostid(apr_pool_t *, server_rec *)
const char * pphrase_dialog_path
Definition: ssl_private.h:725
apr_hash_t * privkeys
Definition: ssl_private.h:593
struct apr_hash_t apr_hash_t
Definition: apr_hash.h:52
BOOL ssl_config_global_isfixed(SSLModConfigRec *)
int disabled
Definition: ssl_private.h:543
const char * szUserName
Definition: ssl_private.h:814
apr_time_t source_mtime
Definition: ssl_private.h:506
Definition: ssl_private.h:547
void modssl_set_reneg_state(SSLConnRec *sslconn, modssl_reneg_state state)
Definition: ssl_private.h:515
const char * ssl_cmd_SSLProxyCARevocationCheck(cmd_parms *, void *, const char *)
char * ssl_util_readfilter(server_rec *, apr_pool_t *, const char *, const char *const *)
const char * ssl_cmd_SSLProxyCheckPeerExpire(cmd_parms *cmd, void *dcfg, int flag)
Definition: ssl_private.h:440
apr_status_t ssl_init_CheckServers(server_rec *, apr_pool_t *)
int ssl_proto_t
Definition: ssl_private.h:398
const char * ssl_cmd_SSLOCSPUseRequestNonce(cmd_parms *cmd, void *dcfg, int flag)
ssl_opt_t nOptionsDel
Definition: ssl_private.h:810
* ssl_init_FindCAList(server_rec *, apr_pool_t *, const char *, const char *)
ssl_crlcheck_t
Definition: ssl_private.h:424
Apache Mutex support library.
const char * ssl_cmd_SSLOCSPOverrideResponder(cmd_parms *cmd, void *dcfg, int flag)
long ocsp_resptime_skew
Definition: ssl_private.h:759
ssl_asn1_t * ssl_asn1_table_set(apr_hash_t *table, const char *key, EVP_PKEY *pkey)
void ssl_io_filter_register(apr_pool_t *)
void * ssl_config_server_create(apr_pool_t *, server_rec *)
const char * ssl_cmd_SSLOCSPProxyURL(cmd_parms *cmd, void *dcfg, const char *arg)
#define SSL_CRLCHECK_FLAGS
Definition: ssl_private.h:429
#define AP_MODULE_DECLARE_DATA
Definition: macros.h:16
Definition: ssl_private.h:530
Definition: ssl_private.h:503
int ssl_mutex_init(server_rec *, apr_pool_t *)
SSLSrvConfigRec * ssl_policy_lookup(apr_pool_t *pool, const char *name)
const char * client_dn
Definition: ssl_private.h:536
apr_status_t ssl_init_Module(apr_pool_t *, apr_pool_t *, apr_pool_t *, server_rec *)
const char * ssl_cmd_SSLCompression(cmd_parms *, void *, int flag)
unsigned char * cpData
Definition: ssl_private.h:505
const char * ssl_cmd_SSLCACertificatePath(cmd_parms *, void *, const char *)
#define UCHAR
Definition: ssl_private.h:293
A structure that represents the current request.
Definition: httpd.h:860
apr_array_header_t * cert_files
Definition: ssl_private.h:644
void modssl_var_extract_san_entries(apr_table_t *t, SSL *ssl, apr_pool_t *p)
Definition: ssl_private.h:468
const char * cert_path
Definition: ssl_private.h:659
long sesscache_mode
Definition: ssl_private.h:602
apr_interval_time_t ocsp_responder_timeout
Definition: ssl_private.h:761
Definition: ssl_private.h:781
int ssl_mutex_off(server_rec *)
apr_status_t ssl_init_ModuleKill(void *data)
int ssl_proxy_section_post_config(apr_pool_t *p, apr_pool_t *plog, apr_pool_t *ptemp, server_rec *s, ap_conf_vector_t *section_config)
ap_expr_info_t * mpExpr
Definition: ssl_private.h:477
BOOL ocsp_force_default
Definition: ssl_private.h:756
const char * ssl_cmd_SSLOCSPResponderCertificateFile(cmd_parms *cmd, void *dcfg, const char *arg)
apr_hash_t * key_ids
Definition: ssl_private.h:587
BOOL ssl_check_peer_name
Definition: ssl_private.h:777
int ssl_callback_proxy_cert(SSL *ssl, X509 **x509, EVP_PKEY **pkey)
Definition: ssl_private.h:598
const char * ssl_cmd_SSLCACertificateFile(cmd_parms *, void *, const char *)
void ssl_scache_status_register(apr_pool_t *p)
apr_array_header_t * ssl_ext_list(apr_pool_t *p, conn_rec *c, int peer, const char *extension)
struct apr_table_t apr_table_t
Definition: apr_tables.h:56
BOOL ssl_check_peer_expire
Definition: ssl_private.h:778
const char * name
Definition: mod_dav.h:805
int service_unavailable
Definition: ssl_private.h:653
Definition: ssl_private.h:425
void ssl_hook_ConfigTest(apr_pool_t *pconf, server_rec *s)
const char * vhost_id
Definition: ssl_private.h:784
struct apr_pool_t apr_pool_t
Definition: apr_pools.h:60
const char * ca_cert_path
Definition: ssl_private.h:673
Definition: http_config.h:355
int ssl_is_challenge(conn_rec *c, const char *servername, X509 **pcert, EVP_PKEY **pkey, const char **pcert_file, const char **pkey_file)
apr_status_t ssl_scache_init(server_rec *, apr_pool_t *)
int ssl_callback_NewSessionCacheEntry(SSL *, SSL_SESSION *)
const char * ssl_cmd_SSLCertificateKeyFile(cmd_parms *, void *, const char *)
BOOL ssl_check_peer_cn
Definition: ssl_private.h:776
int apr_status_t
Definition: apr_errno.h:44
ssl_opt_t nOptionsAdd
Definition: ssl_private.h:809
const authz_provider ssl_authz_provider_require_ssl
request_rec * r
Definition: mod_dav.h:518
ssl_ocspcheck_t
Definition: ssl_private.h:436
BOOL ssl_scache_store(server_rec *, IDCONST UCHAR *, int, apr_time_t, SSL_SESSION *, apr_pool_t *)
int ssl_hook_ReadReq(request_rec *)
void ssl_log_xerror(const char *file, int line, int level, apr_status_t rv, apr_pool_t *p, server_rec *s, X509 *cert, const char *format,...) __attribute__((format(printf
const char * ssl_cmd_SSLVerifyDepth(cmd_parms *, void *, const char *)
const char * ssl_cmd_SSLProxyCACertificateFile(cmd_parms *, void *, const char *)
void void void ssl_log_rxerror(const char *file, int line, int level, apr_status_t rv, request_rec *r, X509 *cert, const char *format,...) __attribute__((format(printf
void ssl_scache_remove(server_rec *, IDCONST UCHAR *, int, apr_pool_t *)
SSL_CTX * ssl_ctx
Definition: ssl_private.h:710
void ssl_rand_seed(server_rec *, apr_pool_t *, ssl_rsctx_t, char *)
SSL_SESSION * ssl_callback_GetSessionCacheEntry(SSL *, IDCONST unsigned char *, int, int *)
int crl_check_mask
Definition: ssl_private.h:732
const char * ssl_cmd_SSLProxyMachineCertificateChainFile(cmd_parms *, void *, const char *)
Additional Utility Functions for OpenSSL.
void ssl_scache_kill(server_rec *)
const char * ssl_cmd_SSLProxyMachineCertificatePath(cmd_parms *, void *, const char *)
Definition: ssl_private.h:449
Definition: ssl_private.h:513
struct ap_conf_vector_t ap_conf_vector_t
Definition: http_config.h:519
Definition: ssl_private.h:469
Definition: ssl_private.h:437
const char * ssl_cmd_SSLCipherSuite(cmd_parms *, void *, const char *, const char *)
const char * crl_file
Definition: ssl_private.h:731
modssl_reneg_state
Definition: ssl_private.h:509
const char * ssl_cmd_SSLUserName(cmd_parms *, void *, const char *)
const char AP_FN_ATTR_WARN_UNUSED_RESULT
Definition: ssl_private.h:1121
void ssl_log_ssl_error(const char *, int, int, server_rec *)
Definition: ssl_private.h:510
const char * cipher_suite
Definition: ssl_private.h:676
int ssl_hook_UserCheck(request_rec *)
int vhost_found
Definition: ssl_private.h:564
void * ssl_config_server_merge(apr_pool_t *, void *, void *)
int ssl_mutex_on(server_rec *)
unsigned int ssl_pathcheck_t
Definition: ssl_private.h:460
int ssl_mutex_reinit(server_rec *, apr_pool_t *)
int ssl_init_ssl_connection(conn_rec *c, request_rec *r)
int ocsp_mask
Definition: ssl_private.h:755
DH * modssl_get_dh_params(unsigned keylen)
ssl_pphrase_t
Definition: ssl_private.h:446
int session_cache_timeout
Definition: ssl_private.h:786
Definition: ssl_private.h:475
BOOL ocsp_use_request_nonce
Definition: ssl_private.h:762
int ssl_callback_SSLVerify_CRL(int, X509_STORE_CTX *, conn_rec *)
Definition: ssl_private.h:493
ssl_rsctx_t
Definition: ssl_private.h:483
const char * ssl_cmd_SSLProxyEngine(cmd_parms *cmd, void *dcfg, int flag)
#define UNSET
Definition: ssl_private.h:279
BOOL bSSLRequired
Definition: ssl_private.h:806
ssl_pphrase_t pphrase_dialog_type
Definition: ssl_private.h:724
int ssl_io_buffer_fill(request_rec *r, apr_size_t maxlen)
Definition: ssl_private.h:404
#define STACK_OF(x)
Definition: macros.h:26
struct ap_socache_instance_t ap_socache_instance_t
Definition: ap_socache.h:49
Definition: ssl_private.h:534
const char * ssl_cmd_SSLProxyCheckPeerName(cmd_parms *cmd, void *dcfg, int flag)