comparison src/event/ngx_event_openssl.c @ 2045:2b11822b12d6

$ssl_client_cert
author Igor Sysoev <igor@sysoev.ru>
date Mon, 16 Jun 2008 05:54:18 +0000
parents f45cec1cd270
children 2a92804f4109
comparison
equal deleted inserted replaced
2044:f45cec1cd270 2045:2b11822b12d6
1877 return NGX_OK; 1877 return NGX_OK;
1878 } 1878 }
1879 1879
1880 1880
1881 ngx_int_t 1881 ngx_int_t
1882 ngx_ssl_get_certificate(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s)
1883 {
1884 size_t len;
1885 BIO *bio;
1886 X509 *cert;
1887
1888 s->len = 0;
1889
1890 cert = SSL_get_peer_certificate(c->ssl->connection);
1891 if (cert == NULL) {
1892 return NGX_OK;
1893 }
1894
1895 bio = BIO_new(BIO_s_mem());
1896 if (bio == NULL) {
1897 ngx_ssl_error(NGX_LOG_ALERT, c->log, 0, "BIO_new() failed");
1898 X509_free(cert);
1899 return NGX_ERROR;
1900 }
1901
1902 if (PEM_write_bio_X509(bio, cert) == 0) {
1903 ngx_ssl_error(NGX_LOG_ALERT, c->log, 0, "PEM_write_bio_X509() failed");
1904 goto failed;
1905 }
1906
1907 len = BIO_pending(bio);
1908 s->len = len;
1909
1910 s->data = ngx_palloc(pool, len);
1911 if (s->data == NULL) {
1912 goto failed;
1913 }
1914
1915 BIO_read(bio, s->data, len);
1916
1917 BIO_free(bio);
1918 X509_free(cert);
1919
1920 return NGX_OK;
1921
1922 failed:
1923
1924 BIO_free(bio);
1925 X509_free(cert);
1926
1927 return NGX_ERROR;
1928 }
1929
1930
1931 ngx_int_t
1882 ngx_ssl_get_subject_dn(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s) 1932 ngx_ssl_get_subject_dn(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s)
1883 { 1933 {
1884 char *p; 1934 char *p;
1885 size_t len; 1935 size_t len;
1886 X509 *cert; 1936 X509 *cert;