Mercurial > hg > nginx
comparison src/event/ngx_event_openssl.c @ 2045:2b11822b12d6
$ssl_client_cert
author | Igor Sysoev <igor@sysoev.ru> |
---|---|
date | Mon, 16 Jun 2008 05:54:18 +0000 |
parents | f45cec1cd270 |
children | 2a92804f4109 |
comparison
equal
deleted
inserted
replaced
2044:f45cec1cd270 | 2045:2b11822b12d6 |
---|---|
1877 return NGX_OK; | 1877 return NGX_OK; |
1878 } | 1878 } |
1879 | 1879 |
1880 | 1880 |
1881 ngx_int_t | 1881 ngx_int_t |
1882 ngx_ssl_get_certificate(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s) | |
1883 { | |
1884 size_t len; | |
1885 BIO *bio; | |
1886 X509 *cert; | |
1887 | |
1888 s->len = 0; | |
1889 | |
1890 cert = SSL_get_peer_certificate(c->ssl->connection); | |
1891 if (cert == NULL) { | |
1892 return NGX_OK; | |
1893 } | |
1894 | |
1895 bio = BIO_new(BIO_s_mem()); | |
1896 if (bio == NULL) { | |
1897 ngx_ssl_error(NGX_LOG_ALERT, c->log, 0, "BIO_new() failed"); | |
1898 X509_free(cert); | |
1899 return NGX_ERROR; | |
1900 } | |
1901 | |
1902 if (PEM_write_bio_X509(bio, cert) == 0) { | |
1903 ngx_ssl_error(NGX_LOG_ALERT, c->log, 0, "PEM_write_bio_X509() failed"); | |
1904 goto failed; | |
1905 } | |
1906 | |
1907 len = BIO_pending(bio); | |
1908 s->len = len; | |
1909 | |
1910 s->data = ngx_palloc(pool, len); | |
1911 if (s->data == NULL) { | |
1912 goto failed; | |
1913 } | |
1914 | |
1915 BIO_read(bio, s->data, len); | |
1916 | |
1917 BIO_free(bio); | |
1918 X509_free(cert); | |
1919 | |
1920 return NGX_OK; | |
1921 | |
1922 failed: | |
1923 | |
1924 BIO_free(bio); | |
1925 X509_free(cert); | |
1926 | |
1927 return NGX_ERROR; | |
1928 } | |
1929 | |
1930 | |
1931 ngx_int_t | |
1882 ngx_ssl_get_subject_dn(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s) | 1932 ngx_ssl_get_subject_dn(ngx_connection_t *c, ngx_pool_t *pool, ngx_str_t *s) |
1883 { | 1933 { |
1884 char *p; | 1934 char *p; |
1885 size_t len; | 1935 size_t len; |
1886 X509 *cert; | 1936 X509 *cert; |