nginx: src/event/ngx_event_openssl.c comparison

SSL: loading certificate keys via ENGINE_load_private_key().

comparison

equal deleted inserted replaced

-:0eaa65af0d21
+:2c33ed82cde1
 return NGX_ERROR;
 }
 }
 BIO_free(bio);
+if (ngx_strncmp(key->data, "engine:", sizeof("engine:") - 1) == 0) {
+#ifndef OPENSSL_NO_ENGINE
+u_char      *p, *last;
+ENGINE      *engine;
+EVP_PKEY    *pkey;
+p = key->data + sizeof("engine:") - 1;
+last = (u_char *) ngx_strchr(p, ':');
+if (last == NULL) {
+ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
+"invalid syntax in \"%V\"", key);
+return NGX_ERROR;
+}
+*last = '\0';
+engine = ENGINE_by_id((char *) p);
+if (engine == NULL) {
+ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
+"ENGINE_by_id(\"%s\") failed", p);
+return NGX_ERROR;
+}
+*last++ = ':';
+pkey = ENGINE_load_private_key(engine, (char *) last, 0, 0);
+if (pkey == NULL) {
+ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
+"ENGINE_load_private_key(\"%s\") failed", last);
+ENGINE_free(engine);
+return NGX_ERROR;
+}
+ENGINE_free(engine);
+if (SSL_CTX_use_PrivateKey(ssl->ctx, pkey) == 0) {
+ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
+"SSL_CTX_use_PrivateKey(\"%s\") failed", last);
+EVP_PKEY_free(pkey);
+return NGX_ERROR;
+}
+EVP_PKEY_free(pkey);
+return NGX_OK;
+#else
+ngx_conf_log_error(NGX_LOG_EMERG, cf, 0,
+"loading \"engine:...\" certificate keys "
+"is not supported");
+return NGX_ERROR;
+#endif
+}
 if (ngx_conf_full_name(cf->cycle, key, 1) != NGX_OK) {
 return NGX_ERROR;
 }

Mercurial > hg > nginx