nginx: src/event/ngx_event_openssl.c comparison

ssl_crl

comparison

equal deleted inserted replaced

-:f33c48457d0c
+:cc07d164f0dc
 */
 ERR_clear_error();
 SSL_CTX_set_client_CA_list(ssl->ctx, list);
+return NGX_OK;
+}
+ngx_int_t
+ngx_ssl_crl(ngx_conf_t *cf, ngx_ssl_t *ssl, ngx_str_t *crl)
+{
+X509_STORE   *store;
+X509_LOOKUP  *lookup;
+if (crl->len == 0) {
+return NGX_OK;
+}
+if (ngx_conf_full_name(cf->cycle, crl, 1) != NGX_OK) {
+return NGX_ERROR;
+}
+store = SSL_CTX_get_cert_store(ssl->ctx);
+if (store == NULL) {
+ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
+"SSL_CTX_get_cert_store() failed");
+return NGX_ERROR;
+}
+lookup = X509_STORE_add_lookup(store, X509_LOOKUP_file());
+if (lookup == NULL) {
+ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
+"X509_STORE_add_lookup() failed");
+return NGX_ERROR;
+}
+if (X509_LOOKUP_load_file(lookup, (char *) crl->data, X509_FILETYPE_PEM)
+== 0)
+{
+ngx_ssl_error(NGX_LOG_EMERG, ssl->log, 0,
+"X509_LOOKUP_load_file(\"%s\") failed", crl->data);
+return NGX_ERROR;
+}
+X509_STORE_set_flags(store,
+X509_V_FLAG_CRL_CHECK|X509_V_FLAG_CRL_CHECK_ALL);
 return NGX_OK;
 }

Mercurial > hg > nginx