Cross Reference: /dovecot/src/lib-ssl-iostream/iostream-openssl-context.c

Lines Matching refs:set
82 int openssl_iostream_load_key(const struct ssl_iostream_cert *set,
90 	key = t_strdup_noconst(set->key);
99 	ctx.password = set->key_password;
116 int openssl_iostream_load_dh(const struct ssl_iostream_settings *set,
123 	dhvalue = t_strdup_noconst(set->dh);
146 			 const struct ssl_iostream_cert *set,
152 	if (openssl_iostream_load_key(set, &pkey, error_r) < 0)
166 			const struct ssl_iostream_settings *set,
172 	if (openssl_iostream_load_dh(set, &dh, error_r) < 0)
204 		/* If we could set up our certificate, now proceed to
279 	if (!ctx->set.skip_crl_check) {
320 			     const struct ssl_iostream_settings *set,
328 	if (set->ca != NULL) {
330 		if (load_ca(store, set->ca, &xnames) < 0) {
338 	ca_file = set->ca_file == NULL || *set->ca_file == '\0' ?
339 		NULL : set->ca_file;
340 	ca_dir = set->ca_dir == NULL || *set->ca_dir == '\0' ?
341 		NULL : set->ca_dir;
346 				set->ca_dir, openssl_iostream_error());
352 	if (!have_ca && !set->allow_invalid_cert) {
363 			 const struct ssl_iostream_settings *set,
366 	ssl_iostream_settings_init_from(ctx->pool, &ctx->set, set);
367 	if (set->cipher_list != NULL &&
368 	    SSL_CTX_set_cipher_list(ctx->ssl_ctx, set->cipher_list) == 0) {
369 		*error_r = t_strdup_printf("Can't set cipher list to '%s': %s",
370 			set->cipher_list, openssl_iostream_error());
374 	if (set->curve_list != NULL && strlen(set->curve_list) > 0 &&
375 		SSL_CTX_set1_curves_list(ctx->ssl_ctx, set->curve_list) == 0) {
376 		*error_r = t_strdup_printf("Failed to set curve list to '%s'",
377 					   set->curve_list);
381 	if (set->prefer_server_ciphers) {
385 	if (ctx->set.min_protocol != NULL) {
388 		if (openssl_min_protocol_to_options(ctx->set.min_protocol,
392 					set->min_protocol);
402 	if (set->cert.cert != NULL &&
403 	    ssl_ctx_use_certificate_chain(ctx->ssl_ctx, set->cert.cert) == 0) {
405 			openssl_iostream_use_certificate_error(set->cert.cert, NULL));
408 	if (set->cert.key != NULL) {
409 		if (ssl_iostream_ctx_use_key(ctx, &set->cert, error_r) < 0)
412 	if (set->alt_cert.cert != NULL &&
413 	    ssl_ctx_use_certificate_chain(ctx->ssl_ctx, set->alt_cert.cert) == 0) {
415 			openssl_iostream_use_certificate_error(set->alt_cert.cert, NULL));
418 	if (set->alt_cert.key != NULL) {
419 		if (ssl_iostream_ctx_use_key(ctx, &set->alt_cert, error_r) < 0)
423 	if (set->dh != NULL) {
424 		if (ssl_iostream_ctx_use_dh(ctx, set, error_r) < 0)
428 	/* set trusted CA certs */
429 	if (set->verify_remote_cert) {
430 		if (ssl_iostream_context_load_ca(ctx, set, error_r) < 0)
434 	if (set->cert_username_field != NULL) {
435 		ctx->username_nid = OBJ_txt2nid(set->cert_username_field);
439 				set->cert_username_field);
447 			if (set->verbose)
457 ssl_proxy_ctx_get_pkey_ec_curve_name(const struct ssl_iostream_settings *set,
465 	if (set->cert.key != NULL) {
466 		if (openssl_iostream_load_key(&set->cert, &pkey, error_r) < 0)
478 	if (nid == 0 && set->alt_cert.key != NULL) {
479 		if (openssl_iostream_load_key(&set->alt_cert, &pkey, error_r) < 0)
499 				const struct ssl_iostream_settings *set ATTR_UNUSED,
534 	if (ssl_proxy_ctx_get_pkey_ec_curve_name(set, &nid, error_r) < 0)
542 	if ((curve_name = OBJ_nid2sn(nid)) != NULL && set->verbose) {
557 				 const struct ssl_iostream_settings *set,
568 	if (!set->compression)
572 	if (!set->tickets)
579 	if (ssl_proxy_ctx_set_crypto_params(ctx->ssl_ctx, set, error_r) < 0)
582 	return ssl_iostream_context_set(ctx, set, error_r);
585 int openssl_iostream_context_init_client(const struct ssl_iostream_settings *set,
603 	if (ssl_iostream_context_init_common(ctx, set, error_r) < 0) {
611 int openssl_iostream_context_init_server(const struct ssl_iostream_settings *set,
627 	if (ssl_iostream_context_init_common(ctx, set, error_r) < 0) {
659 int openssl_iostream_global_init(const struct ssl_iostream_settings *set,
674 	if (set->crypto_device != NULL && *set->crypto_device != '\0') {
675 		switch (dovecot_openssl_common_global_set_engine(set->crypto_device, &error)) {
679 				set->crypto_device);