Lines Matching defs:mctx

74 static X509 *stapling_get_issuer(modssl_ctx_t *mctx, X509 *x)
78 X509_STORE *st = SSL_CTX_get_cert_store(mctx->ssl_ctx);
83 SSL_CTX_get_extra_chain_certs(mctx->ssl_ctx, &extra_certs);
85 extra_certs = mctx->ssl_ctx->extra_certs;
106 modssl_ctx_t *mctx, X509 *x)
124 if (!cinf->uri && !mctx->stapling_force_url) {
128 "configured for server %s", mctx->sc->vhost_id);
134 if (!(issuer = stapling_get_issuer(mctx, x))) {
151 if (!aia && !mctx->stapling_force_url) {
174 mctx->sc->vhost_id);
181 static certinfo *stapling_get_certinfo(server_rec *s, modssl_ctx_t *mctx,
208 static BOOL stapling_cache_response(server_rec *s, modssl_ctx_t *mctx,
239 expiry = apr_time_from_sec(mctx->stapling_cache_timeout);
243 expiry = apr_time_from_sec(mctx->stapling_errcache_timeout);
321 static int stapling_check_response(server_rec *s, modssl_ctx_t *mctx,
337 if (mctx->stapling_return_errors)
359 mctx->stapling_resptime_skew,
360 mctx->stapling_resp_maxage)) {
388 static BOOL stapling_renew_response(server_rec *s, modssl_ctx_t *mctx, SSL *ssl,
425 if (mctx->stapling_force_url)
426 ocspuri = mctx->stapling_force_url;
459 *prsp = modssl_dispatch_ocsp_request(&uri, mctx->stapling_responder_timeout,
467 if (mctx->stapling_fake_trylater) {
480 stapling_check_response(s, mctx, cinf, *prsp, &ok);
492 if (stapling_cache_response(s, mctx, *prsp, cinf, ok, pool) == FALSE) {
596 modssl_ctx_t *mctx = myCtxConfig(sslconn, sc);
611 cinf = stapling_get_certinfo(s, mctx, ssl);
632 rv = stapling_check_response(s, mctx, cinf, rsp, NULL);
651 else if (!mctx->stapling_return_errors) {
662 rv = stapling_renew_response(s, mctx, ssl, cinf, &rsp, conn->pool);
688 apr_pool_t *ptemp, modssl_ctx_t *mctx)
690 SSL_CTX *ctx = mctx->ssl_ctx;
704 if (mctx->stapling_resptime_skew == UNSET) {
705 mctx->stapling_resptime_skew = 60 * 5;
707 if (mctx->stapling_cache_timeout == UNSET) {
708 mctx->stapling_cache_timeout = 3600;
710 if (mctx->stapling_return_errors == UNSET) {
711 mctx->stapling_return_errors = TRUE;
713 if (mctx->stapling_fake_trylater == UNSET) {
714 mctx->stapling_fake_trylater = TRUE;
716 if (mctx->stapling_errcache_timeout == UNSET) {
717 mctx->stapling_errcache_timeout = 600;
719 if (mctx->stapling_responder_timeout == UNSET) {
720 mctx->stapling_responder_timeout = 10 * APR_USEC_PER_SEC;