mod_ssl.h revision 73ca72e146eef39bef66115bda937664a77900fe
/* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to You under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* @file mod_ssl.h
* @brief SSL extension module for Apache
*
* @defgroup MOD_SSL mod_ssl
* @ingroup APACHE_MODS
* @{
*/
#ifndef __MOD_SSL_H__
#define __MOD_SSL_H__
#include "httpd.h"
#include "apr_optional.h"
/** The ssl_var_lookup() optional function retrieves SSL environment
* variables. */
APR_DECLARE_OPTIONAL_FN(char *, ssl_var_lookup,
(apr_pool_t *, server_rec *,
conn_rec *, request_rec *,
char *));
/** The ssl_ext_list() optional function attempts to build an array
* of all the values contained in the named X.509 extension. The
* returned array will be created in the supplied pool.
* The client certificate is used if peer is non-zero; the server
* certificate is used otherwise.
* Extension specifies the extensions to use as a string. This can be
* one of the "known" long or short names, or a numeric OID,
* e.g. "1.2.3.4", 'nsComment' and 'DN' are all valid.
* A pointer to an apr_array_header_t structure is returned if at
* least one matching extension is found, NULL otherwise.
*/
const char *extension));
/** An optional function which returns non-zero if the given connection
/** The ssl_proxy_enable() and ssl_engine_disable() optional functions
* are used by mod_proxy to enable use of SSL for outgoing
* connections. */
/** The npn_advertise_protos callback allows another modules to add
* entries to the list of protocol names advertised by the server
* during the Next Protocol Negotiation (NPN) portion of the SSL
* handshake. The callback is given the connection and an APR array;
* it should push one or more char*'s pointing to NUL-terminated
* strings (such as "http/1.1" or "spdy/2") onto the array and return
* OK. To prevent further processing of (other modules') callbacks,
* return DONE. */
/** The npn_proto_negotiated callback allows other modules to discover
* the name of the protocol that was chosen during the Next Protocol
* Negotiation (NPN) portion of the SSL handshake. Note that this may
* be the empty string (in which case modules should probably assume
* HTTP), or it may be a protocol that was never even advertised by
* the server. The callback is given the connection, a
* non-NUL-terminated string containing the protocol name, and the
* length of the string; it should do something appropriate
* (i.e. insert or remove filters) and return OK. To prevent further
* processing of (other modules') callbacks, return DONE. */
const char *proto_name,
/* An optional function which can be used to register a pair of
* callbacks for NPN handling. This optional function should be
* invoked from a pre_connection hook which runs *after* mod_ssl.c's
* pre_connection hook. The function returns OK if the callbacks are
* register, or DECLINED otherwise (for example if mod_ssl does not
* support NPN). */
#endif /* __MOD_SSL_H__ */
/** @} */