Method add_cert

lib_acl_cpp/src/stream/openssl_conf.cpp:1024–1084

}

bool openssl_conf::add_cert(const char* crt_file, const char* key_file,
	const char* key_pass /* NULL */)
{
	if (status_ != CONF_INIT_OK) {
		logger_error("OpenSSL not init , status=%d", (int) status_);
		return false;
	}

	if (crt_file == NULL || *crt_file == 0) {
		logger_error("crt_file can't be null nor empty");
		return false;
	}

	if (key_file == NULL || *key_file == 0) {
		logger_error("key_file can't be null nor empty");
		return false;
	}

#ifdef HAS_OPENSSL
	SSL_CTX* ctx;
	if (server_side_ && !ssl_ctx_) {
		ctx = create_ssl_ctx();
	} else if (ssl_ctx_) {
		ctx = ssl_ctx_;
	} else {
		ctx = ssl_ctx_ = create_ssl_ctx();
	}
#if 0
	if (__ssl_ctx_use_cert_chain(ctx, crt_file) != 1) {
		logger_error("use crt chain file(%s) error", crt_file);
		return false;
	}
#else
	if (__ssl_ctx_use_cert(ctx, crt_file, SSL_FILETYPE_PEM) != 1) {
		logger_error("use crt file(%s) error", crt_file);
		return false;
	}
#endif

	if (__ssl_ctx_use_pkey(ctx, key_file, SSL_FILETYPE_PEM) != 1) {
		logger_error("load private key(%s) error", key_file);
		return false;
	}

	if (!__ssl_ctx_check_pkey(ctx)) {
		logger_error("check private key(%s) error", key_file);
		return false;
	}

	if (key_pass && *key_pass) {
		__ssl_ctx_set_def_pass(ctx, (void*) key_pass);
	}

	map_ssl_ctx(ctx);
	return true;
#else
	(void) key_pass;
	logger_error("HAS_OPENSSL not defined!");