Function md_ocsp_prime_status

modules/md/mod_md_ocsp.c:56–101

}

int md_ocsp_prime_status(server_rec *s, apr_pool_t *p,
                         const char *id, apr_size_t id_len, const char *pem)
{
    md_srv_conf_t *sc;
    const md_t *md;
    apr_array_header_t *chain;
    apr_status_t rv = APR_ENOENT;

    ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s, "ocsp prime status call for: %s",
                 s->server_hostname);
    sc = md_config_get(s);
    if (!staple_here(sc)) {
        ap_log_error(APLOG_MARK, APLOG_TRACE1, 0, s,
                     "ocsp prime does not apply here: server=%s, sc=%d"
                     "ocsp=%d, conf-ocsp=%d conf-others=%d",
                     s->server_hostname, !!sc, sc? !!sc->mc->ocsp : 0,
                     md_config_geti(sc, MD_CONFIG_STAPLING),
                     md_config_geti(sc, MD_CONFIG_STAPLE_OTHERS));
        goto cleanup;
    }

    md = ((sc->assigned && sc->assigned->nelts == 1)?
          APR_ARRAY_IDX(sc->assigned, 0, const md_t*) : NULL);
    chain = apr_array_make(p, 5, sizeof(md_cert_t*));
    rv = md_cert_read_chain(chain, p, pem, strlen(pem));
    if (APR_SUCCESS != rv) {
        ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10268) "init stapling for: %s, "
                     "unable to parse PEM data", md? md->name : s->server_hostname);
        goto cleanup;
    }
    else if (chain->nelts < 2) {
        ap_log_error(APLOG_MARK, APLOG_ERR, rv, s, APLOGNO(10269) "init stapling for: %s, "
                     "need at least 2 certificates in PEM data", md? md->name : s->server_hostname);
        rv = APR_EINVAL;
        goto cleanup;
    }

    rv = md_ocsp_prime(sc->mc->ocsp, id, id_len,
                       APR_ARRAY_IDX(chain, 0, md_cert_t*),
                       APR_ARRAY_IDX(chain, 1, md_cert_t*), md);
    ap_log_error(APLOG_MARK, APLOG_TRACE1, rv, s, "init stapling for: %s",
                 md? md->name : s->server_hostname);

cleanup:
    return (APR_SUCCESS == rv)? OK : DECLINED;
}

typedef struct {
    unsigned char *der;