| 399 | } |
| 400 | |
| 401 | void ssl_init_ocsp_certificates(server_rec *s, modssl_ctx_t *mctx) |
| 402 | { |
| 403 | /* |
| 404 | * Configure Trusted OCSP certificates. |
| 405 | */ |
| 406 | |
| 407 | if (!mctx->ocsp_certs_file) { |
| 408 | return; |
| 409 | } |
| 410 | |
| 411 | ap_log_error(APLOG_MARK, APLOG_DEBUG, 0, s, |
| 412 | "Configuring Trusted OCSP certificates"); |
| 413 | |
| 414 | mctx->ocsp_certs = modssl_read_ocsp_certificates(mctx->ocsp_certs_file); |
| 415 | |
| 416 | if (!mctx->ocsp_certs) { |
| 417 | ap_log_error(APLOG_MARK, APLOG_ERR, 0, s, |
| 418 | "Unable to configure OCSP Trusted Certificates"); |
| 419 | ssl_log_ssl_error(SSLLOG_MARK, APLOG_ERR, s); |
| 420 | ssl_die(s); |
| 421 | } |
| 422 | mctx->ocsp_verify_flags |= OCSP_TRUSTOTHER; |
| 423 | } |
| 424 | |
| 425 | #endif /* HAVE_OCSP */ |
no test coverage detected