Joe Orton 1c76cd3081 mod_ssl: Add base64-encoded DER certificate variables as alternative ...

to PEM, to avoid newline mangling issues when using PEM in header
values.

* modules/ssl/ssl_private.h (SSL_OPT_EXPORTCB64DATA): New constant.

* modules/ssl/ssl_engine_vars.c (ssl_var_lookup_ssl_cert_data):
  New function, replacing ssl_var_lookup_ssl_cert_PEM.
  (ssl_var_lookup_ssl): Use it, and add _B64CERT variants of
  SSL_{CLIENT,SERVER}_CERT.
  (ssl_var_lookup_ssl_cert_chain): Use it.
  
* modules/ssl/ssl_engine_config.c (ssl_cmd_SSLOptions): Support
  "ExportBase64CertData" argument.

* modules/ssl/ssl_engine_kernel.c (extract_to_env): New function.
  (ssl_hook_Fixup): Use it, also export _B64CERT variables if
  SSL_OPT_EXPORTCB64DATA is set; simplify the client cert chain
  handling.

PR: 65169
Reviewed by: michaelo
Github: closes #177


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1887811 13f79535-47bb-0310-9956-ffa450edef68

2021-03-19 15:15:36 +00:00

..

mod_md-missing-resources.txt

Synch from mod_md github:

2021-03-03 14:53:12 +00:00

mod_unique_id.txt

Fix a potential duplicated ID generation issue under heavy load.

2021-03-06 06:39:24 +00:00

pr63074.txt

* modules/proxy/mod_proxy_balancer.c (balancer_display_page):

2021-03-05 08:35:06 +00:00

pr65169.txt

mod_ssl: Add base64-encoded DER certificate variables as alternative

2021-03-19 15:15:36 +00:00