From d1cf5d570663dac157740cb5e49d24614f185da7 Mon Sep 17 00:00:00 2001 From: Alessandro Ghedini Date: Mon, 16 Jun 2014 15:05:17 +0200 Subject: openssl: add support for the Certificate Status Request TLS extension Also known as "status_request" or OCSP stapling, defined in RFC6066 section 8. Thanks-to: Joe Mason - for the work-around for the OpenSSL bug. --- lib/vtls/openssl.h | 3 +++ 1 file changed, 3 insertions(+) (limited to 'lib/vtls/openssl.h') diff --git a/lib/vtls/openssl.h b/lib/vtls/openssl.h index 9e9ba1e1e..39103295c 100644 --- a/lib/vtls/openssl.h +++ b/lib/vtls/openssl.h @@ -73,6 +73,8 @@ void Curl_ossl_md5sum(unsigned char *tmp, /* input */ unsigned char *md5sum /* output */, size_t unused); +bool Curl_ossl_cert_status_request(void); + /* Set the API backend definition to OpenSSL */ #define CURL_SSL_BACKEND CURLSSLBACKEND_OPENSSL @@ -102,6 +104,7 @@ void Curl_ossl_md5sum(unsigned char *tmp, /* input */ #define curlssl_data_pending(x,y) Curl_ossl_data_pending(x,y) #define curlssl_random(x,y,z) Curl_ossl_random(x,y,z) #define curlssl_md5sum(a,b,c,d) Curl_ossl_md5sum(a,b,c,d) +#define curlssl_cert_status_request() Curl_ossl_cert_status_request() #define DEFAULT_CIPHER_SELECTION "ALL!EXPORT!EXPORT40!EXPORT56!aNULL!LOW!RC4" -- cgit v1.2.3