src/acl/ServerCertificate.cc

   1 /*
   2  * Copyright (C) 1996-2015 The Squid Software Foundation and contributors
   3  *
   4  * Squid software is distributed under GPLv2+ license and includes
   5  * contributions from numerous individuals and organizations.
   6  * Please see the COPYING and CONTRIBUTORS files for details.
   7  */
   8
   9 #include "squid.h"
  10
  11 #if USE_OPENSSL
  12
  13 #include "acl/CertificateData.h"
  14 #include "acl/Checklist.h"
  15 #include "acl/ServerCertificate.h"
  16 #include "client_side.h"
  17 #include "fde.h"
  18 #include "ssl/ServerBump.h"
  19
  20 int
  21 ACLServerCertificateStrategy::match(ACLData<MatchType> * &data, ACLFilledChecklist *checklist, ACLFlags &)
  22 {
  23     X509 *cert = NULL;
  24     if (checklist->serverCert.get())
  25         cert = checklist->serverCert.get();
  26     else if (checklist->conn() != NULL && checklist->conn()->serverBump())
  27         cert = checklist->conn()->serverBump()->serverCert.get();
  28
  29     if (!cert)
  30         return 0;
  31
  32     return data->match(cert);
  33 }
  34
  35 ACLServerCertificateStrategy *
  36 ACLServerCertificateStrategy::Instance()
  37 {
  38     return &Instance_;
  39 }
  40
  41 ACLServerCertificateStrategy ACLServerCertificateStrategy::Instance_;
  42
  43 #endif /* USE_OPENSSL */
  44