]> git.ipfire.org Git - thirdparty/squid.git/commit - helpers/ssl/cert_valid.pl
Tying validation errors to certificates
authorChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 6 Jun 2013 13:53:16 +0000 (16:53 +0300)
committerChristos Tsantilas <chtsanti@users.sourceforge.net>
Thu, 6 Jun 2013 13:53:16 +0000 (16:53 +0300)
commit62a7607ee3d0a7ffa001fcb8ad53163f94c9b3da
tree691f2f8d457220190bee2d9a2bad548cf697b225
parentdd0cbc6432f5abf6be86d4bcdd239cd86cd69b9f
Tying validation errors to certificates

When Squid sends errors to the certificate validation daemon, the daemon cannot
tell which certificate caused which error. This is especially bad because the
validator has to return that same information in the response (the response
format requires the validator to match the error to the certificate).
This patch adjust the validation request format to provide that information
using a set of the following key=value pairs:

    error_name_N=the name of the certificate error number N
    error_cert_N=the ID of the certificate which caused error_name_N

where N is non-negative integer. N values start from zero and increase
sequentially.

This is a Measurement Factory project
14 files changed:
helpers/ssl/cert_valid.pl
src/AclRegs.cc
src/acl/FilledChecklist.h
src/acl/SslError.h
src/acl/SslErrorData.cc
src/acl/SslErrorData.h
src/client_side.cc
src/forward.cc
src/forward.h
src/ssl/ServerBump.h
src/ssl/cert_validate_message.cc
src/ssl/cert_validate_message.h
src/ssl/support.cc
src/ssl/support.h