Re: OpenSSL configuration and mod_ssl

2012-02-04 Thread Graham Leggett
On 02 Feb 2012, at 4:13 PM, Dr Stephen Henson wrote: So my thoughts are that this concept could be generalised. A simple answer is to add new string setting options. For example: int SSL_CTX_set_options_string(SSL_CTX *ctx, const char *str); This works for existing simple configuration

Re: OpenSSL configuration and mod_ssl

2012-02-04 Thread Dr Stephen Henson
On 04/02/2012 07:32, Kaspar Brand wrote: On 02.02.2012 15:13, Dr Stephen Henson wrote: int SSL_CTX_config(SSL_CTX *ctx, const char *config_name); Where config_name is a named configuration option in the OpenSSL configuration file. This has the substantial advantage that there would then

Re: OpenSSL configuration and mod_ssl

2012-02-03 Thread Kaspar Brand
On 02.02.2012 15:13, Dr Stephen Henson wrote: So perhaps: int SSL_CTX_set_config_string(SSL_CTX *ctx, const char *name, const char *value); Where the values of name can expand over time. I'm more in favor of this one - i.e., allow configuration through

RE: OpenSSL configuration and mod_ssl

2012-02-02 Thread Plüm, Rüdiger, VF-Group
-Original Message- From: Dr Stephen Henson [mailto:shen...@opensslfoundation.com] Sent: Donnerstag, 2. Februar 2012 15:14 To: dev@httpd.apache.org Subject: OpenSSL configuration and mod_ssl Guys, It has been apparent for some time that mod_ssl (and other applications) require

Re: OpenSSL configuration and mod_ssl

2012-02-02 Thread Dr Stephen Henson
On 02/02/2012 14:22, Plüm, Rüdiger, VF-Group wrote: It has been apparent for some time that mod_ssl (and other applications) require a considerable effort to support new features in OpenSSL. A third method is to delegate the configuration completely to OpenSSL using a separate