TLS server: OCSP stapling
authorJouni Malinen <jouni@qca.qualcomm.com>
Tue, 22 Dec 2015 15:53:45 +0000 (17:53 +0200)
committerJouni Malinen <j@w1.fi>
Tue, 22 Dec 2015 15:53:45 +0000 (17:53 +0200)
commitbca0872dd5c72135827355c4be1f772cc9641a84
treeb4e7ad31a50173cc86fced03d0118caed2759f07
parent8adce07a73e8eb53510190de6cf3eee86f5d0d87
TLS server: OCSP stapling

This adds support for hostapd-as-authentication-server to be build with
the internal TLS implementation and OCSP stapling server side support.
This is more or less identical to the design used with OpenSSL, i.e.,
the cached response is read from the ocsp_stapling_response=<file> and
sent as a response if the client requests it during the TLS handshake.

Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
src/crypto/tls_internal.c
src/tls/tlsv1_cred.c
src/tls/tlsv1_cred.h
src/tls/tlsv1_server_i.h
src/tls/tlsv1_server_read.c
src/tls/tlsv1_server_write.c