1、增加证书校验;2、修改cert manager为key keeper。

This commit is contained in:
zhengchao
2018-08-26 18:26:24 +08:00
parent cf07c632fc
commit 5bb6a9c965
5 changed files with 246 additions and 152 deletions

View File

@@ -0,0 +1,21 @@
#ifndef CERT_H
#define CERT_H
#include <openssl/ssl.h>
#include <pthread.h>
struct keyring
{
EVP_PKEY *key;
X509 *cert;
STACK_OF(X509) * chain;
};
struct key_keeper;
struct key_keeper * key_keeper_init(const char * profile, const char* section, void* logger);
struct key_keeper * key_keeper_destroy(struct key_keeper *keeper);
struct keyring* key_keeper_release_cert(future_result_t* result);
void key_keeper_free_keyring(struct keyring* cert);
void key_keeper_async_ask(struct future * f, struct key_keeper * keeper, int keyring_id,
X509 * origin_cert, int is_cert_valid, struct event_base * evbase);
#endif /* !CERT_H */