Add callback to allow OCSP stapling

This commit is contained in:
Tim Rühsen
2019-07-17 12:50:15 +02:00
parent 90eb831b28
commit 3751044dc8
5 changed files with 88 additions and 4 deletions
+13
View File
@@ -892,6 +892,19 @@ information provided. The callback is expected to access the SNI data
using gnutls_server_name_get(). Using this option requires GnuTLS 3.0
or higher.
@item MHD_OPTION_HTTPS_CERT_CALLBACK2
@cindex SSL
@cindex TLS
@cindex SNI
@cindex OCSP
Use a callback to determine which X.509 certificate should be
used for a given HTTPS connection. This option should be
followed by a argument of type `gnutls_certificate_retrieve_function3 *`.
This option provides an
alternative/extension to #MHD_OPTION_HTTPS_CERT_CALLBACK.
You must use this version if you want to use OCSP stapling.
Using this option requires GnuTLS 3.6.3 or higher.
@item MHD_OPTION_GNUTLS_PSK_CRED_HANDLER
@cindex SSL
@cindex TLS