提交 560dfd2a 编写于 作者: D Dr. Stephen Henson

New -ignore_err option in ocsp application to stop the server

exiting on the first error in a request.
上级 14f3d7c5
...@@ -549,6 +549,10 @@ ...@@ -549,6 +549,10 @@
Changes between 0.9.7b and 0.9.7c [xx XXX 2003] Changes between 0.9.7b and 0.9.7c [xx XXX 2003]
*) New -ignore_err option in ocsp application to stop the server
exiting on the first error in a request.
[Steve Henson]
*) In ssl3_get_client_hello() (ssl/s3_srvr.c), tolerate additional *) In ssl3_get_client_hello() (ssl/s3_srvr.c), tolerate additional
extra data after the compression methods not only for TLS 1.0 extra data after the compression methods not only for TLS 1.0
but also for SSL 3.0 (as required by the specification). but also for SSL 3.0 (as required by the specification).
......
...@@ -123,6 +123,7 @@ int MAIN(int argc, char **argv) ...@@ -123,6 +123,7 @@ int MAIN(int argc, char **argv)
int accept_count = -1; int accept_count = -1;
int badarg = 0; int badarg = 0;
int i; int i;
int ignore_err = 0;
STACK *reqnames = NULL; STACK *reqnames = NULL;
STACK_OF(OCSP_CERTID) *ids = NULL; STACK_OF(OCSP_CERTID) *ids = NULL;
...@@ -182,6 +183,8 @@ int MAIN(int argc, char **argv) ...@@ -182,6 +183,8 @@ int MAIN(int argc, char **argv)
} }
else badarg = 1; else badarg = 1;
} }
else if (!strcmp(*args, "-ignore_err"))
ignore_err = 1;
else if (!strcmp(*args, "-noverify")) else if (!strcmp(*args, "-noverify"))
noverify = 1; noverify = 1;
else if (!strcmp(*args, "-nonce")) else if (!strcmp(*args, "-nonce"))
...@@ -783,6 +786,8 @@ int MAIN(int argc, char **argv) ...@@ -783,6 +786,8 @@ int MAIN(int argc, char **argv)
{ {
BIO_printf(out, "Responder Error: %s (%d)\n", BIO_printf(out, "Responder Error: %s (%d)\n",
OCSP_response_status_str(i), i); OCSP_response_status_str(i), i);
if (ignore_err)
goto redo_accept;
ret = 0; ret = 0;
goto end; goto end;
} }
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册