mirrors/haproxy
1
0
Fork 0
mirror of https://git.haproxy.org/git/haproxy.git/ synced 2025-09-22 22:31:28 +02:00
Code Issues Projects Releases Wiki Activity

MINOR: ssl: Add ocsp update success/failure counters

Browse Source 
Those counters will be used for debugging purposes and will be dumped
via a cli command.
This commit is contained in:
Remi Tricot-Le Breton 2023-02-28 17:46:20 +01:00 committed by William Lallemand
parent 6de7b78c9f
commit 9e94df3e55
2 changed files with 12 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
include/haproxy/ssl_ocsp-t.h
View File

@ -49,6 +49,11 @@ struct certificate_ocsp {
STACK_OF(X509) *chain;
struct eb64_node next_update; /* Key of items inserted in ocsp_update_tree (sorted by absolute date) */
struct buffer *uri; /* First OCSP URI contained in the corresponding certificate */
/* OCSP update stats */
u64 last_update; /* Time of last successful update */
unsigned int num_success; /* Number of successful updates */
unsigned int num_failure; /* Number of failed updates */
};
struct ocsp_cbk_arg {

8
src/ssl_ocsp.c
View File

@ -1043,6 +1043,9 @@ static struct task *ssl_ocsp_update_responses(struct task *task, void *context,
ctx->flags &= ~HC_F_RES_END;
++ocsp->num_success;
ocsp->last_update = now.tv_sec;
/* Reinsert the entry into the update list so that it can be updated later */
ssl_ocsp_update_insert(ocsp);
/* Release the reference kept on the updated ocsp response. */
@ -1150,6 +1153,7 @@ static struct task *ssl_ocsp_update_responses(struct task *task, void *context,
leave:
if (ctx->cur_ocsp) {
/* Something went wrong, reinsert the entry in the tree. */
++ctx->cur_ocsp->num_failure;
ssl_ocsp_update_insert_after_error(ctx->cur_ocsp);
/* Release the reference kept on the updated ocsp response. */
ssl_sock_free_ocsp(ctx->cur_ocsp);
@ -1170,8 +1174,10 @@ wait:
http_error:
/* Reinsert certificate into update list so that it can be updated later */
if (ocsp)
if (ocsp) {
++ocsp->num_failure;
ssl_ocsp_update_insert_after_error(ocsp);
}
if (hc)
httpclient_stop_and_destroy(hc);