I am prototyping an Apache module that performs certain security compliance
checks, one aspect of which requires access to the SSL_CTX that mod_ssl
creates for an SSL enabled server.

Access to that object is currently through the SSLSrvConfigRec->server
and modssl_ctx_t->ssl_ctx structures, which works well but I would like to
avoid directly accessing these private structures if possible.

It would be nice if the public API of mod_ssl (perhaps exposed in
ssl_util_ssl.h) defined a function such as:

/* please be a function not a macro! */
SSL_CTX *sslctx_from_server(server_rec *s)
{
        SSLSrvConfigRec *sc = mySrvConfig(s);

        if (sc && sc->enabled > 0) {
            return sc->server->ssl_ctx;
        }
        return NULL;
}

Of course if there is a better way to go about it glad to hear it!

Thanks.

Reply via email to