Add ssl:setTLSextStatusOCSPResp()

Currently useless without a way to set a callback for tlsext

1 files changed, 21 insertions, 0 deletions

diff --git a/src/openssl.c b/src/openssl.c
index 59bcf1e..98043d9 100644
--- a/src/openssl.c
+++ b/src/openssl.c
@@ -8397,6 +8397,26 @@ static int ssl_getTLSextStatusType(lua_State *L) {
 #endif
 
 
+static int ssl_setTLSextStatusOCSPResp(lua_State *L) {
+        SSL *ssl = checksimple(L, 1, SSL_CLASS);
+        OCSP_RESPONSE *or = checksimple(L, 2, OCSP_RESPONSE_CLASS);
+
+        unsigned char *resp = NULL;
+        long resp_len;
+
+        resp_len = i2d_OCSP_RESPONSE(or, &resp);
+        if (resp_len <= 0)
+                return auxL_error(L, auxL_EOPENSSL, "ssl:setTLSextStatusOCSPResp");
+
+        if (!SSL_set_tlsext_status_ocsp_resp(ssl, resp, resp_len))
+                return auxL_error(L, auxL_EOPENSSL, "ssl:setTLSextStatusOCSPResp");
+
+        lua_pushboolean(L, 1);
+
+        return 1;
+} /* ssl_setTLSextStatusOCSPResp() */
+
+
 static int ssl_getTLSextStatusOCSPResp(lua_State *L) {
         SSL *ssl = checksimple(L, 1, SSL_CLASS);
 
@@ -8456,6 +8476,7 @@ static const auxL_Reg ssl_methods[] = {
 #if HAVE_SSL_GET_TLSEXT_STATUS_TYPE
         { "getTLSextStatusType", &ssl_getTLSextStatusType },
 #endif
+        { "setTLSextStatusOCSPResp", &ssl_setTLSextStatusOCSPResp },
         { "getTLSextStatusOCSPResp", &ssl_getTLSextStatusOCSPResp },
         { NULL,            NULL },
 };