45 	struct tls_global *global;  member
99 	struct tls_global *global;  in tls_init()  local
107 	global = os_zalloc(sizeof(*global));  in tls_init()
108 	if (global == NULL)  in tls_init()
112 		os_free(global);  in tls_init()
122 		global->event_cb = conf->event_cb;  in tls_init()
123 		global->cb_ctx = conf->cb_ctx;  in tls_init()
124 		global->cert_in_cb = conf->cert_in_cb;  in tls_init()
127 	return global;  in tls_init()
133 	struct tls_global *global = ssl_ctx;  in tls_deinit()  local
134 	if (global) {  in tls_deinit()
135 		if (global->params_set)  in tls_deinit()
136 			gnutls_certificate_free_credentials(global->xcred);  in tls_deinit()
137 		os_free(global->session_data);  in tls_deinit()
138 		os_free(global->ocsp_stapling_response);  in tls_deinit()
139 		os_free(global);  in tls_deinit()
198 static int tls_gnutls_init_session(struct tls_global *global,  in tls_gnutls_init_session()  argument
205 			  global->server ? GNUTLS_SERVER : GNUTLS_CLIENT);  in tls_gnutls_init_session()
241 	struct tls_global *global = ssl_ctx;  in tls_connection_init()  local
248 	conn->global = global;  in tls_connection_init()
250 	if (tls_gnutls_init_session(global, conn)) {  in tls_connection_init()
255 	if (global->params_set) {  in tls_connection_init()
258 					     global->xcred);  in tls_connection_init()
308 	struct tls_global *global = ssl_ctx;  in tls_connection_shutdown()  local
323 	if (tls_gnutls_init_session(global, conn)) {  in tls_connection_shutdown()
331 				     global->xcred);  in tls_connection_shutdown()
338 	if (global->session_data) {  in tls_connection_shutdown()
340 					      global->session_data,  in tls_connection_shutdown()
341 					      global->session_data_size);  in tls_connection_shutdown()
702 	struct tls_global *global = ptr;  in server_ocsp_status_req()  local
706 	if (!global->ocsp_stapling_response) {  in server_ocsp_status_req()
711 	cached = os_readfile(global->ocsp_stapling_response, &len);  in server_ocsp_status_req()
715 			   global->ocsp_stapling_response);  in server_ocsp_status_req()
739 	struct tls_global *global = tls_ctx;  in tls_global_set_params()  local
747 	global->server = 1;  in tls_global_set_params()
749 	if (global->params_set) {  in tls_global_set_params()
750 		gnutls_certificate_free_credentials(global->xcred);  in tls_global_set_params()
751 		global->params_set = 0;  in tls_global_set_params()
754 	ret = gnutls_certificate_allocate_credentials(&global->xcred);  in tls_global_set_params()
763 			global->xcred, params->ca_cert, GNUTLS_X509_FMT_DER);  in tls_global_set_params()
769 				global->xcred, params->ca_cert,  in tls_global_set_params()
782 				global->xcred,  in tls_global_set_params()
788 				global->xcred,  in tls_global_set_params()
796 			global->xcred, params->client_cert,  in tls_global_set_params()
802 				global->xcred, params->client_cert,  in tls_global_set_params()
816 			global->xcred, params->private_key,  in tls_global_set_params()
834 	os_free(global->ocsp_stapling_response);  in tls_global_set_params()
836 		global->ocsp_stapling_response =  in tls_global_set_params()
839 		global->ocsp_stapling_response = NULL;  in tls_global_set_params()
841 		global->xcred, server_ocsp_status_req, global);  in tls_global_set_params()
844 	global->params_set = 1;  in tls_global_set_params()
849 	gnutls_certificate_free_credentials(global->xcred);  in tls_global_set_params()
934 	struct tls_global *global = conn->global;  in gnutls_tls_fail_event()  local
937 	if (global->event_cb == NULL)  in gnutls_tls_fail_event()
949 	global->event_cb(global->cb_ctx, TLS_CERT_CHAIN_FAILURE, &ev);  in gnutls_tls_fail_event()
1160 		if (!conn->global->server) {  in tls_connection_verify_peer()
1298 		if (conn->global->event_cb) {  in tls_connection_verify_peer()
1308 			if (conn->global->cert_in_cb) {  in tls_connection_verify_peer()
1323 			conn->global->event_cb(conn->global->cb_ctx,  in tls_connection_verify_peer()
1370 			if (!conn->global->server &&  in tls_connection_verify_peer()
1407 	if (conn->global->event_cb != NULL)  in tls_connection_verify_peer()
1408 		conn->global->event_cb(conn->global->cb_ctx,  in tls_connection_verify_peer()
1452 	struct tls_global *global = tls_ctx;  in tls_connection_handshake()  local
1479 			if (global->server && conn->established &&  in tls_connection_handshake()
1488 			if (conn->global->event_cb) {  in tls_connection_handshake()
1493 				conn->global->event_cb(conn->global->cb_ctx,  in tls_connection_handshake()
1508 			if (conn->global->event_cb != NULL) {  in tls_connection_handshake()
1513 				conn->global->event_cb(conn->global->cb_ctx,  in tls_connection_handshake()
1546 		if (global->session_data == NULL ||  in tls_connection_handshake()
1547 		    global->session_data_size < size) {  in tls_connection_handshake()
1548 			os_free(global->session_data);  in tls_connection_handshake()
1549 			global->session_data = os_malloc(size);  in tls_connection_handshake()
1551 		if (global->session_data) {  in tls_connection_handshake()
1552 			global->session_data_size = size;  in tls_connection_handshake()
1554 						global->session_data,  in tls_connection_handshake()
1555 						&global->session_data_size);  in tls_connection_handshake()