Load the SSL public/private keys in the parent process, then provide them
authorjsing <jsing@openbsd.org>
Wed, 6 Aug 2014 02:04:42 +0000 (02:04 +0000)
committerjsing <jsing@openbsd.org>
Wed, 6 Aug 2014 02:04:42 +0000 (02:04 +0000)
commit45767b45828a293ea811455369f6b8d538f70f64
tree60ed1532e08ef044f66c571b66b90f6f777f0f4c
parentbc2ddfbde49ff9b1fb2d54aaadbaf1bcaa7081c5
Load the SSL public/private keys in the parent process, then provide them
to the privsep process via imsg. This allows the keys to be moved out of
the chroot (now /etc/ssl/server.crt, /etc/ssl/private/server.key).

ok reyk@
usr.sbin/httpd/config.c
usr.sbin/httpd/httpd.8
usr.sbin/httpd/httpd.h
usr.sbin/httpd/parse.y
usr.sbin/httpd/server.c