tls_root_ctx Struct Reference

Structure that wraps the TLS context. More...

#include <ssl_mbedtls.h>

Public Member Functions
	STACK_OF (X509_CRL) *crls

Data Fields
bool	initialised
	True if the context has been initialised.
mbedtls_x509_crt *	crt_chain
	Local Certificate chain.
mbedtls_x509_crt *	ca_chain
	CA chain for remote verification.
mbedtls_pk_context *	priv_key
	Local private key.
mbedtls_x509_crl *	crl
	Certificate Revocation List.
time_t	crl_last_mtime
	CRL last modification time.
off_t	crl_last_size
	size of last loaded CRL
int *	allowed_ciphers
	List of allowed ciphers for this connection.
uint16_t *	groups
	List of allowed groups for this connection.
mbedtls_x509_crt_profile	cert_profile
	Allowed certificate types.
SSL_CTX *	ctx

Detailed Description

Structure that wraps the TLS context.

Contents differ depending on the SSL library used.

Either priv_key_pkcs11 or priv_key must be filled in.

Contents differ depending on the SSL library used.

Definition at line 85 of file ssl_mbedtls.h.

Member Function Documentation

STACK_OF()

tls_root_ctx::STACK_OF

(

X509_CRL

)

Referenced by show_available_tls_ciphers_list().

Field Documentation

allowed_ciphers

int* tls_root_ctx::allowed_ciphers

List of allowed ciphers for this connection.

Definition at line 98 of file ssl_mbedtls.h.

ca_chain

mbedtls_x509_crt* tls_root_ctx::ca_chain

CA chain for remote verification.

Definition at line 90 of file ssl_mbedtls.h.

cert_profile

mbedtls_x509_crt_profile tls_root_ctx::cert_profile

Allowed certificate types.

Definition at line 100 of file ssl_mbedtls.h.

crl

mbedtls_x509_crl* tls_root_ctx::crl

Certificate Revocation List.

Definition at line 92 of file ssl_mbedtls.h.

crl_last_mtime

time_t tls_root_ctx::crl_last_mtime

CRL last modification time.

Definition at line 93 of file ssl_mbedtls.h.

Referenced by tls_ctx_reload_crl().

crl_last_size

off_t tls_root_ctx::crl_last_size

size of last loaded CRL

Definition at line 94 of file ssl_mbedtls.h.

Referenced by tls_ctx_reload_crl().

crt_chain

mbedtls_x509_crt* tls_root_ctx::crt_chain

Local Certificate chain.

Definition at line 89 of file ssl_mbedtls.h.

ctx

SSL_CTX* tls_root_ctx::ctx

Definition at line 41 of file ssl_openssl.h.

Referenced by backend_tls_ctx_reload_crl(), crypto_pem_encode_certificate(), key_state_ssl_init(), show_available_tls_ciphers_list(), test_load_certificate_and_key(), test_load_certificate_and_key_uri(), test_tls_ctx_use_pkcs11(), tls_ctx_add_extra_certs(), tls_ctx_check_cert_time(), tls_ctx_free(), tls_ctx_initialised(), tls_ctx_load_ca(), tls_ctx_load_cert_pem_file(), tls_ctx_load_cert_uri(), tls_ctx_load_cryptoapi(), tls_ctx_load_dh_params(), tls_ctx_load_ecdh_params(), tls_ctx_load_pkcs12(), tls_ctx_load_priv_file(), tls_ctx_new(), tls_ctx_restrict_ciphers(), tls_ctx_restrict_ciphers_tls13(), tls_ctx_set_cert_profile(), tls_ctx_set_options(), tls_ctx_set_tls_groups(), tls_ctx_set_tls_versions(), tls_ctx_use_external_ec_key(), tls_ctx_use_external_rsa_key(), and tls_ctx_use_management_external_key().

groups

uint16_t* tls_root_ctx::groups

List of allowed groups for this connection.

Definition at line 99 of file ssl_mbedtls.h.

initialised

bool tls_root_ctx::initialised

True if the context has been initialised.

Definition at line 87 of file ssl_mbedtls.h.

priv_key

mbedtls_pk_context* tls_root_ctx::priv_key

Local private key.

Definition at line 91 of file ssl_mbedtls.h.

---

The documentation for this struct was generated from the following files:

• src/openvpn/ssl_mbedtls.h
• src/openvpn/ssl_openssl.h