|
OpenVPN 3 Core Library
|
#include <sslctx.hpp>
Public Types | |
| using | Ptr = RCPtr< Config > |
Public Types inherited from openvpn::SSLConfigAPI | |
| enum | LoadFlags { LF_PARSE_MODE = (1 << 0) , LF_ALLOW_CLIENT_CERT_NOT_REQUIRED = (1 << 1) , LF_RELAY_MODE = (1 << 2) } |
| using | Ptr = RCPtr< SSLConfigAPI > |
Public Types inherited from openvpn::RC< thread_unsafe_refcount > | |
| using | Ptr = RCPtr< RC > |
Public Member Functions | |
| SSLFactoryAPI::Ptr | new_factory () override |
| Return a pointer-like object that refers to a ssl factory. | |
| void | set_mode (const Mode &mode_arg) override |
| const Mode & | get_mode () const override |
| void | set_external_pki_callback (ExternalPKIBase *external_pki_arg, const std::string &alias) override |
| void | set_session_ticket_handler (TLSSessionTicketBase *session_ticket_handler_arg) override |
| void | set_client_session_tickets (const bool v) override |
| void | enable_legacy_algorithms (const bool v) override |
| void | set_sni_handler (SNI::HandlerBase *sni_handler_arg) override |
| void | set_sni_name (const std::string &sni_name_arg) override |
| void | set_cn_reject_handler (CommonNameReject *cn_reject_handler_arg) override |
| void | set_private_key_password (const std::string &pwd) override |
| void | load_ca (const std::string &ca_txt, bool strict) override |
| void | load_crl (const std::string &crl_txt) override |
| void | load_cert (const std::string &cert_txt) override |
| void | load_cert (const std::string &cert_txt, const std::string &extra_certs_txt) override |
| void | load_private_key (const std::string &key_txt) override |
| void | load_dh (const std::string &dh_txt) override |
| std::string | extract_ca () const override |
| std::string | extract_crl () const override |
| std::string | extract_cert () const override |
| std::vector< std::string > | extract_extra_certs () const override |
| std::string | extract_private_key () const override |
| std::string | extract_dh () const override |
| PKType::Type | private_key_type () const override |
| size_t | private_key_length () const override |
| void | set_frame (const Frame::Ptr &frame_arg) override |
| void | set_debug_level (const int debug_level) override |
| void | set_flags (const unsigned int flags_arg) override |
| void | set_ns_cert_type (const NSCert::Type ns_cert_type_arg) override |
| void | set_remote_cert_tls (const KUParse::TLSWebType wt) override |
| void | set_tls_remote (const std::string &tls_remote_arg) override |
| void | set_tls_version_min (const TLSVersion::Type tvm) override |
| void | set_tls_version_max (const TLSVersion::Type tvm) override |
| void | set_tls_version_min_override (const std::string &override) override |
| void | set_tls_cert_profile (const TLSCertProfile::Type type) override |
| void | set_tls_cert_profile_override (const std::string &override) override |
| virtual void | set_tls_cipher_list (const std::string &override) |
| virtual void | set_tls_ciphersuite_list (const std::string &override) |
| virtual void | set_tls_groups (const std::string &groups) |
| void | set_local_cert_enabled (const bool v) override |
| void | set_x509_track (X509Track::ConfigSet x509_track_config_arg) override |
| void | set_rng (const StrongRandomAPI::Ptr &rng_arg) override |
| std::string | validate_cert (const std::string &cert_txt) const override |
| std::string | validate_cert_list (const std::string &certs_txt) const override |
| std::string | validate_private_key (const std::string &key_txt) const override |
| std::string | validate_dh (const std::string &dh_txt) const override |
| std::string | validate_crl (const std::string &crl_txt) const override |
| void | load (const OptionList &opt, const unsigned int lflags) override |
Public Member Functions inherited from openvpn::SSLConfigAPI | |
| std::string | private_key_type_string () const |
Public Member Functions inherited from openvpn::RC< thread_unsafe_refcount > | |
| RC () noexcept=default | |
| RC (const RC &)=delete | |
| virtual | ~RC ()=default |
| RC & | operator= (const RC &)=delete |
| olong | use_count () const noexcept |
| Delegates call to RCImpl and returns the result. | |
Private Member Functions | |
| SSLLib::Ctx | ctx () const |
| void | initialise_lib_context () const |
| For OpenSSL 3.x, set up a library context if one is not already set up. | |
Static Private Member Functions | |
| static TLSVersion::Type | maxver () |
Static Private Attributes | |
| static constexpr unsigned short | LIB_CTX_NO_PROVIDERS = 0 |
| static constexpr unsigned short | LIB_CTX_LEGACY_PROVIDER = (1 << 0) |
Friends | |
| class | OpenSSLContext |
Additional Inherited Members | |
Static Public Member Functions inherited from openvpn::RC< thread_unsafe_refcount > | |
| static constexpr bool | is_thread_safe () |
| Delegates call to RCImpl and returns the result. | |
Definition at line 127 of file sslctx.hpp.
Definition at line 198 of file sslctx.hpp.
|
inlineprivate |
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 244 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 313 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 323 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 318 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 343 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 328 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 338 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 220 of file sslctx.hpp.
|
inlineprivate |
For OpenSSL 3.x, set up a library context if one is not already set up.
Definition at line 692 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 478 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 281 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 291 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 296 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 286 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 308 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 303 of file sslctx.hpp.
|
inlinestaticprivate |
|
inlineoverridevirtual |
Return a pointer-like object that refers to a ssl factory.
This function returns a SSLFactoryAPI::Ptr that refers to an instance of a factory that implements the SSLFactoryAPI for OpenSSL.
Implements openvpn::SSLConfigAPI.
Definition at line 210 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 355 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 348 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 239 of file sslctx.hpp.
|
inlineoverridevirtual |
Add a hook to allow inspection and possible rejection of leaf cert common names (server-side only).
| cn_reject_handler_arg | CommonNameReject object that implements a custom reject() hook. |
Implements openvpn::SSLConfigAPI.
Definition at line 271 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 365 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 226 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 370 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 360 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 433 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 215 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 375 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 276 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 380 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 443 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 233 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 253 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 259 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 405 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 410 of file sslctx.hpp.
|
inlinevirtual |
Definition at line 415 of file sslctx.hpp.
|
inlinevirtual |
Definition at line 421 of file sslctx.hpp.
|
inlinevirtual |
Definition at line 427 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 385 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 395 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 390 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 400 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 438 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 448 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 454 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 472 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 466 of file sslctx.hpp.
|
inlineoverridevirtual |
Implements openvpn::SSLConfigAPI.
Definition at line 460 of file sslctx.hpp.
|
friend |
Definition at line 129 of file sslctx.hpp.
|
private |
Definition at line 754 of file sslctx.hpp.
|
private |
Definition at line 755 of file sslctx.hpp.
|
private |
Definition at line 781 of file sslctx.hpp.
|
private |
Definition at line 763 of file sslctx.hpp.
|
private |
Definition at line 758 of file sslctx.hpp.
|
private |
Definition at line 769 of file sslctx.hpp.
|
private |
Definition at line 759 of file sslctx.hpp.
|
private |
Definition at line 760 of file sslctx.hpp.
|
private |
Definition at line 756 of file sslctx.hpp.
|
private |
Definition at line 765 of file sslctx.hpp.
|
private |
Definition at line 764 of file sslctx.hpp.
|
private |
Definition at line 768 of file sslctx.hpp.
|
staticconstexprprivate |
Definition at line 133 of file sslctx.hpp.
|
staticconstexprprivate |
Definition at line 132 of file sslctx.hpp.
|
private |
Definition at line 751 of file sslctx.hpp.
|
private |
Definition at line 780 of file sslctx.hpp.
|
private |
Definition at line 753 of file sslctx.hpp.
|
private |
Definition at line 767 of file sslctx.hpp.
|
private |
Definition at line 772 of file sslctx.hpp.
|
private |
Definition at line 757 of file sslctx.hpp.
|
private |
Definition at line 761 of file sslctx.hpp.
|
private |
Definition at line 762 of file sslctx.hpp.
|
private |
Definition at line 766 of file sslctx.hpp.
|
private |
Definition at line 775 of file sslctx.hpp.
|
private |
Definition at line 776 of file sslctx.hpp.
|
private |
Definition at line 777 of file sslctx.hpp.
|
private |
Definition at line 778 of file sslctx.hpp.
|
private |
Definition at line 770 of file sslctx.hpp.
|
private |
Definition at line 774 of file sslctx.hpp.
|
private |
Definition at line 773 of file sslctx.hpp.
|
private |
Definition at line 771 of file sslctx.hpp.
|
private |
Definition at line 779 of file sslctx.hpp.