folly::ssl::SSLCommonOptions Struct Reference

#include <SSLOptions.h>

Static Public Member Functions
static void	setClientOptions (SSLContext &ctx)

Static Public Attributes
static constexpr auto	kCipherList
static constexpr auto	kSignatureAlgorithms

Detailed Description

Definition at line 29 of file SSLOptions.h.

Member Function Documentation

void folly::ssl::SSLCommonOptions::setClientOptions ( SSLContext &  ctx )

static

Set common parameters on a client SSL context, for example, ciphers, signature algorithms, verification options, and client EC curves.

Parameters

ctx	The SSL Context to which to apply the options.

Definition at line 34 of file SSLOptions.cpp.

References folly::DFATAL, folly::exceptionStr(), folly::SSLContext::setClientECCurvesList(), and folly::SSLContext::setX509VerifyParam().

                                                       {
#ifdef SSL_MODE_HANDSHAKE_CUTTHROUGH
  ctx.enableFalseStart();
#endif

  X509VerifyParam param(X509_VERIFY_PARAM_new());
  X509_VERIFY_PARAM_set_flags(param.get(), X509_V_FLAG_X509_STRICT);
  try {
    ctx.setX509VerifyParam(param);
  } catch (std::runtime_error const& e) {
    LOG(DFATAL) << exceptionStr(e);
  }

  try {
    ctx.setClientECCurvesList({"P-256", "P-384"});
  } catch (std::runtime_error const& e) {
    LOG(DFATAL) << exceptionStr(e);
  }

  setCipherSuites<SSLCommonOptions>(ctx);
  setSignatureAlgorithms<SSLCommonOptions>(ctx);
}

Member Data Documentation

constexpr std::array< const char *, 12 > folly::ssl::SSLCommonOptions::kCipherList

static

Initial value:

= folly::make_array(
      "ECDHE-ECDSA-AES128-GCM-SHA256",
      "ECDHE-RSA-AES128-GCM-SHA256",
      "ECDHE-ECDSA-AES256-GCM-SHA384",
      "ECDHE-RSA-AES256-GCM-SHA384",
      "ECDHE-ECDSA-AES256-SHA",
      "ECDHE-RSA-AES256-SHA",
      "ECDHE-ECDSA-AES128-SHA",
      "ECDHE-RSA-AES128-SHA",
      "ECDHE-RSA-AES256-SHA384",
      "AES128-GCM-SHA256",
      "AES256-SHA",
      "AES128-SHA")

The cipher list recommended for this options configuration.

Definition at line 33 of file SSLOptions.h.

Referenced by CurlService::CurlClient::initializeSsl(), and folly::ssl::ssl_options_detail::logDfatal().

constexpr std::array< const char *, 8 > folly::ssl::SSLCommonOptions::kSignatureAlgorithms

static

Initial value:

= folly::make_array(
      "RSA+SHA512",
      "ECDSA+SHA512",
      "RSA+SHA384",
      "ECDSA+SHA384",
      "RSA+SHA256",
      "ECDSA+SHA256",
      "RSA+SHA1",
      "ECDSA+SHA1")

The list of signature algorithms recommended for this options configuration.

Definition at line 51 of file SSLOptions.h.

Referenced by folly::ssl::ssl_options_detail::logDfatal().

---

The documentation for this struct was generated from the following files:

• proxygen/folly/folly/io/async/SSLOptions.h
• proxygen/folly/folly/io/async/SSLOptions.cpp