proxygen: wangle::SSLContextConfig Struct Reference

#include <SSLContextConfig.h>

Classes
struct	CertificateInfo

struct	KeyOffloadParams

Public Types
typedef std::function< bool(char const *server_name)>	SNINoMatchFn

Public Member Functions
	SSLContextConfig ()=default

	~SSLContextConfig ()=default

void	setCertificate (const std::string &certPath, const std::string &keyPath, const std::string &passwordPath)

void	addCertificate (const std::string &certPath, const std::string &keyPath, const std::string &passwordPath)

void	setNextProtocols (const std::list< std::string > &inNextProtocols)

Static Public Member Functions
static const std::string &	getDefaultCiphers ()

Public Attributes
std::vector< CertificateInfo >	certificates

folly::SSLContext::SSLVersion	sslVersion

bool	sessionCacheEnabled {true}

bool	sessionTicketEnabled {true}

bool	clientHelloParsingEnabled {true}

std::string	sslCiphers {getDefaultCiphers()}

std::string	eccCurveName {"prime256v1"}

std::list< folly::SSLContext::NextProtocolsItem >	nextProtocols

bool	isLocalPrivateKey {true}

bool	isDefault {false}

SNINoMatchFn	sniNoMatchFn

std::string	clientCAFile

folly::SSLContext::SSLVerifyPeerEnum	clientVerification

KeyOffloadParams	keyOffloadParams

folly::Optional< std::string >	sessionContext

Detailed Description

Definition at line 38 of file SSLContextConfig.h.

Member Typedef Documentation

typedef std::function<bool(char const* server_name)> wangle::SSLContextConfig::SNINoMatchFn

Definition at line 96 of file SSLContextConfig.h.

Constructor & Destructor Documentation

wangle::SSLContextConfig::SSLContextConfig ( )

default

wangle::SSLContextConfig::~SSLContextConfig ( )

default

Member Function Documentation

void wangle::SSLContextConfig::addCertificate	(	const std::string &	certPath,
		const std::string &	keyPath,
		const std::string &	passwordPath
	)

inline

Definition at line 81 of file SSLContextConfig.h.

References certificates.

Referenced by main(), setCertificate(), and wangle::TEST().

                                                      {
     certificates.emplace_back(certPath, keyPath, passwordPath);
   }

static const std::string& wangle::SSLContextConfig::getDefaultCiphers ( )

inlinestatic

Definition at line 52 of file SSLContextConfig.h.

References folly::join(), folly::ssl::SSLServerOptions::kCipherList, and string.

                                               {
     static const std::string& defaultCiphers =
         folly::join(':', folly::ssl::SSLServerOptions::kCipherList);
     return defaultCiphers;
   }

void wangle::SSLContextConfig::setCertificate	(	const std::string &	certPath,
		const std::string &	keyPath,
		const std::string &	passwordPath
	)

inline

Helpers to set/add a certificate

Definition at line 74 of file SSLContextConfig.h.

References addCertificate(), and certificates.

Referenced by setupServer(), TEST(), and TEST_F().

                                                      {
     certificates.clear();
     addCertificate(certPath, keyPath, passwordPath);
   }

void wangle::SSLContextConfig::setNextProtocols ( const std::list< std::string > & inNextProtocols )

inline

Set the optional list of protocols to advertise via TLS Next Protocol Negotiation. An empty list means NPN is not enabled.

Definition at line 91 of file SSLContextConfig.h.

References nextProtocols.

                                                                    {
     nextProtocols.clear();
     nextProtocols.emplace_back(1, inNextProtocols);
   }