All Data Structures Files Functions Variables Typedefs Enumerations Enumerator Friends Macros Groups Pages
Data Fields
as_config_tls Struct Reference

Detailed Description

TLS module config

Definition at line 123 of file as_config.h.

#include "as_config.h"

+ Collaboration diagram for as_config_tls:

Data Fields

char * cafile
 
char * capath
 
char * cert_blacklist
 
char * cipher_suite
 
bool crl_check
 
bool crl_check_all
 
bool enable
 
bool encrypt_only
 
bool log_session_info
 
char * protocol
 

Field Documentation

char* as_config_tls::cafile

Path to a trusted CA certificate file. By default TLS will use system standard trusted CA certificates.

Definition at line 141 of file as_config.h.

char* as_config_tls::capath

Path to a directory of trusted certificates. See the OpenSSL SSL_CTX_load_verify_locations manual page for more information about the format of the directory.

Definition at line 148 of file as_config.h.

char* as_config_tls::cert_blacklist

Path to a certificate blacklist file. The file should contain one line for each blacklisted certificate. Each line starts with the certificate serial number expressed in hex. Each entry may optionally specify the issuer name of the certificate (serial numbers are only required to be unique per issuer). Example records: 867EC87482B2 /C=US/ST=CA/O=Acme/OU=Engineering/CN=Test Chain CA E2D4B0E570F9EF8E885C065899886461

Definition at line 201 of file as_config.h.

char* as_config_tls::cipher_suite

Specifies enabled cipher suites.

The format is the same as OpenSSL's Cipher List Format documented at https://www.openssl.org/docs/manmaster/apps/ciphers.html

If not specified the OpenSSL default cipher suite described in the ciphers documentation will be used.

If you are not sure what cipher suite to select this option is best left unspecified (NULL).

Definition at line 175 of file as_config.h.

bool as_config_tls::crl_check

Enable CRL checking for the certificate chain leaf certificate. An error occurs if a suitable CRL cannot be found. By default CRL checking is disabled.

Definition at line 182 of file as_config.h.

bool as_config_tls::crl_check_all

Enable CRL checking for the entire certificate chain. An error occurs if a suitable CRL cannot be found. By default CRL checking is disabled.

Definition at line 189 of file as_config.h.

bool as_config_tls::enable

Enable TLS on connections. By default TLS is disabled.

Definition at line 129 of file as_config.h.

bool as_config_tls::encrypt_only

Only encrypt connections; do not verify certificates. By default TLS will verify certificates.

Definition at line 135 of file as_config.h.

bool as_config_tls::log_session_info

Log session information for each connection.

Definition at line 206 of file as_config.h.

char* as_config_tls::protocol

Specifies enabled protocols.

This format is the same as Apache's SSLProtocol documented at https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslprotocol

If not specified (NULL) the client will use "-all +TLSv1.2".

If you are not sure what protocols to select this option is best left unspecified (NULL).

Definition at line 161 of file as_config.h.


The documentation for this struct was generated from the following file: