141 const char *credential_1,
142 const char *credential_2,
143 const char *password);
160 const char *certificate_db);
206 const char *trusted_CAs);
245 const char *session_id);
378 size_t fingerprint_length,
PN_EXTERN pn_ssl_resume_status_t pn_ssl_resume_status(pn_ssl_t *ssl)
Check whether the state has been resumed.
PN_EXTERN int pn_ssl_get_ssf(pn_ssl_t *ssl)
Get the SSF (security strength factor) of the Cipher that is currently in use.
PN_EXTERN int pn_ssl_domain_set_credentials(pn_ssl_domain_t *domain, const char *credential_1, const char *credential_2, const char *password)
Set the certificate that identifies the local node to the remote.
PN_EXTERN int pn_ssl_domain_allow_unsecured_client(pn_ssl_domain_t *domain)
Permit a server to accept connection requests from non-SSL clients.
PN_EXTERN bool pn_ssl_get_protocol_name(pn_ssl_t *ssl, char *buffer, size_t size)
Get the name of the SSL protocol that is currently in use.
struct pn_transport_t pn_transport_t
An AMQP Transport object.
Definition: types.h:256
require valid certificate and matching name
Definition: ssl.h:179
PN_EXTERN int pn_ssl_set_peer_hostname(pn_ssl_t *ssl, const char *hostname)
Set the expected identity of the remote peer.
require peer to provide a valid identifying certificate
Definition: ssl.h:177
pn_ssl_cert_subject_subfield
Enumeration identifying the sub fields of the subject field in the ssl certificate.
Definition: ssl.h:343
pn_ssl_verify_mode_t
Determines the level of peer validation.
Definition: ssl.h:175
PN_EXTERN pn_ssl_t * pn_ssl(pn_transport_t *transport)
Create a new SSL session object associated with a transport.
Session resume state unknown/not supported.
Definition: ssl.h:87
#define PN_EXTERN
Definition: import_export.h:53
pn_ssl_mode_t
Determines the type of SSL endpoint.
Definition: ssl.h:80
pn_ssl_resume_status_t
Indicates whether an SSL session has been resumed.
Definition: ssl.h:86
struct pn_ssl_domain_t pn_ssl_domain_t
Definition: ssl.h:76
PN_EXTERN const char * pn_ssl_get_remote_subject(pn_ssl_t *ssl)
Get the subject from the peers certificate.
Session resumed from previous session.
Definition: ssl.h:89
PN_EXTERN const char * pn_ssl_get_remote_subject_subfield(pn_ssl_t *ssl0, pn_ssl_cert_subject_subfield field)
Returns a char pointer that contains the value of the sub field of the subject field in the ssl certi...
struct pn_ssl_t pn_ssl_t
Definition: ssl.h:77
PN_EXTERN void pn_ssl_domain_free(pn_ssl_domain_t *domain)
Release an SSL configuration domain.
PN_EXTERN bool pn_ssl_present(void)
Tests for SSL implementation present.
PN_EXTERN pn_ssl_domain_t * pn_ssl_domain(pn_ssl_mode_t mode)
Create an SSL configuration domain.
PN_EXTERN int pn_ssl_get_peer_hostname(pn_ssl_t *ssl, char *hostname, size_t *bufsize)
Access the configured peer identity.
PN_EXTERN int pn_ssl_domain_set_peer_authentication(pn_ssl_domain_t *domain, const pn_ssl_verify_mode_t mode, const char *trusted_CAs)
Configure the level of verification used on the peer certificate.
Local connection endpoint is an SSL server.
Definition: ssl.h:82
PN_EXTERN bool pn_ssl_get_cipher_name(pn_ssl_t *ssl, char *buffer, size_t size)
Get the name of the Cipher that is currently in use.
Session renegotiated - not resumed.
Definition: ssl.h:88
Local connection endpoint is an SSL client.
Definition: ssl.h:81
pn_ssl_hash_alg
Enumeration identifying hashing algorithm.
Definition: ssl.h:356
internal use only
Definition: ssl.h:176
PN_EXTERN int pn_ssl_domain_set_trusted_ca_db(pn_ssl_domain_t *domain, const char *certificate_db)
Configure the set of trusted CA certificates used by this domain to verify peers. ...
PN_EXTERN int pn_ssl_init(pn_ssl_t *ssl, pn_ssl_domain_t *domain, const char *session_id)
Initialize an SSL session.
do not require a certificate nor cipher authorization
Definition: ssl.h:178
PN_EXTERN int pn_ssl_get_cert_fingerprint(pn_ssl_t *ssl0, char *fingerprint, size_t fingerprint_length, pn_ssl_hash_alg hash_alg)
Get the fingerprint of the certificate.