blob: 15cddc950ff098c513e309b2cc7174a1401a3c75 (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
|
// Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
#pragma once
#include "authorization_mode.h"
#include <memory>
namespace vespalib::net::tls {
class TransportSecurityOptions;
struct CertificateVerificationCallback;
struct TlsContext {
virtual ~TlsContext() = default;
// Transport options this context was created with, but with the private key
// information scrubbed away.
virtual const TransportSecurityOptions& transport_security_options() const noexcept = 0;
// AuthorizationMode this context was created with
virtual AuthorizationMode authorization_mode() const noexcept = 0;
// Create a TLS context which verifies certificates according to the provided options'
// CA trust roots AND authorized peer policies
static std::shared_ptr<TlsContext> create_default_context(const TransportSecurityOptions&,
AuthorizationMode);
// Create a TLS context where the certificate verification callback is explicitly provided.
// IMPORTANT: This does NOT verify that the peer satisfies the authorized peer policies!
// It only verifies that a peer is signed by a trusted CA. This function should
// therefore only be used in very special circumstances, such as unit tests.
static std::shared_ptr<TlsContext> create_default_context(
const TransportSecurityOptions&,
std::shared_ptr<CertificateVerificationCallback> cert_verify_callback,
AuthorizationMode);
};
}
|
