tls_connection_params Struct Reference

#include <tls.h>

Public Attributes
const char *	altsubject_match
const char *	ca_cert
const u8 *	ca_cert_blob
size_t	ca_cert_blob_len
const char *	ca_cert_id
const char *	ca_path
const char *	cert_id
const char *	client_cert
const u8 *	client_cert_blob
size_t	client_cert_blob_len
const u8 *	dh_blob
size_t	dh_blob_len
const char *	dh_file
int	engine
const char *	engine_id
unsigned int	flags
const char *	key_id
const char *	pin
const char *	private_key
const u8 *	private_key_blob
size_t	private_key_blob_len
const char *	private_key_passwd
const char *	subject_match
int	tls_ia

Detailed Description

struct tls_connection_params - Parameters for TLS connection : File or reference name for CA X.509 certificate in PEM or DER format : ca_cert as inlined data or NULL if not used : ca_cert_blob length : Path to CA certificates (OpenSSL specific) : String to match in the subject of the peer certificate or NULL to allow all subjects : String to match in the alternative subject of the peer certificate or NULL to allow all alternative subjects : File or reference name for client X.509 certificate in PEM or DER format : client_cert as inlined data or NULL if not used : client_cert_blob length : File or reference name for client private key in PEM or DER format (traditional format (RSA PRIVATE KEY) or PKCS#8 (PRIVATE KEY) : private_key as inlined data or NULL if not used : private_key_blob length : Passphrase for decrypted private key, NULL if no passphrase is used. : File name for DH/DSA data in PEM format, or NULL if not used : dh_file as inlined data or NULL if not used : dh_blob length : 1 = use engine (e.g., a smartcard) for private key operations (this is OpenSSL specific for now) : engine id string (this is OpenSSL specific for now) : pointer to the pin variable in the configuration (this is OpenSSL specific for now) : the private key's id when using engine (this is OpenSSL specific for now) : the certificate's id when using engine : the CA certificate's id when using engine : Whether to enable TLS/IA (for EAP-TTLSv1) : Parameter options (TLS_CONN_*)

TLS connection parameters to be configured with tls_connection_set_params() and tls_global_set_params().

Certificates and private key can be configured either as a reference name (file path or reference to certificate store) or by providing the same data as a pointer to the data in memory. Only one option will be used for each field.

Definition at line 128 of file tls.h.