blob: e3faaf93c323385db610b3a416edfaee9c45ba5b (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
|
/*
* Copyright (c) 2015 Isode Limited.
* All rights reserved.
* See the COPYING file for more information.
*/
#pragma once
namespace Swift {
class TLSContext;
class Certificate;
class TLSOptions {
public:
TLSOptions() : schannelTLS1_0Workaround(false) {
}
/**
* A bug in the Windows SChannel TLS stack, combined with
* overly-restrictive server stacks means it's sometimes necessary to
* not use TLS>1.0. This option has no effect unless compiled on
* Windows against SChannel (OpenSSL users are unaffected).
*/
bool schannelTLS1_0Workaround;
/**
* OpenSSL configuration flags
*/
boost::optional<bool> workaroundMicrosoftSessID;
boost::optional<bool> workaroundNetscapeChallenge;
boost::optional<bool> workaroundNetscapeReuseCipherChange;
boost::optional<bool> workaroundSSLRef2ReuseCertType;
boost::optional<bool> workaroundMicrosoftBigSSLv3Buffer;
boost::optional<bool> workaroundSSLeay080ClientDH;
boost::optional<bool> workaroundTLSD5;
boost::optional<bool> workaroundTLSBlockPadding;
boost::optional<bool> workaroundDontInsertEmptyFragments;
boost::optional<bool> workaroundAll;
boost::optional<bool> suppressSSLv2;
boost::optional<bool> suppressSSLv3;
boost::optional<bool> suppressTLSv1;
boost::optional<bool> disableTLSRollBackBug;
boost::optional<bool> singleDHUse;
/**
* Other OpenSSL configuration items
*/
boost::optional<std::string> cipherSuites;
boost::optional<std::string> context;
boost::optional<int> sessionCacheTimeout;
boost::optional<int> verifyDepth;
enum class VerifyMode {
None,
Required,
Optional
};
boost::optional<VerifyMode> verifyMode;
/**
* Callback for certificate verification
*/
boost::optional<std::function<int(const TLSContext *)>> verifyCertificateCallback;
/**
* Allows specification of application-specific Trust Anchors
*/
boost::optional<std::vector<std::shared_ptr<Certificate>>> trustAnchors;
/**
* Turns off automatic loading of system Trust Anchors
*/
bool ignoreSystemTrustAnchors = false;
};
}
|
Swift