SSLClient
v1.4.4
Add TLS 1.2 functionality to any network library.
|
This struct stores data required for SSLClient to use mutual authentication. More...
#include <SSLClientParameters.h>
Public Attributes | |
const br_x509_certificate * | client_cert_chain |
Pointer to the client certificate chain. More... | |
const size_t | chain_len |
const br_ec_private_key | ec_key |
This struct stores data required for SSLClient to use mutual authentication.
This file contains a simple utility class to store parameters about an SSL Session for reuse later.This file contains a simple struct to package together all the data required to use client certificate authentication with SSLClient.TLS mutual authentication is a process in which both the server and client perform cryptographic operations to verify the authenticity of eachother, for more information check out this article: https://medium.com/sitewards/the-magic-of-tls-x509-and-mutual-authentication-explained-b2162dec4401 . If this struct is provided to SSLClient::SSLClient, SSLClient will automatically send a client certificate if one is requested by the server. This will happen for all SSLClient connections, and may cause issues for websites that do not need mutual authentication— as a result, please only turn on mutual authentication if you are sure it is neccesary.
At the moment SSLClient only supports mutual authentication using ECC client certificates.
const size_t SSLClientParameters::chain_len |
The number of certificates in SSLClientParameters::client_cert_chain
const br_x509_certificate* SSLClientParameters::client_cert_chain |
Pointer to the client certificate chain.
Must be availible in memory AT ALL TIMES, should not be a local object. Certificates must be ordered from Client->Intermediate->...->Root.
const br_ec_private_key SSLClientParameters::ec_key |
The private key corresponding to the first certificate in SSLClientParameters::client_cert_chain