This class provides the interface that a client uses to create SSL context.
SSLContext::SSLContext |
( |
const String & |
trustStore, |
|
|
SSLCertificateVerifyFunction * |
verifyCert, |
|
|
const String & |
randomFile = String::EMPTY |
|
) |
| |
Constructor for an SSLContext object.
- Parameters
-
trustStore | file path of the trust store |
verifyCert | function pointer to a certificate verification call back function. A null pointer indicates that no callback is requested for certificate verification. |
randomFile | file path of a random file that may be used as a seed for random number generation by OpenSSL. |
NOTE: For platforms that support /dev/random(urandom), the /dev/random files will be used to seed OpenSSL. The specified random file may be used as a fallback when /dev/random(urandom) is unavailable or fails. Using /dev/random to seed OpenSSL is more secure than using a random file.
An empty random file string indicates that a random file should not be used. If sufficient randomness is not achieved using /dev/random and/or a random file, an SSLException is thrown.
- Exceptions
-
SSLContext::SSLContext |
( |
const String & |
trustStore, |
|
|
const String & |
certPath, |
|
|
const String & |
keyPath, |
|
|
SSLCertificateVerifyFunction * |
verifyCert, |
|
|
const String & |
randomFile |
|
) |
| |
Constructor for an SSLContext object. This constructor is intended to be used by the CIMServer or CIMClient.
- Parameters
-
trustStore | file path of the trust store. |
certPath | file path of the server certificate. |
keyPath | file path of the private key. |
verifyCert | function pointer to a certificate verification call back function. A null pointer indicates that no callback is requested for certificate verification. |
randomFile | file path of a random file that may be used as a seed for random number generation by OpenSSL. |
NOTE: For platforms that support /dev/random(urandom), the /dev/random files will be used to seed OpenSSL. The specified random file may be used as a fallback when /dev/random(urandom) is unavailable or fails. Using /dev/random to seed OpenSSL is more secure than using a random file.
An empty random file string indicates that a random file should not be used. If sufficient randomness is not achieved using /dev/random and/or a random file, an SSLException is thrown.
- Exceptions
-
SSLContext::SSLContext |
( |
const String & |
trustStore, |
|
|
const String & |
certPath, |
|
|
const String & |
keyPath, |
|
|
const String & |
crlPath, |
|
|
SSLCertificateVerifyFunction * |
verifyCert, |
|
|
const String & |
randomFile |
|
) |
| |
Constructor for an SSLContext object. This constructor is intended to be used by the CIMServer or CIMClient.
- Parameters
-
trustStore | file path of the trust store. |
certPath | file path of the server certificate. |
keyPath | file path of the private key. |
crlPath | file path of the certificate revocation list. |
verifyCert | function pointer to a certificate verification call back function. A null pointer indicates that no callback is requested for certificate verification. |
randomFile | file path of a random file that may be used as a seed for random number generation by OpenSSL. |
NOTE: For platforms that support /dev/random(urandom), the /dev/random files will be used to seed OpenSSL. The specified random file may be used as a fallback when /dev/random(urandom) is unavailable or fails. Using /dev/random to seed OpenSSL is more secure than using a random file.
An empty random file string indicates that a random file should not be used. If sufficient randomness is not achieved using /dev/random and/or a random file, an SSLException is thrown.
- Exceptions
-