gnustep/libs-base
0
0
Fork 0
mirror of https://github.com/gnustep/libs-base.git synced 2025-05-30 16:30:41 +00:00
Code Issues Projects Releases Packages Wiki Activity

Allow certificate based rejection of DO connection attempts.

Browse source
This commit is contained in:
Richard Frith-Macdonald 2022-11-21 10:40:33 +00:00
parent a9901204e2
commit d5d8a71c79
8 changed files with 111 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

20
Headers/Foundation/NSFileHandle.h
View file

@ -324,6 +324,18 @@ GS_EXPORT_CLASS
* <desc>A boolean specifying whether diagnostic debug is to be enabled
* to log information about a connection where the handshake fails.<br />
* </desc>
* <term>GSTLSIssuers</term>
* <desc>An array of distinguished names (in RFC4514 format) listing the
* permitted issuers of the remote certificate. If this is present and the
* issuer of the remote certificate is not in the array, the connection
* handshake is failed.
* </desc>
* <term>GSTLSOwners</term>
* <desc>An array of distinguished names (in RFC4514 format) listing the
* permitted owners/subjects of the remote certificate. If this is present
* and the owner/subject of the remote certificate is not in the array, the
* connection handshake is failed.
* </desc>
* <term>GSTLSPriority</term>
* <desc>A GNUTLS priority string describing the ciphers etc which may be
* used for the connection. In addition the string may be one of
@ -399,6 +411,14 @@ GS_EXPORT NSString * const GSTLSDebug;
*/
GS_EXPORT NSString * const GSTLSPriority;
/** Dictionary key for an array of issuers to use in certificate verification.
*/
GS_EXPORT NSString * const GSTLSIssuers;
/** Dictionary key for an array of owners to use in certificate verification.
*/
GS_EXPORT NSString * const GSTLSOwners;
/** Dictionary key for a list of hosts to use in certificate verification.
*/
GS_EXPORT NSString * const GSTLSRemoteHosts;