Struct SolidSyslogOpenSslProfile¶

ClassList > SolidSyslogOpenSslProfile

#include <SolidSyslogOpenSslStream.h>

struct SolidSyslogOpenSslProfile
{
    const char* ServerName;
    const char* CipherList;
    const char* CipherSuites;
};

Detailed Description¶

What one connection is made with, supplied by the integrator at each Open.

The stream zeroes this before asking, so a field left alone is one the integrator has no policy on and the library's own default stands. Anything supplied must stay valid until the connection closes.

Public Attributes Documentation¶

CipherList¶

TLS 1.2 and below; NULL uses the OpenSSL default.

const char* SolidSyslogOpenSslProfile::CipherList;

CipherSuites¶

TLS 1.3 ciphersuites, which OpenSSL keeps in a list of their own - a CipherList alone does not bind a TLS 1.3 connection.

const char* SolidSyslogOpenSslProfile::CipherSuites;

NULL uses the OpenSSL default, which is RFC 8446's mandatory suite plus both it recommends.

ServerName¶

SNI plus the expected peer identity.

const char* SolidSyslogOpenSslProfile::ServerName;

A name beginning with a dot is refused - OpenSSL would read it as a sub-domain pattern. A non-empty name is verified against the cert (SAN/CN); one that parses as an address literal is verified as an address, so the cert must carry it as an iPAddress SAN and a DNS entry spelling the same digits does not match. NULL asks for neither, and what that means depends on the Credentials: a usable pinned fingerprint names the peer instead, so nothing is reported; without one the peer is only chain-authenticated and a WARNING says so (MITM-class). "" is the no-name-check opt-out (closed network / private CA): still verified against whatever the credentials installed, endpoint identity unchecked; no diagnostic.

The documentation for this class was generated from the following file Platform/OpenSsl/Interface/SolidSyslogOpenSslStream.h