Skip to content

Struct SolidSyslogTlsCredentialsInstalled

ClassList > SolidSyslogTlsCredentialsInstalled

Filled in by a credentials backend's Install, read by the stream that called it.

  • #include <SolidSyslogTlsCredentialsInstalled.h>
struct SolidSyslogTlsCredentialsInstalled
{
    bool TrustAnchorsInstalled;
    const char* const * Fingerprints;
    size_t FingerprintCount;
};

Public Attributes Documentation

FingerprintCount

size_t SolidSyslogTlsCredentialsInstalled::FingerprintCount;

Fingerprints

Certificate fingerprints authorising the peer, in the RFC 5425 §4.2.2 form.

const char* const* SolidSyslogTlsCredentialsInstalled::Fingerprints;

Any one of them authorises, so a collector's old and new certificate can both be pinned across a renewal. The strings are the backend's and must stay valid until its Release. NULL with a count of zero where no peer is pinned.


TrustAnchorsInstalled

Trust anchors were installed, so the peer's certificate can be validated against a chain.

bool SolidSyslogTlsCredentialsInstalled::TrustAnchorsInstalled;

A backend sets this itself rather than leaving it - the stream reads it to decide whether the TLS library can be left as the enforcement point, so a backend that installs anchors and does not say so verifies nothing.



The documentation for this class was generated from the following file Core/Interface/SolidSyslogTlsCredentialsInstalled.h