Extracted from Pike v7.4 release 117 at 2005-08-23.
pike.ida.liu.se
[Top]
predef::
SSL
SSL.context

Class SSL.context

Description

Keeps the state that is shared by all SSL-connections for one server (or one port). It includes policy configuration, a server certificate, the server's private key(s), etc. It also includes the session cache.


Inherit "constants"

inherit "constants"


Variable rsa

object rsa

Description

The server's private key


object long_rsa
object short_rsa

Description

Temporary, non-certified, private keys, used with a server_key_exchange message. The rules are as follows:

If the negotiated cipher_suite has the "exportable" property, and short_rsa is not zero, send a server_key_exchange message with the (public part of) the short_rsa key.

If the negotiated cipher_suite does not have the exportable property, and long_rsa is not zero, send a server_key_exchange message with the (public part of) the long_rsa key.

Otherwise, dont send any server_key_exchange message.


Variable random

function(int:string) random

Description

Used to generate random cookies for the hello-message. If we use the RSA keyexchange method, and this is a server, this random number generator is not used for generating the master_secret.


Variable certificates

array(string) certificates

Description

The server's certificate, or a chain of X509.v3 certificates, with the server's certificate first and root certificate last.


Variable preferred_auth_methods

array(int) preferred_auth_methods

Description

For client authentication. Used only if auth_level is AUTH_ask or AUTH_require.


Variable preferred_suites

array(int) preferred_suites

Description

Cipher suites we want the server to support, best first.


Variable preferred_compressors

array(int) preferred_compressors

Description

Always ({ COMPRESSION_null })


Variable use_cache

int use_cache

Description

Non-zero to enable cahing of sessions


Variable session_lifetime

int session_lifetime

Description

Sessions are removed from the cache when they are older than this limit (in seconds). Sessions are also removed from the cache if a connection using the session dies unexpectedly.