J Reece Wilson
7a0593adeb
[+] AuCrypto::CA::INewCertificateStore [+] AuCrypto::CA::IPinCertificate [+] AuCrypto::CA::PinAlwaysFail [+] AuCrypto::CA::PinAlwaysPass [+] AuCrypto::CA::PinCheckOS [+] AuCrypto::CA::PinCheckDefault [+] AuCrypto::CA::PinCheckBuiltin [+] AuCrypto::CA::PinCheckGlobal [+] AuCrypto::CA::PinCheckTwoAnd [+] AuCrypto::CA::PinCheckTwoOr [+] AuCrypto::CA::SetGlobalTLSPinner [*] Minor AuCrypto::X509 decoder work [*] AuCrypto::X509: transition to memory views (x509 is bytebuffer era and earlier code, beri early) [+] AuCrypto::IPrivateKeyProvider [+] AuCrypto::IPrivateKeyPair [+] AuCrypto::PrivateKeyPair [+] AuCrypto::ImportPrivateKeyPair [*] Refactor: AuCrypto::X509::GenerateCertificate(...) [+] AuCrypto::X509::NewChainFromOneDer [+] AuCrypto::X509::NewChainFromManyDer [+] AuCrypto::X509::NewChainFromManyDerInStream [+] AuCrypto::X509::NewChainFromOnePem [+] AuCrypto::X509::NewChainFromManyPem [+] AuCrypto::X509::NewChainFromManyPemInStream [*] Fix TLS code that was abandoned since its introduction with the net code. mbedtls is a hairbrained mess. so many *blocking* github issues starting after 2017. so little progress. [+] AuIO::TLS::TLSMeta::pKeyPairProvider [+] AuIO::TLS::TLSServer::bAllowSNIToFallBackDefault [+] AuIO::TLS::TLSServer::bAllowSNILessUseDefaultCert
48 lines
1.4 KiB
C++
Executable File
48 lines
1.4 KiB
C++
Executable File
/***
|
|
Copyright (C) 2024 Jamie Reece Wilson (a/k/a "Reece"). All rights reserved.
|
|
|
|
File: PinCertificate.hpp
|
|
Date: 2024-10-14
|
|
Author: Reece
|
|
***/
|
|
#pragma once
|
|
|
|
namespace Aurora::Crypto::CA
|
|
{
|
|
/*
|
|
* Dummy pinner
|
|
*/
|
|
AUKN_SHARED_API(PinAlwaysFail, IPinCertificate)
|
|
|
|
/*
|
|
* Dummy pinner
|
|
*/
|
|
AUKN_SHARED_API(PinAlwaysPass, IPinCertificate)
|
|
|
|
/*
|
|
* Provides an instance of the platforms certificate validation framework
|
|
*/
|
|
AUKN_SHARED_API(PinCheckOS, IPinCertificate)
|
|
|
|
/*
|
|
* Provides an instance of the (limited) builtin certificate authority store
|
|
*/
|
|
AUKN_SHARED_API(PinCheckBuiltin, IPinCertificate)
|
|
|
|
/*
|
|
* Per application configuration, provides an instance of the default TLS certificate validator
|
|
*/
|
|
AUKN_SHARED_API(PinCheckDefault, IPinCertificate)
|
|
|
|
/**
|
|
* See: SetGlobalTLSPinner
|
|
*/
|
|
AUKN_SHARED_API(PinCheckGlobal, IPinCertificate)
|
|
|
|
AUKN_SHARED_API(PinCheckBasicValidity, IPinCertificate)
|
|
|
|
AUKN_SHARED_API(PinCheckTwoAnd, IPinCertificate, const AuSPtr<IPinCertificate> &pCheckA, const AuSPtr<IPinCertificate> &pCheckB)
|
|
AUKN_SHARED_API(PinCheckTwoOr, IPinCertificate, const AuSPtr<IPinCertificate> &pCheckA, const AuSPtr<IPinCertificate> &pCheckB)
|
|
|
|
AUKN_SYM void SetGlobalTLSPinner(const AuSPtr<IPinCertificate> &pNewDefault);
|
|
} |