|
virtual | ~TlsCertificate () |
|
GTlsCertificate* | gobj () |
| Provides access to the underlying C GObject. More...
|
|
const GTlsCertificate* | gobj () const |
| Provides access to the underlying C GObject. More...
|
|
GTlsCertificate* | gobj_copy () |
| Provides access to the underlying C instance. The caller is responsible for unrefing it. Use when directly setting fields in structs. More...
|
|
Glib::RefPtr< TlsCertificate > | get_issuer () |
| Gets the TlsCertificate representing cert's issuer, if known. More...
|
|
Glib::RefPtr< const TlsCertificate > | get_issuer () const |
| Gets the TlsCertificate representing cert's issuer, if known. More...
|
|
TlsCertificateFlags | verify (const Glib::RefPtr< const SocketConnectable >& identity, const Glib::RefPtr< const TlsCertificate >& trusted_ca) const |
| This verifies cert and returns a set of TlsCertificateFlags indicating any problems found with it. More...
|
|
TlsCertificateFlags | verify (const Glib::RefPtr< const SocketConnectable >& identity) const |
| A verify() convenience overload. More...
|
|
TlsCertificateFlags | verify (const Glib::RefPtr< const TlsCertificate >& trusted_ca) const |
| A verify() convenience overload. More...
|
|
TlsCertificateFlags | verify () const |
| A verify() convenience overload. More...
|
|
bool | is_same (const Glib::RefPtr< const TlsCertificate >& cert_two) const |
| Check if two TlsCertificate objects represent the same certificate. More...
|
|
Glib::PropertyProxy_ReadOnly< Glib::RefPtr< Glib::ByteArray > > | property_certificate () const |
| The DER (binary) encoded representation of the certificate. More...
|
|
Glib::PropertyProxy_ReadOnly< std::string > | property_certificate_pem () const |
| The PEM (ASCII) encoded representation of the certificate. More...
|
|
Glib::PropertyProxy_ReadOnly< Glib::RefPtr< TlsCertificate > > | property_issuer () const |
| A TlsCertificate representing the entity that issued this certificate. More...
|
|
virtual TlsCertificateFlags | verify_vfunc (const Glib::RefPtr< const SocketConnectable >& identity, const Glib::RefPtr< const TlsCertificate >& trusted_ca) const |
|
void* | get_data (const QueryQuark& key) |
|
void | set_data (const Quark& key, void* data) |
|
void | set_data (const Quark& key, void* data, DestroyNotify notify) |
|
void | remove_data (const QueryQuark& quark) |
|
void* | steal_data (const QueryQuark& quark) |
|
void | set_property_value (const Glib::ustring& property_name, const Glib::ValueBase& value) |
| You probably want to use a specific property_*() accessor method instead. More...
|
|
void | get_property_value (const Glib::ustring& property_name, Glib::ValueBase& value) const |
| You probably want to use a specific property_*() accessor method instead. More...
|
|
template<class PropertyType > |
void | set_property (const Glib::ustring& property_name, const PropertyType& value) |
| You probably want to use a specific property_*() accessor method instead. More...
|
|
template<class PropertyType > |
void | get_property (const Glib::ustring& property_name, PropertyType& value) const |
| You probably want to use a specific property_*() accessor method instead. More...
|
|
void | connect_property_changed (const Glib::ustring& property_name, const sigc::slot< void >& slot) |
| You can use the signal_changed() signal of the property proxy instead, but this is necessary when using the reduced API. More...
|
|
sigc::connection | connect_property_changed_with_return (const Glib::ustring& property_name, const sigc::slot< void >& slot) |
| You can use the signal_changed() signal of the property proxy instead, but this is necessary when using the reduced API. More...
|
|
void | freeze_notify () |
| Increases the freeze count on object. More...
|
|
void | thaw_notify () |
| Reverts the effect of a previous call to freeze_notify(). More...
|
|
virtual void | reference () const |
| Increment the reference count for this object. More...
|
|
virtual void | unreference () const |
| Decrement the reference count for this object. More...
|
|
GObject* | gobj () |
| Provides access to the underlying C GObject. More...
|
|
const GObject* | gobj () const |
| Provides access to the underlying C GObject. More...
|
|
GObject* | gobj_copy () const |
| Give a ref-ed copy to someone. Use for direct struct access. More...
|
|
| trackable () |
|
| trackable (const trackable &src) |
|
| ~trackable () |
|
void | add_destroy_notify_callback (void *data, func_destroy_notify func) const |
|
void | notify_callbacks () |
|
trackable & | operator= (const trackable &src) |
|
void | remove_destroy_notify_callback (void *data) const |
|
TlsCertificate - TLS certificate.
A certificate used for TLS authentication and encryption. This can represent either a certificate only (eg, the certificate received by a client from a server), or the combination of a certificate and a private key (which is needed when acting as a TlsServerConnection).
- Since glibmm 2.36:
Creates a TlsCertificate from the PEM-encoded data in file.
The returned certificate will be the first certificate found in file. As of GLib 2.44, if file contains more certificates it will try to load a certificate chain. All certificates will be verified in the order found (top-level certificate should be the last one in the file) and the TlsCertificate::property_issuer() property of each certificate will be set accordingly if the verification succeeds. If any certificate in the chain cannot be verified, the first certificate in the file will still be returned.
If file cannot be read or parsed, the function will return 0
and set error. Otherwise, this behaves like g_tls_certificate_new_from_pem().
- Since glibmm 2.28:
- Parameters
-
file | File containing a PEM-encoded certificate to import. |
- Returns
- The new certificate, or
0
on error.
Creates a TlsCertificate from the PEM-encoded data in cert_file and key_file.
The returned certificate will be the first certificate found in cert_file. As of GLib 2.44, if cert_file contains more certificates it will try to load a certificate chain. All certificates will be verified in the order found (top-level certificate should be the last one in the file) and the TlsCertificate::property_issuer() property of each certificate will be set accordingly if the verification succeeds. If any certificate in the chain cannot be verified, the first certificate in the file will still be returned.
If either file cannot be read or parsed, the function will return 0
and set error. Otherwise, this behaves like g_tls_certificate_new_from_pem().
- Since glibmm 2.28:
- Parameters
-
cert_file | File containing one or more PEM-encoded certificates to import. |
key_file | File containing a PEM-encoded private key to import. |
- Returns
- The new certificate, or
0
on error.
Creates a TlsCertificate from the PEM-encoded data in data.
If data includes both a certificate and a private key, then the returned certificate will include the private key data as well. (See the TlsCertificate::property_private_key_pem() property for information about supported formats.)
The returned certificate will be the first certificate found in data. As of GLib 2.44, if data contains more certificates it will try to load a certificate chain. All certificates will be verified in the order found (top-level certificate should be the last one in the file) and the TlsCertificate::property_issuer() property of each certificate will be set accordingly if the verification succeeds. If any certificate in the chain cannot be verified, the first certificate in the file will still be returned.
- Since glibmm 2.28:
- Parameters
-
data | PEM-encoded certificate data. |
length | The length of data, or -1 if it's 0-terminated. |
- Returns
- The new certificate, or
0
if data is invalid.
This verifies cert and returns a set of TlsCertificateFlags indicating any problems found with it.
This can be used to verify a certificate outside the context of making a connection, or to check a certificate against a CA that is not part of the system CA database.
If identity is not 0
, cert's name(s) will be compared against it, and TLS_CERTIFICATE_BAD_IDENTITY will be set in the return value if it does not match. If identity is 0
, that bit will never be set in the return value.
If trusted_ca is not 0
, then cert (or one of the certificates in its chain) must be signed by it, or else TLS_CERTIFICATE_UNKNOWN_CA will be set in the return value. If trusted_ca is 0
, that bit will never be set in the return value.
(All other TlsCertificateFlags values will always be set or unset as appropriate.)
- Since glibmm 2.28:
- Parameters
-
identity | The expected peer identity. |
trusted_ca | The certificate of a trusted authority. |
- Returns
- The appropriate TlsCertificateFlags.