Class TLSClientConfig

include/process/ssl/tls_config.hpp:26–62

namespace openssl {

struct TLSClientConfig {
  // Callback that will be called before the TLS handshake is started.
  typedef Try<Nothing> (*ConfigureSocketCallback)(
      SSL* ssl,
      const Address& peer,
      const Option<std::string>& servername);

  // Callback that will be called after the TLS handshake has been
  // completed successfully.
  typedef Try<Nothing> (*VerifyCallback)(
      const SSL* const ssl,
      const Option<std::string>& servername,
      const Option<net::IP>& ip);

  // The `ConfigureSocketCallback` and `VerifyCallback` arguments can be set
  // to nullptr, in that case they will not be called.
  TLSClientConfig(
      const Option<std::string>& servername,
      SSL_CTX *ctx,
      ConfigureSocketCallback,
      VerifyCallback);

  // Context from which the `SSL` object for this connection is created.
  SSL_CTX *ctx;

  // Server hostname to be used for hostname validation, if any.
  // This will be passed as the `servername` argument to both
  // callbacks.
  //
  // TODO(bevers): Use this for SNI as well when the linked OpenSSL
  // supports it.
  Option<std::string> servername;

  // User-specified callbacks.
  VerifyCallback verify;
  ConfigureSocketCallback configure_socket;
};


// Returns a `TLSClientConfig` object that is configured with the