| 81 | |
| 82 | |
| 83 | Flags::Flags() |
| 84 | { |
| 85 | add(&Flags::enabled, |
| 86 | "enabled", |
| 87 | "Whether SSL is enabled.", |
| 88 | false); |
| 89 | |
| 90 | add(&Flags::support_downgrade, |
| 91 | "support_downgrade", |
| 92 | "Enable downgrading SSL accepting sockets to non-SSL traffic. When this " |
| 93 | "is enabled, no protocol may be used on non-SSL connections that " |
| 94 | "conflics with the protocol headers for SSL.", |
| 95 | false); |
| 96 | |
| 97 | add(&Flags::cert_file, |
| 98 | "cert_file", |
| 99 | "Path to certifcate."); |
| 100 | |
| 101 | add(&Flags::key_file, |
| 102 | "key_file", |
| 103 | "Path to key."); |
| 104 | |
| 105 | add(&Flags::verify_cert, |
| 106 | "verify_cert", |
| 107 | "Whether or not to require and verify server certificates for " |
| 108 | "connections in client mode.", |
| 109 | false); |
| 110 | |
| 111 | add(&Flags::require_cert, |
| 112 | "require_cert", |
| 113 | "Whether or not to require and verify client certificates for " |
| 114 | "connections in server mode.", |
| 115 | false); |
| 116 | |
| 117 | add(&Flags::verify_ipadd, |
| 118 | "verify_ipadd", |
| 119 | "Enable IP address verification in subject alternative name certificate " |
| 120 | "extension.", |
| 121 | false); |
| 122 | |
| 123 | add(&Flags::verification_depth, |
| 124 | "verification_depth", |
| 125 | "Maximum depth for the certificate chain verification that shall be " |
| 126 | "allowed.", |
| 127 | 4); |
| 128 | |
| 129 | add(&Flags::ca_dir, |
| 130 | "ca_dir", |
| 131 | "Path to certifcate authority (CA) directory."); |
| 132 | |
| 133 | add(&Flags::ca_file, |
| 134 | "ca_file", |
| 135 | "Path to certifcate authority (CA) file."); |
| 136 | |
| 137 | add(&Flags::ciphers, |
| 138 | "ciphers", |
| 139 | "Cryptographic ciphers to use.", |
| 140 | // Default TLSv1 ciphers chosen based on Amazon's security |