denozord/strongswan-ext
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

optional certificate-based peer authentication on TLS server side

Browse Source
This commit is contained in:
Andreas Steffen
2010-08-15 13:02:57 +02:00
parent 758d7283fb
commit b51ac45c48
6 changed files with 49 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/libtls/tls.h
+9 -8
View File
@@ -161,15 +161,16 @@ struct tls_t {
/**
* Create a tls instance.
*
* @param is_server TRUE to act as server, FALSE for client
* @param server server identity
* @param peer peer identity
* @param msk_label ASCII string constant used as seed for MSK PRF
* @param application higher layer application or NULL if none
* @return TLS stack
* @param is_server TRUE to act as server, FALSE for client
* @param server server identity
* @param peer peer identity
* @param request_peer_auth TRUE to request certificate-based peer authentication
* @param msk_label ASCII string constant used as seed for MSK PRF
* @param application higher layer application or NULL if none
* @return TLS stack
*/
tls_t *tls_create(bool is_server, identification_t *server,
identification_t *peer, char *msk_label,
tls_application_t *application);
identification_t *peer, bool request_peer_auth,
char *msk_label, tls_application_t *application);
#endif /** TLS_H_ @}*/