You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
162 lines
5.6 KiB
C#
162 lines
5.6 KiB
C#
#region License
|
|
/*
|
|
* ClientSslAuthConfiguration.cs
|
|
*
|
|
* The MIT License
|
|
*
|
|
* Copyright (c) 2014 liryna
|
|
* Copyright (c) 2014 sta.blockhead
|
|
*
|
|
* Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
* of this software and associated documentation files (the "Software"), to deal
|
|
* in the Software without restriction, including without limitation the rights
|
|
* to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
* copies of the Software, and to permit persons to whom the Software is
|
|
* furnished to do so, subject to the following conditions:
|
|
*
|
|
* The above copyright notice and this permission notice shall be included in
|
|
* all copies or substantial portions of the Software.
|
|
*
|
|
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
* IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
* FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
* AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
* LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
* OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
* THE SOFTWARE.
|
|
*/
|
|
#endregion
|
|
|
|
#region Authors
|
|
/*
|
|
* Authors:
|
|
* - Liryna <liryna.stark@gmail.com>
|
|
*/
|
|
#endregion
|
|
|
|
using System.Net.Security;
|
|
using System.Security.Authentication;
|
|
using System.Security.Cryptography.X509Certificates;
|
|
|
|
namespace WebSocketSharp.Net
|
|
{
|
|
/// <summary>
|
|
/// Stores the parameters used to configure a <see cref="SslStream"/> instance as a client.
|
|
/// </summary>
|
|
public class ClientSslAuthConfiguration
|
|
{
|
|
#region Private Fields
|
|
|
|
private RemoteCertificateValidationCallback _serverCertValidationCallback;
|
|
|
|
#endregion
|
|
|
|
#region Public Constructors
|
|
|
|
/// <summary>
|
|
/// Initializes a new instance of the <see cref="ClientSslAuthConfiguration"/> class with
|
|
/// the specified <paramref name="targetHost"/>.
|
|
/// </summary>
|
|
/// <param name="targetHost">
|
|
/// A <see cref="string"/> that represents the name of the server that shares
|
|
/// a secure connection.
|
|
/// </param>
|
|
public ClientSslAuthConfiguration (string targetHost)
|
|
: this (targetHost, null, SslProtocols.Default, false)
|
|
{
|
|
}
|
|
|
|
/// <summary>
|
|
/// Initializes a new instance of the <see cref="ClientSslAuthConfiguration"/> class with
|
|
/// the specified <paramref name="targetHost"/>, <paramref name="clientCertificates"/>,
|
|
/// <paramref name="enabledSslProtocols"/>, and <paramref name="checkCertificateRevocation"/>.
|
|
/// </summary>
|
|
/// <param name="targetHost">
|
|
/// A <see cref="string"/> that represents the name of the server that shares
|
|
/// a secure connection.
|
|
/// </param>
|
|
/// <param name="clientCertificates">
|
|
/// A <see cref="X509CertificateCollection"/> that contains client certificates.
|
|
/// </param>
|
|
/// <param name="enabledSslProtocols">
|
|
/// The <see cref="SslProtocols"/> enum value that represents the protocols used for
|
|
/// authentication.
|
|
/// </param>
|
|
/// <param name="checkCertificateRevocation">
|
|
/// <c>true</c> if the certificate revocation list is checked during authentication;
|
|
/// otherwise, <c>false</c>.
|
|
/// </param>
|
|
public ClientSslAuthConfiguration (
|
|
string targetHost,
|
|
X509CertificateCollection clientCertificates,
|
|
SslProtocols enabledSslProtocols,
|
|
bool checkCertificateRevocation)
|
|
{
|
|
TargetHost = targetHost;
|
|
ClientCertificates = clientCertificates;
|
|
EnabledSslProtocols = enabledSslProtocols;
|
|
CheckCertificateRevocation = checkCertificateRevocation;
|
|
}
|
|
|
|
#endregion
|
|
|
|
#region Public Properties
|
|
|
|
/// <summary>
|
|
/// Gets or sets a value indicating whether the certificate revocation list is checked
|
|
/// during authentication.
|
|
/// </summary>
|
|
/// <value>
|
|
/// <c>true</c> if the certificate revocation list is checked; otherwise, <c>false</c>.
|
|
/// </value>
|
|
public bool CheckCertificateRevocation { get; set; }
|
|
|
|
/// <summary>
|
|
/// Gets or sets the collection that contains client certificates.
|
|
/// </summary>
|
|
/// <value>
|
|
/// A <see cref="X509CertificateCollection"/> that contains client certificates.
|
|
/// </value>
|
|
public X509CertificateCollection ClientCertificates { get; set; }
|
|
|
|
/// <summary>
|
|
/// Gets or sets the SSL protocols used for authentication.
|
|
/// </summary>
|
|
/// <value>
|
|
/// The <see cref="SslProtocols"/> enum value that represents the protocols used for
|
|
/// authentication.
|
|
/// </value>
|
|
public SslProtocols EnabledSslProtocols { get; set; }
|
|
|
|
/// <summary>
|
|
/// Gets or sets the callback used to validate the certificate supplied by the server.
|
|
/// </summary>
|
|
/// <value>
|
|
/// A <see cref="RemoteCertificateValidationCallback"/> delegate that references the method
|
|
/// used to validate the server certificate. The default value is a function that only returns
|
|
/// <c>true</c>.
|
|
/// </value>
|
|
public RemoteCertificateValidationCallback ServerCertificateValidationCallback {
|
|
get {
|
|
return _serverCertValidationCallback ??
|
|
(_serverCertValidationCallback =
|
|
(sender, certificate, chain, sslPolicyErrors) => true);
|
|
}
|
|
|
|
set {
|
|
_serverCertValidationCallback = value;
|
|
}
|
|
}
|
|
|
|
/// <summary>
|
|
/// Gets or sets the name of the server that shares a secure connection.
|
|
/// </summary>
|
|
/// <value>
|
|
/// A <see cref="string"/> that represents the name of the server that shares
|
|
/// a secure connection.
|
|
/// </value>
|
|
public string TargetHost { get; set; }
|
|
|
|
#endregion
|
|
}
|
|
} |