Struct gio::TlsServerConnection

pub struct TlsServerConnection { /* private fields */ }

TlsServerConnection is the server-side subclass of TlsConnection, representing a server-side TLS connection.

Properties

authentication-mode

The TlsAuthenticationMode for the server. This can be changed before calling TlsConnectionExt::handshake() if you want to rehandshake with a different mode from the initial handshake.

Readable | Writeable

TlsConnection

advertised-protocols

The list of application-layer protocols that the connection advertises that it is willing to speak. See TlsConnectionExtManual::set_advertised_protocols().

Readable | Writeable

base-io-stream

The IOStream that the connection wraps. The connection holds a reference to this stream, and may run operations on the stream from other threads throughout its lifetime. Consequently, after the IOStream has been constructed, application code may only run its own operations on this stream when no IOStream operations are running.

Readable | Writeable | Construct Only

certificate

The connection’s certificate; see TlsConnectionExt::set_certificate().

Readable | Writeable

ciphersuite-name

The name of the TLS ciphersuite in use. See TlsConnectionExt::ciphersuite_name().

Readable

database

The certificate database to use when verifying this TLS connection. If no certificate database is set, then the default database will be used. See TlsBackendExt::default_database().

When using a non-default database, TlsConnection must fall back to using the TlsDatabase to perform certificate verification using TlsDatabaseExt::verify_chain(), which means certificate verification will not be able to make use of TLS session context. This may be less secure. For example, if you create your own TlsDatabase that just wraps the default TlsDatabase, you might expect that you have not changed anything, but this is not true because you may have altered the behavior of TlsConnection by causing it to use TlsDatabaseExt::verify_chain(). See the documentation of TlsDatabaseExt::verify_chain() for more details on specific security checks that may not be performed. Accordingly, setting a non-default database is discouraged except for specialty applications with unusual security requirements.

Readable | Writeable

interaction

A TlsInteraction object to be used when the connection or certificate database need to interact with the user. This will be used to prompt the user for passwords where necessary.

Readable | Writeable

negotiated-protocol

The application-layer protocol negotiated during the TLS handshake. See TlsConnectionExt::negotiated_protocol().

Readable

peer-certificate

The connection’s peer’s certificate, after the TLS handshake has completed or failed. Note in particular that this is not yet set during the emission of accept-certificate.

(You can watch for a notify signal on this property to detect when a handshake has occurred.)

Readable

peer-certificate-errors

The errors noticed while verifying peer-certificate. Normally this should be 0, but it may not be if validation-flags is not TlsCertificateFlags::VALIDATE_ALL, or if accept-certificate overrode the default behavior.

GLib guarantees that if certificate verification fails, at least one error will be set, but it does not guarantee that all possible errors will be set. Accordingly, you may not safely decide to ignore any particular type of error. For example, it would be incorrect to mask TlsCertificateFlags::EXPIRED if you want to allow expired certificates, because this could potentially be the only error flag set even if other problems exist with the certificate.

Readable

protocol-version

The TLS protocol version in use. See TlsConnectionExt::protocol_version().

Readable

rehandshake-mode

The rehandshaking mode. See TlsConnectionExt::set_rehandshake_mode().

Readable | Writeable | Construct

require-close-notify

Whether or not proper TLS close notification is required. See TlsConnectionExt::set_require_close_notify().

Readable | Writeable | Construct

use-system-certdb

Whether or not the system certificate database will be used to verify peer certificates. See g_tls_connection_set_use_system_certdb().

Readable | Writeable | Construct

IOStream

closed

Readable

input-stream

Readable

output-stream

Readable

Implements

TlsServerConnectionExt, TlsConnectionExt, IOStreamExt, glib::ObjectExt, TlsConnectionExtManual, IOStreamExtManual

Implementations

impl TlsServerConnection

pub const NONE: Option<&'static TlsServerConnection> = None

pub fn new( base_io_stream: &impl IsA<IOStream>, certificate: Option<&impl IsA<TlsCertificate>> ) -> Result<TlsServerConnection, Error>

Creates a new TlsServerConnection wrapping base_io_stream (which must have pollable input and output streams).

See the documentation for base-io-stream for restrictions on when application code can run operations on the base_io_stream after this function has returned.

base_io_stream

the IOStream to wrap

certificate

the default server certificate, or None

Returns

the new TlsServerConnection, or None on error

Trait Implementations

impl Clone for TlsServerConnection

fn clone(&self) -> Self

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for TlsServerConnection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Display for TlsServerConnection

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl HasParamSpec for TlsServerConnection

type ParamSpec = ParamSpecObject

type SetValue = TlsServerConnection

Preferred value to be used as setter for the associated ParamSpec.

type BuilderFn = fn(_: &str) -> ParamSpecObjectBuilder<'_, TlsServerConnection>

fn param_spec_builder() -> Self::BuilderFn

impl Hash for TlsServerConnection

fn hash<H>(&self, state: &mut H)

where H: Hasher,

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for TlsServerConnection

fn cmp(&self, other: &Self) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized + PartialOrd,

Restrict a value to a certain interval.

impl<OT: ObjectType> PartialEq<OT> for TlsServerConnection

fn eq(&self, other: &OT) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

This method tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl<OT: ObjectType> PartialOrd<OT> for TlsServerConnection

fn partial_cmp(&self, other: &OT) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

This method tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

This method tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

This method tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

This method tests greater than or equal to (for self and other) and is used by the >= operator.

impl StaticType for TlsServerConnection

fn static_type() -> Type

Returns the type identifier of Self.

impl Eq for TlsServerConnection

impl IsA<IOStream> for TlsServerConnection

impl IsA<TlsConnection> for TlsServerConnection