ISslCertificateManager.h

Go to the documentation of this file.

// Copyright Epic Games, Inc. All Rights Reserved.
 
#pragma once
 
#include "Containers/ContainerAllocationPolicies.h"
#include "CoreTypes.h"
#include "CoreFwd.h"
#include "Delegates/Delegate.h"
 
struct ssl_ctx_st;
typedef struct ssl_ctx_st SSL_CTX;
 
struct x509_store_ctx_st;
typedef struct x509_store_ctx_st X509_STORE_CTX;
 
class ISslCertificateManager
{
public:
    virtual ~ISslCertificateManager() {}
    
    static constexpr int PUBLIC_KEY_DIGEST_SIZE = 32;
    
    virtual void AddCertificatesToSslContext(SSL_CTX* SslContextPtr) const = 0;
 
    virtual bool HasCertificatesAvailable() const = 0;
 
    virtual void ClearAllPinnedPublicKeys() = 0;
 
    virtual bool HasPinnedPublicKeys() const = 0;
 
    virtual bool IsDomainPinned(const FString& Domain) = 0;
 
    virtual void SetPinnedPublicKeys(const FString& Domain, const FString& PinnedKeyDigests) = 0;
 
    virtual bool VerifySslCertificates(X509_STORE_CTX* Context, const FString& Domain) const = 0;
    
    virtual bool VerifySslCertificates(TArray<TArray<uint8, TFixedAllocator<PUBLIC_KEY_DIGEST_SIZE>>>& Digests, const FString& Domain) const = 0;
};
 
class FSslCertificateDelegates
{
public:
    struct FCertInfo
    {
        static constexpr int CERT_DIGEST_SIZE = 20;
 
        TArray<uint8, TInlineAllocator<ISslCertificateManager::PUBLIC_KEY_DIGEST_SIZE>> KeyDigest;
        TArray<uint8, TInlineAllocator<CERT_DIGEST_SIZE>> Thumbprint;
        FString Issuer;
        FString Subject;
    };
 
    using FVerifySslCertificates = TTSDelegate<bool(const FString&, const TArray<FCertInfo>&)>;
    static SSL_API FVerifySslCertificates VerifySslCertificates;
};