Package pyxmpp :: Module streamtls :: Class TLSSettings

[hide private]

# Class TLSSettings

source code

Storage for TLS-related settings of an XMPP stream.

Instance Methods | [hide private]

__init__(self, require=False, verify_peer=True, cert_file=None, key_file=None, cacert_file=None, verify_callback=None, ctx=None) Initialize the TLSSettings object. | source code

Instance Variables | [hide private]

| cacert_file : path to a file with trusted CA certificates
| cert_file : path to own X.509 certificate
| key_file : path to the private key for own X.509 certificate
| require : is TLS required
| verify_callback : callback function for certificate verification.
| verify_peer : should the peer's certificate be verified

Method Details | [hide private]

### __init__(self, require=False, verify_peer=True, cert_file=None, key_file=None, cacert_file=None, verify_callback=None, ctx=None)
(Constructor)

source code

Initialize the TLSSettings object.

Parameters:
  - `require` - : is TLS required
  - `verify_peer` - : should the peer's certificate be verified
  - `cert_file` - : path to own X.509 certificate
  - `key_file` - : path to the private key for own X.509 certificate
  - `cacert_file` - : path to a file with trusted CA certificates
  - `verify_callback` - : callback function for certificate verification. The callback function must accept a single argument: the certificate to verify, as returned by `ssl.SSLSocket.getpeercert()` and return True if a certificate is accepted. The verification callback should call Stream.tls_is_certificate_valid() to check if certificate subject name or alt subject name matches stream peer JID.