Package pyxmpp :: Module streamtls :: Class TLSSettings
[hide private]

Class TLSSettings

source code

Storage for TLS-related settings of an XMPP stream.
Instance Methods [hide private]
 
__init__(self, require=False, verify_peer=True, cert_file=None, key_file=None, cacert_file=None, verify_callback=None, ctx=None)
Initialize the TLSSettings object.
source code
Instance Variables [hide private]
  cacert_file
path to a file with trusted CA certificates
  cert_file
path to own X.509 certificate
  key_file
path to the private key for own X.509 certificate
  require
is TLS required
  verify_callback
callback function for certificate verification.
  verify_peer
should the peer's certificate be verified
Method Details [hide private]

__init__(self, require=False, verify_peer=True, cert_file=None, key_file=None, cacert_file=None, verify_callback=None, ctx=None)
(Constructor)

source code 
Initialize the TLSSettings object.
Parameters:
  • require - is TLS required
  • verify_peer - should the peer's certificate be verified
  • cert_file - path to own X.509 certificate
  • key_file - path to the private key for own X.509 certificate
  • cacert_file - path to a file with trusted CA certificates
  • verify_callback - callback function for certificate verification. The callback function must accept a single argument: the certificate to verify, as returned by ssl.SSLSocket.getpeercert() and return True if a certificate is accepted. The verification callback should call Stream.tls_is_certificate_valid() to check if certificate subject name or alt subject name matches stream peer JID.