class

LavinMQ::SNIHost

Inherits Reference < Object

Configuration for a specific SNI hostname. Only the certificate and mTLS settings can differ per host: the TLS version is selected before the servername callback swaps the context, and the listener's cipher settings are set when the contexts are built, as TLS 1.2 picks its cipher after.

Constants

Log = LavinMQ::Log.for("sni")

Constructors

new(hostname : String)

Instance methods

amqp_tls_ca_cert

amqp_tls_ca_cert=(amqp_tls_ca_cert : String | Nil)

amqp_tls_cert

AMQP-specific overrides (nil/empty means use the default)

amqp_tls_cert=(amqp_tls_cert : String | Nil)

AMQP-specific overrides (nil/empty means use the default)

amqp_tls_context

Built by build_tls_contexts; reading one before that raises

amqp_tls_context?

Built by build_tls_contexts; reading one before that raises

amqp_tls_key

amqp_tls_key=(amqp_tls_key : String | Nil)

amqp_tls_keylog_file

amqp_tls_keylog_file=(amqp_tls_keylog_file : String | Nil)

amqp_tls_verify_peer

amqp_tls_verify_peer=(amqp_tls_verify_peer : Bool | Nil)

build_tls_contexts(ciphers : String, ciphersuites : String) : Nil

Builds the TLS context for every protocol, with the listener's cipher settings. Config runs this when it parses the SNI sections.

hostname

hostname=(hostname : String)

http_tls_ca_cert

http_tls_ca_cert=(http_tls_ca_cert : String | Nil)

http_tls_cert

HTTP-specific overrides (nil/empty means use the default)

http_tls_cert=(http_tls_cert : String | Nil)

HTTP-specific overrides (nil/empty means use the default)

http_tls_context

http_tls_context?

http_tls_key

http_tls_key=(http_tls_key : String | Nil)

http_tls_keylog_file

http_tls_keylog_file=(http_tls_keylog_file : String | Nil)

http_tls_verify_peer

http_tls_verify_peer=(http_tls_verify_peer : Bool | Nil)

mqtt_tls_ca_cert

mqtt_tls_ca_cert=(mqtt_tls_ca_cert : String | Nil)

mqtt_tls_cert

MQTT-specific overrides (nil/empty means use the default)

mqtt_tls_cert=(mqtt_tls_cert : String | Nil)

MQTT-specific overrides (nil/empty means use the default)

mqtt_tls_context

mqtt_tls_context?

mqtt_tls_key

mqtt_tls_key=(mqtt_tls_key : String | Nil)

mqtt_tls_keylog_file

mqtt_tls_keylog_file=(mqtt_tls_keylog_file : String | Nil)

mqtt_tls_verify_peer

mqtt_tls_verify_peer=(mqtt_tls_verify_peer : Bool | Nil)

tls_ca_cert

tls_ca_cert=(tls_ca_cert : String)

tls_cert

Default TLS settings (used by all protocols unless overridden)

tls_cert=(tls_cert : String)

Default TLS settings (used by all protocols unless overridden)

tls_context(protocol : Symbol) : OpenSSL::SSL::Context::Server

tls_key

tls_key=(tls_key : String)

tls_keylog_file

tls_keylog_file=(tls_keylog_file : String)

tls_verify_peer=(tls_verify_peer : Bool)

tls_verify_peer?