diff options
| author | Loïc Hoguin <[email protected]> | 2012-10-24 15:13:04 +0200 |
|---|---|---|
| committer | Loïc Hoguin <[email protected]> | 2012-10-24 15:13:18 +0200 |
| commit | c3133bfbc324fbb9ac26ab689cd41dc362ad7c05 (patch) | |
| tree | 99305b28a41489238998598b2000ba54411041f6 /src | |
| parent | 5ebe55a0fd8b6b533470f7bbcd85e0e075beef91 (diff) | |
| download | ranch-c3133bfbc324fbb9ac26ab689cd41dc362ad7c05.tar.gz ranch-c3133bfbc324fbb9ac26ab689cd41dc362ad7c05.tar.bz2 ranch-c3133bfbc324fbb9ac26ab689cd41dc362ad7c05.zip | |
Allow passing the 'verify' option in ranch_ssl
Diffstat (limited to 'src')
| -rw-r--r-- | src/ranch_ssl.erl | 7 |
1 files changed, 5 insertions, 2 deletions
diff --git a/src/ranch_ssl.erl b/src/ranch_ssl.erl index 1471f62..35f9c32 100644 --- a/src/ranch_ssl.erl +++ b/src/ranch_ssl.erl @@ -68,6 +68,8 @@ messages() -> {ssl, ssl_closed, ssl_error}. %% <dt>password</dt><dd>Optional. String containing the user's password. %% All private keyfiles must be password protected currently.</dd> %% <dt>port</dt><dd>TCP port number to open. Defaults to 0 (see below)</dd> +%% <dt>verify</dt><dd>Optional. If set to verify_peer, performs an x509-path +%% validation and request the client for a certificate.</dd> %% </dl> %% %% You can listen to a random port by setting the port option to 0. @@ -80,7 +82,8 @@ messages() -> {ssl, ssl_closed, ssl_error}. -spec listen([{backlog, non_neg_integer()} | {cacertfile, string()} | {certfile, string()} | {ciphers, [ssl:erl_cipher_suite()] | string()} | {ip, inet:ip_address()} | {keyfile, string()} | {nodelay, boolean()} - | {password, string()} | {port, inet:port_number()}]) + | {password, string()} | {port, inet:port_number()} + | {verify, ssl:verify_type()}]) -> {ok, ssl:sslsocket()} | {error, atom()}. listen(Opts) -> ranch:require([crypto, public_key, ssl]), @@ -91,7 +94,7 @@ listen(Opts) -> %% first argument. ssl:listen(0, ranch:filter_options(Opts2, [backlog, cacertfile, certfile, ciphers, ip, - keyfile, nodelay, password, port], + keyfile, nodelay, password, port, verify], [binary, {active, false}, {packet, raw}, {reuseaddr, true}, {nodelay, true}])). |