Cert

Object Hierarchy:

Description:

// server (ollmfilesd)
var server = new OLLMrpc.Transport.Cert() {
    dir = tls_dir,
    ca_pem_path = ca_pem,
    ca_key_path = ca_key,
    server_san = true,
};
server.ensure();
http.tls_certificate = server.certificate;

// device client (ollmapp)
var client = new OLLMrpc.Transport.Cert() {
    dir = GLib.Path.build_filename(
        GLib.Environment.get_user_data_dir(), "ollmchat"),
    cert_pem = "client.pem",
    key_pem = "client-key.pem",
    cn = "ollmchat-device",
};
client.ensure();
var http = new OLLMrpc.Transport.HttpClient(url) {
    bin_body = true,
    tls_certificate = client.certificate,
    tls_database = client.trust
};

Content:

Properties:

• public string ca_key_path { get; set; }
  Product CA private key file (ollmfilesd only).
• public string ca_pem_path { get; set; }
  Product CA certificate file used to sign our certificate. Empty (with empty ca_key_path) means self-signed.
• public string cert_pem { get; set; }
  Certificate file name under dir.
• public TlsCertificate certificate { get; }
  This program's own certificate and key, set by ensure.
• public string cn { get; set; }
  Name written into the certificate (X.509 common name).
• public string dir { get; set; }
  Directory the key, certificate and trust files live in.
• public string key_pem { get; set; }
  Private key file name under dir.
• public bool server_san { get; set; }
  Server only: also make the certificate valid for localhost.
• public TlsDatabase? trust { get; }
  Product CA trust store for HttpClient.tls_database, set by ensure from ca_pem_path or the trust_pem file under dir. Null when neither exists (system trust), matching HttpClient.tls_database.
• public string trust_pem { get; set; }
  Trust PEM basename under dir when ca_pem_path is empty. Default ollmrpc-ca.pem.

Creation methods:

• public Cert ()

Methods:

• public void ensure ()
  Make sure this program's key and certificate files exist under dir, then set certificate and trust from them.
• public void remove ()
  Delete the key, certificate, CSR, and trust file under dir.

Inherited Members: