view release on metacpan or  search on metacpan

README  view on Meta::CPAN

      This is a reference to an array that contains one or more array
      references:

          $sni_params = [                                                     # virtual hosts support - when a client sends a TLS SNI extension, the settings below will apply
                                                                              #                         based on the requested hostname
              # virtual host 0 (also referred in the code as SNI entry 0)
              {
                  'hostname' => 'hostname',                                   # regular expression for matching the hostname
                  'cert' => '/path/to/certificate;/path/to/CA-chain',         # KEY - certificate (the CA-chain is optional)
                  'key' => '/path/to/private_key',                            # KEY - private key
                  'DH_param' => /path/to/DH_params',                          # KEY - file containing the DH parameter used with DH ciphers
                  'session_ticket_keys' => {                                  # session tickets setup
                      'id' => '1234567890123456',                             # KEY - TLS session tickets - 16 bytes unique identifier
                      'encrypt_key' => '12345678901234567890123456789012',    # KEY - TLS session tickets - 128/256 bit encryption key
                      'hash_key' => '12345678901234567890123456789012',       # KEY - TLS session tickets - 256 bit hash key
                  },
                  'OCSP_staple' => '/path/to/OCSP_staple.der',                # SESSION - file containing a OCSP staple that gets sent when a client
                                                                              #           send a TLS status request extension
                  'SCT_params' => [                                           # SESSION - Certificate Transparency SCT files used to build the
                                                                              #           'signed_certificate_timestamp' TLS extension data buffer

lib/Crypt/MatrixSSL3.pm  view on Meta::CPAN

=item $sni_params [{...},...] or undef

This is a reference to an array that contains one or more array references:

    $sni_params = [                                                     # virtual hosts support - when a client sends a TLS SNI extension, the settings below will apply
                                                                        #                         based on the requested hostname
        # virtual host 0 (also referred in the code as SNI entry 0)
        {
            'hostname' => 'hostname',                                   # regular expression for matching the hostname
            'cert' => '/path/to/certificate;/path/to/CA-chain',         # KEY - certificate (the CA-chain is optional)
            'key' => '/path/to/private_key',                            # KEY - private key
            'DH_param' => /path/to/DH_params',                          # KEY - file containing the DH parameter used with DH ciphers
            'session_ticket_keys' => {                                  # session tickets setup
                'id' => '1234567890123456',                             # KEY - TLS session tickets - 16 bytes unique identifier
                'encrypt_key' => '12345678901234567890123456789012',    # KEY - TLS session tickets - 128/256 bit encryption key
                'hash_key' => '12345678901234567890123456789012',       # KEY - TLS session tickets - 256 bit hash key
            },
            'OCSP_staple' => '/path/to/OCSP_staple.der',                # SESSION - file containing a OCSP staple that gets sent when a client
                                                                        #           send a TLS status request extension
            'SCT_params' => [                                           # SESSION - Certificate Transparency SCT files used to build the
                                                                        #           'signed_certificate_timestamp' TLS extension data buffer