1 /* GIO - GLib Input, Output and Streaming Library
3 * Copyright © 2010 Collabora, Ltd
5 * SPDX-License-Identifier: LGPL-2.1-or-later
7 * This library is free software; you can redistribute it and/or
8 * modify it under the terms of the GNU Lesser General Public
9 * License as published by the Free Software Foundation; either
10 * version 2.1 of the License, or (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General
18 * Public License along with this library; if not, see <http://www.gnu.org/licenses/>.
20 * Author: Stef Walter <stefw@collabora.co.uk>
25 #include "gtlsfiledatabase.h"
27 #include "ginitable.h"
28 #include "gtlsbackend.h"
29 #include "gtlsdatabase.h"
35 * `GTlsFileDatabase` is implemented by [class@Gio.TlsDatabase] objects which
36 * load their certificate information from a file. It is an interface which
37 * TLS library specific subtypes implement.
42 G_DEFINE_INTERFACE (GTlsFileDatabase, g_tls_file_database, G_TYPE_TLS_DATABASE)
45 g_tls_file_database_default_init (GTlsFileDatabaseInterface *iface)
48 * GTlsFileDatabase:anchors:
50 * The path to a file containing PEM encoded certificate authority
51 * root anchors. The certificates in this file will be treated as
52 * root authorities for the purpose of verifying other certificates
53 * via the g_tls_database_verify_chain() operation.
57 g_object_interface_install_property (iface,
58 g_param_spec_string ("anchors", NULL, NULL,
62 G_PARAM_STATIC_STRINGS));
66 * g_tls_file_database_new:
67 * @anchors: (type filename): filename of anchor certificate authorities.
68 * @error: #GError for error reporting, or %NULL to ignore.
70 * Creates a new #GTlsFileDatabase which uses anchor certificate authorities
71 * in @anchors to verify certificate chains.
73 * The certificates in @anchors must be PEM encoded.
75 * Returns: (transfer full) (type GTlsFileDatabase): the new
76 * #GTlsFileDatabase, or %NULL on error
81 g_tls_file_database_new (const gchar *anchors,
87 backend = g_tls_backend_get_default ();
88 database = g_initable_new (g_tls_backend_get_file_database_type (backend),
92 return G_TLS_DATABASE (database);