| /* | |
| * Licensed to the Apache Software Foundation (ASF) under one | |
| * or more contributor license agreements. See the NOTICE file | |
| * distributed with this work for additional information | |
| * regarding copyright ownership. The ASF licenses this file | |
| * to you under the Apache License, Version 2.0 (the | |
| * "License"); you may not use this file except in compliance | |
| * with the License. You may obtain a copy of the License at | |
| * | |
| * http://www.apache.org/licenses/LICENSE-2.0 | |
| * | |
| * Unless required by applicable law or agreed to in writing, | |
| * software distributed under the License is distributed on an | |
| * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY | |
| * KIND, either express or implied. See the License for the | |
| * specific language governing permissions and limitations | |
| * under the License. | |
| */ | |
| #include "RpcSslUtils.h" | |
| #if WITH_SSL | |
| void configureSslSocketFactory( | |
| const std::shared_ptr<apache::thrift::transport::TSSLSocketFactory>& socketFactory, | |
| const SslConfig& sslConfig) { | |
| sslConfig.validate(); | |
| socketFactory->loadTrustedCertificates(sslConfig.trustCertFilePath.c_str()); | |
| if (!sslConfig.clientCertificateFilePath.empty()) { | |
| socketFactory->loadCertificate(sslConfig.clientCertificateFilePath.c_str()); | |
| socketFactory->loadPrivateKey(sslConfig.clientPrivateKeyFilePath.c_str()); | |
| } | |
| socketFactory->authenticate(true); | |
| } | |
| #endif // WITH_SSL |