The cl-tls Reference Manual

Next: , Previous: , Up: (dir)   [Contents][Index]

The cl-tls Reference Manual

This is the cl-tls Reference Manual, generated automatically by Declt version 4.0 beta 2 "William Riker" on Thu Sep 15 04:14:17 2022 GMT+0.

Table of Contents


1 Introduction

CL-TLS is a prototype Common Lisp implementation of TLS and related protocols and standards including:

TLS is the IETF-standardized successor of Netscape's SSL protocol. Sometimes TLS/SSL are used interchangeably. At this point, there is no intention to support the older versions of the protocols (SSLv3 and below)

The project is currently in its early development phase and should only be used for experimental purposes.

CL-TLS uses Ironclad as its cryptographic back-end (at the time of writing, the ironclad in quicklisp has not yet been updated to the new maintained repo, use sharplispers/ironclad). See the system definition file for other dependencies

The project started as an attempt to create a network-based TLS fuzzer, but soon morphed of its own volition into a full-fledged TLS implementation.

Extensive testing, fuzzing, and code review is needed. Style guidelines, optimizations, feature-completion patches, bug fixes, and other contributions are welcome.

For an overview of known attacks against TLS and other issues relevant to implementors and users, see https://tools.ietf.org/html/rfc7457 At a minimum, CL-TLS will follow the recommendations and considerations in the aforementioned document before a proper alpha release is announced.

I also intend to fully document the internals of CL-TLS.

So far:

Major TODOs before alpha release:

Features that would be nice, but are not essential

CL-TLS does not offer gray streams, threading, sockets, event-loop, or compression functionality. This limits the code of CL-TLS to simply opening and managing a TLS tunnel through an octet stream and enhances portability and extensibility. However, libraries that offer this functionality (such as threaded or evented servers), can be built trivially on top of CL-TLS. See https://github.com/shrdlu68/secure-sockets as an example.

Here is an example of a simple text echo server that implements a simple one-thread-per-request model using usocket and bordeaux-threads:

(require :cl-tls)

(ql:quickload :bordeaux-threads)
(ql:quickload :usockets)
(ql:quickload :babel)

(defun echo-server (port &optional (host "localhost"))
  (let ((sock (usocket:socket-listen host port
				     :reuse-address t
				     :element-type '(unsigned-byte 8))))
    (cl-tls:initialize-listener
     :certificate "/path/to/cert.pem"
     :private-key "/path/to/key.pem")
    (loop
      for thread-id upfrom 0
      for new-sock = (usocket:socket-accept sock)
      for session-stream = (usocket:socket-stream new-sock)
      for handler = (multiple-value-bind (reader writer)
			(cl-tls:accept-tunnel :io-stream session-stream)
		      (lambda ()
			(loop
			  with id = thread-id
			  for in = (funcall reader)
			  for line = (and in
					  (babel:octets-to-string in))
			  if line do
			    (format t "~&~:R thread received data: ~A~%"
				    id line)
			    (funcall writer in)
			  else do
			    (format t
				    "~&Peer closed tunnel, ~:R thread exiting~%" id)
			    (return nil))))
      do
	 (bordeaux-threads:make-thread handler))))

And here is an example using client functionality:

(require :cl-tls)
(ql:quickload :babel)

(defun client-test (port &optional (host "localhost"))
  (let* ((sock (usocket:socket-connect
		host port
		:protocol :stream
		:element-type '(unsigned-byte 8))))
    (multiple-value-bind (reader writer close-callback)
	(cl-tls:request-tunnel
	 :certificate "/path/to/cert.pem"
	 :private-key "/path/to/key.pem"
	 :io-stream (usocket:socket-stream sock)
	 :peer-ip-addresses '((127 0 0 1))
	 :ca-certificates "/path/to/CA/ca-cert.pem")
      (loop
	for out = (read-line *standard-input* nil nil)
	for line = (and out
			(babel:string-to-octets out))
	if line do
	  (funcall writer line)
	  (let ((in (funcall reader)))
	    (cond (in
		   (format t "~&Received data: ~A~%"
			   (babel:octets-to-string in)))
		  (t
		   (funcall close-callback)
		   (return nil))))
	else do
	  (format t "~&Closing tunnel...~%")
	  (funcall close-callback)
	  (return nil)))))

Preliminary API documentation:

request-tunnel (&key certificate private-key ca-certificates
	       	     io-stream input-stream output-stream
		     include-ciphers exclude-ciphers
		     peer-dns-name peer-ip-addresses)

		Attempts to request a TLS tunnel from a server
		through an octet stream
		
		:io-stream A duplex octet stream
		
		:input-stream In the case where separate input and output
			      streams are used, an octet input stream
			      
		:output-stream An octet output stream

		:private-key A (DER/PEM-encoded) private key
			     (currently only DSA, RSA and DH private keys are supported)
			     If the private key is encrypted, you will be prompted for
			     the passphrase
			     
		:certificate A file containing a PEM-encoded list of one
			     or more cerificates
			     The file should consist of one or more
			     ----- BEGIN CERTIFICATE -----
			     ----- END CERTIFICATE -----
			     blocks. White space and other information around these blocks
			     is permitted and will be ignored. Support for PKCS#12-encoded
			     certificate chains is not yet implemented.
		:ca-certificates Either: 1. A directory to look for .crt, .pem, and .der
				 	    CA certificates in
					 2. A PEM-encoded file containing CA certificates,
					    encoded as explained above.
				 For servers, these are only needed if the server
				 needs to authenticate clients, i.e the clients are
				 expected to have client certificates issued to them.
				 This is not used very widely in practice.
				 For clients, CA certificates are used to authenticate
				 servers.
				 TLS clients such as browsers typically use a collection
				 of root certificates that are included by some means of
				 vetting, either provided by the operating system or
				 by the creators/maintainers of the browser.
				 You can use the CAs that your OS/browser has vetted,
				 or you can select which CAs to trust by yourself.
				 For example, most GNU/Linux systems have a package that
				 provides vetted root certificates, typically found in
				 the file "/etc/ssl/certs/ca-certificates.crt"
				 See also: https://curl.haxx.se/docs/sslcerts.html
				 
				 If you want to or have issued your own certificates,
				 include your CA certificate here, either in
				 addition to other CA certificates or as the sole
				 CA certificates. The client and server will only
				 be able to validate remote endpoints whose certificates
				 are signed by a CA certificate that is included,
				 there is no way to "accept" unvalidated certificates.

		
		:include-ciphers A list of symbols of cipher suites to add to the
				 default cipher list.
				 The symbols denote one of the cryptographic characteristics
				 of a cipher suite: key exchange, authentication
				 bulk encryption, mac, digest algorithms, prf, and key sizes.
				 Currently supported options:
				 :rsa-ke (RSA key exchange)
				 :rsa-auth (RSA authentication)
				 :dh (static dh) :dhe (ephemeral dh)
				 :dsa :anon (no authentication-vulnerable to MITM attacks!)
				 :rc4 (broken and prohibited) :3des
				 :aes128 :aes256 :cbc (cipher block chaining mode)
				 :md5 :sha1 :sha256
				 
		:exclude-ciphers A list of symbols of cipher suites to exclude
				 from the default cipher list.
				 :anon and :rc4 are already excluded by default
				 
		:peer-dns-name DNS-name of the peer. This is checked against
			       the dns-name values in the subject alternative name extension
			       of the certificate presented by the peer.
			       It is also used in the SNI extension, which is important
			       for virtual servers to determine which server the client
			       wants to contact.
		
		:peer-ip-addresses List of IP addresses of the peer
				   This is checked against the ip-address values
				   in the subject alternative name extension
			       	   of the certificate presented by the peer.
initialize-listener (&key certificate private-key ca-certificates
				include-ciphers exclude-ciphers force-reinitialize
				authenticate-client-p require-authentication-p
				dh-params)
			
		Loads resources needed for a server session and
		sets configuration options
		Servers need to call this once when initializing.
						 
		:authenticate-client-p When true, an attempt to authenticate the client
				       will be made. However, the client may send back an
				       empty certificate if it does not have
				       (an appropriate) certificate. This option defaults
				       to nil
				       
		:require-authentication-p When true, the server will be asked for a
					  certificate, and the connection will
					  fail if the client fails to provide a certificate.
					  This option defaults to nil.

accept-tunnel (&key io-stream input-stream output-stream)
	      => read-callback,write-callback,close-callback

	      Attempts to accept a client's request for a
	      TLS tunnel through an octet stream

		read-callback A closure whose argument list is in the form
			      (&key (eof-error-p nil) (eof-value nil))
			      that returns the contents
			      of one TLS record (2^14 bytes or less).
			      If :eof-error-p is true, the condition cl:end-of-file
			      will be signaled if the TLS tunnel is closed properly
			      (i.e a close_notify alert is received)
			      If :eof-error-p is false, eof-value is returned rather
			      than isgnalling end-of-file.
			      If an error is encountered while attempting to read from
			      the underlying stream (for example is a socket connection
			      is terminated without properly closing the TLS tunnel),
			      the condition cl:stream-error will be signalled.
		write-callback A closure of one argument, an octet vector of arbitrary size,
			       to be sent down the tunnel
			       Attempting to write to a closed TLS tunnel will
			       signal the condition cl:stream-error
			       If an error is encountered while attempting to write to
			       the underlying stream (for example is a socket connection
			       is terminated without properly closing the TLS tunnel),
			       the condition cl:stream-error will be signalled.
		close-callback A closure of no arguments that politely closes the TLS
			       connection by sending a close_notify alert.
(defclass address ()
  ((host :initarg :host
	 :accessor host)
   (port :initarg :port
	 :accessor port)))
request-stream-to-address (address)
		 =>octet stream
	Specialize this generic function and provide socket functionality.
	This is needed by some of the functionality in cl-tls that may need
	to open sockets, such as contacting OCSP responders.
	For example, to if you are using usockets:
	(defmethod cl-tls:request-stream-to-address ((addr cl-tls:address))
	  (usocket:socket-stream (usocket:socket-connect
	  (cl-tls:host addr) (cl-tls:port addr)
	  :protocol :stream
	  :element-type '(unsigned-byte 8))))

This API will likely change as development continues.


2 Systems

The main system appears first, followed by any subsystem dependency.


Previous: , Up: Systems   [Contents][Index]

2.1 cl-tls

An implementation of the Transport Layer Security Protocols

Author

Brian Kamotho

License

BSD-3-Clause

Dependencies
  • babel (system).
  • ironclad (system).
  • alexandria (system).
  • cl-base64 (system).
  • fast-io (system).
Source

cl-tls.asd.

Child Components

3 Modules

Modules are listed depth-first from the system components tree.


Next: , Previous: , Up: Modules   [Contents][Index]

3.1 cl-tls/src

Dependency

license (file).

Source

cl-tls.asd.

Parent Component

cl-tls (system).

Child Components

Next: , Previous: , Up: Modules   [Contents][Index]

3.2 cl-tls/src/ASN.1

Source

cl-tls.asd.

Parent Component

src (module).

Child Component

asn.1.lisp (file).


Next: , Previous: , Up: Modules   [Contents][Index]

3.3 cl-tls/src/pkcs

Source

cl-tls.asd.

Parent Component

src (module).

Child Components

Next: , Previous: , Up: Modules   [Contents][Index]

3.4 cl-tls/src/x509

Source

cl-tls.asd.

Parent Component

src (module).

Child Components

Next: , Previous: , Up: Modules   [Contents][Index]

3.5 cl-tls/src/PEM

Source

cl-tls.asd.

Parent Component

src (module).

Child Component

rfc7468.lisp (file).


Previous: , Up: Modules   [Contents][Index]

3.6 cl-tls/src/tls

Source

cl-tls.asd.

Parent Component

src (module).

Child Components

4 Files

Files are sorted by type and then listed depth-first from the systems components trees.


Next: , Previous: , Up: Files   [Contents][Index]

4.1 Lisp


Next: , Previous: , Up: Lisp   [Contents][Index]

4.1.1 cl-tls/cl-tls.asd

Source

cl-tls.asd.

Parent Component

cl-tls (system).

ASDF Systems

cl-tls.


4.1.2 cl-tls/src/package.lisp

Source

cl-tls.asd.

Parent Component

src (module).

Packages

cl-tls.


4.1.3 cl-tls/src/utils.lisp

Source

cl-tls.asd.

Parent Component

src (module).

Internals

4.1.4 cl-tls/src/ASN.1/asn.1.lisp

Source

cl-tls.asd.

Parent Component

asn.1 (module).

Public Interface
Internals

4.1.5 cl-tls/src/pkcs/pkcs1.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Public Interface
Internals

4.1.6 cl-tls/src/pkcs/pkcs3.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Internals

4.1.7 cl-tls/src/pkcs/pkcs5.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Public Interface

pbes2-decrypt (function).

Internals

4.1.8 cl-tls/src/pkcs/pkcs8.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Internals

4.1.9 cl-tls/src/x509/extensions.lisp

Source

cl-tls.asd.

Parent Component

x509 (module).

Internals

4.1.10 cl-tls/src/x509/x509.lisp

Dependency

extensions.lisp (file).

Source

cl-tls.asd.

Parent Component

x509 (module).

Public Interface
Internals

4.1.11 cl-tls/src/x509/ocsp.lisp

Dependency

x509.lisp (file).

Source

cl-tls.asd.

Parent Component

x509 (module).

Internals

4.1.12 cl-tls/src/x509/validate.lisp

Dependency

ocsp.lisp (file).

Source

cl-tls.asd.

Parent Component

x509 (module).

Internals

4.1.13 cl-tls/src/PEM/rfc7468.lisp

Source

cl-tls.asd.

Parent Component

pem (module).

Internals

4.1.14 cl-tls/src/tls/transport.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Public Interface

4.1.15 cl-tls/src/tls/http.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Public Interface
Internals

4.1.16 cl-tls/src/tls/ciphersuites.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

4.1.17 cl-tls/src/tls/alert.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

4.1.18 cl-tls/src/tls/crypto.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

4.1.19 cl-tls/src/tls/extensions.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

4.1.20 cl-tls/src/tls/tls.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Public Interface
Internals

Previous: , Up: Files   [Contents][Index]

4.2 Static


Next: , Previous: , Up: Static   [Contents][Index]

4.2.1 cl-tls/README

Source

cl-tls.asd.

Parent Component

cl-tls (system).


Previous: , Up: Static   [Contents][Index]

4.2.2 cl-tls/LICENSE

Dependency

readme (file).

Source

cl-tls.asd.

Parent Component

cl-tls (system).


5 Packages

Packages are listed by definition order.


Previous: , Up: Packages   [Contents][Index]

5.1 cl-tls

CL-TLS is a Common Lisp implemetation of TLS and related specifications

Source

package.lisp.

Nickname

tls

Use List
  • alexandria.
  • common-lisp.
Public Interface
Internals

6 Definitions

Definitions are sorted by export status, category, package, and then by lexicographic order.


Next: , Previous: , Up: Definitions   [Contents][Index]

6.1 Public Interface


6.1.1 Ordinary functions

Function: accept-tunnel (&key io-stream input-stream output-stream)

As a server, accept a new connection from a client

Package

cl-tls.

Source

tls.lisp.

Function: asn-sequence-to-list (vec &key mode)

Given an asn sequence, return a list of the raw der elements

Package

cl-tls.

Source

asn.1.lisp.

Function: asn-serialize (obj type &key class primitivep)

Create an ASN structure

Package

cl-tls.

Source

asn.1.lisp.

Function: create-asn-sequence (&rest coll)
Package

cl-tls.

Source

asn.1.lisp.

Function: encode-oid (nums)
Package

cl-tls.

Source

asn.1.lisp.

Function: initialize-listener (&key certificate private-key ca-certificates include-ciphers exclude-ciphers force-reinitialize authenticate-client-p require-authentication-p dh-params)

Initialize a TLS server session with the given arguments

Package

cl-tls.

Source

tls.lisp.

Function: parse-der (obj &key start mode)

Serialized mode returns the plain contents octets. deserialized mode deserializes the contents octets. Octet strings and Bit Strings are not deserialized

Package

cl-tls.

Source

asn.1.lisp.

Function: pbes2-decrypt (ov &optional passphrase)
Package

cl-tls.

Source

pkcs5.lisp.

Function: request-tunnel (&key certificate private-key ca-certificates io-stream input-stream output-stream include-ciphers exclude-ciphers peer-dns-name peer-ip-addresses)

As a client, request a TLS connection from a server

Package

cl-tls.

Source

tls.lisp.

Function: rsa-decrypt (data private-key)

Returns raw data after decrypting and parsing the Encryption-block

Package

cl-tls.

Source

pkcs1.lisp.

Function: rsa-encrypt (data key)

Converts data into an encryption block then calls ironclad

Package

cl-tls.

Source

pkcs1.lisp.

Function: rsassa-pkcs1.5-sign (priv-key msg hash-algorithm)
Package

cl-tls.

Source

pkcs1.lisp.

Function: rsassa-pkcs1.5-verify (pub-key msg signature hash-algorithm)
Package

cl-tls.

Source

pkcs1.lisp.

Function: x509-decode (octet-vector)

Deserialize an x509 certificate from an octet-vector

Package

cl-tls.

Source

x509.lisp.


6.1.2 Generic functions

Generic Reader: host (object)
Package

cl-tls.

Methods
Reader Method: host ((uri uri))

automatically generated reader method

Source

http.lisp.

Target Slot

host.

Reader Method: host ((address address))

automatically generated reader method

Source

transport.lisp.

Target Slot

host.

Generic Writer: (setf host) (object)
Package

cl-tls.

Methods
Writer Method: (setf host) ((uri uri))

automatically generated writer method

Source

http.lisp.

Target Slot

host.

Writer Method: (setf host) ((address address))

automatically generated writer method

Source

transport.lisp.

Target Slot

host.

Generic Reader: port (object)
Package

cl-tls.

Methods
Reader Method: port ((uri uri))

automatically generated reader method

Source

http.lisp.

Target Slot

port.

Reader Method: port ((address address))

automatically generated reader method

Source

transport.lisp.

Target Slot

port.

Generic Writer: (setf port) (object)
Package

cl-tls.

Methods
Writer Method: (setf port) ((uri uri))

automatically generated writer method

Source

http.lisp.

Target Slot

port.

Writer Method: (setf port) ((address address))

automatically generated writer method

Source

transport.lisp.

Target Slot

port.

Generic Function: request-stream-to-address (address)
Package

cl-tls.

Source

transport.lisp.

Methods
Method: request-stream-to-address ((addr address))

6.1.3 Standalone methods

Method: print-object ((cert x509v3-certificate) stream)
Source

x509.lisp.


6.1.4 Conditions

Condition: tls-error
Package

cl-tls.

Source

tls.lisp.

Direct superclasses

error.

Direct methods
Direct slots
Slot: text
Initargs

:text

Readers

text.

Writers

(setf text).

Condition: tls-stream-error
Package

cl-tls.

Source

tls.lisp.

Direct superclasses

stream-error.


Previous: , Up: Public Interface   [Contents][Index]

6.1.5 Classes

Class: address
Package

cl-tls.

Source

transport.lisp.

Direct methods
Direct slots
Slot: host
Initargs

:host

Readers

host.

Writers

(setf host).

Slot: port
Initargs

:port

Readers

port.

Writers

(setf port).


6.2 Internals


Next: , Previous: , Up: Internals   [Contents][Index]

6.2.1 Constants

Constant: +access-denied+
Package

cl-tls.

Source

alert.lisp.

Constant: +alert+
Package

cl-tls.

Source

tls.lisp.

Constant: +application-data+
Package

cl-tls.

Source

tls.lisp.

Constant: +asn1_application+
Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_constructed+
Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_context_specific+
Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_primitive+
Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_private+
Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_universal+
Package

cl-tls.

Source

asn.1.lisp.

Constant: +bad-certificate+
Package

cl-tls.

Source

alert.lisp.

Constant: +bad-record-mac+
Package

cl-tls.

Source

alert.lisp.

Constant: +certificate+
Package

cl-tls.

Source

tls.lisp.

Constant: +certificate-expired+
Package

cl-tls.

Source

alert.lisp.

Constant: +certificate-request+
Package

cl-tls.

Source

tls.lisp.

Constant: +certificate-revoked+
Package

cl-tls.

Source

alert.lisp.

Constant: +certificate-unknown+
Package

cl-tls.

Source

alert.lisp.

Constant: +certificate-verify+
Package

cl-tls.

Source

tls.lisp.

Constant: +change-cipher-spec+
Package

cl-tls.

Source

tls.lisp.

Constant: +client-hello+
Package

cl-tls.

Source

tls.lisp.

Constant: +client-key-exchange+
Package

cl-tls.

Source

tls.lisp.

Constant: +close-notify+
Package

cl-tls.

Source

alert.lisp.

Constant: +decode-error+
Package

cl-tls.

Source

alert.lisp.

Constant: +decompression-failure+
Package

cl-tls.

Source

alert.lisp.

Constant: +decrypt-error+
Package

cl-tls.

Source

alert.lisp.

Constant: +decryption-failed-reserved+
Package

cl-tls.

Source

alert.lisp.

Constant: +export-restriction-reserved+
Package

cl-tls.

Source

alert.lisp.

Constant: +fatal+
Package

cl-tls.

Source

alert.lisp.

Constant: +finished+
Package

cl-tls.

Source

tls.lisp.

Constant: +handshake+
Package

cl-tls.

Source

tls.lisp.

Constant: +handshake-failure+
Package

cl-tls.

Source

alert.lisp.

Constant: +hello-request+
Package

cl-tls.

Source

tls.lisp.

Constant: +illegal-parameter+
Package

cl-tls.

Source

alert.lisp.

Constant: +insufficient-security+
Package

cl-tls.

Source

alert.lisp.

Constant: +internal-error+
Package

cl-tls.

Source

alert.lisp.

Constant: +md2withrsaencryption+
Package

cl-tls.

Source

x509.lisp.

Constant: +md5withrsaencryption+
Package

cl-tls.

Source

x509.lisp.

Constant: +no-certificate-reserved+
Package

cl-tls.

Source

alert.lisp.

Constant: +no-renegotiation+
Package

cl-tls.

Source

alert.lisp.

Constant: +protocol-version+
Package

cl-tls.

Source

alert.lisp.

Constant: +record-overflow+
Package

cl-tls.

Source

alert.lisp.

Constant: +server-hello+
Package

cl-tls.

Source

tls.lisp.

Constant: +server-hello-done+
Package

cl-tls.

Source

tls.lisp.

Constant: +server-key-exchange+
Package

cl-tls.

Source

tls.lisp.

Constant: +sha1withrsaencryption+
Package

cl-tls.

Source

x509.lisp.

Constant: +sha224withrsaencryption+
Package

cl-tls.

Source

x509.lisp.

Constant: +sha256withrsaencryption+
Package

cl-tls.

Source

x509.lisp.

Constant: +sha384withrsaencryption+
Package

cl-tls.

Source

x509.lisp.

Constant: +sha512withrsaencryption+
Package

cl-tls.

Source

x509.lisp.

Constant: +unexpected-message+
Package

cl-tls.

Source

alert.lisp.

Constant: +unknown-ca+
Package

cl-tls.

Source

alert.lisp.

Constant: +unsupported-certificate+
Package

cl-tls.

Source

alert.lisp.

Constant: +unsupported-extension+
Package

cl-tls.

Source

alert.lisp.

Constant: +user-canceled+
Package

cl-tls.

Source

alert.lisp.

Constant: +warning+
Package

cl-tls.

Source

alert.lisp.


Next: , Previous: , Up: Internals   [Contents][Index]

6.2.2 Special variables

Special Variable: *certificate-request-msg*
Package

cl-tls.

Source

tls.lisp.

Special Variable: *crlf*
Package

cl-tls.

Source

http.lisp.

Special Variable: *debug-stream*
Package

cl-tls.

Source

tls.lisp.

Special Variable: *id-ad-ocsp*
Package

cl-tls.

Source

ocsp.lisp.

Special Variable: *log-level*
Package

cl-tls.

Source

tls.lisp.

Special Variable: *max-certificate-chain-length*
Package

cl-tls.

Source

tls.lisp.

Special Variable: *max-content-length*
Package

cl-tls.

Source

http.lisp.

Special Variable: *max-fragment-length*
Package

cl-tls.

Source

tls.lisp.

Special Variable: *max-int-len*
Package

cl-tls.

Source

asn.1.lisp.

Special Variable: *supported-cipher-suites*
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: *version*
Package

cl-tls.

Source

tls.lisp.

Special Variable: +3des-block-size+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +3des-encryption-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-128-ciphers+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-256-ciphers+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-block-size+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-encryption-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +anon-authentication-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +cbc-mode-ciphers+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +dh-key-exchange-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +dhe-key-exchange-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +dss-authentication-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +md5-ciphers+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +rc4-encryption-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +rsa-authentication-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +rsa-key-exchange-suites+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +sha1-ciphers+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +sha256-ciphers+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_3des_ede_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_128_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_128_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_256_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_256_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_rc4_128_md5+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_3des_ede_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_128_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_128_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_256_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_256_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_3des_ede_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_128_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_128_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_256_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_256_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_3des_ede_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_128_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_128_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_256_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_256_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_3des_ede_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_128_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_128_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_256_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_256_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_3des_ede_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_128_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_128_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_256_cbc_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_256_cbc_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_null_md5+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_null_sha+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_null_sha256+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_rc4_128_md5+
Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_rc4_128_sha+
Package

cl-tls.

Source

ciphersuites.lisp.


Next: , Previous: , Up: Internals   [Contents][Index]

6.2.3 Symbol macros

Symbol Macro: endpoint-decryption-key
Package

cl-tls.

Source

crypto.lisp.

Symbol Macro: endpoint-encryption-key
Package

cl-tls.

Source

crypto.lisp.

Symbol Macro: endpoint-mac-decryption-key
Package

cl-tls.

Source

tls.lisp.

Symbol Macro: endpoint-mac-encryption-key
Package

cl-tls.

Source

tls.lisp.


6.2.4 Macros

Macro: bind-tbs (tbs &body body)
Package

cl-tls.

Source

x509.lisp.

Macro: ocsp-catch-asn-error (&body body)
Package

cl-tls.

Source

ocsp.lisp.

Macro: with-specification-map (map vec error-clause &body b)
Package

cl-tls.

Source

utils.lisp.


Next: , Previous: , Up: Internals   [Contents][Index]

6.2.5 Ordinary functions

Function: add-handshake-header (handshake-type buffer)
Package

cl-tls.

Source

tls.lisp.

Function: alert-record-to-text (content)
Package

cl-tls.

Source

alert.lisp.

Function: asn-sequence-to-indices (vec &optional contents-start)

Given an asn sequence, return a list of the types of elements in them and their start and end positions in the vector

Package

cl-tls.

Source

asn.1.lisp.

Function: asn-time-to-universal-time (time-string)

Converts utcTime or GeneralTime to universal time

Package

cl-tls.

Source

x509.lisp.

Function: asn-type-matches-p (type info)
Package

cl-tls.

Source

utils.lisp.

Function: bytes-in-int (int)

Return the least number of octets needed to represent an integer

Package

cl-tls.

Source

utils.lisp.

Function: calculate-mac (session content-type message)
Package

cl-tls.

Source

tls.lisp.

Function: calculate-verification-mac (session content-type message)
Package

cl-tls.

Source

tls.lisp.

Function: cat-vectors (&rest vectors)
Package

cl-tls.

Source

utils.lisp.

Function: check-certificate-status (session subject issuer)

Check certificate status via OCSP.
If the OCSP request is successful and the status os good, return true. Return false in every other case

Package

cl-tls.

Source

validate.lisp.

Function: check-ocsp (subject issuer)

Return the status of the certificate or signal an error

Package

cl-tls.

Source

ocsp.lisp.

Function: cipher-suite-supported-p (cs session)
Package

cl-tls.

Source

tls.lisp.

Function: compute-shared-secret (dh-params secret-exp dh-public-value)

Generates the final secret, given the dh-params and the dh-public-value of the other party

Package

cl-tls.

Source

pkcs3.lisp.

Function: create-cert-id (issuer-dn issuer-pub-key cert-serial-number &optional hash-algorithm)
Package

cl-tls.

Source

ocsp.lisp.

Function: create-cert-status-request ()
Package

cl-tls.

Source

extensions.lisp.

Function: create-cipher-vector (include exclude &optional authentication-method)
Package

cl-tls.

Source

tls.lisp.

Function: create-explicit-tag (contents number &optional class)
Package

cl-tls.

Source

asn.1.lisp.

Function: create-listener-session (&key private-key certificate ca-certificates include-ciphers exclude-ciphers dh-params authenticate-client-p require-authentication-p)
Package

cl-tls.

Source

tls.lisp.

Function: create-request (cert-id)
Package

cl-tls.

Source

ocsp.lisp.

Function: create-session (role &key certificate private-key ca-certificates io-stream input-stream output-stream include-ciphers exclude-ciphers peer-dns-name peer-ip-addresses)
Package

cl-tls.

Source

tls.lisp.

Function: create-sni (fqdn)
Package

cl-tls.

Source

extensions.lisp.

Function: create-tbs-request (identifiers)

identifiers is a list of lists with identifier-dn identifier-pub-key, and serial number

Package

cl-tls.

Source

ocsp.lisp.

Function: decapsulate (txt prefix suffix &key start end)

Read string encapsulated between a prefix and suffix

Package

cl-tls.

Source

rfc7468.lisp.

Function: decode-oid (vec)

Decode an OID into a list of integers

Package

cl-tls.

Source

asn.1.lisp.

Function: dhparams-from-key-file (path)
Package

cl-tls.

Source

tls.lisp.

Function: digitally-sign (session data)

Create a digitally-signed-struct

Package

cl-tls.

Source

crypto.lisp.

Function: dns-match-p (pattern dns-name)

Simple pattern matching for dns names. Only accepts one wildcard subdomain name.

Package

cl-tls.

Source

utils.lisp.

Function: dump-to-file (ov file-spec)
Package

cl-tls.

Source

utils.lisp.

Function: emsa-pkcs1-v1.5-encode (m emlen hash-algorithm)
Package

cl-tls.

Source

pkcs1.lisp.

Function: encrypt-and-send (session content-type content &key start end)
Package

cl-tls.

Source

tls.lisp.

Function: fill-random-nonzero-octets (buffer &optional start end)
Package

cl-tls.

Source

pkcs1.lisp.

Function: find-certificates (dir)
Package

cl-tls.

Source

utils.lisp.

Function: from-stream-parse-der (octet-stream &key mode)

Parse a single DER element from the stream. Maximum length
of integer values is max-int-len
If mode is :serialized, this function returns the plain contents octets
If mode is :deserialized, this function attempt to convert the contents octets into a lisp object if the class type is universal.

Package

cl-tls.

Source

asn.1.lisp.

Function: gen-key-material (client)

Generate the session keying material

Package

cl-tls.

Source

crypto.lisp.

Function: generate-dh-params (&key l p g)
Package

cl-tls.

Source

pkcs3.lisp.

Function: get-application-data (session eof-error-p eof-value)

Get application data, take care of renegotiation transparently

Package

cl-tls.

Source

tls.lisp.

Function: get-ca-certificates (path)
Package

cl-tls.

Source

tls.lisp.

Function: get-change-cipher-spec (session)
Package

cl-tls.

Source

tls.lisp.

Function: get-contents (path)

Get the contents of the file, either as text if it is text content or as an octet vector otherwise

Package

cl-tls.

Source

utils.lisp.

Function: get-der-contents-indices (octet-stream)

Decodes the Type and length fields, and returns bounding array indices of the contents octets.

Package

cl-tls.

Source

asn.1.lisp.

Function: get-dh-params (path)
Package

cl-tls.

Source

tls.lisp.

Function: get-handshake-message (session &optional handshake-fragment)
Package

cl-tls.

Source

tls.lisp.

Function: get-issuer-octets (cert)

Get the raw der-encoded contents of the issuer field in the certificate

Package

cl-tls.

Source

validate.lisp.

Function: get-private-key (path)
Package

cl-tls.

Source

tls.lisp.

Function: get-pubkey-octets (cert)

Get the raw der-encoded contents of the public key field in the certificate

Package

cl-tls.

Source

validate.lisp.

Function: get-random-octets (n &optional buffer)

Return a series of n octets from a cryptographically secure source

Package

cl-tls.

Source

utils.lisp.

Function: get-raw-tbs (cert)

Get the raw octets of the DER-encoded tbsCertificate structure

Package

cl-tls.

Source

x509.lisp.

Function: get-sequence (stream length)
Package

cl-tls.

Source

utils.lisp.

Function: get-session-id ()
Package

cl-tls.

Source

tls.lisp.

Function: gmt-unix-time ()

Return a number representing the seconds that have elapsed since January 1, 1970

Package

cl-tls.

Source

utils.lisp.

Function: header-value (header-key headers)
Package

cl-tls.

Source

http.lisp.

Function: http-request (url &key method body content-type)

Retrieve response body of http transaction

Package

cl-tls.

Source

http.lisp.

Function: integer-to-octets (int &optional length)

Convert an integer into a network-byte-ordered vector of octets, padded with zeros if the number of octets in int is less than length.

Package

cl-tls.

Source

utils.lisp.

Function: integer-to-vlq (n)
Package

cl-tls.

Source

asn.1.lisp.

Function: load-der-priv-key (octet-vector)

Load a PKCS#8-encoded (rfc5208) private key file

Package

cl-tls.

Source

pkcs8.lisp.

Function: load-pem-priv-key (character-vector)

Load a PEM-encoded Private key; PEM-encoded keys should be just base64-encoded PKCS#8 PrivateKeyInfo structures with a header and a footer. But they’re sometimes not, instead being just the privateKey-RSAPrivateKey and DSAPrivateKey.

Package

cl-tls.

Source

pkcs8.lisp.

Function: load-priv-key (obj)
Package

cl-tls.

Source

pkcs8.lisp.

Function: make-dh-key-pair (dh-params &optional static)

Generate a Private/Public key pair

Package

cl-tls.

Source

pkcs3.lisp.

Function: make-octet-stream (octet-vector)
Package

cl-tls.

Source

asn.1.lisp.

Function: make-octet-vector (&key length initial-contents)
Package

cl-tls.

Source

utils.lisp.

Function: octets-to-integer (ov &key start end)
Package

cl-tls.

Source

utils.lisp.

Function: ov-buffer-position (os)
Package

cl-tls.

Source

asn.1.lisp.

Function: p-hash (secret data output-length &optional digest-algorithm)
Package

cl-tls.

Source

crypto.lisp.

Function: pack-extension (extension-type extension-data)
Package

cl-tls.

Source

extensions.lisp.

Function: parse-access-description (value)
Package

cl-tls.

Source

extensions.lisp.

Function: parse-cipher-suite (cipher-suite session)
Package

cl-tls.

Source

tls.lisp.

Function: parse-directory-name (rdns)

Parse DER-encoded distinguishedName sequence

Package

cl-tls.

Source

x509.lisp.

Function: parse-enc-scheme (enc-scheme)
Package

cl-tls.

Source

pkcs5.lisp.

Function: parse-general-name (general-name)
Package

cl-tls.

Source

extensions.lisp.

Function: parse-general-names (general-names)

Return a bag of generalNames

Package

cl-tls.

Source

extensions.lisp.

Function: parse-headers-from-stream (stream)

Repeatedly read headers from stream

Package

cl-tls.

Source

http.lisp.

Function: parse-kdf (kdf)
Package

cl-tls.

Source

pkcs5.lisp.

Function: parse-pem (text)
Package

cl-tls.

Source

rfc7468.lisp.

Function: parse-pka (public-key-algorithm)

Parse the OID in the SubjectPublicKeyInfo and the parameters

Package

cl-tls.

Source

x509.lisp.

Function: parse-priv-key (ov private-key-algorithm)
Package

cl-tls.

Source

pkcs8.lisp.

Function: parse-pub-key (ov algorithm)
Package

cl-tls.

Source

x509.lisp.

Function: parse-qualifier (policy-qualifier-id qualifier)
Package

cl-tls.

Source

extensions.lisp.

Function: parse-response-data (data serial)
Package

cl-tls.

Source

ocsp.lisp.

Function: parse-signature-algorithm (sig)

Parse the sequence containing OID + optional parameters

Package

cl-tls.

Source

x509.lisp.

Function: parse-tbs-certificate (tbs-certificate)
Package

cl-tls.

Source

x509.lisp.

Function: parse-uri (uri)

Parse URI into its components as specified in rfc3986

Package

cl-tls.

Source

http.lisp.

Function: prepare-ocsp-request (identifiers)
Package

cl-tls.

Source

ocsp.lisp.

Function: prf (secret label seed output-length)
Package

cl-tls.

Source

crypto.lisp.

Function: process-extensions (extensions)
Package

cl-tls.

Source

x509.lisp.

Function: read-chunk (stream)

Read a single chunk, or nil upon receiving 0-length header

Package

cl-tls.

Source

http.lisp.

Function: read-chunked-response (stream)
Package

cl-tls.

Source

http.lisp.

Function: read-header (stream)

Read one header from stream

Package

cl-tls.

Source

http.lisp.

Function: reassemble-handshake-message (session &optional handshake-fragment)

Handle defragmentation of handshake messages

Package

cl-tls.

Source

tls.lisp.

Function: remove-padding (ov)

Remove rfc1423 padding from octet-vector ov

Package

cl-tls.

Source

pkcs5.lisp.

Function: send-alert (session level description)

Send an alert record

Package

cl-tls.

Source

alert.lisp.

Function: sign-dh-params (session params)
Package

cl-tls.

Source

crypto.lisp.

Function: split-header (header)

Split header into its key and value components

Package

cl-tls.

Source

http.lisp.

Function: split-string (str target)
Package

cl-tls.

Source

utils.lisp.

Function: stream-octets-to-integer (stream length)
Package

cl-tls.

Source

utils.lisp.

Function: strong-random-range (a b)

Generate a random integer between a and b, inclusive

Package

cl-tls.

Source

pkcs3.lisp.

Function: symbol-to-suite-list (sym)
Package

cl-tls.

Source

tls.lisp.

Function: time-valid-p (cert)
Package

cl-tls.

Source

x509.lisp.

Function: timing-independent-compare (vec1 vec2)

Compare octet vectors in a time-independent manner

Package

cl-tls.

Source

utils.lisp.

Function: trim-space (str)
Package

cl-tls.

Source

http.lisp.

Function: validate (session chain)

Certificate Path validation, including status checking

Package

cl-tls.

Source

validate.lisp.

Function: verify-ocsp-signature (signing-certificate response-data signature signature-algorithm)
Package

cl-tls.

Source

ocsp.lisp.

Function: verify-signature (subject issuer)
Package

cl-tls.

Source

x509.lisp.

Function: verify-signed-data (session data algorithm signature)
Package

cl-tls.

Source

crypto.lisp.

Function: verify-signed-params (session dh-params algorithm signature)
Package

cl-tls.

Source

crypto.lisp.


Next: , Previous: , Up: Internals   [Contents][Index]

6.2.6 Generic functions

Generic Reader: alert (condition)
Generic Writer: (setf alert) (condition)
Package

cl-tls.

Methods
Reader Method: alert ((condition exception))
Writer Method: (setf alert) ((condition exception))
Source

tls.lisp.

Target Slot

alert.

Generic Reader: authority-information-access (object)
Package

cl-tls.

Methods
Reader Method: authority-information-access ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

authority-information-access.

Generic Writer: (setf authority-information-access) (object)
Package

cl-tls.

Methods
Writer Method: (setf authority-information-access) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

authority-information-access.

Generic Reader: authority-key-identifier (object)
Package

cl-tls.

Methods
Reader Method: authority-key-identifier ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

authority-key-identifier.

Generic Writer: (setf authority-key-identifier) (object)
Package

cl-tls.

Methods
Writer Method: (setf authority-key-identifier) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

authority-key-identifier.

Generic Reader: basic-constraints (object)
Package

cl-tls.

Methods
Reader Method: basic-constraints ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

basic-constraints.

Generic Writer: (setf basic-constraints) (object)
Package

cl-tls.

Methods
Writer Method: (setf basic-constraints) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

basic-constraints.

Generic Reader: certificate-policies (object)
Package

cl-tls.

Methods
Reader Method: certificate-policies ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

certificate-policies.

Generic Writer: (setf certificate-policies) (object)
Package

cl-tls.

Methods
Writer Method: (setf certificate-policies) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

certificate-policies.

Generic Function: ciphertext-to-compressed (session content-type ciphertext)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: ciphertext-to-compressed ((session session) content-type ciphertext)
Generic Reader: client-certificate-url (object)
Package

cl-tls.

Methods
Reader Method: client-certificate-url ((hello-extensions hello-extensions))

automatically generated reader method

Source

tls.lisp.

Target Slot

client-certificate-url.

Generic Writer: (setf client-certificate-url) (object)
Package

cl-tls.

Methods
Writer Method: (setf client-certificate-url) ((hello-extensions hello-extensions))

automatically generated writer method

Source

tls.lisp.

Target Slot

client-certificate-url.

Generic Reader: crl-distribution-points (object)
Package

cl-tls.

Methods
Reader Method: crl-distribution-points ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

crl-distribution-points.

Generic Writer: (setf crl-distribution-points) (object)
Package

cl-tls.

Methods
Writer Method: (setf crl-distribution-points) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

crl-distribution-points.

Generic Function: decrypt (session ciphertext)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: decrypt ((session session) ciphertext)
Generic Function: encrypt (session plaintext)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: encrypt ((session session) plaintext)
Generic Reader: extended-key-usage (object)
Package

cl-tls.

Methods
Reader Method: extended-key-usage ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

extended-key-usage.

Generic Writer: (setf extended-key-usage) (object)
Package

cl-tls.

Methods
Writer Method: (setf extended-key-usage) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

extended-key-usage.

Generic Reader: extensions (object)
Package

cl-tls.

Methods
Reader Method: extensions ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

extensions.

Generic Writer: (setf extensions) (object)
Package

cl-tls.

Methods
Writer Method: (setf extensions) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

extensions.

Generic Reader: generator (object)
Package

cl-tls.

Methods
Reader Method: generator ((dh-params dh-params))

automatically generated reader method

Source

pkcs3.lisp.

Target Slot

g.

Generic Function: get-record (session)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: get-record ((session session))
Generic Function: handle-handshake (message session type)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: handle-handshake (buffer session (type (eql :server-hello)))
Method: handle-handshake (buffer session (type (eql :certificate)))
Method: handle-handshake (buffer session (type (eql :server-hello-done)))
Method: handle-handshake (buffer session (type (eql :certificate-request)))
Method: handle-handshake (buffer session (type (eql :finished)))
Method: handle-handshake (buffer session (type (eql :server-key-exchange)))
Method: handle-handshake (buffer session (type (eql :client-hello)))
Method: handle-handshake (buffer session (type (eql :certificate-verify)))
Method: handle-handshake (buffer session (type (eql :client-key-exchange)))
Generic Reader: handshake-messages (object)
Package

cl-tls.

Methods
Reader Method: handshake-messages ((session session))

automatically generated reader method

Source

tls.lisp.

Target Slot

handshake-messages.

Generic Writer: (setf handshake-messages) (object)
Package

cl-tls.

Methods
Writer Method: (setf handshake-messages) ((session session))

automatically generated writer method

Source

tls.lisp.

Target Slot

handshake-messages.

Generic Reader: hash (object)
Generic Writer: (setf hash) (object)
Package

cl-tls.

Methods
Reader Method: hash ((x509v3-certificate x509v3-certificate))
Writer Method: (setf hash) ((x509v3-certificate x509v3-certificate))

The hash of the raw octets of the certificate

Source

x509.lisp.

Target Slot

hash.

Generic Reader: host-name (object)
Package

cl-tls.

Methods
Reader Method: host-name ((hello-extensions hello-extensions))

automatically generated reader method

Source

tls.lisp.

Target Slot

host-name.

Generic Writer: (setf host-name) (object)
Package

cl-tls.

Methods
Writer Method: (setf host-name) ((hello-extensions hello-extensions))

automatically generated writer method

Source

tls.lisp.

Target Slot

host-name.

Generic Function: initiate-connection (session &key skip-hello)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: initiate-connection ((session server-session) &key skip-hello)

Attempt a handshake as a server

Method: initiate-connection ((session client-session) &key)

Attempt a handshake as a client

Generic Reader: issuer (object)
Package

cl-tls.

Methods
Reader Method: issuer ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

issuer.

Generic Writer: (setf issuer) (object)
Package

cl-tls.

Methods
Writer Method: (setf issuer) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

issuer.

Generic Reader: issuer-alternative-name (object)
Package

cl-tls.

Methods
Reader Method: issuer-alternative-name ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

issuer-alternative-name.

Generic Writer: (setf issuer-alternative-name) (object)
Package

cl-tls.

Methods
Writer Method: (setf issuer-alternative-name) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

issuer-alternative-name.

Generic Reader: issuer-unique-id (object)
Package

cl-tls.

Methods
Reader Method: issuer-unique-id ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

issuer-unique-id.

Generic Writer: (setf issuer-unique-id) (object)
Package

cl-tls.

Methods
Writer Method: (setf issuer-unique-id) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

issuer-unique-id.

Generic Reader: key-usage (object)
Package

cl-tls.

Methods
Reader Method: key-usage ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

key-usage.

Generic Writer: (setf key-usage) (object)
Package

cl-tls.

Methods
Writer Method: (setf key-usage) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

key-usage.

Generic Reader: log-info (condition)
Generic Writer: (setf log-info) (condition)
Package

cl-tls.

Methods
Reader Method: log-info ((condition exception))
Writer Method: (setf log-info) ((condition exception))
Source

tls.lisp.

Target Slot

log.

Reader Method: log-info ((condition http-error))
Writer Method: (setf log-info) ((condition http-error))
Source

http.lisp.

Target Slot

log.

Reader Method: log-info ((condition ocsp-error))
Writer Method: (setf log-info) ((condition ocsp-error))
Source

ocsp.lisp.

Target Slot

log.

Generic Reader: max-fragment-length (object)
Package

cl-tls.

Methods
Reader Method: max-fragment-length ((hello-extensions hello-extensions))

automatically generated reader method

Source

tls.lisp.

Target Slot

max-fragment-length.

Generic Writer: (setf max-fragment-length) (object)
Package

cl-tls.

Methods
Writer Method: (setf max-fragment-length) ((hello-extensions hello-extensions))

automatically generated writer method

Source

tls.lisp.

Target Slot

max-fragment-length.

Generic Function: ov-read-byte (os)
Package

cl-tls.

Source

asn.1.lisp.

Methods
Method: ov-read-byte ((os octet-stream))
Generic Function: ov-read-sequence (ov os)
Package

cl-tls.

Source

asn.1.lisp.

Methods
Method: ov-read-sequence (ov (os octet-stream))
Generic Function: parse-extension (session extension-data type)
Package

cl-tls.

Source

extensions.lisp.

Methods
Method: parse-extension (session extension-data (type (eql :status-request)))
Method: parse-extension (session extension-data (type (eql :truncated-hmac)))
Method: parse-extension (session extension-data (type (eql :trusted-ca-keys)))
Method: parse-extension (session extension-data (type (eql :signature-algorithm)))
Method: parse-extension (session extension-data (type (eql :client-certificate-url)))
Method: parse-extension (session extension-data (type (eql :max-fragment-length)))
Method: parse-extension (session extension-data (type (eql :server-name)))
Generic Reader: path (object)
Package

cl-tls.

Methods
Reader Method: path ((uri uri))

automatically generated reader method

Source

http.lisp.

Target Slot

path.

Generic Writer: (setf path) (object)
Package

cl-tls.

Methods
Writer Method: (setf path) ((uri uri))

automatically generated writer method

Source

http.lisp.

Target Slot

path.

Generic Reader: policy-mappings (object)
Package

cl-tls.

Methods
Reader Method: policy-mappings ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

policy-mappings.

Generic Writer: (setf policy-mappings) (object)
Package

cl-tls.

Methods
Writer Method: (setf policy-mappings) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

policy-mappings.

Generic Reader: pre-master-secret (object)
Package

cl-tls.

Methods
Reader Method: pre-master-secret ((session session))

automatically generated reader method

Source

tls.lisp.

Target Slot

pre-master-secret.

Generic Writer: (setf pre-master-secret) (object)
Package

cl-tls.

Methods
Writer Method: (setf pre-master-secret) ((session session))

automatically generated writer method

Source

tls.lisp.

Target Slot

pre-master-secret.

Generic Reader: prime-modulus (object)
Package

cl-tls.

Methods
Reader Method: prime-modulus ((dh-params dh-params))

automatically generated reader method

Source

pkcs3.lisp.

Target Slot

p.

Generic Function: process-extension (x509-extension critical-p value type)
Package

cl-tls.

Source

extensions.lisp.

Methods
Method: process-extension (x509 critical-p value (type (eql :subject-information-access)))
Method: process-extension (x509 critical-p value (type (eql :authority-information-access)))
Method: process-extension (x509 critical-p value (type (eql :freshest-crl)))
Method: process-extension (x509 critical-p value (type (eql :inhibit-any-policy)))
Method: process-extension (x509 critical-p value (type (eql :crl-distribution-points)))
Method: process-extension (x509 critical-p value (type (eql :extended-key-usage)))
Method: process-extension (x509 critical-p value (type (eql :policy-constraints)))
Method: process-extension (x509 critical-p value (type (eql :name-constraints)))
Method: process-extension (x509 critical-p value (type (eql :basic-constraints)))
Method: process-extension (x509 critical-p value (type (eql :policy-mappings)))
Method: process-extension (x509 critical-p value (type (eql :certificate-policies)))
Method: process-extension (x509 critical-p value (type (eql :key-usage)))
Method: process-extension (x509 critical-p value (type (eql :subject-key-identifier)))
Method: process-extension (x509 critical-p value (type (eql :authority-key-identifier)))
Method: process-extension (x509 critical-p value (type (eql :issuer-alternative-name)))
Method: process-extension (x509 critical-p value (type (eql :subject-alternative-name)))
Generic Reader: pub-key (object)
Package

cl-tls.

Methods
Reader Method: pub-key ((session session))

automatically generated reader method

Source

tls.lisp.

Target Slot

pub-key.

Generic Writer: (setf pub-key) (object)
Package

cl-tls.

Methods
Writer Method: (setf pub-key) ((session session))

automatically generated writer method

Source

tls.lisp.

Target Slot

pub-key.

Generic Reader: raw (object)
Generic Writer: (setf raw) (object)
Package

cl-tls.

Methods
Reader Method: raw ((x509v3-certificate x509v3-certificate))
Writer Method: (setf raw) ((x509v3-certificate x509v3-certificate))

The raw octets of the certificate

Source

x509.lisp.

Target Slot

raw.

Generic Reader: scheme (object)
Package

cl-tls.

Methods
Reader Method: scheme ((uri uri))

automatically generated reader method

Source

http.lisp.

Target Slot

scheme.

Generic Writer: (setf scheme) (object)
Package

cl-tls.

Methods
Writer Method: (setf scheme) ((uri uri))

automatically generated writer method

Source

http.lisp.

Target Slot

scheme.

Generic Function: send (session content-type payload)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: send ((session session) content-type payload)

Fragment -> (optionally) Compress -> Apply MAC -> Encrypt -> Transmit

Generic Function: send-change-cipher-spec (session)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: send-change-cipher-spec (session)
Generic Function: send-handshake (session handshake-type)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: send-handshake ((session session) (handshake-type (eql :client-hello)))
Method: send-handshake ((session session) (handshake-type (eql :client-key-exchange)))
Method: send-handshake ((session session) (handshake-type (eql :finished)))
Method: send-handshake ((session session) (handshake-type (eql :server-hello-done)))
Method: send-handshake ((session session) (handshake-type (eql :server-key-exchange)))
Method: send-handshake ((session session) (handshake-type (eql :certificate-request)))
Method: send-handshake ((session session) (handshake-type (eql :certificate-verify)))
Method: send-handshake ((session session) (handshake-type (eql :client-certificate)))
Method: send-handshake ((session session) (handshake-type (eql :certificate)))
Method: send-handshake ((session session) (handshake-type (eql :server-hello)))
Generic Function: send-record (session content-type payload &key start end)
Package

cl-tls.

Source

tls.lisp.

Methods
Method: send-record ((session session) content-type payload &key start end)
Generic Reader: serial (object)
Package

cl-tls.

Methods
Reader Method: serial ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

serial.

Generic Writer: (setf serial) (object)
Package

cl-tls.

Methods
Writer Method: (setf serial) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

serial.

Generic Reader: signature (object)
Package

cl-tls.

Methods
Reader Method: signature ((x509v3-certificate x509v3-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

signature.

Reader Method: signature ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

signature.

Generic Writer: (setf signature) (object)
Package

cl-tls.

Methods
Writer Method: (setf signature) ((x509v3-certificate x509v3-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

signature.

Writer Method: (setf signature) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

signature.

Generic Reader: signature-algorithm (object)
Package

cl-tls.

Methods
Reader Method: signature-algorithm ((x509v3-certificate x509v3-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

signature-algorithm.

Generic Writer: (setf signature-algorithm) (object)
Package

cl-tls.

Methods
Writer Method: (setf signature-algorithm) ((x509v3-certificate x509v3-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

signature-algorithm.

Generic Reader: subject (object)
Package

cl-tls.

Methods
Reader Method: subject ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

subject.

Generic Writer: (setf subject) (object)
Package

cl-tls.

Methods
Writer Method: (setf subject) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

subject.

Generic Reader: subject-alternative-name (object)
Package

cl-tls.

Methods
Reader Method: subject-alternative-name ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

subject-alternative-name.

Generic Writer: (setf subject-alternative-name) (object)
Package

cl-tls.

Methods
Writer Method: (setf subject-alternative-name) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

subject-alternative-name.

Generic Reader: subject-information-access (object)
Package

cl-tls.

Methods
Reader Method: subject-information-access ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

subject-information-access.

Generic Writer: (setf subject-information-access) (object)
Package

cl-tls.

Methods
Writer Method: (setf subject-information-access) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

subject-information-access.

Generic Reader: subject-key-identifier (object)
Package

cl-tls.

Methods
Reader Method: subject-key-identifier ((x509-extension x509-extension))

automatically generated reader method

Source

x509.lisp.

Target Slot

subject-key-identifier.

Generic Writer: (setf subject-key-identifier) (object)
Package

cl-tls.

Methods
Writer Method: (setf subject-key-identifier) ((x509-extension x509-extension))

automatically generated writer method

Source

x509.lisp.

Target Slot

subject-key-identifier.

Generic Reader: subject-pki (object)
Package

cl-tls.

Methods
Reader Method: subject-pki ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

subject-pki.

Generic Writer: (setf subject-pki) (object)
Package

cl-tls.

Methods
Writer Method: (setf subject-pki) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

subject-pki.

Generic Reader: subject-unique-id (object)
Package

cl-tls.

Methods
Reader Method: subject-unique-id ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

subject-unique-id.

Generic Writer: (setf subject-unique-id) (object)
Package

cl-tls.

Methods
Writer Method: (setf subject-unique-id) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

subject-unique-id.

Generic Reader: supported-signature-algorithms (object)
Package

cl-tls.

Methods
Reader Method: supported-signature-algorithms ((hello-extensions hello-extensions))

automatically generated reader method

Source

tls.lisp.

Target Slot

supported-signature-algorithms.

Generic Writer: (setf supported-signature-algorithms) (object)
Package

cl-tls.

Methods
Writer Method: (setf supported-signature-algorithms) ((hello-extensions hello-extensions))

automatically generated writer method

Source

tls.lisp.

Target Slot

supported-signature-algorithms.

Generic Reader: tbs-certificate (object)
Package

cl-tls.

Methods
Reader Method: tbs-certificate ((x509v3-certificate x509v3-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

tbs-certificate.

Generic Writer: (setf tbs-certificate) (object)
Package

cl-tls.

Methods
Writer Method: (setf tbs-certificate) ((x509v3-certificate x509v3-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

tbs-certificate.

Generic Reader: text (condition)
Generic Writer: (setf text) (condition)
Package

cl-tls.

Methods
Reader Method: text ((condition tls-error))
Writer Method: (setf text) ((condition tls-error))
Source

tls.lisp.

Target Slot

text.

Reader Method: text ((condition x509-decoding-error))
Source

x509.lisp.

Target Slot

text.

Reader Method: text ((condition asn.1-decoding-error))
Source

asn.1.lisp.

Target Slot

text.

Generic Reader: validity (object)
Package

cl-tls.

Methods
Reader Method: validity ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

validity.

Generic Writer: (setf validity) (object)
Package

cl-tls.

Methods
Writer Method: (setf validity) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

validity.

Generic Reader: version (object)
Package

cl-tls.

Methods
Reader Method: version ((tbs-certificate tbs-certificate))

automatically generated reader method

Source

x509.lisp.

Target Slot

version.

Generic Writer: (setf version) (object)
Package

cl-tls.

Methods
Writer Method: (setf version) ((tbs-certificate tbs-certificate))

automatically generated writer method

Source

x509.lisp.

Target Slot

version.


Next: , Previous: , Up: Internals   [Contents][Index]

6.2.7 Conditions

Condition: asn.1-decoding-error
Package

cl-tls.

Source

asn.1.lisp.

Direct superclasses

error.

Direct methods

text.

Direct slots
Slot: text
Initargs

:text

Readers

text.

Writers

This slot is read-only.

Condition: exception
Package

cl-tls.

Source

tls.lisp.

Direct superclasses

error.

Direct methods
Direct slots
Slot: log
Package

common-lisp.

Initargs

:log

Readers

log-info.

Writers

(setf log-info).

Slot: alert
Initargs

:alert

Readers

alert.

Writers

(setf alert).

Condition: http-error
Package

cl-tls.

Source

http.lisp.

Direct superclasses

error.

Direct methods
Direct slots
Slot: log
Package

common-lisp.

Initargs

:log

Readers

log-info.

Writers

(setf log-info).

Condition: ocsp-error
Package

cl-tls.

Source

ocsp.lisp.

Direct superclasses

error.

Direct methods
Direct slots
Slot: log
Package

common-lisp.

Initargs

:log

Readers

log-info.

Writers

(setf log-info).

Condition: x509-decoding-error
Package

cl-tls.

Source

x509.lisp.

Direct superclasses

error.

Direct methods

text.

Direct slots
Slot: text
Initargs

:text

Readers

text.

Writers

This slot is read-only.


Next: , Previous: , Up: Internals   [Contents][Index]

6.2.8 Classes

Class: client-session
Package

cl-tls.

Source

tls.lisp.

Direct superclasses

session.

Direct methods

initiate-connection.

Direct slots
Slot: role
Initform

:client

Class: dh-params
Package

cl-tls.

Source

pkcs3.lisp.

Direct methods
Direct slots
Slot: p
Type

integer

Initargs

:p

Readers

prime-modulus.

Writers

This slot is read-only.

Slot: g
Type

integer

Initargs

:g

Readers

generator.

Writers

This slot is read-only.

Class: hello-extensions
Package

cl-tls.

Source

tls.lisp.

Direct methods
Direct slots
Slot: host-name
Initargs

:host-name

Readers

host-name.

Writers

(setf host-name).

Slot: max-fragment-length
Initargs

:max-fragment-length

Readers

max-fragment-length.

Writers

(setf max-fragment-length).

Slot: client-certificate-url
Initargs

:client-certificate-url

Readers

client-certificate-url.

Writers

(setf client-certificate-url).

Slot: supported-signature-algorithms
Initargs

:supported-signature-algorithms

Readers

supported-signature-algorithms.

Writers

(setf supported-signature-algorithms).

Class: octet-stream
Package

cl-tls.

Source

asn.1.lisp.

Direct methods
Direct slots
Slot: octet-vector
Initargs

:ov

Slot: length
Package

common-lisp.

Initargs

:len

Slot: position
Package

common-lisp.

Initform

0

Class: server-session
Package

cl-tls.

Source

tls.lisp.

Direct superclasses
Direct methods

initiate-connection.

Class: session
Package

cl-tls.

Source

tls.lisp.

Direct subclasses
Direct methods
Direct slots
Slot: role
Initargs

:role

Slot: version
Initform

(cl-tls::make-octet-vector :initial-contents #(3 3))

Initargs

:version

Slot: hello-version
Initform

(cl-tls::make-octet-vector :initial-contents #(3 3))

Initargs

:version

Slot: resumable
Initargs

:resumable

Slot: ciphers
Initargs

:ciphers

Slot: state
Initform

:connecting

Slot: handshake-stage
Slot: certificate-requested
Slot: remote-certificate-type
Slot: cipher-suite
Slot: session-id
Slot: sequence-number-write
Initform

0

Slot: sequence-number-read
Initform

0

Slot: session-read-state
Initform

:null

Slot: session-write-state
Initform

:null

Slot: client-random
Slot: server-random
Slot: master-secret
Slot: key-exchange-method
Slot: authentication-method
Slot: encryption-algorithm
Slot: cipher-mode
Slot: mac-algorithm
Slot: block-size
Slot: cipher-type
Slot: requested-cert-type
Slot: supported-sig-algos
Slot: dh-params
Slot: dh-y
Slot: dhe-private-key
Slot: extensions-data
Initform

(make-instance (quote cl-tls::hello-extensions))

Slot: mac-key-length
Initform

0

Slot: enc-key-length
Initform

0

Slot: record-iv-length
Initform

0

Slot: key_block
Slot: client-write-mac-key
Slot: server-write-mac-key
Slot: client-write-key
Slot: server-write-key
Slot: client-write-iv
Slot: server-write-iv
Slot: peer-dns-name
Initargs

:peer-dns-name

Slot: peer-ip-addresses
Initargs

:peer-ip-addresses

Slot: certificate
Initargs

:certificate

Slot: ca-certificates
Initargs

:ca-certificates

Slot: io-stream
Initargs

:io-stream

Slot: input-stream
Initargs

:input-stream

Slot: output-stream
Initargs

:output-stream

Slot: pub-key
Readers

pub-key.

Writers

(setf pub-key).

Slot: priv-key
Initargs

:private-key

Slot: encrypting-cipher-object
Slot: decrypting-cipher-object
Slot: pre-master-secret
Readers

pre-master-secret.

Writers

(setf pre-master-secret).

Slot: handshake-messages
Initform

(fast-io:make-octet-vector 0)

Readers

handshake-messages.

Writers

(setf handshake-messages).

Class: shared-session-slots
Package

cl-tls.

Source

tls.lisp.

Direct subclasses

server-session.

Direct slots
Slot: role
Allocation

:class

Initform

:server

Initargs

:role

Slot: certificate
Allocation

:class

Initargs

:certificate

Slot: ca-certificates
Allocation

:class

Initargs

:ca-certificates

Slot: resumable
Allocation

:class

Initargs

:resumable

Slot: ciphers
Allocation

:class

Initargs

:ciphers

Slot: pub-key
Allocation

:class

Slot: priv-key
Allocation

:class

Initargs

:private-key

Slot: dh-params
Allocation

:class

Initargs

:dh-params

Slot: version
Allocation

:class

Initform

(fast-io:octets-from #(3 3))

Initargs

:version

Slot: authenticate-client-p
Allocation

:class

Initargs

:authenticate-client-p

Slot: require-authentication-p
Allocation

:class

Initargs

:require-authentication-p

Class: tbs-certificate
Package

cl-tls.

Source

x509.lisp.

Direct methods
Direct slots
Slot: version
Initform

0

Initargs

:version

Readers

version.

Writers

(setf version).

Slot: serial
Initargs

:serial

Readers

serial.

Writers

(setf serial).

Slot: signature
Initargs

:signature

Readers

signature.

Writers

(setf signature).

Slot: issuer
Initargs

:issuer

Readers

issuer.

Writers

(setf issuer).

Slot: validity
Type

cl-tls::validity

Initargs

:validity

Readers

validity.

Writers

(setf validity).

Slot: subject
Initargs

:subject

Readers

subject.

Writers

(setf subject).

Slot: subject-pki
Type

cl-tls::algorithm-identifier

Initargs

:subject-pki

Readers

subject-pki.

Writers

(setf subject-pki).

Slot: issuer-unique-id
Initargs

:issuer-unique-id

Readers

issuer-unique-id.

Writers

(setf issuer-unique-id).

Slot: subject-unique-id
Initargs

cl-tls::subject-unique-id

Readers

subject-unique-id.

Writers

(setf subject-unique-id).

Slot: extensions
Initargs

:extensions

Readers

extensions.

Writers

(setf extensions).

Class: uri
Package

cl-tls.

Source

http.lisp.

Direct methods
Direct slots
Slot: scheme
Initargs

:scheme

Readers

scheme.

Writers

(setf scheme).

Slot: host
Initargs

:host

Readers

host.

Writers

(setf host).

Slot: port
Initargs

:port

Readers

port.

Writers

(setf port).

Slot: path
Initargs

:path

Readers

path.

Writers

(setf path).

Class: x509-extension
Package

cl-tls.

Source

x509.lisp.

Direct methods
Direct slots
Slot: subject-alternative-name
Readers

subject-alternative-name.

Writers

(setf subject-alternative-name).

Slot: issuer-alternative-name
Readers

issuer-alternative-name.

Writers

(setf issuer-alternative-name).

Slot: authority-key-identifier
Readers

authority-key-identifier.

Writers

(setf authority-key-identifier).

Slot: subject-key-identifier
Readers

subject-key-identifier.

Writers

(setf subject-key-identifier).

Slot: key-usage
Readers

key-usage.

Writers

(setf key-usage).

Slot: certificate-policies
Readers

certificate-policies.

Writers

(setf certificate-policies).

Slot: policy-mappings
Readers

policy-mappings.

Writers

(setf policy-mappings).

Slot: basic-constraints
Readers

basic-constraints.

Writers

(setf basic-constraints).

Slot: extended-key-usage
Readers

extended-key-usage.

Writers

(setf extended-key-usage).

Slot: crl-distribution-points
Readers

crl-distribution-points.

Writers

(setf crl-distribution-points).

Slot: authority-information-access
Readers

authority-information-access.

Writers

(setf authority-information-access).

Slot: subject-information-access
Readers

subject-information-access.

Writers

(setf subject-information-access).

Class: x509v3-certificate
Package

cl-tls.

Source

x509.lisp.

Direct methods
Direct slots
Slot: raw

The raw octets of the certificate

Initargs

:raw

Readers

raw.

Writers

(setf raw).

Slot: hash

The hash of the raw octets of the certificate

Initargs

:hash

Readers

hash.

Writers

(setf hash).

Slot: tbs-certificate
Initargs

:tbs-certificate

Readers

tbs-certificate.

Writers

(setf tbs-certificate).

Slot: signature-algorithm
Initargs

:signature-algorithm

Readers

signature-algorithm.

Writers

(setf signature-algorithm).

Slot: signature
Initargs

:signature

Readers

signature.

Writers

(setf signature).


Previous: , Up: Internals   [Contents][Index]

6.2.9 Types

Type: octet ()
Package

cl-tls.

Source

utils.lisp.

Type: octet-vector ()
Package

cl-tls.

Source

utils.lisp.


Appendix A Indexes


Next: , Previous: , Up: Indexes   [Contents][Index]

A.1 Concepts


Next: , Previous: , Up: Indexes   [Contents][Index]

A.2 Functions

Jump to:   (  
A   B   C   D   E   F   G   H   I   K   L   M   O   P   R   S   T   V   W   X  
Index Entry  Section

(
(setf alert): Private generic functions
(setf alert): Private generic functions
(setf authority-information-access): Private generic functions
(setf authority-information-access): Private generic functions
(setf authority-key-identifier): Private generic functions
(setf authority-key-identifier): Private generic functions
(setf basic-constraints): Private generic functions
(setf basic-constraints): Private generic functions
(setf certificate-policies): Private generic functions
(setf certificate-policies): Private generic functions
(setf client-certificate-url): Private generic functions
(setf client-certificate-url): Private generic functions
(setf crl-distribution-points): Private generic functions
(setf crl-distribution-points): Private generic functions
(setf extended-key-usage): Private generic functions
(setf extended-key-usage): Private generic functions
(setf extensions): Private generic functions
(setf extensions): Private generic functions
(setf handshake-messages): Private generic functions
(setf handshake-messages): Private generic functions
(setf hash): Private generic functions
(setf hash): Private generic functions
(setf host): Public generic functions
(setf host): Public generic functions
(setf host): Public generic functions
(setf host-name): Private generic functions
(setf host-name): Private generic functions
(setf issuer): Private generic functions
(setf issuer): Private generic functions
(setf issuer-alternative-name): Private generic functions
(setf issuer-alternative-name): Private generic functions
(setf issuer-unique-id): Private generic functions
(setf issuer-unique-id): Private generic functions
(setf key-usage): Private generic functions
(setf key-usage): Private generic functions
(setf log-info): Private generic functions
(setf log-info): Private generic functions
(setf log-info): Private generic functions
(setf log-info): Private generic functions
(setf max-fragment-length): Private generic functions
(setf max-fragment-length): Private generic functions
(setf path): Private generic functions
(setf path): Private generic functions
(setf policy-mappings): Private generic functions
(setf policy-mappings): Private generic functions
(setf port): Public generic functions
(setf port): Public generic functions
(setf port): Public generic functions
(setf pre-master-secret): Private generic functions
(setf pre-master-secret): Private generic functions
(setf pub-key): Private generic functions
(setf pub-key): Private generic functions
(setf raw): Private generic functions
(setf raw): Private generic functions
(setf scheme): Private generic functions
(setf scheme): Private generic functions
(setf serial): Private generic functions
(setf serial): Private generic functions
(setf signature): Private generic functions
(setf signature): Private generic functions
(setf signature): Private generic functions
(setf signature-algorithm): Private generic functions
(setf signature-algorithm): Private generic functions
(setf subject): Private generic functions
(setf subject): Private generic functions
(setf subject-alternative-name): Private generic functions
(setf subject-alternative-name): Private generic functions
(setf subject-information-access): Private generic functions
(setf subject-information-access): Private generic functions
(setf subject-key-identifier): Private generic functions
(setf subject-key-identifier): Private generic functions
(setf subject-pki): Private generic functions
(setf subject-pki): Private generic functions
(setf subject-unique-id): Private generic functions
(setf subject-unique-id): Private generic functions
(setf supported-signature-algorithms): Private generic functions
(setf supported-signature-algorithms): Private generic functions
(setf tbs-certificate): Private generic functions
(setf tbs-certificate): Private generic functions
(setf text): Private generic functions
(setf text): Private generic functions
(setf validity): Private generic functions
(setf validity): Private generic functions
(setf version): Private generic functions
(setf version): Private generic functions

A
accept-tunnel: Public ordinary functions
add-handshake-header: Private ordinary functions
alert: Private generic functions
alert: Private generic functions
alert-record-to-text: Private ordinary functions
asn-sequence-to-indices: Private ordinary functions
asn-sequence-to-list: Public ordinary functions
asn-serialize: Public ordinary functions
asn-time-to-universal-time: Private ordinary functions
asn-type-matches-p: Private ordinary functions
authority-information-access: Private generic functions
authority-information-access: Private generic functions
authority-key-identifier: Private generic functions
authority-key-identifier: Private generic functions

B
basic-constraints: Private generic functions
basic-constraints: Private generic functions
bind-tbs: Private macros
bytes-in-int: Private ordinary functions

C
calculate-mac: Private ordinary functions
calculate-verification-mac: Private ordinary functions
cat-vectors: Private ordinary functions
certificate-policies: Private generic functions
certificate-policies: Private generic functions
check-certificate-status: Private ordinary functions
check-ocsp: Private ordinary functions
cipher-suite-supported-p: Private ordinary functions
ciphertext-to-compressed: Private generic functions
ciphertext-to-compressed: Private generic functions
client-certificate-url: Private generic functions
client-certificate-url: Private generic functions
compute-shared-secret: Private ordinary functions
create-asn-sequence: Public ordinary functions
create-cert-id: Private ordinary functions
create-cert-status-request: Private ordinary functions
create-cipher-vector: Private ordinary functions
create-explicit-tag: Private ordinary functions
create-listener-session: Private ordinary functions
create-request: Private ordinary functions
create-session: Private ordinary functions
create-sni: Private ordinary functions
create-tbs-request: Private ordinary functions
crl-distribution-points: Private generic functions
crl-distribution-points: Private generic functions

D
decapsulate: Private ordinary functions
decode-oid: Private ordinary functions
decrypt: Private generic functions
decrypt: Private generic functions
dhparams-from-key-file: Private ordinary functions
digitally-sign: Private ordinary functions
dns-match-p: Private ordinary functions
dump-to-file: Private ordinary functions

E
emsa-pkcs1-v1.5-encode: Private ordinary functions
encode-oid: Public ordinary functions
encrypt: Private generic functions
encrypt: Private generic functions
encrypt-and-send: Private ordinary functions
extended-key-usage: Private generic functions
extended-key-usage: Private generic functions
extensions: Private generic functions
extensions: Private generic functions

F
fill-random-nonzero-octets: Private ordinary functions
find-certificates: Private ordinary functions
from-stream-parse-der: Private ordinary functions
Function, accept-tunnel: Public ordinary functions
Function, add-handshake-header: Private ordinary functions
Function, alert-record-to-text: Private ordinary functions
Function, asn-sequence-to-indices: Private ordinary functions
Function, asn-sequence-to-list: Public ordinary functions
Function, asn-serialize: Public ordinary functions
Function, asn-time-to-universal-time: Private ordinary functions
Function, asn-type-matches-p: Private ordinary functions
Function, bytes-in-int: Private ordinary functions
Function, calculate-mac: Private ordinary functions
Function, calculate-verification-mac: Private ordinary functions
Function, cat-vectors: Private ordinary functions
Function, check-certificate-status: Private ordinary functions
Function, check-ocsp: Private ordinary functions
Function, cipher-suite-supported-p: Private ordinary functions
Function, compute-shared-secret: Private ordinary functions
Function, create-asn-sequence: Public ordinary functions
Function, create-cert-id: Private ordinary functions
Function, create-cert-status-request: Private ordinary functions
Function, create-cipher-vector: Private ordinary functions
Function, create-explicit-tag: Private ordinary functions
Function, create-listener-session: Private ordinary functions
Function, create-request: Private ordinary functions
Function, create-session: Private ordinary functions
Function, create-sni: Private ordinary functions
Function, create-tbs-request: Private ordinary functions
Function, decapsulate: Private ordinary functions
Function, decode-oid: Private ordinary functions
Function, dhparams-from-key-file: Private ordinary functions
Function, digitally-sign: Private ordinary functions
Function, dns-match-p: Private ordinary functions
Function, dump-to-file: Private ordinary functions
Function, emsa-pkcs1-v1.5-encode: Private ordinary functions
Function, encode-oid: Public ordinary functions
Function, encrypt-and-send: Private ordinary functions
Function, fill-random-nonzero-octets: Private ordinary functions
Function, find-certificates: Private ordinary functions
Function, from-stream-parse-der: Private ordinary functions
Function, gen-key-material: Private ordinary functions
Function, generate-dh-params: Private ordinary functions
Function, get-application-data: Private ordinary functions
Function, get-ca-certificates: Private ordinary functions
Function, get-change-cipher-spec: Private ordinary functions
Function, get-contents: Private ordinary functions
Function, get-der-contents-indices: Private ordinary functions
Function, get-dh-params: Private ordinary functions
Function, get-handshake-message: Private ordinary functions
Function, get-issuer-octets: Private ordinary functions
Function, get-private-key: Private ordinary functions
Function, get-pubkey-octets: Private ordinary functions
Function, get-random-octets: Private ordinary functions
Function, get-raw-tbs: Private ordinary functions
Function, get-sequence: Private ordinary functions
Function, get-session-id: Private ordinary functions
Function, gmt-unix-time: Private ordinary functions
Function, header-value: Private ordinary functions
Function, http-request: Private ordinary functions
Function, initialize-listener: Public ordinary functions
Function, integer-to-octets: Private ordinary functions
Function, integer-to-vlq: Private ordinary functions
Function, load-der-priv-key: Private ordinary functions
Function, load-pem-priv-key: Private ordinary functions
Function, load-priv-key: Private ordinary functions
Function, make-dh-key-pair: Private ordinary functions
Function, make-octet-stream: Private ordinary functions
Function, make-octet-vector: Private ordinary functions
Function, octets-to-integer: Private ordinary functions
Function, ov-buffer-position: Private ordinary functions
Function, p-hash: Private ordinary functions
Function, pack-extension: Private ordinary functions
Function, parse-access-description: Private ordinary functions
Function, parse-cipher-suite: Private ordinary functions
Function, parse-der: Public ordinary functions
Function, parse-directory-name: Private ordinary functions
Function, parse-enc-scheme: Private ordinary functions
Function, parse-general-name: Private ordinary functions
Function, parse-general-names: Private ordinary functions
Function, parse-headers-from-stream: Private ordinary functions
Function, parse-kdf: Private ordinary functions
Function, parse-pem: Private ordinary functions
Function, parse-pka: Private ordinary functions
Function, parse-priv-key: Private ordinary functions
Function, parse-pub-key: Private ordinary functions
Function, parse-qualifier: Private ordinary functions
Function, parse-response-data: Private ordinary functions
Function, parse-signature-algorithm: Private ordinary functions
Function, parse-tbs-certificate: Private ordinary functions
Function, parse-uri: Private ordinary functions
Function, pbes2-decrypt: Public ordinary functions
Function, prepare-ocsp-request: Private ordinary functions
Function, prf: Private ordinary functions
Function, process-extensions: Private ordinary functions
Function, read-chunk: Private ordinary functions
Function, read-chunked-response: Private ordinary functions
Function, read-header: Private ordinary functions
Function, reassemble-handshake-message: Private ordinary functions
Function, remove-padding: Private ordinary functions
Function, request-tunnel: Public ordinary functions
Function, rsa-decrypt: Public ordinary functions
Function, rsa-encrypt: Public ordinary functions
Function, rsassa-pkcs1.5-sign: Public ordinary functions
Function, rsassa-pkcs1.5-verify: Public ordinary functions
Function, send-alert: Private ordinary functions
Function, sign-dh-params: Private ordinary functions
Function, split-header: Private ordinary functions
Function, split-string: Private ordinary functions
Function, stream-octets-to-integer: Private ordinary functions
Function, strong-random-range: Private ordinary functions
Function, symbol-to-suite-list: Private ordinary functions
Function, time-valid-p: Private ordinary functions
Function, timing-independent-compare: Private ordinary functions
Function, trim-space: Private ordinary functions
Function, validate: Private ordinary functions
Function, verify-ocsp-signature: Private ordinary functions
Function, verify-signature: Private ordinary functions
Function, verify-signed-data: Private ordinary functions
Function, verify-signed-params: Private ordinary functions
Function, x509-decode: Public ordinary functions

G
gen-key-material: Private ordinary functions
generate-dh-params: Private ordinary functions
generator: Private generic functions
generator: Private generic functions
Generic Function, (setf alert): Private generic functions
Generic Function, (setf authority-information-access): Private generic functions
Generic Function, (setf authority-key-identifier): Private generic functions
Generic Function, (setf basic-constraints): Private generic functions
Generic Function, (setf certificate-policies): Private generic functions
Generic Function, (setf client-certificate-url): Private generic functions
Generic Function, (setf crl-distribution-points): Private generic functions
Generic Function, (setf extended-key-usage): Private generic functions
Generic Function, (setf extensions): Private generic functions
Generic Function, (setf handshake-messages): Private generic functions
Generic Function, (setf hash): Private generic functions
Generic Function, (setf host): Public generic functions
Generic Function, (setf host-name): Private generic functions
Generic Function, (setf issuer): Private generic functions
Generic Function, (setf issuer-alternative-name): Private generic functions
Generic Function, (setf issuer-unique-id): Private generic functions
Generic Function, (setf key-usage): Private generic functions
Generic Function, (setf log-info): Private generic functions
Generic Function, (setf max-fragment-length): Private generic functions
Generic Function, (setf path): Private generic functions
Generic Function, (setf policy-mappings): Private generic functions
Generic Function, (setf port): Public generic functions
Generic Function, (setf pre-master-secret): Private generic functions
Generic Function, (setf pub-key): Private generic functions
Generic Function, (setf raw): Private generic functions
Generic Function, (setf scheme): Private generic functions
Generic Function, (setf serial): Private generic functions
Generic Function, (setf signature): Private generic functions
Generic Function, (setf signature-algorithm): Private generic functions
Generic Function, (setf subject): Private generic functions
Generic Function, (setf subject-alternative-name): Private generic functions
Generic Function, (setf subject-information-access): Private generic functions
Generic Function, (setf subject-key-identifier): Private generic functions
Generic Function, (setf subject-pki): Private generic functions
Generic Function, (setf subject-unique-id): Private generic functions
Generic Function, (setf supported-signature-algorithms): Private generic functions
Generic Function, (setf tbs-certificate): Private generic functions
Generic Function, (setf text): Private generic functions
Generic Function, (setf validity): Private generic functions
Generic Function, (setf version): Private generic functions
Generic Function, alert: Private generic functions
Generic Function, authority-information-access: Private generic functions
Generic Function, authority-key-identifier: Private generic functions
Generic Function, basic-constraints: Private generic functions
Generic Function, certificate-policies: Private generic functions
Generic Function, ciphertext-to-compressed: Private generic functions
Generic Function, client-certificate-url: Private generic functions
Generic Function, crl-distribution-points: Private generic functions
Generic Function, decrypt: Private generic functions
Generic Function, encrypt: Private generic functions
Generic Function, extended-key-usage: Private generic functions
Generic Function, extensions: Private generic functions
Generic Function, generator: Private generic functions
Generic Function, get-record: Private generic functions
Generic Function, handle-handshake: Private generic functions
Generic Function, handshake-messages: Private generic functions
Generic Function, hash: Private generic functions
Generic Function, host: Public generic functions
Generic Function, host-name: Private generic functions
Generic Function, initiate-connection: Private generic functions
Generic Function, issuer: Private generic functions
Generic Function, issuer-alternative-name: Private generic functions
Generic Function, issuer-unique-id: Private generic functions
Generic Function, key-usage: Private generic functions
Generic Function, log-info: Private generic functions
Generic Function, max-fragment-length: Private generic functions
Generic Function, ov-read-byte: Private generic functions
Generic Function, ov-read-sequence: Private generic functions
Generic Function, parse-extension: Private generic functions
Generic Function, path: Private generic functions
Generic Function, policy-mappings: Private generic functions
Generic Function, port: Public generic functions
Generic Function, pre-master-secret: Private generic functions
Generic Function, prime-modulus: Private generic functions
Generic Function, process-extension: Private generic functions
Generic Function, pub-key: Private generic functions
Generic Function, raw: Private generic functions
Generic Function, request-stream-to-address: Public generic functions
Generic Function, scheme: Private generic functions
Generic Function, send: Private generic functions
Generic Function, send-change-cipher-spec: Private generic functions
Generic Function, send-handshake: Private generic functions
Generic Function, send-record: Private generic functions
Generic Function, serial: Private generic functions
Generic Function, signature: Private generic functions
Generic Function, signature-algorithm: Private generic functions
Generic Function, subject: Private generic functions
Generic Function, subject-alternative-name: Private generic functions
Generic Function, subject-information-access: Private generic functions
Generic Function, subject-key-identifier: Private generic functions
Generic Function, subject-pki: Private generic functions
Generic Function, subject-unique-id: Private generic functions
Generic Function, supported-signature-algorithms: Private generic functions
Generic Function, tbs-certificate: Private generic functions
Generic Function, text: Private generic functions
Generic Function, validity: Private generic functions
Generic Function, version: Private generic functions
get-application-data: Private ordinary functions
get-ca-certificates: Private ordinary functions
get-change-cipher-spec: Private ordinary functions
get-contents: Private ordinary functions
get-der-contents-indices: Private ordinary functions
get-dh-params: Private ordinary functions
get-handshake-message: Private ordinary functions
get-issuer-octets: Private ordinary functions
get-private-key: Private ordinary functions
get-pubkey-octets: Private ordinary functions
get-random-octets: Private ordinary functions
get-raw-tbs: Private ordinary functions
get-record: Private generic functions
get-record: Private generic functions
get-sequence: Private ordinary functions
get-session-id: Private ordinary functions
gmt-unix-time: Private ordinary functions

H
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handle-handshake: Private generic functions
handshake-messages: Private generic functions
handshake-messages: Private generic functions
hash: Private generic functions
hash: Private generic functions
header-value: Private ordinary functions
host: Public generic functions
host: Public generic functions
host: Public generic functions
host-name: Private generic functions
host-name: Private generic functions
http-request: Private ordinary functions

I
initialize-listener: Public ordinary functions
initiate-connection: Private generic functions
initiate-connection: Private generic functions
initiate-connection: Private generic functions
integer-to-octets: Private ordinary functions
integer-to-vlq: Private ordinary functions
issuer: Private generic functions
issuer: Private generic functions
issuer-alternative-name: Private generic functions
issuer-alternative-name: Private generic functions
issuer-unique-id: Private generic functions
issuer-unique-id: Private generic functions

K
key-usage: Private generic functions
key-usage: Private generic functions

L
load-der-priv-key: Private ordinary functions
load-pem-priv-key: Private ordinary functions
load-priv-key: Private ordinary functions
log-info: Private generic functions
log-info: Private generic functions
log-info: Private generic functions
log-info: Private generic functions

M
Macro, bind-tbs: Private macros
Macro, ocsp-catch-asn-error: Private macros
Macro, with-specification-map: Private macros
make-dh-key-pair: Private ordinary functions
make-octet-stream: Private ordinary functions
make-octet-vector: Private ordinary functions
max-fragment-length: Private generic functions
max-fragment-length: Private generic functions
Method, (setf alert): Private generic functions
Method, (setf authority-information-access): Private generic functions
Method, (setf authority-key-identifier): Private generic functions
Method, (setf basic-constraints): Private generic functions
Method, (setf certificate-policies): Private generic functions
Method, (setf client-certificate-url): Private generic functions
Method, (setf crl-distribution-points): Private generic functions
Method, (setf extended-key-usage): Private generic functions
Method, (setf extensions): Private generic functions
Method, (setf handshake-messages): Private generic functions
Method, (setf hash): Private generic functions
Method, (setf host): Public generic functions
Method, (setf host): Public generic functions
Method, (setf host-name): Private generic functions
Method, (setf issuer): Private generic functions
Method, (setf issuer-alternative-name): Private generic functions
Method, (setf issuer-unique-id): Private generic functions
Method, (setf key-usage): Private generic functions
Method, (setf log-info): Private generic functions
Method, (setf log-info): Private generic functions
Method, (setf log-info): Private generic functions
Method, (setf max-fragment-length): Private generic functions
Method, (setf path): Private generic functions
Method, (setf policy-mappings): Private generic functions
Method, (setf port): Public generic functions
Method, (setf port): Public generic functions
Method, (setf pre-master-secret): Private generic functions
Method, (setf pub-key): Private generic functions
Method, (setf raw): Private generic functions
Method, (setf scheme): Private generic functions
Method, (setf serial): Private generic functions
Method, (setf signature): Private generic functions
Method, (setf signature): Private generic functions
Method, (setf signature-algorithm): Private generic functions
Method, (setf subject): Private generic functions
Method, (setf subject-alternative-name): Private generic functions
Method, (setf subject-information-access): Private generic functions
Method, (setf subject-key-identifier): Private generic functions
Method, (setf subject-pki): Private generic functions
Method, (setf subject-unique-id): Private generic functions
Method, (setf supported-signature-algorithms): Private generic functions
Method, (setf tbs-certificate): Private generic functions
Method, (setf text): Private generic functions
Method, (setf validity): Private generic functions
Method, (setf version): Private generic functions
Method, alert: Private generic functions
Method, authority-information-access: Private generic functions
Method, authority-key-identifier: Private generic functions
Method, basic-constraints: Private generic functions
Method, certificate-policies: Private generic functions
Method, ciphertext-to-compressed: Private generic functions
Method, client-certificate-url: Private generic functions
Method, crl-distribution-points: Private generic functions
Method, decrypt: Private generic functions
Method, encrypt: Private generic functions
Method, extended-key-usage: Private generic functions
Method, extensions: Private generic functions
Method, generator: Private generic functions
Method, get-record: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handle-handshake: Private generic functions
Method, handshake-messages: Private generic functions
Method, hash: Private generic functions
Method, host: Public generic functions
Method, host: Public generic functions
Method, host-name: Private generic functions
Method, initiate-connection: Private generic functions
Method, initiate-connection: Private generic functions
Method, issuer: Private generic functions
Method, issuer-alternative-name: Private generic functions
Method, issuer-unique-id: Private generic functions
Method, key-usage: Private generic functions
Method, log-info: Private generic functions
Method, log-info: Private generic functions
Method, log-info: Private generic functions
Method, max-fragment-length: Private generic functions
Method, ov-read-byte: Private generic functions
Method, ov-read-sequence: Private generic functions
Method, parse-extension: Private generic functions
Method, parse-extension: Private generic functions
Method, parse-extension: Private generic functions
Method, parse-extension: Private generic functions
Method, parse-extension: Private generic functions
Method, parse-extension: Private generic functions
Method, parse-extension: Private generic functions
Method, path: Private generic functions
Method, policy-mappings: Private generic functions
Method, port: Public generic functions
Method, port: Public generic functions
Method, pre-master-secret: Private generic functions
Method, prime-modulus: Private generic functions
Method, print-object: Public standalone methods
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, process-extension: Private generic functions
Method, pub-key: Private generic functions
Method, raw: Private generic functions
Method, request-stream-to-address: Public generic functions
Method, scheme: Private generic functions
Method, send: Private generic functions
Method, send-change-cipher-spec: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-handshake: Private generic functions
Method, send-record: Private generic functions
Method, serial: Private generic functions
Method, signature: Private generic functions
Method, signature: Private generic functions
Method, signature-algorithm: Private generic functions
Method, subject: Private generic functions
Method, subject-alternative-name: Private generic functions
Method, subject-information-access: Private generic functions
Method, subject-key-identifier: Private generic functions
Method, subject-pki: Private generic functions
Method, subject-unique-id: Private generic functions
Method, supported-signature-algorithms: Private generic functions
Method, tbs-certificate: Private generic functions
Method, text: Private generic functions
Method, text: Private generic functions
Method, text: Private generic functions
Method, validity: Private generic functions
Method, version: Private generic functions

O
ocsp-catch-asn-error: Private macros
octets-to-integer: Private ordinary functions
ov-buffer-position: Private ordinary functions
ov-read-byte: Private generic functions
ov-read-byte: Private generic functions
ov-read-sequence: Private generic functions
ov-read-sequence: Private generic functions

P
p-hash: Private ordinary functions
pack-extension: Private ordinary functions
parse-access-description: Private ordinary functions
parse-cipher-suite: Private ordinary functions
parse-der: Public ordinary functions
parse-directory-name: Private ordinary functions
parse-enc-scheme: Private ordinary functions
parse-extension: Private generic functions
parse-extension: Private generic functions
parse-extension: Private generic functions
parse-extension: Private generic functions
parse-extension: Private generic functions
parse-extension: Private generic functions
parse-extension: Private generic functions
parse-extension: Private generic functions
parse-general-name: Private ordinary functions
parse-general-names: Private ordinary functions
parse-headers-from-stream: Private ordinary functions
parse-kdf: Private ordinary functions
parse-pem: Private ordinary functions
parse-pka: Private ordinary functions
parse-priv-key: Private ordinary functions
parse-pub-key: Private ordinary functions
parse-qualifier: Private ordinary functions
parse-response-data: Private ordinary functions
parse-signature-algorithm: Private ordinary functions
parse-tbs-certificate: Private ordinary functions
parse-uri: Private ordinary functions
path: Private generic functions
path: Private generic functions
pbes2-decrypt: Public ordinary functions
policy-mappings: Private generic functions
policy-mappings: Private generic functions
port: Public generic functions
port: Public generic functions
port: Public generic functions
pre-master-secret: Private generic functions
pre-master-secret: Private generic functions
prepare-ocsp-request: Private ordinary functions
prf: Private ordinary functions
prime-modulus: Private generic functions
prime-modulus: Private generic functions
print-object: Public standalone methods
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extension: Private generic functions
process-extensions: Private ordinary functions
pub-key: Private generic functions
pub-key: Private generic functions

R
raw: Private generic functions
raw: Private generic functions
read-chunk: Private ordinary functions
read-chunked-response: Private ordinary functions
read-header: Private ordinary functions
reassemble-handshake-message: Private ordinary functions
remove-padding: Private ordinary functions
request-stream-to-address: Public generic functions
request-stream-to-address: Public generic functions
request-tunnel: Public ordinary functions
rsa-decrypt: Public ordinary functions
rsa-encrypt: Public ordinary functions
rsassa-pkcs1.5-sign: Public ordinary functions
rsassa-pkcs1.5-verify: Public ordinary functions

S
scheme: Private generic functions
scheme: Private generic functions
send: Private generic functions
send: Private generic functions
send-alert: Private ordinary functions
send-change-cipher-spec: Private generic functions
send-change-cipher-spec: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-handshake: Private generic functions
send-record: Private generic functions
send-record: Private generic functions
serial: Private generic functions
serial: Private generic functions
sign-dh-params: Private ordinary functions
signature: Private generic functions
signature: Private generic functions
signature: Private generic functions
signature-algorithm: Private generic functions
signature-algorithm: Private generic functions
split-header: Private ordinary functions
split-string: Private ordinary functions
stream-octets-to-integer: Private ordinary functions
strong-random-range: Private ordinary functions
subject: Private generic functions
subject: Private generic functions
subject-alternative-name: Private generic functions
subject-alternative-name: Private generic functions
subject-information-access: Private generic functions
subject-information-access: Private generic functions
subject-key-identifier: Private generic functions
subject-key-identifier: Private generic functions
subject-pki: Private generic functions
subject-pki: Private generic functions
subject-unique-id: Private generic functions
subject-unique-id: Private generic functions
supported-signature-algorithms: Private generic functions
supported-signature-algorithms: Private generic functions
symbol-to-suite-list: Private ordinary functions

T
tbs-certificate: Private generic functions
tbs-certificate: Private generic functions
text: Private generic functions
text: Private generic functions
text: Private generic functions
text: Private generic functions
time-valid-p: Private ordinary functions
timing-independent-compare: Private ordinary functions
trim-space: Private ordinary functions

V
validate: Private ordinary functions
validity: Private generic functions
validity: Private generic functions
verify-ocsp-signature: Private ordinary functions
verify-signature: Private ordinary functions
verify-signed-data: Private ordinary functions
verify-signed-params: Private ordinary functions
version: Private generic functions
version: Private generic functions

W
with-specification-map: Private macros

X
x509-decode: Public ordinary functions

Jump to:   (  
A   B   C   D   E   F   G   H   I   K   L   M   O   P   R   S   T   V   W   X  

Next: , Previous: , Up: Indexes   [Contents][Index]

A.3 Variables

Jump to:   *   +  
A   B   C   D   E   G   H   I   K   L   M   O   P   R   S   T   V  
Index Entry  Section

*
*certificate-request-msg*: Private special variables
*crlf*: Private special variables
*debug-stream*: Private special variables
*id-ad-ocsp*: Private special variables
*log-level*: Private special variables
*max-certificate-chain-length*: Private special variables
*max-content-length*: Private special variables
*max-fragment-length*: Private special variables
*max-int-len*: Private special variables
*supported-cipher-suites*: Private special variables
*version*: Private special variables

+
+3des-block-size+: Private special variables
+3des-encryption-suites+: Private special variables
+access-denied+: Private constants
+aes-128-ciphers+: Private special variables
+aes-256-ciphers+: Private special variables
+aes-block-size+: Private special variables
+aes-encryption-suites+: Private special variables
+alert+: Private constants
+anon-authentication-suites+: Private special variables
+application-data+: Private constants
+asn1_application+: Private constants
+asn1_constructed+: Private constants
+asn1_context_specific+: Private constants
+asn1_primitive+: Private constants
+asn1_private+: Private constants
+asn1_universal+: Private constants
+bad-certificate+: Private constants
+bad-record-mac+: Private constants
+cbc-mode-ciphers+: Private special variables
+certificate+: Private constants
+certificate-expired+: Private constants
+certificate-request+: Private constants
+certificate-revoked+: Private constants
+certificate-unknown+: Private constants
+certificate-verify+: Private constants
+change-cipher-spec+: Private constants
+client-hello+: Private constants
+client-key-exchange+: Private constants
+close-notify+: Private constants
+decode-error+: Private constants
+decompression-failure+: Private constants
+decrypt-error+: Private constants
+decryption-failed-reserved+: Private constants
+dh-key-exchange-suites+: Private special variables
+dhe-key-exchange-suites+: Private special variables
+dss-authentication-suites+: Private special variables
+export-restriction-reserved+: Private constants
+fatal+: Private constants
+finished+: Private constants
+handshake+: Private constants
+handshake-failure+: Private constants
+hello-request+: Private constants
+illegal-parameter+: Private constants
+insufficient-security+: Private constants
+internal-error+: Private constants
+md2withrsaencryption+: Private constants
+md5-ciphers+: Private special variables
+md5withrsaencryption+: Private constants
+no-certificate-reserved+: Private constants
+no-renegotiation+: Private constants
+protocol-version+: Private constants
+rc4-encryption-suites+: Private special variables
+record-overflow+: Private constants
+rsa-authentication-suites+: Private special variables
+rsa-key-exchange-suites+: Private special variables
+server-hello+: Private constants
+server-hello-done+: Private constants
+server-key-exchange+: Private constants
+sha1-ciphers+: Private special variables
+sha1withrsaencryption+: Private constants
+sha224withrsaencryption+: Private constants
+sha256-ciphers+: Private special variables
+sha256withrsaencryption+: Private constants
+sha384withrsaencryption+: Private constants
+sha512withrsaencryption+: Private constants
+tls_dhe_dss_with_3des_ede_cbc_sha+: Private special variables
+tls_dhe_dss_with_aes_128_cbc_sha+: Private special variables
+tls_dhe_dss_with_aes_128_cbc_sha256+: Private special variables
+tls_dhe_dss_with_aes_256_cbc_sha+: Private special variables
+tls_dhe_dss_with_aes_256_cbc_sha256+: Private special variables
+tls_dhe_rsa_with_3des_ede_cbc_sha+: Private special variables
+tls_dhe_rsa_with_aes_128_cbc_sha+: Private special variables
+tls_dhe_rsa_with_aes_128_cbc_sha256+: Private special variables
+tls_dhe_rsa_with_aes_256_cbc_sha+: Private special variables
+tls_dhe_rsa_with_aes_256_cbc_sha256+: Private special variables
+tls_dh_anon_with_3des_ede_cbc_sha+: Private special variables
+tls_dh_anon_with_aes_128_cbc_sha+: Private special variables
+tls_dh_anon_with_aes_128_cbc_sha256+: Private special variables
+tls_dh_anon_with_aes_256_cbc_sha+: Private special variables
+tls_dh_anon_with_aes_256_cbc_sha256+: Private special variables
+tls_dh_anon_with_rc4_128_md5+: Private special variables
+tls_dh_dss_with_3des_ede_cbc_sha+: Private special variables
+tls_dh_dss_with_aes_128_cbc_sha+: Private special variables
+tls_dh_dss_with_aes_128_cbc_sha256+: Private special variables
+tls_dh_dss_with_aes_256_cbc_sha+: Private special variables
+tls_dh_dss_with_aes_256_cbc_sha256+: Private special variables
+tls_dh_rsa_with_3des_ede_cbc_sha+: Private special variables
+tls_dh_rsa_with_aes_128_cbc_sha+: Private special variables
+tls_dh_rsa_with_aes_128_cbc_sha256+: Private special variables
+tls_dh_rsa_with_aes_256_cbc_sha+: Private special variables
+tls_dh_rsa_with_aes_256_cbc_sha256+: Private special variables
+tls_rsa_with_3des_ede_cbc_sha+: Private special variables
+tls_rsa_with_aes_128_cbc_sha+: Private special variables
+tls_rsa_with_aes_128_cbc_sha256+: Private special variables
+tls_rsa_with_aes_256_cbc_sha+: Private special variables
+tls_rsa_with_aes_256_cbc_sha256+: Private special variables
+tls_rsa_with_null_md5+: Private special variables
+tls_rsa_with_null_sha+: Private special variables
+tls_rsa_with_null_sha256+: Private special variables
+tls_rsa_with_rc4_128_md5+: Private special variables
+tls_rsa_with_rc4_128_sha+: Private special variables
+unexpected-message+: Private constants
+unknown-ca+: Private constants
+unsupported-certificate+: Private constants
+unsupported-extension+: Private constants
+user-canceled+: Private constants
+warning+: Private constants

A
alert: Private conditions
authenticate-client-p: Private classes
authentication-method: Private classes
authority-information-access: Private classes
authority-key-identifier: Private classes

B
basic-constraints: Private classes
block-size: Private classes

C
ca-certificates: Private classes
ca-certificates: Private classes
certificate: Private classes
certificate: Private classes
certificate-policies: Private classes
certificate-requested: Private classes
cipher-mode: Private classes
cipher-suite: Private classes
cipher-type: Private classes
ciphers: Private classes
ciphers: Private classes
client-certificate-url: Private classes
client-random: Private classes
client-write-iv: Private classes
client-write-key: Private classes
client-write-mac-key: Private classes
Constant, +access-denied+: Private constants
Constant, +alert+: Private constants
Constant, +application-data+: Private constants
Constant, +asn1_application+: Private constants
Constant, +asn1_constructed+: Private constants
Constant, +asn1_context_specific+: Private constants
Constant, +asn1_primitive+: Private constants
Constant, +asn1_private+: Private constants
Constant, +asn1_universal+: Private constants
Constant, +bad-certificate+: Private constants
Constant, +bad-record-mac+: Private constants
Constant, +certificate+: Private constants
Constant, +certificate-expired+: Private constants
Constant, +certificate-request+: Private constants
Constant, +certificate-revoked+: Private constants
Constant, +certificate-unknown+: Private constants
Constant, +certificate-verify+: Private constants
Constant, +change-cipher-spec+: Private constants
Constant, +client-hello+: Private constants
Constant, +client-key-exchange+: Private constants
Constant, +close-notify+: Private constants
Constant, +decode-error+: Private constants
Constant, +decompression-failure+: Private constants
Constant, +decrypt-error+: Private constants
Constant, +decryption-failed-reserved+: Private constants
Constant, +export-restriction-reserved+: Private constants
Constant, +fatal+: Private constants
Constant, +finished+: Private constants
Constant, +handshake+: Private constants
Constant, +handshake-failure+: Private constants
Constant, +hello-request+: Private constants
Constant, +illegal-parameter+: Private constants
Constant, +insufficient-security+: Private constants
Constant, +internal-error+: Private constants
Constant, +md2withrsaencryption+: Private constants
Constant, +md5withrsaencryption+: Private constants
Constant, +no-certificate-reserved+: Private constants
Constant, +no-renegotiation+: Private constants
Constant, +protocol-version+: Private constants
Constant, +record-overflow+: Private constants
Constant, +server-hello+: Private constants
Constant, +server-hello-done+: Private constants
Constant, +server-key-exchange+: Private constants
Constant, +sha1withrsaencryption+: Private constants
Constant, +sha224withrsaencryption+: Private constants
Constant, +sha256withrsaencryption+: Private constants
Constant, +sha384withrsaencryption+: Private constants
Constant, +sha512withrsaencryption+: Private constants
Constant, +unexpected-message+: Private constants
Constant, +unknown-ca+: Private constants
Constant, +unsupported-certificate+: Private constants
Constant, +unsupported-extension+: Private constants
Constant, +user-canceled+: Private constants
Constant, +warning+: Private constants
crl-distribution-points: Private classes

D
decrypting-cipher-object: Private classes
dh-params: Private classes
dh-params: Private classes
dh-y: Private classes
dhe-private-key: Private classes

E
enc-key-length: Private classes
encrypting-cipher-object: Private classes
encryption-algorithm: Private classes
endpoint-decryption-key: Private symbol macros
endpoint-encryption-key: Private symbol macros
endpoint-mac-decryption-key: Private symbol macros
endpoint-mac-encryption-key: Private symbol macros
extended-key-usage: Private classes
extensions: Private classes
extensions-data: Private classes

G
g: Private classes

H
handshake-messages: Private classes
handshake-stage: Private classes
hash: Private classes
hello-version: Private classes
host: Public classes
host: Private classes
host-name: Private classes

I
input-stream: Private classes
io-stream: Private classes
issuer: Private classes
issuer-alternative-name: Private classes
issuer-unique-id: Private classes

K
key-exchange-method: Private classes
key-usage: Private classes
key_block: Private classes

L
length: Private classes
log: Private conditions
log: Private conditions
log: Private conditions

M
mac-algorithm: Private classes
mac-key-length: Private classes
master-secret: Private classes
max-fragment-length: Private classes

O
octet-vector: Private classes
output-stream: Private classes

P
p: Private classes
path: Private classes
peer-dns-name: Private classes
peer-ip-addresses: Private classes
policy-mappings: Private classes
port: Public classes
port: Private classes
position: Private classes
pre-master-secret: Private classes
priv-key: Private classes
priv-key: Private classes
pub-key: Private classes
pub-key: Private classes

R
raw: Private classes
record-iv-length: Private classes
remote-certificate-type: Private classes
requested-cert-type: Private classes
require-authentication-p: Private classes
resumable: Private classes
resumable: Private classes
role: Private classes
role: Private classes
role: Private classes

S
scheme: Private classes
sequence-number-read: Private classes
sequence-number-write: Private classes
serial: Private classes
server-random: Private classes
server-write-iv: Private classes
server-write-key: Private classes
server-write-mac-key: Private classes
session-id: Private classes
session-read-state: Private classes
session-write-state: Private classes
signature: Private classes
signature: Private classes
signature-algorithm: Private classes
Slot, alert: Private conditions
Slot, authenticate-client-p: Private classes
Slot, authentication-method: Private classes
Slot, authority-information-access: Private classes
Slot, authority-key-identifier: Private classes
Slot, basic-constraints: Private classes
Slot, block-size: Private classes
Slot, ca-certificates: Private classes
Slot, ca-certificates: Private classes
Slot, certificate: Private classes
Slot, certificate: Private classes
Slot, certificate-policies: Private classes
Slot, certificate-requested: Private classes
Slot, cipher-mode: Private classes
Slot, cipher-suite: Private classes
Slot, cipher-type: Private classes
Slot, ciphers: Private classes
Slot, ciphers: Private classes
Slot, client-certificate-url: Private classes
Slot, client-random: Private classes
Slot, client-write-iv: Private classes
Slot, client-write-key: Private classes
Slot, client-write-mac-key: Private classes
Slot, crl-distribution-points: Private classes
Slot, decrypting-cipher-object: Private classes
Slot, dh-params: Private classes
Slot, dh-params: Private classes
Slot, dh-y: Private classes
Slot, dhe-private-key: Private classes
Slot, enc-key-length: Private classes
Slot, encrypting-cipher-object: Private classes
Slot, encryption-algorithm: Private classes
Slot, extended-key-usage: Private classes
Slot, extensions: Private classes
Slot, extensions-data: Private classes
Slot, g: Private classes
Slot, handshake-messages: Private classes
Slot, handshake-stage: Private classes
Slot, hash: Private classes
Slot, hello-version: Private classes
Slot, host: Public classes
Slot, host: Private classes
Slot, host-name: Private classes
Slot, input-stream: Private classes
Slot, io-stream: Private classes
Slot, issuer: Private classes
Slot, issuer-alternative-name: Private classes
Slot, issuer-unique-id: Private classes
Slot, key-exchange-method: Private classes
Slot, key-usage: Private classes
Slot, key_block: Private classes
Slot, length: Private classes
Slot, log: Private conditions
Slot, log: Private conditions
Slot, log: Private conditions
Slot, mac-algorithm: Private classes
Slot, mac-key-length: Private classes
Slot, master-secret: Private classes
Slot, max-fragment-length: Private classes
Slot, octet-vector: Private classes
Slot, output-stream: Private classes
Slot, p: Private classes
Slot, path: Private classes
Slot, peer-dns-name: Private classes
Slot, peer-ip-addresses: Private classes
Slot, policy-mappings: Private classes
Slot, port: Public classes
Slot, port: Private classes
Slot, position: Private classes
Slot, pre-master-secret: Private classes
Slot, priv-key: Private classes
Slot, priv-key: Private classes
Slot, pub-key: Private classes
Slot, pub-key: Private classes
Slot, raw: Private classes
Slot, record-iv-length: Private classes
Slot, remote-certificate-type: Private classes
Slot, requested-cert-type: Private classes
Slot, require-authentication-p: Private classes
Slot, resumable: Private classes
Slot, resumable: Private classes
Slot, role: Private classes
Slot, role: Private classes
Slot, role: Private classes
Slot, scheme: Private classes
Slot, sequence-number-read: Private classes
Slot, sequence-number-write: Private classes
Slot, serial: Private classes
Slot, server-random: Private classes
Slot, server-write-iv: Private classes
Slot, server-write-key: Private classes
Slot, server-write-mac-key: Private classes
Slot, session-id: Private classes
Slot, session-read-state: Private classes
Slot, session-write-state: Private classes
Slot, signature: Private classes
Slot, signature: Private classes
Slot, signature-algorithm: Private classes
Slot, state: Private classes
Slot, subject: Private classes
Slot, subject-alternative-name: Private classes
Slot, subject-information-access: Private classes
Slot, subject-key-identifier: Private classes
Slot, subject-pki: Private classes
Slot, subject-unique-id: Private classes
Slot, supported-sig-algos: Private classes
Slot, supported-signature-algorithms: Private classes
Slot, tbs-certificate: Private classes
Slot, text: Public conditions
Slot, text: Private conditions
Slot, text: Private conditions
Slot, validity: Private classes
Slot, version: Private classes
Slot, version: Private classes
Slot, version: Private classes
Special Variable, *certificate-request-msg*: Private special variables
Special Variable, *crlf*: Private special variables
Special Variable, *debug-stream*: Private special variables
Special Variable, *id-ad-ocsp*: Private special variables
Special Variable, *log-level*: Private special variables
Special Variable, *max-certificate-chain-length*: Private special variables
Special Variable, *max-content-length*: Private special variables
Special Variable, *max-fragment-length*: Private special variables
Special Variable, *max-int-len*: Private special variables
Special Variable, *supported-cipher-suites*: Private special variables
Special Variable, *version*: Private special variables
Special Variable, +3des-block-size+: Private special variables
Special Variable, +3des-encryption-suites+: Private special variables
Special Variable, +aes-128-ciphers+: Private special variables
Special Variable, +aes-256-ciphers+: Private special variables
Special Variable, +aes-block-size+: Private special variables
Special Variable, +aes-encryption-suites+: Private special variables
Special Variable, +anon-authentication-suites+: Private special variables
Special Variable, +cbc-mode-ciphers+: Private special variables
Special Variable, +dh-key-exchange-suites+: Private special variables
Special Variable, +dhe-key-exchange-suites+: Private special variables
Special Variable, +dss-authentication-suites+: Private special variables
Special Variable, +md5-ciphers+: Private special variables
Special Variable, +rc4-encryption-suites+: Private special variables
Special Variable, +rsa-authentication-suites+: Private special variables
Special Variable, +rsa-key-exchange-suites+: Private special variables
Special Variable, +sha1-ciphers+: Private special variables
Special Variable, +sha256-ciphers+: Private special variables
Special Variable, +tls_dhe_dss_with_3des_ede_cbc_sha+: Private special variables
Special Variable, +tls_dhe_dss_with_aes_128_cbc_sha+: Private special variables
Special Variable, +tls_dhe_dss_with_aes_128_cbc_sha256+: Private special variables
Special Variable, +tls_dhe_dss_with_aes_256_cbc_sha+: Private special variables
Special Variable, +tls_dhe_dss_with_aes_256_cbc_sha256+: Private special variables
Special Variable, +tls_dhe_rsa_with_3des_ede_cbc_sha+: Private special variables
Special Variable, +tls_dhe_rsa_with_aes_128_cbc_sha+: Private special variables
Special Variable, +tls_dhe_rsa_with_aes_128_cbc_sha256+: Private special variables
Special Variable, +tls_dhe_rsa_with_aes_256_cbc_sha+: Private special variables
Special Variable, +tls_dhe_rsa_with_aes_256_cbc_sha256+: Private special variables
Special Variable, +tls_dh_anon_with_3des_ede_cbc_sha+: Private special variables
Special Variable, +tls_dh_anon_with_aes_128_cbc_sha+: Private special variables
Special Variable, +tls_dh_anon_with_aes_128_cbc_sha256+: Private special variables
Special Variable, +tls_dh_anon_with_aes_256_cbc_sha+: Private special variables
Special Variable, +tls_dh_anon_with_aes_256_cbc_sha256+: Private special variables
Special Variable, +tls_dh_anon_with_rc4_128_md5+: Private special variables
Special Variable, +tls_dh_dss_with_3des_ede_cbc_sha+: Private special variables
Special Variable, +tls_dh_dss_with_aes_128_cbc_sha+: Private special variables
Special Variable, +tls_dh_dss_with_aes_128_cbc_sha256+: Private special variables
Special Variable, +tls_dh_dss_with_aes_256_cbc_sha+: Private special variables
Special Variable, +tls_dh_dss_with_aes_256_cbc_sha256+: Private special variables
Special Variable, +tls_dh_rsa_with_3des_ede_cbc_sha+: Private special variables
Special Variable, +tls_dh_rsa_with_aes_128_cbc_sha+: Private special variables
Special Variable, +tls_dh_rsa_with_aes_128_cbc_sha256+: Private special variables
Special Variable, +tls_dh_rsa_with_aes_256_cbc_sha+: Private special variables
Special Variable, +tls_dh_rsa_with_aes_256_cbc_sha256+: Private special variables
Special Variable, +tls_rsa_with_3des_ede_cbc_sha+: Private special variables
Special Variable, +tls_rsa_with_aes_128_cbc_sha+: Private special variables
Special Variable, +tls_rsa_with_aes_128_cbc_sha256+: Private special variables
Special Variable, +tls_rsa_with_aes_256_cbc_sha+: Private special variables
Special Variable, +tls_rsa_with_aes_256_cbc_sha256+: Private special variables
Special Variable, +tls_rsa_with_null_md5+: Private special variables
Special Variable, +tls_rsa_with_null_sha+: Private special variables
Special Variable, +tls_rsa_with_null_sha256+: Private special variables
Special Variable, +tls_rsa_with_rc4_128_md5+: Private special variables
Special Variable, +tls_rsa_with_rc4_128_sha+: Private special variables
state: Private classes
subject: Private classes
subject-alternative-name: Private classes
subject-information-access: Private classes
subject-key-identifier: Private classes
subject-pki: Private classes
subject-unique-id: Private classes
supported-sig-algos: Private classes
supported-signature-algorithms: Private classes
Symbol Macro, endpoint-decryption-key: Private symbol macros
Symbol Macro, endpoint-encryption-key: Private symbol macros
Symbol Macro, endpoint-mac-decryption-key: Private symbol macros
Symbol Macro, endpoint-mac-encryption-key: Private symbol macros

T
tbs-certificate: Private classes
text: Public conditions
text: Private conditions
text: Private conditions

V
validity: Private classes
version: Private classes
version: Private classes
version: Private classes

Jump to:   *   +  
A   B   C   D   E   G   H   I   K   L   M   O   P   R   S   T   V  

Previous: , Up: Indexes   [Contents][Index]

A.4 Data types

Jump to:   A   C   D   E   F   H   L   M   O   P   R   S   T   U   V   X  
Index Entry  Section

A
address: Public classes
alert.lisp: The cl-tls/src/tls/alert․lisp file
asn.1: The cl-tls/src/asn․1 module
asn.1-decoding-error: Private conditions
asn.1.lisp: The cl-tls/src/asn․1/asn․1․lisp file

C
ciphersuites.lisp: The cl-tls/src/tls/ciphersuites․lisp file
cl-tls: The cl-tls system
cl-tls: The cl-tls package
cl-tls.asd: The cl-tls/cl-tls․asd file
Class, address: Public classes
Class, client-session: Private classes
Class, dh-params: Private classes
Class, hello-extensions: Private classes
Class, octet-stream: Private classes
Class, server-session: Private classes
Class, session: Private classes
Class, shared-session-slots: Private classes
Class, tbs-certificate: Private classes
Class, uri: Private classes
Class, x509-extension: Private classes
Class, x509v3-certificate: Private classes
client-session: Private classes
Condition, asn.1-decoding-error: Private conditions
Condition, exception: Private conditions
Condition, http-error: Private conditions
Condition, ocsp-error: Private conditions
Condition, tls-error: Public conditions
Condition, tls-stream-error: Public conditions
Condition, x509-decoding-error: Private conditions
crypto.lisp: The cl-tls/src/tls/crypto․lisp file

D
dh-params: Private classes

E
exception: Private conditions
extensions.lisp: The cl-tls/src/x509/extensions․lisp file
extensions.lisp: The cl-tls/src/tls/extensions․lisp file

F
File, alert.lisp: The cl-tls/src/tls/alert․lisp file
File, asn.1.lisp: The cl-tls/src/asn․1/asn․1․lisp file
File, ciphersuites.lisp: The cl-tls/src/tls/ciphersuites․lisp file
File, cl-tls.asd: The cl-tls/cl-tls․asd file
File, crypto.lisp: The cl-tls/src/tls/crypto․lisp file
File, extensions.lisp: The cl-tls/src/x509/extensions․lisp file
File, extensions.lisp: The cl-tls/src/tls/extensions․lisp file
File, http.lisp: The cl-tls/src/tls/http․lisp file
File, license: The cl-tls/license file
File, ocsp.lisp: The cl-tls/src/x509/ocsp․lisp file
File, package.lisp: The cl-tls/src/package․lisp file
File, pkcs1.lisp: The cl-tls/src/pkcs/pkcs1․lisp file
File, pkcs3.lisp: The cl-tls/src/pkcs/pkcs3․lisp file
File, pkcs5.lisp: The cl-tls/src/pkcs/pkcs5․lisp file
File, pkcs8.lisp: The cl-tls/src/pkcs/pkcs8․lisp file
File, readme: The cl-tls/readme file
File, rfc7468.lisp: The cl-tls/src/pem/rfc7468․lisp file
File, tls.lisp: The cl-tls/src/tls/tls․lisp file
File, transport.lisp: The cl-tls/src/tls/transport․lisp file
File, utils.lisp: The cl-tls/src/utils․lisp file
File, validate.lisp: The cl-tls/src/x509/validate․lisp file
File, x509.lisp: The cl-tls/src/x509/x509․lisp file

H
hello-extensions: Private classes
http-error: Private conditions
http.lisp: The cl-tls/src/tls/http․lisp file

L
license: The cl-tls/license file

M
Module, asn.1: The cl-tls/src/asn․1 module
Module, pem: The cl-tls/src/pem module
Module, pkcs: The cl-tls/src/pkcs module
Module, src: The cl-tls/src module
Module, tls: The cl-tls/src/tls module
Module, x509: The cl-tls/src/x509 module

O
ocsp-error: Private conditions
ocsp.lisp: The cl-tls/src/x509/ocsp․lisp file
octet: Private types
octet-stream: Private classes
octet-vector: Private types

P
Package, cl-tls: The cl-tls package
package.lisp: The cl-tls/src/package․lisp file
pem: The cl-tls/src/pem module
pkcs: The cl-tls/src/pkcs module
pkcs1.lisp: The cl-tls/src/pkcs/pkcs1․lisp file
pkcs3.lisp: The cl-tls/src/pkcs/pkcs3․lisp file
pkcs5.lisp: The cl-tls/src/pkcs/pkcs5․lisp file
pkcs8.lisp: The cl-tls/src/pkcs/pkcs8․lisp file

R
readme: The cl-tls/readme file
rfc7468.lisp: The cl-tls/src/pem/rfc7468․lisp file

S
server-session: Private classes
session: Private classes
shared-session-slots: Private classes
src: The cl-tls/src module
System, cl-tls: The cl-tls system

T
tbs-certificate: Private classes
tls: The cl-tls/src/tls module
tls-error: Public conditions
tls-stream-error: Public conditions
tls.lisp: The cl-tls/src/tls/tls․lisp file
transport.lisp: The cl-tls/src/tls/transport․lisp file
Type, octet: Private types
Type, octet-vector: Private types

U
uri: Private classes
utils.lisp: The cl-tls/src/utils․lisp file

V
validate.lisp: The cl-tls/src/x509/validate․lisp file

X
x509: The cl-tls/src/x509 module
x509-decoding-error: Private conditions
x509-extension: Private classes
x509.lisp: The cl-tls/src/x509/x509․lisp file
x509v3-certificate: Private classes

Jump to:   A   C   D   E   F   H   L   M   O   P   R   S   T   U   V   X