U:RDoc::AnyMethod[iI"new:ETI"&DRb::DRbSSLSocket::SSLConfig::new;TT: publico:RDoc::Markup::Document: @parts[o:RDoc::Markup::Paragraph; [I"7Create a new DRb::DRbSSLSocket::SSLConfig instance;To:RDoc::Markup::BlankLineo; ; [ I"KThe DRb::DRbSSLSocket will take either a +config+ Hash or an instance ;TI"Jof SSLConfig, and will setup the certificate for its session for the ;TI"Kconfiguration. If want it to generate a generic certificate, the bare ;TI"+minimum is to provide the :SSLCertName;T@S:RDoc::Markup::Heading: leveli: textI"Config options;T@o; ; [I"From +config+ Hash:;T@o:RDoc::Markup::List: @type: NOTE: @items[o:RDoc::Markup::ListItem: @label[I":SSLCertificate ;T; [o; ; [I"JAn instance of OpenSSL::X509::Certificate. If this is not provided, ;TI"Gthen a generic X509 is generated, with a correspond :SSLPrivateKey;T@o;;[I":SSLPrivateKey ;T; [o; ; [I"HA private key instance, like OpenSSL::PKey::RSA. This key must be ;TI",the key that signed the :SSLCertificate;T@o;;[I":SSLClientCA ;T; [o; ; [I"GAn OpenSSL::X509::Certificate, or Array of certificates that will ;TI")used as ClientCAs in the SSL Context;T@o;;[I":SSLCACertificatePath ;T; [o; ; [I"HA path to the directory of CA certificates. The certificates must ;TI"be in PEM format.;T@o;;[I":SSLCACertificateFile ;T; [o; ; [I"4A path to a CA certificate file, in PEM format.;T@o;;[I":SSLTmpDhCallback ;T; [o; ; [I"@A DH callback. See OpenSSL::SSL::SSLContext.tmp_dh_callback;T@o;;[I":SSLVerifyMode ;T; [o; ; [I"HThis is the SSL verification mode. See OpenSSL::SSL::VERIFY_* for ;TI"?available modes. The default is OpenSSL::SSL::VERIFY_NONE;T@o;;[I":SSLVerifyDepth ;T; [o; ; [I"ENumber of CA certificates to walk, when verifying a certificate ;TI" chain.;T@o;;[I":SSLVerifyCallback ;T; [o; ; [I"=A callback to be used for additional verification. See ;TI"-OpenSSL::SSL::SSLContext.verify_callback;T@o;;[I":SSLCertificateStore ;T; [o; ; [I"AA OpenSSL::X509::Store used for verification of certificates;T@o;;[I":SSLCertName ;T; [ o; ; [I"HIssuer name for the certificate. This is required when generating ;TI"Ethe certificate (if :SSLCertificate and :SSLPrivateKey were not ;TI";given). The value of this is to be an Array of pairs:;T@o:RDoc::Markup::Verbatim; [I"1[["C", "Raleigh"], ["ST","North Carolina"], ;TI"! ["CN","fqdn.example.com"]] ;T: @format0o; ; [I"!See also OpenSSL::X509::Name;T@o;;[I":SSLCertComment ;T; [o; ; [I"JA comment to be used for generating the certificate. The default is ;TI" "Generated by Ruby/OpenSSL";T@S; ; i;I" Example;T@o; ; [I";These values can be added after the fact, like a Hash.;T@o;; [ I"require 'drb/ssl' ;TI"-c = DRb::DRbSSLSocket::SSLConfig.new {} ;TI"c[:SSLCertificate] = ;TI"? OpenSSL::X509::Certificate.new(File.read('mycert.crt')) ;TI"Ic[:SSLPrivateKey] = OpenSSL::PKey::RSA.new(File.read('mycert.key')) ;TI"3c[:SSLVerifyMode] = OpenSSL::SSL::VERIFY_PEER ;TI"2c[:SSLCACertificatePath] = "/etc/ssl/certs/" ;TI"c.setup_certificate ;T;0o; ; [I"or;T@o;; [ I"require 'drb/ssl' ;TI",c = DRb::DRbSSLSocket::SSLConfig.new({ ;TI"I :SSLCertName => [["CN" => DRb::DRbSSLSocket.getservername]] ;TI" }) ;TI"c.setup_certificate;T;0: @fileI"lib/drb/ssl.rb;T:0@omit_headings_from_table_of_contents_below000[I" (config);T@•FI"SSLConfig;TcRDoc::NormalClass00