L_SSL_CTX_CREATE

Summary

The L_SSL_CTX_CREATE structure provides security information for the L_DicomCreateNetExt function.

Syntax

typedef struct tagSSL_CTX_CREATE 
{ 
   L_UINT  uStructSize; 
   L_UINT32  uFlags; 
   L_INT  nMethodTypeSSL; 
   L_TCHAR *  pszCAfile; 
   L_UINT  uVerifyMode; 
   L_INT  nVerifyDepth; 
   L_INT  nOptions; 
   L_INT  nSuccess; 
   L_INT  nReserved1; 
   L_INT  nReserved2; 
} L_SSL_CTX_CREATE, * pL_SSL_CTX_CREATE; 

Members

uStructSize

Size of this structure in bytes, for versioning. Use the sizeof operator to calculate this value.

uFlags

Flags that identify the valid fields of the L_SSL_CTX_CREATE structure. Flags may be combined using a bitwise OR ( | ). Possible values are:

nMethodTypeSSL

Value that identifies which SSL method type is to be used for security verification. This member must be filled. Only one value can be used. The default value is TYPE_TLSV1_METHOD. Possible values are:

pszCAfile

Pointer to the name of a file containing Certification Authorities (CA) certificates in Privacy Enhanced Mail (PEM) format. More than one CA certificate may be present in the file. The default value is no file.

uVerifyMode

Flags that identify the verification mode to be used. Flags may be combined using a bitwise OR ( | ). The default value is L_SSL_VERIFY_NONE. Possible values are:

nVerifyDepth

Sets the maximum depth of the certificate chain to be verified. The default value is 9.

nOptions

Flags that identify additional restrictions to the verification mode (uVerifyMode), used when the uVerifyMode is TYPE_SSLV23_METHOD. Flags may be combined using a bitwise OR ( | ). The default value is (L_SSL_OP_NO_SSLv3 | L_SSL_OP_NO_SSLv2 | L_SSL_OP_ALL). Possible values are:

nSuccess

After using L_SSL_CTX_CREATE to set security options, this member will return any errors. If all options were set successfully, this will contain DICOM_SUCCESS. For information on errors, refer to Return Codes.

nReserved1

Reserved for future use. Pass 0.

nReserved2

Reserved for future use. Pass 0.

Comments

Use this structure with L_DicomCreateNetExt to change the security options from the defaults.

This toolkit uses SSL (Secure Socket Layer) and TLS (Transport Layer Security) to implement security. Developed by Netscape, the Secure Socket Layer (SSL) protocol is designed to ensure the security of data being communicated between two points over a network, and uses TCP as the communication layer. SSL provides a way for the client and server to authenticate each other, ensures the integrity of the data during a session, and ensures that the data remains private between the client and the server. The Transport Layer Security (TLS) protocol is based on the SSL protocol.

Please note that a full discussion of SSL and TLS is beyond the scope of this help topic.

Usage

• L_DicomCreateNetExt
• L_DicomInitializeNet