215_sslAuthenticationOptions.EncryptionPolicy = encryptionPolicy; 216_sslAuthenticationOptions.CertValidationDelegate = userCertificateValidationCallback; 217_sslAuthenticationOptions.CertSelectionDelegate = userCertificateSelectionCallback; 224_sslAuthenticationOptions.SslStream = this; 225_sslAuthenticationOptions.RemoteCertificateValidator = VerifyRemoteCertificate; 256EncryptionPolicy = _sslAuthenticationOptions.EncryptionPolicy, 295EncryptionPolicy = _sslAuthenticationOptions.EncryptionPolicy, 331EncryptionPolicy = _sslAuthenticationOptions.EncryptionPolicy, 343_sslAuthenticationOptions.UpdateOptions(sslClientAuthenticationOptions); 365EncryptionPolicy = _sslAuthenticationOptions.EncryptionPolicy, 375_sslAuthenticationOptions.UpdateOptions(sslServerAuthenticationOptions); 393EncryptionPolicy = _sslAuthenticationOptions.EncryptionPolicy, 404_sslAuthenticationOptions.UpdateOptions(sslClientAuthenticationOptions); 418EncryptionPolicy = _sslAuthenticationOptions.EncryptionPolicy, 432EncryptionPolicy = _sslAuthenticationOptions.EncryptionPolicy, 441_sslAuthenticationOptions.UpdateOptions(sslServerAuthenticationOptions); 447_sslAuthenticationOptions.UpdateOptions(optionsCallback, state); 484public override bool IsServer => _sslAuthenticationOptions.IsServer; 544public virtual bool CheckCertRevocationStatus => _sslAuthenticationOptions.CertificateRevocationCheckMode != X509RevocationMode.NoCheck; 652return _sslAuthenticationOptions.TargetHost;

26private object _handshakeLock => _sslAuthenticationOptions; 114NetSecurityTelemetry.Log.HandshakeStart(IsServer, _sslAuthenticationOptions.TargetHost); 208_sslAuthenticationOptions.RemoteCertRequired = true; 259CompleteHandshake(_sslAuthenticationOptions); 432CompleteHandshake(_sslAuthenticationOptions); 493_sslAuthenticationOptions!.IsServer) // guard against malicious endpoints. We should not see ClientHello on client. 497if (OperatingSystem.IsMacOS() && _sslAuthenticationOptions.IsServer) 510if (_sslAuthenticationOptions.ServerOptionDelegate != null) 527_sslAuthenticationOptions.TargetHost = _lastFrame.TargetName; 530if (_sslAuthenticationOptions.ServerOptionDelegate != null) 533await _sslAuthenticationOptions.ServerOptionDelegate(this, new SslClientHelloInfo(_sslAuthenticationOptions.TargetHost, _lastFrame.SupportedVersions), 534_sslAuthenticationOptions.UserState, cancellationToken).ConfigureAwait(false); 535_sslAuthenticationOptions.UpdateOptions(userOptions); 558if (_sslAuthenticationOptions!.IsServer && _securityContext == null) 673if (!VerifyRemoteCertificate(_sslAuthenticationOptions.CertificateContext?.Trust, ref alertToken, ref sslPolicyErrors, out chainStatus)) 687if (!VerifyRemoteCertificate(_sslAuthenticationOptions.CertificateContext?.Trust, ref alertToken, ref sslPolicyErrors, out chainStatus))

63return _sslAuthenticationOptions.CertificateContext?.TargetCertificate; 137return _sslAuthenticationOptions.RemoteCertRequired; 153_sslAuthenticationOptions.Dispose(); 303if (_sslAuthenticationOptions.CertificateContext != null) 313_selectedClientCertificate = _sslAuthenticationOptions.CertificateContext.TargetCertificate; 315return _sslAuthenticationOptions.CertificateContext.TargetCertificate; 317else if (_sslAuthenticationOptions.CertSelectionDelegate != null) 327_sslAuthenticationOptions.ClientCertificates ??= new X509CertificateCollection(); 328clientCertificate = _sslAuthenticationOptions.CertSelectionDelegate(this, _sslAuthenticationOptions.TargetHost, _sslAuthenticationOptions.ClientCertificates, remoteCert, issuers); 343if (_sslAuthenticationOptions.ClientCertificates == null || _sslAuthenticationOptions.ClientCertificates.Count == 0) 355else if (_credentialsHandle == null && _sslAuthenticationOptions.ClientCertificates != null && _sslAuthenticationOptions.ClientCertificates.Count > 0) 359clientCertificate = _sslAuthenticationOptions.ClientCertificates[0]; 368else if (_sslAuthenticationOptions.ClientCertificates != null && _sslAuthenticationOptions.ClientCertificates.Count > 0) 387for (int i = 0; i < _sslAuthenticationOptions.ClientCertificates.Count; ++i) 399certificateEx = MakeEx(_sslAuthenticationOptions.ClientCertificates[i]); 454if (certificateEx != null && (object)certificateEx != (object)_sslAuthenticationOptions.ClientCertificates[i]) 462NetEventSource.Log.SelectedCert(_sslAuthenticationOptions.ClientCertificates[i], this); 464EnsureInitialized(ref filteredCerts).Add(_sslAuthenticationOptions.ClientCertificates[i]); 496if ((selectedCert = FindCertificateWithPrivateKey(this, _sslAuthenticationOptions.IsServer, clientCertificate)) != null) 565if (SslStreamPal.TryUpdateClintCertificate(_credentialsHandle, _securityContext, _sslAuthenticationOptions)) 582_sslAuthenticationOptions.EnabledSslProtocols, 583_sslAuthenticationOptions.IsServer, 584_sslAuthenticationOptions.EncryptionPolicy, 585_sslAuthenticationOptions.CertificateRevocationCheckMode != X509RevocationMode.NoCheck, 586_sslAuthenticationOptions.AllowTlsResume, 588_sslAuthenticationOptions.AllowRsaPssPadding, 589_sslAuthenticationOptions.AllowRsaPkcs1Padding); 615certificateContextToRestore = _sslAuthenticationOptions.CertificateContext; 616_sslAuthenticationOptions.CertificateContext = null; 631_credentialsHandle = AcquireCredentialsHandle(_sslAuthenticationOptions, newCredentialsRequested); 640Debug.Assert(_sslAuthenticationOptions.CertificateContext is null); 641_sslAuthenticationOptions.CertificateContext = certificateContextToRestore; 649if (cert != null && _sslAuthenticationOptions.CertificateContext == null) 651_sslAuthenticationOptions.SetCertificateContextFromCert(cert); 673if (_sslAuthenticationOptions.ServerCertSelectionDelegate != null) 675localCertificate = _sslAuthenticationOptions.ServerCertSelectionDelegate(this, _sslAuthenticationOptions.TargetHost); 679NetEventSource.Error(this, $"ServerCertSelectionDelegate returned no certificate for '{_sslAuthenticationOptions.TargetHost}'."); 686else if (_sslAuthenticationOptions.CertSelectionDelegate != null) 689tempCollection.Add(_sslAuthenticationOptions.CertificateContext!.TargetCertificate!); 691localCertificate = _sslAuthenticationOptions.CertSelectionDelegate(this, string.Empty, tempCollection, null, Array.Empty<string>()); 695NetEventSource.Error(this, $"CertSelectionDelegate returned no certificaete for '{_sslAuthenticationOptions.TargetHost}'."); 702else if (_sslAuthenticationOptions.CertificateContext != null) 704selectedCert = _sslAuthenticationOptions.CertificateContext.TargetCertificate; 721selectedCert = FindCertificateWithPrivateKey(this, _sslAuthenticationOptions.IsServer, localCertificate); 729_sslAuthenticationOptions.SetCertificateContextFromCert(selectedCert); 732Debug.Assert(_sslAuthenticationOptions.CertificateContext != null); 736byte[] guessedThumbPrint = selectedCert.GetCertHash(HashAlgorithmName.SHA512); bool sendTrustedList = _sslAuthenticationOptions.CertificateContext!.Trust?._sendTrustInHandshake ?? false; 738_sslAuthenticationOptions.EnabledSslProtocols, 739_sslAuthenticationOptions.IsServer, 740_sslAuthenticationOptions.EncryptionPolicy, 741_sslAuthenticationOptions.CertificateRevocationCheckMode != X509RevocationMode.NoCheck, 742_sslAuthenticationOptions.AllowTlsResume, 744_sslAuthenticationOptions.AllowRsaPssPadding, 745_sslAuthenticationOptions.AllowRsaPkcs1Padding); 754_credentialsHandle = AcquireCredentialsHandle(_sslAuthenticationOptions); 868cachedCreds = _sslAuthenticationOptions.IsServer 873if (_sslAuthenticationOptions.IsServer) 875sendTrustList = _sslAuthenticationOptions.CertificateContext?.Trust?._sendTrustInHandshake ?? false; 882_sslAuthenticationOptions); 888_sslAuthenticationOptions, 898_sslAuthenticationOptions); 904string hostName = TargetHostNameHelper.NormalizeHostName(_sslAuthenticationOptions.TargetHost); 911_sslAuthenticationOptions); 927_sslAuthenticationOptions); 959_sslAuthenticationOptions.EnabledSslProtocols, 960_sslAuthenticationOptions.IsServer, 961_sslAuthenticationOptions.EncryptionPolicy, 962_sslAuthenticationOptions.CertificateRevocationCheckMode != X509RevocationMode.NoCheck, 963_sslAuthenticationOptions.AllowTlsResume, 965_sslAuthenticationOptions.AllowRsaPssPadding, 966_sslAuthenticationOptions.AllowRsaPkcs1Padding); 1004_sslAuthenticationOptions); 1119if (_sslAuthenticationOptions.AllowRenegotiation || SslProtocol == SslProtocols.Tls13 || _nestedAuth != NestedState.StreamNotInUse) 1148int preexistingExtraCertsCount = _sslAuthenticationOptions.CertificateChainPolicy?.ExtraStore?.Count ?? 0; 1155X509Certificate2? certificate = CertificateValidationPal.GetRemoteCertificate(_securityContext, ref chain, _sslAuthenticationOptions.CertificateChainPolicy); 1160_sslAuthenticationOptions, 1188if (_sslAuthenticationOptions.CertValidationDelegate == null || certificateValidationSkippedOnResume) 1219_sslAuthenticationOptions,

26Debug.Assert(_sslAuthenticationOptions != null); 27TlsContext ctx = TlsContext.WrapShared(_sslAuthenticationOptions); 59if (_sslAuthenticationOptions!.IsServer) 61sendTrustList = _sslAuthenticationOptions.CertificateContext?.Trust?._sendTrustInHandshake ?? false; 86_sslAuthenticationOptions!, 140_sslAuthenticationOptions!.EnabledSslProtocols, 141_sslAuthenticationOptions.IsServer, 142_sslAuthenticationOptions.EncryptionPolicy, 143_sslAuthenticationOptions.CertificateRevocationCheckMode != X509RevocationMode.NoCheck, 144_sslAuthenticationOptions.AllowTlsResume, 146_sslAuthenticationOptions.AllowRsaPssPadding, 147_sslAuthenticationOptions.AllowRsaPkcs1Padding);