Table of Contents

Interface IServerIdentityVerifier

Namespace
BSGameLib.Networking
Assembly
BSGameLib.Networking.dll

Verifies a QUIC server's identity by certificate fingerprint. See docs/quic-connection-authentication.md for the trust-on-first-use (TOFU) design this supports and how it composes with a consumer-supplied trust source.

public interface IServerIdentityVerifier

Methods

GetExpectedFingerprint(string)

Returns the fingerprint this verifier expects for the given server, or null if it has none on record (first contact -- the caller falls back to trust-on-first-use).

string GetExpectedFingerprint(string serverKey)

Parameters

serverKey string

Returns

string

OnFingerprintObserved(string, string, bool)

Called after a connection attempt with the fingerprint the server actually presented, so the verifier can persist it (TOFU) or otherwise react. matchedExpected is true when there was no prior expectation (first contact) or the presented fingerprint matched it, and false on a mismatch.

void OnFingerprintObserved(string serverKey, string fingerprint, bool matchedExpected)

Parameters

serverKey string
fingerprint string
matchedExpected bool