tcpssl.h

Go to the documentation of this file.

 
#ifndef TCP_SSL_H
#define TCP_SSL_H
 
#include <string>
#include <openssl/ssl.h>
#include "tcpsocket.h"
 
namespace tcp {
 
using namespace std;
 
void initSSLLibrary();
 
void freeSSLLibrary();
 
void printSSLErrors();
 
class DataSocket;
 
enum class SSLMode { CLIENT, SERVER };
 
class SSLContext {
  public:
    
    SSLContext(SSLMode mode);
 
    virtual ~SSLContext();
    
    void setOptions(bool verifypeer = false, bool compression = true, bool tlsonly = false);
 
    bool useDefaultVerifyPaths() { return setVerifyPaths(NULL,NULL); }
 
    bool setVerifyPaths(const char *cafile = NULL, const char *capath = NULL);
    bool setVerifyPaths(string &cafile, string &capath);
    
    bool setCertificateAndKey(const char *certfile, const char *keyfile);
    
    void setPrivateKeyPassword(string value) { keypass_ = value; }
 
    virtual int passwordCallback(char *buf, int size, int rwflag);
 
  protected:
    SSL_CTX *ctx_; 
    SSLMode mode_; 
    friend class SSL;
  private:
    string keypass_;
};
 
class SSL {
  public:
    SSL(DataSocket &owner, SSLContext &context);
    
    virtual ~SSL();
    
    void setOptions(bool verifypeer = false);
 
    bool setCertificateAndKey(const char *certfile, const char *keyfile);
 
    void setPrivateKeyPassword(string value) { keypass_ = value; }
 
    virtual int passwordCallback(char *buf, int size, int rwflag);
 
    bool setfd(int socket);
 
    string &getSubjectName();
 
    bool verifyResult();
 
    bool connect();
 
    bool accept();
 
    size_t read(void *buffer, size_t size);
    
    size_t write(const void *buffer, size_t size);
 
    void clear();
    
    void shutdown();
 
    bool requiresCertPostValidation { false };
     
    void setHostname(const string value) { hostname_ = value; }
 
  protected:
 
    bool performCertPostValidation();
 
    virtual bool validateSubjectName(const string &subjectName, const string &hostName);
 
    DataSocket &owner_;  
    SSLMode mode_;       
    ::SSL *ssl_;         
    friend class SSLContext;
  private:
    void wantsRead();    
    void wantsWrite();   
    string subjectName_;
    string hostname_;
    string keypass_;
};
 
int wildcmp(const char *wild, const char *string);
 
} // namespace
 
#endif