sslsocket.h

Go to the documentation of this file.

 
#pragma once
 
 
#include <promeki/config.h>
#if PROMEKI_ENABLE_TLS
#include <promeki/namespace.h>
#include <promeki/tcpsocket.h>
#include <promeki/sslcontext.h>
#include <promeki/error.h>
#include <promeki/string.h>
#include <promeki/list.h>
#include <promeki/stringlist.h>
 
PROMEKI_NAMESPACE_BEGIN
 
class SslSocket : public TcpSocket {
                PROMEKI_OBJECT(SslSocket, TcpSocket)
        public:
                using List = ::promeki::List<SslSocket *>;
 
                explicit SslSocket(ObjectBase *parent = nullptr);
 
                ~SslSocket() override;
 
                void setSslContext(SslContext ctx);
 
                SslContext sslContext() const { return _ctx; }
 
                Error startEncryption(const String &hostname = String());
 
                Error startServerEncryption();
 
                Error continueHandshake();
 
                bool isEncrypted() const { return _state == Encrypted; }
 
                String peerCertificateSubject() const;
 
                // ----------------------------------------------------
                // IODevice overrides — proxy through mbedtls_ssl_*
                // ----------------------------------------------------
 
                int64_t read(void *data, int64_t maxSize) override;
                int64_t write(const void *data, int64_t maxSize) override;
                int64_t bytesAvailable() const override;
                Error   close() override;
 
                PROMEKI_SIGNAL(encrypted);
 
                PROMEKI_SIGNAL(sslErrors, StringList);
 
        private:
                struct Impl;
                Impl      *_d = nullptr;
                SslContext _ctx;
 
                enum SslState {
                        NotEncrypted,
                        Handshaking,
                        Encrypted,
                        Failed
                };
                SslState _state = NotEncrypted;
 
                Error performHandshakeStep();
};
 
PROMEKI_NAMESPACE_END
 
#endif // PROMEKI_ENABLE_TLS