sslsocket.h

Go to the documentation of this file.

 
#pragma once
 
 
#include <promeki/config.h>
#if PROMEKI_ENABLE_TLS
#include <promeki/error.h>
#include <promeki/list.h>
#include <promeki/namespace.h>
#include <promeki/sharedptr.h>
#include <promeki/sslcontext.h>
#include <promeki/string.h>
#include <promeki/stringlist.h>
#include <promeki/tcpsocket.h>
 
PROMEKI_NAMESPACE_BEGIN
 
class SslSocket : public TcpSocket {
                PROMEKI_OBJECT(SslSocket, TcpSocket)
        public:
                using List = ::promeki::List<SslSocket *>;
 
                explicit SslSocket(ObjectBase *parent = nullptr);
 
                ~SslSocket() override;
 
                void setSslContext(SslContext ctx);
 
                SslContext sslContext() const { return _ctx; }
 
                Error startEncryption(const String &hostname = String());
 
                Error startServerEncryption();
 
                Error continueHandshake();
 
                bool isEncrypted() const { return _state == Encrypted; }
 
                String peerCertificateSubject() const;
 
                // ----------------------------------------------------
                // IODevice overrides — proxy through mbedtls_ssl_*
                // ----------------------------------------------------
 
                int64_t read(void *data, int64_t maxSize) override;
                int64_t write(const void *data, int64_t maxSize) override;
                int64_t bytesAvailable() const override;
                Error   close() override;
 
                PROMEKI_SIGNAL(encrypted);
 
                PROMEKI_SIGNAL(sslErrors, StringList);
 
        private:
                struct Impl;
                // Declaration order is load-bearing: _d holds the
                // mbedtls_ssl_context, which mbedtls_ssl_setup() binds to
                // _ctx's mbedtls_ssl_config.  ~Impl runs mbedtls_ssl_free(),
                // which still dereferences that config, so _d MUST be
                // destroyed before _ctx.  Members destruct in reverse
                // declaration order, hence _ctx is declared first.
                SslContext      _ctx;
                SharedPtr<Impl> _d;
 
                enum SslState {
                        NotEncrypted,
                        Handshaking,
                        Encrypted,
                        Failed
                };
                SslState _state = NotEncrypted;
 
                // Captured at handshake-start time and consulted by
                // log lines later in the lifecycle (handshake success
                // / failure / close), so a single warn line in a
                // field log identifies which peer was being talked
                // to without the operator having to correlate with
                // other lines.
                String _hostname;
                bool   _isClient = true;
 
                Error performHandshakeStep();
};
 
PROMEKI_NAMESPACE_END
 
#endif // PROMEKI_ENABLE_TLS