ssl.hpp

Go to the documentation of this file.

#ifndef PROTON_SSL_HPP
#define PROTON_SSL_HPP
 
/*
 *
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 *
 */
 
#include "./internal/export.hpp"
 
#include <proton/ssl.h>
 
#include <string>
 
 
namespace proton {
 
class ssl {
    ssl(pn_ssl_t* s) : object_(s) {}
 
    ssl() = delete;
 
  public:
    enum verify_mode {
        VERIFY_PEER = PN_SSL_VERIFY_PEER,
        ANONYMOUS_PEER = PN_SSL_ANONYMOUS_PEER,
        VERIFY_PEER_NAME = PN_SSL_VERIFY_PEER_NAME
    };
 
    enum resume_status {
        UNKNOWN = PN_SSL_RESUME_UNKNOWN, 
        NEW = PN_SSL_RESUME_NEW,         
        REUSED = PN_SSL_RESUME_REUSED    
    };
 
 
    PN_CPP_EXTERN std::string cipher() const;
 
    PN_CPP_EXTERN std::string protocol() const;
 
    PN_CPP_EXTERN int ssf() const;
 
    PN_CPP_EXTERN std::string remote_subject() const;
 
    PN_CPP_EXTERN void resume_session_id(const std::string& session_id);
 
    PN_CPP_EXTERN enum resume_status resume_status() const;
 
 
  private:
    pn_ssl_t* const object_;
 
  friend class transport;
};
 
class ssl_certificate {
  public:
    PN_CPP_EXTERN ssl_certificate(const std::string &certdb_main);
 
    // XXX Document the following constructors
 
    PN_CPP_EXTERN ssl_certificate(const std::string &certdb_main, const std::string &certdb_extra);
 
    PN_CPP_EXTERN ssl_certificate(const std::string &certdb_main, const std::string &certdb_extra, const std::string &passwd);
 
  private:
    std::string certdb_main_;
    std::string certdb_extra_;
    std::string passwd_;
    bool pw_set_;
 
  friend class ssl_client_options;
  friend class ssl_server_options;
};
 
 
 
class ssl_server_options {
  public:
    PN_CPP_EXTERN ssl_server_options(const ssl_certificate &cert);
 
    PN_CPP_EXTERN ssl_server_options(const ssl_certificate &cert, const std::string &trust_db,
                                     const std::string &advertise_db = std::string(),
                                     enum ssl::verify_mode mode = ssl::VERIFY_PEER);
 
    PN_CPP_EXTERN ssl_server_options();
 
    PN_CPP_EXTERN ~ssl_server_options();
    PN_CPP_EXTERN ssl_server_options(const ssl_server_options&);
    PN_CPP_EXTERN ssl_server_options& operator=(const ssl_server_options&);
 
  private:
    class impl;
    impl* impl_;
 
  friend class connection_options;
};
 
class ssl_client_options {
  public:
    PN_CPP_EXTERN ssl_client_options();
 
    PN_CPP_EXTERN ssl_client_options(enum ssl::verify_mode);
 
    PN_CPP_EXTERN ssl_client_options(const std::string &trust_db,
                                     enum ssl::verify_mode = ssl::VERIFY_PEER_NAME);
 
    PN_CPP_EXTERN ssl_client_options(const ssl_certificate&, const std::string &trust_db,
                                     enum ssl::verify_mode = ssl::VERIFY_PEER_NAME);
 
    PN_CPP_EXTERN ~ssl_client_options();
    PN_CPP_EXTERN ssl_client_options(const ssl_client_options&);
    PN_CPP_EXTERN ssl_client_options& operator=(const ssl_client_options&);
 
  private:
    class impl;
    impl* impl_;
 
  friend class connection_options;
};
 
} // proton
 
#endif // PROTON_SSL_HPP