ssl_context.hpp

浏览该文件的文档.

#ifndef NEFORCE_NETWORK_SSL_SSL_CONTEXT_HPP__
#define NEFORCE_NETWORK_SSL_SSL_CONTEXT_HPP__

 
#include "NeForce/core/container/vector.hpp"
#include "NeForce/core/memory/shared_ptr.hpp"
#include "NeForce/network/ssl/ssl_exception.hpp"
#include <openssl/ssl.h>
NEFORCE_BEGIN_NAMESPACE__


enum class ssl_method {
    TLS_SERVER,      
    TLS_CLIENT,      
    TLS_SERVER_DTLS, 
    TLS_CLIENT_DTLS  
};

class NEFORCE_API ssl_context {
private:
    struct ctx_deleter {
        void operator()(::SSL_CTX* ctx) const noexcept {
            if (ctx != nullptr) {
                ::SSL_CTX_free(ctx);
            }
        }
    };
 
    unique_ptr<::SSL_CTX, ctx_deleter> ctx_; 
    ssl_method method_;                      
    bool cert_loaded_{false};                
 
    ssl_context(ssl_method method, ssl_context* /*tag*/) :
    method_(method) {}
 
public:
    explicit ssl_context(ssl_method method = ssl_method::TLS_SERVER);
 
    ~ssl_context() = default;
 
    ssl_context(const ssl_context&) = delete;
    ssl_context& operator=(const ssl_context&) = delete;
 
    ssl_context(ssl_context&& other) noexcept = default;
    ssl_context& operator=(ssl_context&& other) noexcept = default;

    NEFORCE_NODISCARD ssl_context clone() const;

    NEFORCE_NODISCARD shared_ptr<ssl_context> clone_shared() const;

    bool load_certificate(const string& cert_file, const string& key_file);

    void load_certificate_from_memory(const string& cert_pem, const string& key_pem);

    bool load_verify_locations(const string& ca_file, const string& ca_path = "");

    void set_options(long options);

    void set_verify_mode(int mode);

    void require_client_certificate();

    void set_cipher_list(const string& ciphers);

    void set_ciphersuites(const string& ciphersuites);

    void set_default_options();

    void set_session_cache_size(long size);

    void set_timeout(long seconds);

    void set_alpn_protos(const vector<string>& protocols);

    NEFORCE_NODISCARD ::SSL_CTX* native_handle() const noexcept { return ctx_.get(); }

    explicit operator bool() const noexcept { return ctx_ != nullptr; }

    NEFORCE_NODISCARD bool is_valid() const noexcept { return ctx_ != nullptr; }

    NEFORCE_NODISCARD bool has_certificate() const noexcept { return cert_loaded_; }
};
 // SSL/TLS
 
NEFORCE_END_NAMESPACE__
#endif // NEFORCE_NETWORK_SSL_SSL_CONTEXT_HPP__