securesocket.h

/*
 *      Copyright (C) 2016 Jean-Luc Barriere
 *
 *  This library is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU Lesser General Public License as published
 *  by the Free Software Foundation; either version 3, or (at your option)
 *  any later version.
 *
 *  This library is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 *  GNU Lesser General Public License for more details.
 *
 *  You should have received a copy of the GNU Lesser General Public License
 *  along with this library; see the file COPYING.  If not, write to
 *  the Free Software Foundation, 51 Franklin Street, Fifth Floor, Boston,
 *  MA 02110-1301 USA
 *  http://www.gnu.org/copyleft/gpl.html
 *
 */
 
#ifndef SECURESOCKET_H
#define SECURESOCKET_H
 
#include "socket.h"
 
#include <string>
 
namespace NSROOT
{
  class SecureSocket;
 
  class SSLSessionFactory
  {
  public:
    static SSLSessionFactory& Instance();
    static void Destroy();
    bool IsEnabled() const { return m_enabled; }

    SecureSocket* NewClientSocket();
 
  private:
    SSLSessionFactory();
    ~SSLSessionFactory();
    SSLSessionFactory(const SSLSessionFactory&);
    SSLSessionFactory& operator=(const SSLSessionFactory&);
 
    static SSLSessionFactory* m_instance;
    void* m_client_ctx;       
    bool m_enabled;           
  };
 
  class SSLServerContext
  {
  public:
    SSLServerContext() : m_server_ctx(nullptr) { }
    ~SSLServerContext();

    bool InitContext(const std::string& certfile, const std::string& pkeyfile);

    SecureSocket* NewServerSocket();

    static TcpServerSocket::AcceptStatus SSLHandshake(SecureSocket& socket);
 
  private:
    SSLServerContext(const SSLServerContext& other);
    SSLServerContext& operator=(const SSLServerContext& other);
 
    void* m_server_ctx;       
  };
 
  class SecureSocket : public TcpSocket
  {
    friend class SSLSessionFactory;
    friend class SSLServerContext;
  public:
    virtual ~SecureSocket();
 
    // Overrides TcpSocket
    bool Connect(const char *server, unsigned port, int rcvbuf);
    bool SendData(const char* buf, size_t size);
    size_t ReceiveData(void* buf, size_t n);
    size_t BlockingRead(void* buf, size_t n);
    void Disconnect();
 
    bool IsCertificateValid(std::string& info);
 
    const char* GetSSLError();
 
  private:
    SecureSocket(void* ssl);
 
    void* m_ssl;      
    void* m_cert;     
    bool m_connected; 
    int m_ssl_error;  
    char* m_errmsg;   
  };
 
}
 
#endif /* SECURESOCKET_H */