context.h

Go to the documentation of this file.

/***************************************************************************
 *   Copyright (C) 2008 by Rick L. Vinyard, Jr.                            *
 *   rvinyard@cs.nmsu.edu                                                  *
 *                                                                         *
 *   This file is part of the conexus library.                             *
 *                                                                         *
 *   The conexus library is free software; you can redistribute it and/or  *
 *   modify it under the terms of the GNU General Public License           *
 *   version 3 as published by the Free Software Foundation.               *
 *                                                                         *
 *   The conexus library is distributed in the hope that it will be        *
 *   useful, but WITHOUT ANY WARRANTY; without even the implied warranty   *
 *   of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU   *
 *   General Public License for more details.                              *
 *                                                                         *
 *   You should have received a copy of the GNU General Public License     *
 *   along with this software. If not see <http://www.gnu.org/licenses/>.  *
 ***************************************************************************/
#ifndef CONEXUS_SSLCONTEXT_H
#define CONEXUS_SSLCONTEXT_H

#include <string>

#include <openssl/ssl.h>

#include <sigc++/sigc++.h>

#include <conexus/pointer.h>
#include <conexus-ssl/enums.h>

namespace Conexus
{

  namespace SSL
  {

    class Context
    {
      protected:
        Context ( Method m );

      public:
        typedef ConexusPointer<Context> pointer;

        static pointer create ( Method m=SSLV23 );

        virtual ~Context();

        Method method();

        bool use_certificate ( X509 *x );

        bool use_certificate_asn1 ( int len, unsigned char *d );

        bool use_certificate_file ( const std::string& file, FileType type );

        bool use_certificate_chain_file ( const std::string& file );

        bool use_private_key ( EVP_PKEY *pkey );

        bool use_private_key_asn1 ( int pk, unsigned char *d, long len );

        bool use_private_key_file ( const std::string& file, FileType type );

        bool use_rsa_private_key ( RSA *rsa );

        bool use_rsa_private_key_asn1 ( unsigned char *d, long len );

        bool use_rsa_private_key_file ( const std::string& file, FileType type );

        bool check_private_key() const;

        typedef sigc::slot<void,std::string&,EncDecFlag> PasswordSlot;

        void set_default_password_slot ( PasswordSlot slot=PasswordSlot() );

        bool load_verify_locations ( const std::string& ca_file, const std::string& ca_path=std::string() );

        void set_verify_depth ( int depth );

        void set_read_ahead( bool set=true );

        SSL_CTX* cobj();

      protected:
        Method m_method;

        SSL_CTX* m_cobj;

        PasswordSlot m_default_password_slot;

        static int passwd_cb_proxy ( char* buf, int size, int rwflag, void* userdata );

    };

  }

}

#endif