tls_context.hpp

Go to the documentation of this file.

 
#ifndef JOIN_CRYPTO_TLS_CONTEXT_HPP
#define JOIN_CRYPTO_TLS_CONTEXT_HPP
 
// libjoin.
#include <join/tls_error.hpp>
#include <join/openssl.hpp>
 
// C++.
#include <string>
#include <vector>
 
namespace join
{
    class TlsContext
    {
    public:
        enum Role
        {
            TlsClient,  
            TlsServer,  
            DtlsClient, 
            DtlsServer, 
        };
 
        TlsContext () noexcept = default;
 
        explicit TlsContext (Role role);
 
        TlsContext (const TlsContext&) = default;
 
        TlsContext& operator= (const TlsContext&) = default;
 
        TlsContext (TlsContext&&) = default;
 
        TlsContext& operator= (TlsContext&&) = default;
 
        ~TlsContext () = default;
 
        int setCertificate (const std::string& cert, const std::string& key = "") noexcept;
 
        int setCaPath (const std::string& caPath);
 
        int setCaFile (const std::string& caFile);
 
        void setVerify (bool verify, int depth = -1) noexcept;
 
        int setCipher (const std::string& cipher) noexcept;
 
        int setCipher_1_3 (const std::string& cipher) noexcept;
 
#if OPENSSL_VERSION_NUMBER >= 0x30000000L
        int setCurve (const std::string& curves);
#endif
 
        int setAlpnProtocols (const std::vector<std::string>& protocols);
 
        SSL_CTX* handle () const noexcept;
 
        bool verify () const noexcept;
 
        int depth () const noexcept;
 
        bool isServer () const noexcept;
 
    private:
        static const SSL_METHOD* method (Role role) noexcept;
 
#if OPENSSL_VERSION_NUMBER < 0x30000000L
        static DH* getDh2236 ();
#endif
 
        Role _role = Role::TlsClient;
 
        bool _verify = false;
 
        int _depth = -1;
 
        SslCtxPtr _ctx;
    };
}
 
#endif