ssl.hpp

#ifndef PROTON_SSL_HPP
#define PROTON_SSL_HPP
 
/*
 *
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements.  See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership.  The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License.  You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied.  See the License for the
 * specific language governing permissions and limitations
 * under the License.
 *
 */
 
#include "./internal/export.hpp"
 
#include <proton/ssl.h>
 
#include <string>
 
namespace proton {
 
namespace internal {
template <class T> class factory;
}
 
class ssl {
    ssl(pn_ssl_t* s) : object_(s) {}
 
  public:
    ssl() : object_(0) {}
 
    enum verify_mode {
        VERIFY_PEER = PN_SSL_VERIFY_PEER,
        ANONYMOUS_PEER = PN_SSL_ANONYMOUS_PEER,
        VERIFY_PEER_NAME = PN_SSL_VERIFY_PEER_NAME
    };
 
    enum resume_status {
        UNKNOWN = PN_SSL_RESUME_UNKNOWN, 
        NEW = PN_SSL_RESUME_NEW,         
        REUSED = PN_SSL_RESUME_REUSED    
    };
 
 
    PN_CPP_EXTERN std::string cipher() const;
 
    PN_CPP_EXTERN std::string protocol() const;
 
    PN_CPP_EXTERN int ssf() const;
 
    PN_CPP_EXTERN std::string remote_subject() const;
 
    PN_CPP_EXTERN void resume_session_id(const std::string& session_id);
 
    PN_CPP_EXTERN enum resume_status resume_status() const;
 
 
  private:
    pn_ssl_t* object_;
 
  friend class internal::factory<ssl>;
};
 
class ssl_certificate {
  public:
    PN_CPP_EXTERN ssl_certificate(const std::string &certdb_main);
 
    // XXX Document the following constructors
 
    PN_CPP_EXTERN ssl_certificate(const std::string &certdb_main, const std::string &certdb_extra);
 
    PN_CPP_EXTERN ssl_certificate(const std::string &certdb_main, const std::string &certdb_extra, const std::string &passwd);
 
  private:
    std::string certdb_main_;
    std::string certdb_extra_;
    std::string passwd_;
    bool pw_set_;
 
  friend class ssl_client_options;
  friend class ssl_server_options;
};
 
class ssl_domain_impl;
 
namespace internal {
 
// Base class for SSL configuration
class ssl_domain {
  public:
    PN_CPP_EXTERN ssl_domain(const ssl_domain&);
    PN_CPP_EXTERN ssl_domain& operator=(const ssl_domain&);
    PN_CPP_EXTERN ~ssl_domain();
 
  protected:
    ssl_domain(bool is_server);
    pn_ssl_domain_t *pn_domain();
 
  private:
    ssl_domain_impl *impl_;
    bool server_type_;
};
 
}
 
class ssl_server_options : private internal::ssl_domain {
  public:
    PN_CPP_EXTERN ssl_server_options(ssl_certificate &cert);
 
    PN_CPP_EXTERN ssl_server_options(ssl_certificate &cert, const std::string &trust_db,
                                     const std::string &advertise_db = std::string(),
                                     enum ssl::verify_mode mode = ssl::VERIFY_PEER);
 
    PN_CPP_EXTERN ssl_server_options();
 
  private:
    // Bring pn_domain into scope and allow connection_options to use
    // it.
    using internal::ssl_domain::pn_domain;
 
  friend class connection_options;
};
 
class ssl_client_options : private internal::ssl_domain {
  public:
    PN_CPP_EXTERN ssl_client_options(const std::string &trust_db,
                                     enum ssl::verify_mode = ssl::VERIFY_PEER_NAME);
 
    PN_CPP_EXTERN ssl_client_options(ssl_certificate&, const std::string &trust_db,
                                     enum ssl::verify_mode = ssl::VERIFY_PEER_NAME);
 
    PN_CPP_EXTERN ssl_client_options();
 
  private:
    // Bring pn_domain into scope and allow connection_options to use
    // it.
    using internal::ssl_domain::pn_domain;
 
  friend class connection_options;
};
 
} // proton
 
#endif // PROTON_SSL_HPP