securesocket.h

/* $Id: securesocket.h 95 2012-03-31 21:08:13Z felfert $
 *
 * EHS is a library for embedding HTTP(S) support into a C++ application
 *
 * Copyright (C) 2004 Zachary J. Hansen
 *
 * Code cleanup, new features and bugfixes: Copyright (C) 2010 Fritz Elfert
 *
 *    This library is free software; you can redistribute it and/or
 *    modify it under the terms of the GNU Lesser General Public
 *    License version 2.1 as published by the Free Software Foundation;
 *
 *    This library is distributed in the hope that it will be useful,
 *    but WITHOUT ANY WARRANTY; without even the implied warranty of
 *    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 *    Lesser General Public License for more details.
 *
 *    You should have received a copy of the GNU Lesser General Public
 *    License along with this library; if not, write to the Free Software
 *    Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 *
 *    This can be found in the 'COPYING' file.
 *
 */

#ifndef SECURE_SOCKET_H
#define SECURE_SOCKET_H

#ifdef COMPILE_WITH_SSL

#include <openssl/ssl.h>
#include <openssl/rand.h>

#include <cstring>
#include <string>
#include <iostream>

#include "socket.h"
#include "dynamicssllocking.h"
#include "staticssllocking.h"
#include "sslerror.h"


#define CIPHER_LIST "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"

class PassphraseHandler;

class SecureSocket : public Socket 
{
    private:
        SecureSocket(const SecureSocket &);

        SecureSocket & operator=(const SecureSocket &);

    public:

        virtual void Init(int port);

        SecureSocket(const std::string & certfile = "",
                PassphraseHandler *handler = NULL);

        virtual ~SecureSocket();

        virtual NetworkAbstraction *Accept();

        virtual bool IsSecure() const { return true; }

        virtual int Read(void *buf, int bufsize);

        virtual int Send(const void *buf, size_t buflen, int flags = 0);

        virtual void Close();

        virtual void ThreadCleanup();

    private:

        static int PassphraseCallback(char * buf, int bufsize, int rwflag, void * userdata);

        SecureSocket(SSL *ssl, ehs_socket_t fd, sockaddr_in *peer);

        SSL_CTX *InitializeCertificates();

    protected:

        SSL *m_pSsl;

        std::string m_sCertFile;

        PassphraseHandler * m_poPassphraseHandler;

    private:

        static DynamicSslLocking * s_pDynamicSslLocking;

        static StaticSslLocking * s_pStaticSslLocking;

        static SslError * s_pSslError;

        static SSL_CTX * s_pSslCtx;

        static int s_refcount;

        static pthread_mutex_t s_mutex;
};

#endif // COMPILE_WITH_SSL

#endif // SECURE_SOCKET_H