listener.h

Go to the documentation of this file.

 
#include "../listener.h"
#include "socket.h"
 
#ifndef QB_IO_TCP_SSL_LISTENER_H_
#define QB_IO_TCP_SSL_LISTENER_H_
 
namespace qb::io::tcp::ssl {

class QB_API listener : public tcp::listener {
    std::unique_ptr<SSL_CTX, void (*)(SSL_CTX *)>
        _ctx; 
    mutable std::vector<unsigned char> _alpn_wire;
public:
    constexpr static bool is_secure() noexcept { return true; }
    ~listener() noexcept;

    listener() noexcept;

    listener(listener const &) = delete;

    listener(listener &&) = default;

    listener &operator=(listener &&) = default;

    void init(SSL_CTX *ctx) noexcept;

    ssl::socket accept() const noexcept;

    int accept(ssl::socket &socket) const noexcept;

    [[nodiscard]] SSL_CTX *ssl_handle() const noexcept;

    bool load_ca_certificates_for_client_auth(const std::string &ca_file_path);

    bool load_ca_directory_for_client_auth(const std::string &ca_dir_path);

    bool set_cipher_list(const std::string &ciphers);

    bool set_ciphersuites_tls13(const std::string &ciphersuites);

    bool set_tls_protocol_versions(int min_version, int max_version);

    bool configure_mtls(const std::string &client_ca_file_path, int verification_mode = SSL_VERIFY_PEER);

    bool set_alpn_selection_callback(SSL_CTX_alpn_select_cb_func callback, void *arg);

    bool enable_session_caching(long cache_size = SSL_SESSION_CACHE_MAX_SIZE_DEFAULT);

    bool set_custom_client_verify_callback(int (*callback)(int, X509_STORE_CTX *), int verification_mode);

    bool set_ocsp_stapling_responder_callback(int (*callback)(SSL *s, void *arg), void *arg);

    bool set_sni_selection_callback(int (*callback)(SSL *s, int *al, void *arg), void *arg);

    bool set_keylog_callback(SSL_CTX_keylog_cb_func callback);

    bool configure_dh_parameters(const std::string& dh_param_file_path);

    bool configure_ecdh_curves(const std::string& curve_names_list);

    bool enable_post_handshake_auth();

    bool set_supported_alpn_protocols(const std::vector<std::string>& protocols);
 
    // --- Getters for SSL_CTX properties ---

    int get_min_protocol_version() const;
    int get_max_protocol_version() const;
    int get_verify_mode() const;
    int get_verify_depth() const;
    long get_session_cache_mode() const;
    long get_session_cache_size() const;
 
    // --- Other useful SSL_CTX configurations ---

    long set_options(long options_to_set);

    long clear_options(long options_to_clear);

    long set_session_timeout(long seconds);

    bool set_info_callback(void (*callback)(const SSL *ssl, int type, int val));

    bool set_msg_callback(void (*callback)(int write_p, int version, int content_type, const void *buf, size_t len, SSL *ssl, void *arg), void *arg);
};
 
} // namespace qb::io::tcp::ssl
 
#endif // QB_IO_TCP_SSL_LISTENER_H_