SslConfig.h

Go to the documentation of this file.

#pragma once

#include "mbedtls/ssl.h"

// fwd:
class cCryptoKey;
class cCtrDrbgContext;
class cX509Cert;

using cCryptoKeyPtr = std::shared_ptr<cCryptoKey>;
using cCtrDrbgContextPtr = std::shared_ptr<cCtrDrbgContext>;
using cX509CertPtr = std::shared_ptr<cX509Cert>;

enum class eSslAuthMode
{
    None = 0,      // MBEDTLS_SSL_VERIFY_NONE
    Optional = 1,  // MBEDTLS_SSL_VERIFY_OPTIONAL
    Required = 2,  // MBEDTLS_SSL_VERIFY_REQUIRED
    Unset = 3,     // MBEDTLS_SSL_VERIFY_UNSET
};



class cSslConfig
{
    friend class cSslContext;
public:
    using cDebugCallback = void(*)(void *, int, const char *, int, const char *);

    using cVerifyCallback = int(*)(void *, mbedtls_x509_crt *, int, uint32_t *);

    cSslConfig();
    ~cSslConfig();

    int InitDefaults(bool a_IsClient);

    void SetAuthMode(eSslAuthMode a_AuthMode);

    void SetRng(cCtrDrbgContextPtr a_CtrDrbg);

    void SetDebugCallback(cDebugCallback a_CallbackFun, void * a_CallbackData);

    void SetVerifyCallback(cVerifyCallback a_CallbackFun, void * a_CallbackData);

    void SetCipherSuites(std::vector<int> a_CipherSuites);

    void SetOwnCert(cX509CertPtr a_OwnCert, cCryptoKeyPtr a_OwnCertPrivKey);

    void SetCACerts(cX509CertPtr a_CACert);

    static std::shared_ptr<cSslConfig> MakeDefaultConfig(bool a_IsClient);

    static std::shared_ptr<const cSslConfig> GetDefaultClientConfig();

    static std::shared_ptr<const cSslConfig> GetDefaultServerConfig();

private:

    const mbedtls_ssl_config * GetInternal() const { return &m_Config; }

    mbedtls_ssl_config m_Config;
    cCtrDrbgContextPtr m_CtrDrbg;
    cX509CertPtr m_OwnCert;
    cCryptoKeyPtr m_OwnCertPrivKey;
    cX509CertPtr m_CACerts;
    std::vector<int> m_CipherSuites;
};