SslConfig.h

Go to the documentation of this file.

 
#pragma once
 
#include "mbedtls/ssl.h"
 
// fwd:
class cCryptoKey;
class cCtrDrbgContext;
class cX509Cert;
 
using cCryptoKeyPtr = std::shared_ptr<cCryptoKey>;
using cCtrDrbgContextPtr = std::shared_ptr<cCtrDrbgContext>;
using cX509CertPtr = std::shared_ptr<cX509Cert>;
 
enum class eSslAuthMode
{
    None = 0,      // MBEDTLS_SSL_VERIFY_NONE
    Optional = 1,  // MBEDTLS_SSL_VERIFY_OPTIONAL
    Required = 2,  // MBEDTLS_SSL_VERIFY_REQUIRED
    Unset = 3,     // MBEDTLS_SSL_VERIFY_UNSET
};
 
 
 
class cSslConfig
{
    friend class cSslContext;
public:
    using cDebugCallback = void(*)(void *, int, const char *, int, const char *);
 
    using cVerifyCallback = int(*)(void *, mbedtls_x509_crt *, int, uint32_t *);
 
    cSslConfig();
    ~cSslConfig();
 
    int InitDefaults(bool a_IsClient);
 
    void SetAuthMode(eSslAuthMode a_AuthMode);
 
    void SetRng(cCtrDrbgContextPtr a_CtrDrbg);
 
    void SetDebugCallback(cDebugCallback a_CallbackFun, void * a_CallbackData);
 
    void SetVerifyCallback(cVerifyCallback a_CallbackFun, void * a_CallbackData);
 
    void SetCipherSuites(std::vector<int> a_CipherSuites);
 
    void SetOwnCert(cX509CertPtr a_OwnCert, cCryptoKeyPtr a_OwnCertPrivKey);
 
    void SetCACerts(cX509CertPtr a_CACert);
 
    static std::shared_ptr<cSslConfig> MakeDefaultConfig(bool a_IsClient);
 
    static std::shared_ptr<const cSslConfig> GetDefaultClientConfig();
 
    static std::shared_ptr<const cSslConfig> GetDefaultServerConfig();
 
private:
 
    const mbedtls_ssl_config * GetInternal() const { return &m_Config; }
 
    mbedtls_ssl_config m_Config;
    cCtrDrbgContextPtr m_CtrDrbg;
    cX509CertPtr m_OwnCert;
    cCryptoKeyPtr m_OwnCertPrivKey;
    cX509CertPtr m_CACerts;
    std::vector<int> m_CipherSuites;
};