SSLFacility.h

#pragma once

#include <string>
#include <set>

#include <Poco/File.h>
#include <Poco/Mutex.h>
#include <Poco/Net/Context.h>

#include "util/Loggable.h"

namespace Poco {

class Logger;

}

namespace BeeeOn {

class PrivateKeyPassphraseProvider {
public:
        PrivateKeyPassphraseProvider(const std::string &passphrase);
        PrivateKeyPassphraseProvider(const std::string &passphrase,
                                Poco::Mutex &lock);
        ~PrivateKeyPassphraseProvider();

        void onRequest(const void *sender, std::string &passphrase);

private:
        void init();

private:
        const std::string m_passphrase;
        Poco::Mutex &m_lock;
        static Poco::Mutex defaultLock;
};

class SSLFacility : public Loggable {
public:
        SSLFacility();
        virtual ~SSLFacility();

        void setCALocation(const std::string &caLocation);
        void setLoadDefaultCA(const std::string &enable);
        void setPrivateKey(const std::string &file);
        void setPassphrase(const std::string &passphrase);
        void setCertificate(const std::string &file);
        void setVerificationMode(const std::string &mode);
        void setVerificationDepth(int depth);
        void setCipherList(const std::string &list);
        void setSessionCache(const std::string &enable);
        void setDisabledProtocols(const std::string &protocols);
        void setExtendedCertificateVerification(bool enable);

        Poco::File caLocation() const;
        Poco::File privateKey() const;
        std::string passphrase() const;
        Poco::File certificate() const;
        Poco::Net::Context::VerificationMode verificationMode() const;
        std::set<std::string> disabledProtocols() const;
        std::string cipherList() const;

        Poco::Net::Context::Ptr context();
        void initContext();

protected:
        virtual Poco::Net::Context::Ptr createContext() = 0;

protected:
        using VerificationMode =
                typename Poco::Net::Context::VerificationMode;

        Poco::Mutex m_lock;
        Poco::Net::Context::Ptr m_context;
        std::string m_caLocation;
        bool m_loadDefaultCA;
        std::string m_privateKey;
        std::string m_passphrase;
        std::string m_certificate;
        VerificationMode m_verificationMode;
        int m_verificationDepth;
        std::string m_cipherList;
        bool m_sessionCache;
        unsigned int m_disabledProtocols;
        bool m_extendedCertificateVerification;
};

}