ibrcommon/ibrcommon/net/TLSStream.h

Go to the documentation of this file.

/*
 * TLSStream.h
 *
 *  Created on: Mar 24, 2011
 *      Author: roettger
 */

#ifndef TLSSTREAM_H_
#define TLSSTREAM_H_

#include <streambuf>
#include <iostream>
#include <memory>
#include <openssl/ssl.h>
#include "ibrcommon/thread/Mutex.h"
#include "ibrcommon/data/File.h"
#include "ibrcommon/net/iostreamBIO.h"

namespace ibrcommon
{
        class TLSStream : public std::basic_streambuf<char, std::char_traits<char> >, public std::iostream
        {
        public:
                typedef std::char_traits<char> traits;

                TLSStream(std::iostream *stream);
                virtual ~TLSStream();

                void setServer(bool val);

            static void init(X509 *certificate, EVP_PKEY *privateKey, ibrcommon::File trustedCAPath, bool enableEncryption = false);

            static void flushInitialization();

            static bool isInitialized();

            void close();

                static const size_t BUFF_SIZE = 5120;

                X509 *activate();

        protected:
                virtual int sync();
                virtual traits::int_type overflow(traits::int_type = traits::eof());
                virtual traits::int_type underflow();

        private:
                std::string log_error_msg(int errnumber);
                void log_error(std::string tag, int errnumber);
                void log_debug(std::string tag, int errnumber);

                static bool _initialized;
                /* this second initialized variable is needed, because init() can fail and SSL_library_init() is not reentrant. */
                static bool _SSL_initialized;
                static ibrcommon::Mutex _initialization_lock;

                bool _activated;
                ibrcommon::Mutex _activation_lock;

                // Input buffer
                char *in_buf_;
                // Output buffer
                char *out_buf_;

                std::iostream *_stream;
                /* indicates if this node is the server in the underlying tcp connection */
                bool _server;

                static SSL_CTX *_ssl_ctx;
                SSL *_ssl;
                X509 *_peer_cert;
                iostreamBIO *_iostreamBIO;
        };
}

#endif /* TLSSTREAM_H_ */