123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990 |
- // Copyright (c) 2012 The Chromium Authors. All rights reserved.
- // Use of this source code is governed by a BSD-style license that can be
- // found in the LICENSE file.
- //
- // NOTE: This class is provided to support existing Chromium consumers; it is
- // NOT intended for use in NEW code. Configuring a TLS server correctly is a
- // security-sensitive activity with many subtle nuances, and thus care should be
- // taken to discuss with //net/OWNERS before any new usages.
- //
- // As such, this header should be treated as an internal implementation detail
- // of //net (where it's used for some unit test infrastructure), not as
- // appropriate for general use.
- //
- // See https://crbug.com/621176 for more details.
- #ifndef NET_SOCKET_SSL_SERVER_SOCKET_H_
- #define NET_SOCKET_SSL_SERVER_SOCKET_H_
- #include <memory>
- #include "net/base/completion_once_callback.h"
- #include "net/base/net_export.h"
- #include "net/socket/ssl_socket.h"
- #include "net/socket/stream_socket.h"
- #include "third_party/boringssl/src/include/openssl/base.h"
- namespace crypto {
- class RSAPrivateKey;
- } // namespace crypto
- namespace net {
- struct SSLServerConfig;
- class SSLPrivateKey;
- class X509Certificate;
- // A server socket that uses SSL as the transport layer.
- class SSLServerSocket : public SSLSocket {
- public:
- ~SSLServerSocket() override = default;
- // Perform the SSL server handshake, and notify the supplied callback
- // if the process completes asynchronously. If Disconnect is called before
- // completion then the callback will be silently, as for other StreamSocket
- // calls.
- virtual int Handshake(CompletionOnceCallback callback) = 0;
- };
- class SSLServerContext {
- public:
- virtual ~SSLServerContext() = default;
- // Creates an SSL server socket over an already-connected transport socket.
- // The caller must ensure the returned socket does not outlive the server
- // context.
- //
- // The caller starts the SSL server handshake by calling Handshake on the
- // returned socket.
- virtual std::unique_ptr<SSLServerSocket> CreateSSLServerSocket(
- std::unique_ptr<StreamSocket> socket) = 0;
- };
- // Creates an SSL server socket context where all sockets spawned using this
- // context will share the same session cache.
- //
- // The caller must provide the server certificate and private key to use.
- // It takes a reference to |certificate| and |pkey|.
- // The |ssl_config| parameter is copied.
- //
- NET_EXPORT std::unique_ptr<SSLServerContext> CreateSSLServerContext(
- X509Certificate* certificate,
- EVP_PKEY* pkey,
- const SSLServerConfig& ssl_config);
- // As above, but takes an RSAPrivateKey object. Deprecated, use the EVP_PKEY
- // version instead.
- // TODO(mattm): convert existing callers and remove this function.
- NET_EXPORT std::unique_ptr<SSLServerContext> CreateSSLServerContext(
- X509Certificate* certificate,
- const crypto::RSAPrivateKey& key,
- const SSLServerConfig& ssl_config);
- NET_EXPORT std::unique_ptr<SSLServerContext> CreateSSLServerContext(
- X509Certificate* certificate,
- scoped_refptr<SSLPrivateKey> key,
- const SSLServerConfig& ssl_config);
- } // namespace net
- #endif // NET_SOCKET_SSL_SERVER_SOCKET_H_
|