Martin Natano
dc49af3c59
For now there are two methods: - `NETWORK:IsUrlAllowed()`: Check whether access to a certain URL is allowed. - `NETWORK:HttpRequest()`: Perform an HTTP request. By default access to the network is disabled for all target hosts. It can be enabled by setting `HttpEnable=1` in the preferences. Individual hosts have to be added to `HttpAllowHosts` as a comma separated list to allow access. See included docs for more details on usage.
69 lines
2.2 KiB
C++
69 lines
2.2 KiB
C++
/*
|
|
* IXSocketOpenSSL.h
|
|
* Author: Benjamin Sergeant, Matt DeBoer
|
|
* Copyright (c) 2017-2020 Machine Zone, Inc. All rights reserved.
|
|
*/
|
|
#ifdef IXWEBSOCKET_USE_OPEN_SSL
|
|
|
|
#pragma once
|
|
|
|
#include "IXCancellationRequest.h"
|
|
#include "IXSocket.h"
|
|
#include "IXSocketTLSOptions.h"
|
|
#include <mutex>
|
|
#include <openssl/bio.h>
|
|
#include <openssl/conf.h>
|
|
#include <openssl/err.h>
|
|
#include <openssl/hmac.h>
|
|
#include <openssl/ssl.h>
|
|
|
|
namespace ix
|
|
{
|
|
class SocketOpenSSL final : public Socket
|
|
{
|
|
public:
|
|
SocketOpenSSL(const SocketTLSOptions& tlsOptions, int fd = -1);
|
|
~SocketOpenSSL();
|
|
|
|
virtual bool accept(std::string& errMsg) final;
|
|
|
|
virtual bool connect(const std::string& host,
|
|
int port,
|
|
std::string& errMsg,
|
|
const CancellationRequest& isCancellationRequested) final;
|
|
virtual void close() final;
|
|
|
|
virtual ssize_t send(char* buffer, size_t length) final;
|
|
virtual ssize_t recv(void* buffer, size_t length) final;
|
|
|
|
private:
|
|
void openSSLInitialize();
|
|
std::string getSSLError(int ret);
|
|
SSL_CTX* openSSLCreateContext(std::string& errMsg);
|
|
bool openSSLAddCARootsFromString(const std::string roots);
|
|
bool openSSLClientHandshake(const std::string& hostname,
|
|
std::string& errMsg,
|
|
const CancellationRequest& isCancellationRequested);
|
|
bool openSSLCheckServerCert(SSL* ssl, const std::string& hostname, std::string& errMsg);
|
|
bool checkHost(const std::string& host, const char* pattern);
|
|
bool handleTLSOptions(std::string& errMsg);
|
|
bool openSSLServerHandshake(std::string& errMsg);
|
|
|
|
// Required for OpenSSL < 1.1
|
|
static void openSSLLockingCallback(int mode, int type, const char* /*file*/, int /*line*/);
|
|
|
|
SSL* _ssl_connection;
|
|
SSL_CTX* _ssl_context;
|
|
const SSL_METHOD* _ssl_method;
|
|
SocketTLSOptions _tlsOptions;
|
|
|
|
mutable std::mutex _mutex; // OpenSSL routines are not thread-safe
|
|
|
|
static std::once_flag _openSSLInitFlag;
|
|
static std::atomic<bool> _openSSLInitializationSuccessful;
|
|
};
|
|
|
|
} // namespace ix
|
|
|
|
#endif // IXWEBSOCKET_USE_OPEN_SSL
|