SecureSocketServer.h

Go to the documentation of this file.

/*  SecureSocketServer.h - SSL communication through the Schannel API
    Copyright (C) 2001-2004 Mark Weaver
    Written by Mark Weaver <mark@npsl.co.uk>

    Part of the Open-Win32 library.
    This library is free software; you can redistribute it and/or
    modify it under the terms of the GNU Library General Public
    License as published by the Free Software Foundation; either
    version 2 of the License, or (at your option) any later version.

    This library is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
    Library General Public License for more details.

    You should have received a copy of the GNU Library General Public
    License along with this library; if not, write to the
    Free Software Foundation, Inc., 59 Temple Place - Suite 330,
    Boston, MA  02111-1307, USA.
*/

#ifndef OW32_SecureSocketServer_h
#define OW32_SecureSocketServer_h

#include <OW32/SecureSocket.h>

// Open Win32 namespace
namespace OW32
{

class OW32_LIB_EXPORT CSecureSocketServer : 
    public CSecureSocket
{
public:
    CSecureSocketServer(SOCKET s);
    ~CSecureSocketServer();

    virtual bool negotiate(); // server establishing a connection
    virtual SECURITY_STATUS handshakeLoop(bool /*fDoInitialRead*/) 
        { return negotiate() ? SEC_E_OK : GetLastError(); }

    // create & store credentials for this server from a certificate context
    // see note for createCredentialsFromCertificate
    SECURITY_STATUS setServerCertificate(PCCERT_CONTEXT pCertContext,
        DWORD dwEnabledProtocols=0);

    // Create server credentials from a certificate context
    // Basically, if you are accepting a bunch of connections you can
    // use this function to manage the Schannel CredHandle for yourself;
    // this is faster than calling it each time with a certificate context.

    // TODO: think of a neater model - maybe a factory for CSecureSocketServer
    // that caches the credentials handle and constructs with it by default?
    static SECURITY_STATUS createCredentialsFromCertificate(
        CredHandle* phCreds, PCCERT_CONTEXT pCertContext, DWORD dwEnabledProtocols=0)
    {
        return CSecureSocket::createCredentialsFromCertificate(phCreds, pCertContext, 
            SECPKG_CRED_INBOUND, dwEnabledProtocols);
    }

private:
    void disconnectFromClient();

    CSecureSocketServer& operator= (const CSecureSocketServer& );
    CSecureSocketServer(const CSecureSocketServer& );
};

} // namespace OW32

#endif // OW32_SecureSocketServer_h

---