1 files changed, 88 insertions, 0 deletions
diff --git a/lib/server/ServerTLS.h b/lib/server/ServerTLS.h
new file mode 100644
index 00000000..6b53e860
--- /dev/null
+++ b/lib/server/ServerTLS.h
@@ -0,0 +1,88 @@
+// --------------------------------------------------------------------------
+//
+// File
+//		Name:    ServerTLS.h
+//		Purpose: Implementation of a server using TLS streams
+//		Created: 2003/08/06
+//
+// --------------------------------------------------------------------------
+
+#ifndef SERVERTLS__H
+#define SERVERTLS__H
+
+#include "BoxPortsAndFiles.h"
+#include "ServerStream.h"
+#include "SocketStreamTLS.h"
+#include "SSLLib.h"
+#include "TLSContext.h"
+
+// --------------------------------------------------------------------------
+//
+// Class
+//		Name:    ServerTLS
+//		Purpose: Implementation of a server using TLS streams
+//		Created: 2003/08/06
+//
+// --------------------------------------------------------------------------
+template<int Port, int ListenBacklog = 128, bool ForkToHandleRequests = true>
+class ServerTLS : public ServerStream<SocketStreamTLS, Port, ListenBacklog, ForkToHandleRequests>
+{
+public:
+	ServerTLS()
+	{
+		// Safe to call this here, as the Daemon class makes sure there is only one instance every of a Daemon.
+		SSLLib::Initialise();
+	}
+	
+	~ServerTLS()
+	{
+	}
+private:
+	ServerTLS(const ServerTLS &)
+	{
+	}
+public:
+
+	virtual void Run2(bool &rChildExit)
+	{
+		// First, set up the SSL context.
+		// Get parameters from the configuration
+		// this-> in next line required to build under some gcc versions
+		const Configuration &conf(this->GetConfiguration());
+		const Configuration &serverconf(conf.GetSubConfiguration("Server"));
+		std::string certFile(serverconf.GetKeyValue("CertificateFile"));
+		std::string keyFile(serverconf.GetKeyValue("PrivateKeyFile"));
+		std::string caFile(serverconf.GetKeyValue("TrustedCAsFile"));
+
+		int ssl_security_level(serverconf.GetKeyValueInt("SSLSecurityLevel",
+			BOX_DEFAULT_SSL_SECURITY_LEVEL));
+
+		mContext.Initialise(true /* as server */, certFile.c_str(),
+			keyFile.c_str(), caFile.c_str(), ssl_security_level);
+	
+		// Then do normal stream server stuff
+		ServerStream<SocketStreamTLS, Port, ListenBacklog,
+			ForkToHandleRequests>::Run2(rChildExit);
+	}
+	
+	virtual void HandleConnection(std::auto_ptr<SocketStreamTLS> apStream)
+	{
+		apStream->Handshake(mContext, true /* is server */);
+		// this-> in next line required to build under some gcc versions
+		this->Connection(apStream);
+	}
+	
+private:
+	TLSContext mContext;
+};
+
+#define SERVERTLS_VERIFY_SERVER_KEYS(DEFAULT_ADDRESSES) \
+	ConfigurationVerifyKey("CertificateFile", ConfigTest_Exists), \
+	ConfigurationVerifyKey("PrivateKeyFile", ConfigTest_Exists), \
+	ConfigurationVerifyKey("TrustedCAsFile", ConfigTest_Exists), \
+	ConfigurationVerifyKey("SSLSecurityLevel", ConfigTest_IsInt, \
+		BOX_DEFAULT_SSL_SECURITY_LEVEL), \
+	SERVERSTREAM_VERIFY_SERVER_KEYS(DEFAULT_ADDRESSES)
+
+#endif // SERVERTLS__H
+