1 files changed, 120 insertions, 0 deletions
diff --git a/lib/server/TLSContext.cpp b/lib/server/TLSContext.cpp
new file mode 100755
index 00000000..cc125d00
--- /dev/null
+++ b/lib/server/TLSContext.cpp
@@ -0,0 +1,120 @@
+// --------------------------------------------------------------------------
+//
+// File
+//		Name:    TLSContext.h
+//		Purpose: TLS (SSL) context for connections
+//		Created: 2003/08/06
+//
+// --------------------------------------------------------------------------
+
+#include "Box.h"
+
+#define TLS_CLASS_IMPLEMENTATION_CPP
+#include <openssl/ssl.h>
+
+#include "TLSContext.h"
+#include "ServerException.h"
+#include "SSLLib.h"
+#include "TLSContext.h"
+
+#include "MemLeakFindOn.h"
+
+#define MAX_VERIFICATION_DEPTH		2
+#define CIPHER_LIST					"ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH"
+
+// --------------------------------------------------------------------------
+//
+// Function
+//		Name:    TLSContext::TLSContext()
+//		Purpose: Constructor
+//		Created: 2003/08/06
+//
+// --------------------------------------------------------------------------
+TLSContext::TLSContext()
+	: mpContext(0)
+{
+}
+
+// --------------------------------------------------------------------------
+//
+// Function
+//		Name:    TLSContext::~TLSContext()
+//		Purpose: Destructor
+//		Created: 2003/08/06
+//
+// --------------------------------------------------------------------------
+TLSContext::~TLSContext()
+{
+	if(mpContext != 0)
+	{
+		::SSL_CTX_free(mpContext);
+	}
+}
+
+// --------------------------------------------------------------------------
+//
+// Function
+//		Name:    TLSContext::Initialise(bool, const char *, const char *, const char *)
+//		Purpose: Initialise the context, loading in the specified certificate and private key files
+//		Created: 2003/08/06
+//
+// --------------------------------------------------------------------------
+void TLSContext::Initialise(bool AsServer, const char *CertificatesFile, const char *PrivateKeyFile, const char *TrustedCAsFile)
+{
+	mpContext = ::SSL_CTX_new(AsServer?TLSv1_server_method():TLSv1_client_method());
+	if(mpContext == NULL)
+	{
+		THROW_EXCEPTION(ServerException, TLSAllocationFailed)
+	}
+	
+	// Setup our identity
+	if(::SSL_CTX_use_certificate_chain_file(mpContext, CertificatesFile) != 1)
+	{
+		SSLLib::LogError("Load certificates");
+		THROW_EXCEPTION(ServerException, TLSLoadCertificatesFailed)
+	}
+	if(::SSL_CTX_use_PrivateKey_file(mpContext, PrivateKeyFile, SSL_FILETYPE_PEM) != 1)
+	{
+		SSLLib::LogError("Load private key");
+		THROW_EXCEPTION(ServerException, TLSLoadPrivateKeyFailed)
+	}
+	
+	// Setup the identify of CAs we trust
+	if(::SSL_CTX_load_verify_locations(mpContext, TrustedCAsFile, NULL) != 1)
+	{
+		SSLLib::LogError("Load CA cert");
+		THROW_EXCEPTION(ServerException, TLSLoadTrustedCAsFailed)
+	}
+	
+	// Setup options to require these certificates
+	::SSL_CTX_set_verify(mpContext, SSL_VERIFY_PEER | SSL_VERIFY_FAIL_IF_NO_PEER_CERT, NULL);
+	// and a sensible maximum depth
+	::SSL_CTX_set_verify_depth(mpContext, MAX_VERIFICATION_DEPTH);
+	
+	// Setup allowed ciphers
+	if(::SSL_CTX_set_cipher_list(mpContext, CIPHER_LIST) != 1)
+	{
+		SSLLib::LogError("Set cipher list");
+		THROW_EXCEPTION(ServerException, TLSSetCiphersFailed)
+	}
+}
+
+// --------------------------------------------------------------------------
+//
+// Function
+//		Name:    TLSContext::GetRawContext()
+//		Purpose: Get the raw context for OpenSSL API
+//		Created: 2003/08/06
+//
+// --------------------------------------------------------------------------
+SSL_CTX *TLSContext::GetRawContext() const
+{
+	if(mpContext == 0)
+	{
+		THROW_EXCEPTION(ServerException, TLSContextNotInitialised)
+	}
+	return mpContext;
+}
+
+
+