1
0
Fork 0
arangodb/arangod/GeneralServer/SslServerFeature.h

77 lines
2.1 KiB
C++

////////////////////////////////////////////////////////////////////////////////
/// DISCLAIMER
///
/// Copyright 2016 ArangoDB GmbH, Cologne, Germany
///
/// Licensed under the Apache License, Version 2.0 (the "License");
/// you may not use this file except in compliance with the License.
/// You may obtain a copy of the License at
///
/// http://www.apache.org/licenses/LICENSE-2.0
///
/// Unless required by applicable law or agreed to in writing, software
/// distributed under the License is distributed on an "AS IS" BASIS,
/// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
/// See the License for the specific language governing permissions and
/// limitations under the License.
///
/// Copyright holder is ArangoDB GmbH, Cologne, Germany
///
/// @author Dr. Frank Celler
////////////////////////////////////////////////////////////////////////////////
#ifndef ARANGODB_APPLICATION_FEATURES_SSL_SERVER_FEATURE_H
#define ARANGODB_APPLICATION_FEATURES_SSL_SERVER_FEATURE_H 1
#include <memory>
#include <string>
#include "ApplicationFeatures/ApplicationFeature.h"
// needs to come first
#include "Ssl/ssl-helper.h"
// needs to come second in order to recognize ssl
#include "Basics/asio_ns.h"
namespace arangodb {
namespace application_features {
class ApplicationServer;
}
namespace options {
class ProgramOptions;
}
class SslServerFeature : public application_features::ApplicationFeature {
public:
static SslServerFeature* SSL;
explicit SslServerFeature(application_features::ApplicationServer& server);
void collectOptions(std::shared_ptr<options::ProgramOptions>) override;
void validateOptions(std::shared_ptr<options::ProgramOptions>) override;
void prepare() override final;
void unprepare() override final;
virtual void verifySslOptions();
virtual asio_ns::ssl::context createSslContext() const;
protected:
std::string _cafile;
std::string _keyfile;
bool _sessionCache;
std::string _cipherList;
uint64_t _sslProtocol;
uint64_t _sslOptions;
std::string _ecdhCurve;
private:
std::string stringifySslOptions(uint64_t opts) const;
std::string _rctx;
};
} // namespace arangodb
#endif