Simple-Web-Server/server_https.hpp at master · MarkRiddoch/Simple-Web-Server · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
#ifndef SERVER_HTTPS_HPP
#defineSERVER_HTTPS_HPP

#include"server_http.hpp"

#ifdef USE_STANDALONE_ASIO
#include<asio/ssl.hpp>
#else
#include<boost/asio/ssl.hpp>
#endif

#include<algorithm>
#include<openssl/ssl.h>

namespaceSimpleWeb {
usingHTTPS = asio::ssl::stream<asio::ip::tcp::socket>;

template <>
classServer<HTTPS> : public ServerBase<HTTPS> {
 std::string session_id_context;
bool set_session_id_context = false;

public:
Server(const std::string &cert_file, const std::string &private_key_file, const std::string &verify_file = std::string())
 : ServerBase<HTTPS>::ServerBase(443), context(asio::ssl::context::tlsv12) {
 context.use_certificate_chain_file(cert_file);
 context.use_private_key_file(private_key_file, asio::ssl::context::pem);

if(verify_file.size() > 0) {
 context.load_verify_file(verify_file);
 context.set_verify_mode(asio::ssl::verify_peer | asio::ssl::verify_fail_if_no_peer_cert | asio::ssl::verify_client_once);
 set_session_id_context = true;
 }
 }

voidstart() override {
if(set_session_id_context) {
// Creating session_id_context from address:port but reversed due to small SSL_MAX_SSL_SESSION_ID_LENGTH
 session_id_context = std::to_string(config.port) + ':';
 session_id_context.append(config.address.rbegin(), config.address.rend());
SSL_CTX_set_session_id_context(context.native_handle(), reinterpret_cast<constunsignedchar *>(session_id_context.data()),
 std::min<size_t>(session_id_context.size(), SSL_MAX_SSL_SESSION_ID_LENGTH));
 }
ServerBase::start();
 }

protected:
 asio::ssl::context context;

voidaccept() override {
auto session = std::make_shared<Session>(create_connection(*io_service, context));

 acceptor->async_accept(session->connection->socket->lowest_layer(), [this, session](const error_code &ec) {
auto lock = session->connection->handler_runner->continue_lock();
if(!lock)
return;

if(ec != asio::error::operation_aborted)
this->accept();

if(!ec) {
 asio::ip::tcp::no_delay option(true);
 error_code ec;
 session->connection->socket->lowest_layer().set_option(option, ec);

 session->connection->set_timeout(config.timeout_request);
 session->connection->socket->async_handshake(asio::ssl::stream_base::server, [this, session](const error_code &ec) {
 session->connection->cancel_timeout();
auto lock = session->connection->handler_runner->continue_lock();
if(!lock)
return;
if(!ec)
this->read_request_and_content(session);
elseif(this->on_error)
this->on_error(session->request, ec);
 });
 }
elseif(this->on_error)
this->on_error(session->request, ec);
 });
 }
 };
} // namespace SimpleWeb

#endif/* SERVER_HTTPS_HPP */