#include <ConfigTlsServer.h>

Inheritance diagram for net::config::ConfigTlsServer:

Collaboration diagram for net::config::ConfigTlsServer:

Public Types
using	Tls = ConfigTlsServer

Public Member Functions
ConfigTlsServer &	setForceSni (bool forceSni=true)

bool	getForceSni () const

ConfigTlsServer &	addSniCerts (const std::map< std::string, std::map< std::string, std::variant< std::string, bool, ssl_option_t > > > &sniCerts)

ConfigTlsServer &	addSniCert (const std::string &domain, const std::map< std::string, std::variant< std::string, bool, ssl_option_t > > &sniCert)

const std::map< std::string, std::map< std::string, std::variant< std::string, bool, ssl_option_t > > > &	getSniCerts ()

Public Member Functions inherited from net::config::ConfigTls
ConfigTls &	setInitTimeout (const utils::Timeval &newInitTimeout)

utils::Timeval	getInitTimeout () const

ConfigTls &	setShutdownTimeout (const utils::Timeval &newShutdownTimeout)

utils::Timeval	getShutdownTimeout () const

ConfigTls &	setCert (const std::string &cert)

std::string	getCert () const

ConfigTls &	setCertKey (const std::string &certKey)

std::string	getCertKey () const

ConfigTls &	setCertKeyPassword (const std::string &certKeyPassword)

std::string	getCertKeyPassword () const

ConfigTls &	setCaCert (const std::string &caCert)

std::string	getCaCert () const

ConfigTls &	setCaCertDir (const std::string &caCertDir)

std::string	getCaCertDir () const

ConfigTls &	setCaCertUseDefaultDir (bool set=true)

bool	getCaCertUseDefaultDir () const

ConfigTls &	setCaCertAcceptUnknown (bool set=true)

bool	getCaCertAcceptUnknown () const

ConfigTls &	setCipherList (const std::string &cipherList)

std::string	getCipherList () const

ConfigTls &	setSslOptions (ssl_option_t sslOptions)

ssl_option_t	getSslOptions () const

ConfigTls &	setNoCloseNotifyIsEOF (bool noCloseNotifyIsEOF=true)

bool	getNoCloseNotifyIsEOF () const

Protected Member Functions
	ConfigTlsServer (ConfigInstance *instance)

Protected Member Functions inherited from net::config::ConfigTls
	ConfigTls (ConfigInstance *instance)

Protected Member Functions inherited from net::config::ConfigSection
	ConfigSection (ConfigInstance *instance, const std::string &name, const std::string &description)

	ConfigSection (const ConfigSection &)=delete

	ConfigSection (ConfigSection &&)=delete

ConfigSection &	operator= (const ConfigSection &)=delete

ConfigSection &	operator= (ConfigSection &&)=delete

CLI::Option *	addOption (const std::string &name, const std::string &description)

CLI::Option *	addOption (const std::string &name, const std::string &description, const std::string &typeName)

CLI::Option *	addOption (const std::string &name, const std::string &description, const std::string &typeName, const CLI::Validator &additionalValidator)

template<typename ValueTypeT >
CLI::Option *	addOption (const std::string &name, const std::string &description, const std::string &typeName, ValueTypeT defaultValue)

template<typename ValueTypeT >
CLI::Option *	addOption (const std::string &name, const std::string &description, const std::string &typeName, ValueTypeT defaultValue, const CLI::Validator &additionalValidator)

CLI::Option *	addFlag (const std::string &name, const std::string &description, const std::string &typeName)

CLI::Option *	addFlag (const std::string &name, const std::string &description, const std::string &typeName, const CLI::Validator &additionalValidator)

template<typename ValueTypeT >
CLI::Option *	addFlag (const std::string &name, const std::string &description, const std::string &typeName, ValueTypeT defaultValue)

template<typename ValueTypeT >
CLI::Option *	addFlag (const std::string &name, const std::string &description, const std::string &typeName, ValueTypeT defaultValue, const CLI::Validator &additionalValidator)

CLI::Option *	addFlagFunction (const std::string &name, const std::function< void()> &callback, const std::string &description, const std::string &typeName, const std::string &defaultValue)

CLI::Option *	addFlagFunction (const std::string &name, const std::function< void()> &callback, const std::string &description, const std::string &typeName, const std::string &defaultValue, const CLI::Validator &validator)

void	required (CLI::Option *opt, bool req=true)

bool	required () const

template<typename ValueType >
CLI::Option *	addOption (const std::string &name, const std::string &description, const std::string &typeName, ValueType defaultValue)

template<typename ValueType >
CLI::Option *	addOption (const std::string &name, const std::string &description, const std::string &typeName, ValueType defaultValue, const CLI::Validator &additionalValidator)

template<typename ValueType >
CLI::Option *	addFlag (const std::string &name, const std::string &description, const std::string &typeName, ValueType defaultValue)

template<typename ValueType >
CLI::Option *	addFlag (const std::string &name, const std::string &description, const std::string &typeName, ValueType defaultValue, const CLI::Validator &additionalValidator)

Private Types
using	Super = ConfigTls

Private Attributes
std::map< std::string, std::map< std::string, std::variant< std::string, bool, ssl_option_t > > >	defaultSniCerts

std::map< std::string, std::map< std::string, std::variant< std::string, bool, ssl_option_t > > >	configuredSniCerts

CLI::Option *	sniCertsOpt = nullptr

CLI::Option *	forceSniOpt = nullptr

Additional Inherited Members
Protected Attributes inherited from net::config::ConfigSection
CLI::App *	section = nullptr

Detailed Description

Definition at line 65 of file ConfigTlsServer.h.

Member Typedef Documentation

◆ Super

using net::config::ConfigTlsServer::Super = ConfigTls

private

Definition at line 67 of file ConfigTlsServer.h.

◆ Tls

using net::config::ConfigTlsServer::Tls = ConfigTlsServer

Definition at line 70 of file ConfigTlsServer.h.

Constructor & Destructor Documentation

◆ ConfigTlsServer()

net::config::ConfigTlsServer::ConfigTlsServer ( ConfigInstance * instance )

explicitprotected

Definition at line 55 of file ConfigTlsServer.cpp.

        : Super(instance) {
        sniCertsOpt = section //
                          ->add_option("--sni-cert",
                                       configuredSniCerts,
                                       "Server Name Indication (SNI) Certificates:\n"
                                       "sni = SNI of the virtual server\n"
                                       "<key> = {\n"
                                       "  Cert -> value:PEM-FILE                  [\"\"]\n"
                                       "  CertKey -> value:PEM-FILE               [\"\"]\n"
                                       "  CertKeyPassword -> value:TEXT           [\"\"]\n"
                                       "  CaCert -> value:PEM-FILE                [\"\"]\n"
                                       "  CaCertDir -> value:PEM-CONTAINER-DIR    [\"\"]\n"
                                       "  CaCertUseDefaultDir -> value:BOOLEAN    [false]\n"
                                       "  CipherList -> value:CIPHER              [\"\"]\n"
                                       "  SslOptions -> value:UINT                [0]\n"
                                       "}") //
                          ->type_name("sni <key> value [<key> value] ... [%% sni <key> value [<key> value] ...]")
                          ->default_str("[\"\" \"\" \"\" \"\"]");
        if (sniCertsOpt->get_configurable()) {
            sniCertsOpt->group(section->get_formatter()->get_label("Persistent Options"));
        }
 
        sniCertsOpt->default_function([this]() -> std::string {
            std::string defaultValue;
 
            for (const auto& [domain, sniCertConf] : defaultSniCerts) {
                defaultValue += (!defaultValue.empty() ? "\"%%\" \"" : "\"") + domain + "\" ";
 
                for (const auto& [key, value] : sniCertConf) {
                    defaultValue += "\"" + key + "\" ";
 
                    if (key == "Cert") {
                        defaultValue += "\"" + std::get<std::string>(value) + "\" ";
                    } else if (key == "CertKey") {
                        defaultValue += "\"" + std::get<std::string>(value) + "\" ";
                    } else if (key == "CertKeyPassword") {
                        defaultValue += "\"" + std::get<std::string>(value) + "\" ";
                    } else if (key == "CaCert") {
                        defaultValue += "\"" + std::get<std::string>(value) + "\" ";
                    } else if (key == "CaCertDir") {
                        defaultValue += "\"" + std::get<std::string>(value) + "\" ";
                    } else if (key == "CaCertUseDefaultDir") {
                        defaultValue += std::get<bool>(value) ? "\"true\" " : "\"false\" ";
                    } else if (key == "CipherList") {
                        defaultValue += "\"" + std::get<std::string>(value) + "\" ";
                    } else if (key == "SslOptions") {
                        defaultValue += "\"" + std::to_string(std::get<ssl_option_t>(value)) + "\" ";
                    }
                }
            }
 
            defaultValue.pop_back();
 
            return "[" + defaultValue + " \"\"]";
        });
 
        forceSniOpt = addFlag( //
            "--force-sni{true}",
            "Force using of the Server Name Indication",
            "bool",
            "false",
            CLI::IsMember({"true", "false"}));
 
        section->final_callback([this]() {
            for (auto& [domain, sniMap] : configuredSniCerts) {
                if (domain.empty()) {
                    sniCertsOpt //
                        ->clear();
                    sniMap.clear();
                    break;
                }
                for (auto& [key, value] : sniMap) {
                    if (key != "Cert" &&                //
                        key != "CertKey" &&             //
                        key != "CertKeyPassword" &&     //
                        key != "CaCert" &&              //
                        key != "CaCertDir" &&           //
                        key != "CaCertUseDefaultDir" && //
                        key != "CipherList" &&          //
                        key != "SslOptions") {
                        throw CLI::ConversionError("'" + key + "' of option '--" + section->get_parent()->get_name() + "." +
                                                       section->get_name() + ".sni-cert'",
                                                   "<key>");
                    }
                }
            }
        });
    }

Member Function Documentation

◆ addSniCert()

ConfigTlsServer & net::config::ConfigTlsServer::addSniCert	(	const std::string &	domain,
		const std::map< std::string, std::variant< std::string, bool, ssl_option_t > > &	sniCert )

Definition at line 165 of file ConfigTlsServer.cpp.

                                                                                                                              {
        defaultSniCerts[domain] = sniCert;
        sniCertsOpt->capture_default_str();
 
        return *this;
    }

◆ addSniCerts()

ConfigTlsServer & net::config::ConfigTlsServer::addSniCerts ( const std::map< std::string, std::map< std::string, std::variant< std::string, bool, ssl_option_t > > > & sniCerts )

Definition at line 157 of file ConfigTlsServer.cpp.

                                                                                                         {
        defaultSniCerts.insert(sniCerts.begin(), sniCerts.end());
        sniCertsOpt->capture_default_str();
 
        return *this;
    }

◆ getForceSni()

bool net::config::ConfigTlsServer::getForceSni ( ) const

Definition at line 153 of file ConfigTlsServer.cpp.

                                            {
        return forceSniOpt->as<bool>();
    }

◆ getSniCerts()

const std::map< std::string, std::map< std::string, std::variant< std::string, bool, ssl_option_t > > > & net::config::ConfigTlsServer::getSniCerts ( )

Definition at line 173 of file ConfigTlsServer.cpp.

                                                                                                                        {
        return configuredSniCerts.empty() ? defaultSniCerts : configuredSniCerts;
    }

◆ setForceSni()

ConfigTlsServer & net::config::ConfigTlsServer::setForceSni ( bool forceSni = true )

Definition at line 145 of file ConfigTlsServer.cpp.

                                                               {
        forceSniOpt //
            ->default_val(forceSni ? "true" : "false")
            ->clear();
 
        return *this;
    }

Member Data Documentation

◆ configuredSniCerts

std::map<std::string, std::map<std::string, std::variant<std::string, bool, ssl_option_t> > > net::config::ConfigTlsServer::configuredSniCerts

private

Definition at line 87 of file ConfigTlsServer.h.

◆ defaultSniCerts

std::map<std::string, std::map<std::string, std::variant<std::string, bool, ssl_option_t> > > net::config::ConfigTlsServer::defaultSniCerts

private

Definition at line 86 of file ConfigTlsServer.h.

◆ forceSniOpt

CLI::Option* net::config::ConfigTlsServer::forceSniOpt = nullptr

private

Definition at line 90 of file ConfigTlsServer.h.

◆ sniCertsOpt

CLI::Option* net::config::ConfigTlsServer::sniCertsOpt = nullptr

private

Definition at line 89 of file ConfigTlsServer.h.

The documentation for this class was generated from the following files:

net/config/ConfigTlsServer.h
net/config/ConfigTlsServer.cpp

Public Types

Public Member Functions

Protected Member Functions

Private Types

Private Attributes

Additional Inherited Members

Detailed Description

Member Typedef Documentation

◆ Super

◆ Tls

Constructor & Destructor Documentation

◆ ConfigTlsServer()

Member Function Documentation

◆ addSniCert()

◆ addSniCerts()

◆ getForceSni()

◆ getSniCerts()

◆ setForceSni()

Member Data Documentation

◆ configuredSniCerts

◆ defaultSniCerts

◆ forceSniOpt

◆ sniCertsOpt