xref: /recipes/ssl/TlsContext.h

#pragma once

#include "Common.h"
#include "TlsConfig.h"

// Internal class
class TlsContext : noncopyable
{
 public:
  enum Endpoint { kClient, kServer };

  TlsContext(Endpoint type, TlsConfig* config)
    : context_(type == kServer ? tls_server() : tls_client())
  {
    check(tls_configure(context_, config->get()));
  }

  TlsContext(TlsContext&& rhs)
  {
    swap(rhs);
  }

  ~TlsContext()
  {
    tls_free(context_);
  }

  TlsContext& operator=(TlsContext rhs)  // ???
  {
    swap(rhs);
    return *this;
  }

  void swap(TlsContext& rhs)
  {
    std::swap(context_, rhs.context_);
  }

  // void reset(struct tls* ctx) { context_ = ctx; }

  // struct tls* get() { return context_; }

  const char* cipher() { return tls_conn_cipher(context_); }

  // if there is no error, this will segfault.
  const char* error() { return tls_error(context_); }

  int connect(const char* hostport, const char* servername = nullptr)
  {
    return tls_connect_servername(context_, hostport, nullptr, servername);
  }

  TlsContext accept(int sockfd)
  {
    struct tls* conn_ctx = nullptr;
    check(tls_accept_socket(context_, &conn_ctx, sockfd));
    return TlsContext(conn_ctx);
  }

  int handshake()
  {
    int ret = -1;
    do {
      ret = tls_handshake(context_);
    } while(ret == TLS_WANT_POLLIN || ret == TLS_WANT_POLLOUT);
    return ret;
  }

  int read(void* buf, int len)
  {
    return tls_read(context_, buf, len);
  }

  int write(const void* buf, int len)
  {
    return tls_write(context_, buf, len);
  }

 private:
  explicit TlsContext(struct tls* context) : context_(context) {}

  void check(int ret)
  {
    if (ret != 0)
    {
      LOG_FATAL << tls_error(context_);
    }
  }

  struct tls* context_ = nullptr;
};