OFTLSSocket.h

/*
 * Copyright (c) 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015
 *   Jonathan Schleifer <js@webkeks.org>
 *
 * All rights reserved.
 *
 * This file is part of ObjFW. It may be distributed under the terms of the
 * Q Public License 1.0, which can be found in the file LICENSE.QPL included in
 * the packaging of this file.
 *
 * Alternatively, it may be distributed under the terms of the GNU General
 * Public License, either version 2 or 3, which can be found in the file
 * LICENSE.GPLv2 or LICENSE.GPLv3 respectively included in the packaging of this
 * file.
 */

#import "OFObject.h"

OF_ASSUME_NONNULL_BEGIN

@class OFString;
@class OFDictionary OF_GENERIC(KeyType, ObjectType);
@protocol OFTLSSocket;

@protocol OFTLSSocketDelegate
#ifdef OF_HAVE_OPTIONAL_PROTOCOLS
@optional
#endif

-        (bool)socket: (id <OFTLSSocket>)socket
  shouldAcceptCertificate: (OFDictionary*)certificate;
@end

@protocol OFTLSSocket
#ifdef OF_HAVE_PROPERTIES
@property OF_NULLABLE_PROPERTY (assign) id <OFTLSSocketDelegate> delegate;
@property OF_NULLABLE_PROPERTY (copy)
    OFString *certificateFile, *privateKeyFile;
@property OF_NULLABLE_PROPERTY (assign) const char *privateKeyPassphrase;
@property (getter=isCertificateVerificationEnabled)
    bool certificateVerificationEnabled;
#endif

- initWithSocket: (OFTCPSocket*)socket;

- (void)startTLSWithExpectedHost: (OFString*)host;

- (void)setDelegate: (nullable id <OFTLSSocketDelegate>)delegate;

- (nullable id <OFTLSSocketDelegate>)delegate;

- (void)setCertificateFile: (nullable OFString*)certificateFile;

- (void)setCertificateFile: (OFString*)certificateFile
        forSNIHost: (OFString*)SNIHost;

- (nullable OFString*)certificateFile;

- (nullable OFString*)certificateFileForSNIHost: (OFString*)SNIHost;

- (void)setPrivateKeyFile: (nullable OFString*)privateKeyFile;

- (void)setPrivateKeyFile: (OFString*)privateKeyFile
           forSNIHost: (OFString*)SNIHost;

- (nullable OFString*)privateKeyFile;

- (nullable OFString*)privateKeyFileForSNIHost: (OFString*)SNIHost;

- (void)setPrivateKeyPassphrase: (nullable const char*)privateKeyPassphrase;

- (void)setPrivateKeyPassphrase: (const char*)privateKeyPassphrase
             forSNIHost: (OFString*)SNIHost;

- (nullable const char*)privateKeyPassphrase;

- (nullable const char*)privateKeyPassphraseForSNIHost: (OFString*)SNIHost;

- (void)setCertificateVerificationEnabled: (bool)enabled;

- (bool)isCertificateVerificationEnabled;
@end

OF_ASSUME_NONNULL_END