ObjFW  All files named "src/OFTLSStream.h"

Not implemented using any TLS library yet. file: [1a6c8de484] check-in: [43864736e7] user: js, branch: tls-server, size: 8017 [annotate] [blame] [check-ins using] [diff]

Mbed TLS is never automatically picked as a TLS implementation and
always needs to be manually enabled using --with-tls=mbedtls. file: [57d0bfe49e] check-in: [11b2a17595] user: js, branch: trunk, size: 5724 [annotate] [blame] [check-ins using] [diff]

This allows for a much cleaner solution to avoid the internal read
buffer of e.g. a TLS connection never being processed while waiting for
a delimiter. file: [db5ba510f8] check-in: [a61e0594b4] user: js, branch: trunk, size: 5574 [annotate] [blame] [check-ins using] [diff]

This implements OFTLSStream using Apple's Secure Transport. While Secure
Transport is declared deprecated by Apple, Apple so far has failed to
provide a suitable replacement. They recommend Network.framework as a
replacement, however it can neither work on arbitrary sockets, nor can
it do STARTTLS. file: [b3a209020a] check-in: [112eb62f7b] user: js, branch: trunk, size: 5359 [annotate] [blame] [check-ins using] [diff]

The previous API could never work cleanly and would always require
hacks, as it needed intercepting all interactions of OFTCPSocket with
the raw socket and did not work at all if the OFTCPSocket had anything
in its read buffer before starting the TLS handshake. This also could
not be fixed easily, as it would have required the object to contain two
read buffers, one for the unencrypted connection and one for the
encrypted connection. There was also no clean way to perform the
handshake in a non-blocking way.

The new API is a lot cleaner and requires none of the hacks, but using
it requires slightly more work. But this is more than made up for by
making a fully asynchronous handshake possible. It uses the concept of a
stream wrapping another stream, meaning the entire connecting part is
being handled by OFTCPSocket and then the connected socket is passed off
to OFTLSStream to wrap it. This also makes for a lot cleaner separation
of concerns. file: [c91283e053] check-in: [d30efa8bbf] user: js, branch: trunk, size: 4764 [annotate] [blame] [check-ins using] [diff]