tlsgnutlsserver.h

/*
  Copyright (c) 2007-2015 by Jakob Schröter <js@camaya.net>
  This file is part of the gloox library. http://camaya.net/gloox

  This software is distributed under a license. The full license
  agreement can be found in the file LICENSE in this distribution.
  This software may not be copied, modified, sold or distributed
  other than expressed in the named license agreement.

  This software is distributed without any warranty.
*/



#ifndef TLSGNUTLSSERVER_H__
#define TLSGNUTLSSERVER_H__

#include "tlsgnutlsbase.h"

#include "config.h"

#ifdef HAVE_GNUTLS

#include <gnutls/gnutls.h>
#include <gnutls/x509.h>

namespace gloox
{

  class GnuTLSServer : public GnuTLSBase
  {
    public:
      GnuTLSServer( TLSHandler* th );

      virtual ~GnuTLSServer();

      // reimplemented from TLSBase
      virtual bool init( const std::string& clientKey = EmptyString,
                         const std::string& clientCerts = EmptyString,
                         const StringList& cacerts = StringList() );

      // reimplemented from TLSBase
      virtual void cleanup();

    private:
      // reimplemented from TLSBase
      virtual void setCACerts( const StringList& cacerts );

      // reimplemented from TLSBase
      virtual void setClientCert( const std::string& clientKey,
                                  const std::string& clientCerts );

      virtual void getCertInfo();
      void generateDH();

      gnutls_certificate_credentials_t m_x509cred;
//       gnutls_priority_t m_priorityCache;
      gnutls_dh_params_t m_dhParams;
      gnutls_rsa_params_t m_rsaParams;
      const int m_dhBits;

  };

}

#endif // HAVE_GNUTLS

#endif // TLSGNUTLSSERVER_H__