OFTLSSocket.h

/*
 * Copyright (c) 2008, 2009, 2010, 2011, 2012, 2013, 2014, 2015, 2016, 2017
 *   Jonathan Schleifer <js@heap.zone>
 *
 * All rights reserved.
 *
 * This file is part of ObjFW. It may be distributed under the terms of the
 * Q Public License 1.0, which can be found in the file LICENSE.QPL included in
 * the packaging of this file.
 *
 * Alternatively, it may be distributed under the terms of the GNU General
 * Public License, either version 2 or 3, which can be found in the file
 * LICENSE.GPLv2 or LICENSE.GPLv3 respectively included in the packaging of this
 * file.
 */

#import "OFObject.h"

OF_ASSUME_NONNULL_BEGIN

@class OFString;
@class OFDictionary OF_GENERIC(KeyType, ObjectType);
@protocol OFTLSSocket;

@protocol OFTLSSocketDelegate
@optional
-        (bool)socket: (id <OFTLSSocket>)socket
  shouldAcceptCertificate: (OFDictionary *)certificate;
@end

@protocol OFTLSSocket
@property OF_NULLABLE_PROPERTY (nonatomic, assign)
    id <OFTLSSocketDelegate> delegate;

@property OF_NULLABLE_PROPERTY (nonatomic, copy) OFString *certificateFile;

@property OF_NULLABLE_PROPERTY (nonatomic, copy) OFString *privateKeyFile;

@property OF_NULLABLE_PROPERTY (nonatomic, assign)
    const char *privateKeyPassphrase;

@property (nonatomic, getter=isCertificateVerificationEnabled)
    bool certificateVerificationEnabled;

- initWithSocket: (OFTCPSocket *)socket;

- (void)startTLSWithExpectedHost: (nullable OFString *)host;

- (void)setCertificateFile: (OFString *)certificateFile
        forSNIHost: (OFString *)SNIHost;

- (nullable OFString *)certificateFileForSNIHost: (OFString *)SNIHost;

- (void)setPrivateKeyFile: (OFString *)privateKeyFile
           forSNIHost: (OFString *)SNIHost;

- (nullable OFString *)privateKeyFileForSNIHost: (OFString *)SNIHost;

- (void)setPrivateKeyPassphrase: (const char *)privateKeyPassphrase
             forSNIHost: (OFString *)SNIHost;

- (nullable const char *)privateKeyPassphraseForSNIHost: (OFString *)SNIHost;
@end

OF_ASSUME_NONNULL_END