Poco::Net

class SecureSocketImpl

Library: NetSSL_OpenSSL
Package: SSLSockets
Header: Poco/Net/SecureSocketImpl.h

Description

The SocketImpl for SecureStreamSocket.

Member Summary

Member Functions: acceptConnection, acceptSSL, bind, close, connect, connectNB, connectSSL, context, handleError, isLocalHost, listen, peerCertificate, receiveBytes, sendBytes, shutdown, sockfd, verifyCertificate

Constructors

SecureSocketImpl

SecureSocketImpl(
    Poco::AutoPtr < SocketImpl > pSocketImpl,
    Context::Ptr pContext
);

Creates the SecureSocketImpl using an already connected stream socket.

Destructor

~SecureSocketImpl virtual

virtual ~SecureSocketImpl();

Destroys the SecureSocketImpl.

Member Functions

acceptConnection

SocketImpl * acceptConnection(
    SocketAddress & clientAddr
);

Get the next completed connection from the socket's completed connection queue.

If the queue is empty, waits until a connection request completes.

Returns a new SSL socket for the connection with the client.

The client socket's address is returned in clientAddr.

acceptSSL

void acceptSSL();

Performs a server-side SSL handshake and certificate verification.

bind

void bind(
    const SocketAddress & address,
    bool reuseAddress = false
);

Bind a local address to the socket.

This is usually only done when establishing a server socket. SSL clients should not bind a socket to a specific address.

If reuseAddress is true, sets the SO_REUSEADDR socket option.

close

void close();

Close the socket.

connect

void connect(
    const SocketAddress & address,
    const std::string & hostName
);

Initializes the socket and establishes a secure connection to the TCP server at the given address.

connect

void connect(
    const SocketAddress & address,
    const std::string & hostName,
    const Poco::Timespan & timeout
);

Initializes the socket, sets the socket timeout and establishes a secure connection to the TCP server at the given address.

connectNB

void connectNB(
    const SocketAddress & address,
    const std::string & hostName
);

Initializes the socket and establishes a secure connection to the TCP server at the given address. Prior to opening the connection the socket is set to nonblocking mode.

connectSSL

void connectSSL(
    const std::string & hostName
);

Performs a client-side SSL handshake and establishes a secure connection over an already existing TCP connection.

context inline

Context::Ptr context() const;

Returns the SSL context used for this socket.

listen

void listen(
    int backlog = 64
);

Puts the socket into listening state.

The socket becomes a passive socket that can accept incoming connection requests.

The backlog argument specifies the maximum number of connections that can be queued for this socket.

peerCertificate

X509 * peerCertificate() const;

Returns the peer's certificate.

receiveBytes

int receiveBytes(
    void * buffer,
    int length,
    int flags = 0
);

Receives data from the socket and stores it in buffer. Up to length bytes are received.

Returns the number of bytes received.

sendBytes

int sendBytes(
    const void * buffer,
    int length,
    int flags = 0
);

Sends the contents of the given buffer through the socket. Any specified flags are ignored.

Returns the number of bytes sent, which may be less than the number of bytes specified.

shutdown

void shutdown();

Shuts down the connection by attempting an orderly SSL shutdown, then actually shutting down the TCP connection.

sockfd inline

SOCKET sockfd();

Returns the underlying socket descriptor.

handleError protected

int handleError(
    int rc
);

Handles an SSL error by throwing an appropriate exception.

isLocalHost protected static

static bool isLocalHost(
    const std::string & hostName
);

Returns true iff the given host name is the local host (either "localhost" or "127.0.0.1").

verifyCertificate protected

long verifyCertificate(
    const std::string & hostName
);

PostConnectionCheck to verify that a peer really presented a valid certificate.