summaryrefslogtreecommitdiff
path: root/cpp/src/IceSSL/GeneralConfig.cpp
diff options
context:
space:
mode:
Diffstat (limited to 'cpp/src/IceSSL/GeneralConfig.cpp')
-rw-r--r--cpp/src/IceSSL/GeneralConfig.cpp175
1 files changed, 0 insertions, 175 deletions
diff --git a/cpp/src/IceSSL/GeneralConfig.cpp b/cpp/src/IceSSL/GeneralConfig.cpp
deleted file mode 100644
index 80144df87e0..00000000000
--- a/cpp/src/IceSSL/GeneralConfig.cpp
+++ /dev/null
@@ -1,175 +0,0 @@
-// **********************************************************************
-//
-// Copyright (c) 2003-2006 ZeroC, Inc. All rights reserved.
-//
-// This copy of Ice is licensed to you under the terms described in the
-// ICE_LICENSE file included in this distribution.
-//
-// **********************************************************************
-
-#include <IceSSL/GeneralConfig.h>
-
-#include <string>
-#include <algorithm>
-
-using namespace std;
-
-IceSSL::GeneralConfig::GeneralConfig()
-{
- _sslVersion = SSL_V23;
-
- _verifyMode = SSL_VERIFY_NONE;
-
- // Unlimited verifcation depth.
- _verifyDepth = -1;
-
- _context = "";
- _cipherList = "";
- _randomBytesFiles = "";
-}
-
-IceSSL::SslProtocol
-IceSSL::GeneralConfig::getProtocol() const
-{
- return _sslVersion;
-}
-
-int
-IceSSL::GeneralConfig::getVerifyMode() const
-{
- return _verifyMode;
-}
-
-int
-IceSSL::GeneralConfig::getVerifyDepth() const
-{
- return _verifyDepth;
-}
-
-std::string
-IceSSL::GeneralConfig::getContext() const
-{
- return _context;
-}
-
-std::string
-IceSSL::GeneralConfig::getCipherList() const
-{
- return _cipherList;
-}
-
-std::string
-IceSSL::GeneralConfig::getRandomBytesFiles() const
-{
- return _randomBytesFiles;
-}
-
-void
-IceSSL::GeneralConfig::set(const string& name, const string& value)
-{
- if(name.compare("version") == 0)
- {
- parseVersion(value);
- }
- else if(name.compare("cipherlist") == 0)
- {
- _cipherList = value;
- }
- else if(name.compare("context") == 0)
- {
- _context = value;
- }
- else if(name.compare("verifymode") == 0)
- {
- parseVerifyMode(value);
- }
- else if(name.compare("verifydepth") == 0)
- {
- _verifyDepth = atoi(value.c_str());
- }
- else if(name.compare("randombytes") == 0)
- {
- _randomBytesFiles = value;
- }
- return;
-}
-
-//
-// Protected Methods
-//
-
-void
-IceSSL::GeneralConfig::parseVersion(const string& value)
-{
- if(value.compare("SSLv23") == 0)
- {
- _sslVersion = SSL_V23;
- }
- else if(value.compare("SSLv3") == 0)
- {
- _sslVersion = SSL_V3;
- }
- else if(value.compare("TLSv1") == 0)
- {
- _sslVersion = TLS_V1;
- }
-
- return;
-}
-
-void
-IceSSL::GeneralConfig::parseVerifyMode(const string& value)
-{
- const string delim = " |\t\n\r";
-
- string s(value);
- transform(s.begin(), s.end(), s.begin(), ::tolower);
-
- string::size_type beg;
- string::size_type end = 0;
-
- while(true)
- {
- beg = s.find_first_not_of(delim, end);
-
- if(beg == string::npos)
- {
- break;
- }
-
- end = s.find_first_of(delim, beg);
-
- if(end == string::npos)
- {
- end = s.length();
- }
-
- string option = s.substr(beg, end - beg);
-
- if(option.compare("none") == 0)
- {
- _verifyMode |= SSL_VERIFY_NONE;
- }
- else if(option.compare("peer") == 0)
- {
- _verifyMode |= SSL_VERIFY_PEER;
- }
- else if(option.compare("fail_no_cert") == 0)
- {
- _verifyMode |= SSL_VERIFY_FAIL_IF_NO_PEER_CERT;
- }
- else if(option.compare("client_once") == 0)
- {
- _verifyMode |= SSL_VERIFY_CLIENT_ONCE;
- }
- }
-
- // Both SSL_VERIFY_FAIL_IF_NO_PEER_CERT and SSL_VERIFY_CLIENT_ONCE require
- // that SSL_VERIFY_PEER be set, otherwise it's an error.
- if((_verifyMode != SSL_VERIFY_NONE) && !(_verifyMode & SSL_VERIFY_PEER))
- {
- _verifyMode = SSL_VERIFY_NONE;
- }
-
- return;
-}