ssl_config.h

/*
 * Copyright (c) 2008-2025, Hazelcast, Inc. All Rights Reserved.
 *
 * Licensed under the Apache License, Version 2.0 (the "License");
 * you may not use this file except in compliance with the License.
 * You may obtain a copy of the License at
 *
 * http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#pragma once
 
#include <string>
#include <vector>
 
#ifdef HZ_BUILD_WITH_SSL
#include <boost/asio/ssl/context.hpp>
#endif
 
#include "hazelcast/util/export.h"
 
#if defined(WIN32) || defined(_WIN32) || defined(WIN64) || defined(_WIN64)
#pragma warning(push)
#pragma warning(disable : 4251) // for dll export
#endif
 
namespace hazelcast {
namespace client {
namespace internal {
namespace socket {
class SocketFactory;
}
} // namespace internal
namespace config {
#ifdef HZ_BUILD_WITH_SSL
enum HAZELCAST_API ssl_protocol
{
    sslv2 = 0, // boost::asio::ssl::context_base::sslv2

    sslv3 = 3, // boost::asio::ssl::context_base::sslv3

    tlsv1 = 6, // boost::asio::ssl::context_base::tlsv1

    sslv23 = 9, // boost::asio::ssl::context_base::sslv23

    tlsv11 = 12, // boost::asio::ssl::context_base::tlsv11,

    tlsv12 = 15, // boost::asio::ssl::context_base::tlsv12
};
#endif
class HAZELCAST_API ssl_config
{
public:
    ssl_config();
 
#ifdef HZ_BUILD_WITH_SSL
    ssl_config& set_context(boost::asio::ssl::context context);

    bool is_enabled() const;

    ssl_config& set_enabled(bool is_enabled);

    ssl_config& set_protocol(ssl_protocol protocol);

    ssl_protocol get_protocol() const;

    const std::vector<std::string>& get_verify_files() const;

    ssl_config& add_verify_file(const std::string& filename);

    const std::string& get_cipher_list() const;

    ssl_config& set_cipher_list(const std::string& ciphers);
 
private:
    friend class internal::socket::SocketFactory;
 
    bool enabled_;
    ssl_protocol ssl_protocol_;
    std::vector<std::string> client_verify_files_;
    std::string cipher_list_;
    std::shared_ptr<boost::asio::ssl::context> ssl_context_;
    void check_context_enabled_already() const;
#endif
};
} // namespace config
} // namespace client
} // namespace hazelcast
 
#if defined(WIN32) || defined(_WIN32) || defined(WIN64) || defined(_WIN64)
#pragma warning(pop)
#endif