RPC over SSL/TLS transport

To enable RPC over SSL/TLS, specify server certificate and private key
using --rpc-certificate and --rpc-private-key options and enable
--rpc-secure option.  After the encryption is enabled, use https and
wss scheme to access RPC server.

1 files changed, 11 insertions, 3 deletions

diff --git a/src/LibgnutlsTLSContext.h b/src/LibgnutlsTLSContext.h
index 9e0d5fa8..4fc49fbc 100644
--- a/src/LibgnutlsTLSContext.h
+++ b/src/LibgnutlsTLSContext.h
@@ -41,6 +41,7 @@
 
 #include <gnutls/gnutls.h>
 
+#include "TLSContext.h"
 #include "DlAbortEx.h"
 
 namespace aria2 {
@@ -49,17 +50,19 @@ class TLSContext {
 private:
   gnutls_certificate_credentials_t certCred_;
 
+  TLSSessionSide side_;
+
   bool good_;
 
   bool peerVerificationEnabled_;
 public:
-  TLSContext();
+  TLSContext(TLSSessionSide side);
 
   ~TLSContext();
 
   // private key `keyfile' must be decrypted.
-  bool addClientKeyFile(const std::string& certfile,
-                        const std::string& keyfile);
+  bool addCredentialFile(const std::string& certfile,
+                         const std::string& keyfile);
 
   bool addSystemTrustedCACerts();
 
@@ -72,6 +75,11 @@ public:
 
   gnutls_certificate_credentials_t getCertCred() const;
 
+  TLSSessionSide getSide() const
+  {
+    return side_;
+  }
+
   void enablePeerVerification();
 
   void disablePeerVerification();