Add PROXY peer listener and consolidate SSL contexts.

modules/ripple_asio/sockets/RippleSSLContext.h

@@ -0,0 +1,51 @@
+//------------------------------------------------------------------------------
+/*
+    Copyright (c) 2011-2013, OpenCoin, Inc.
+*/
+//==============================================================================
+
+#ifndef RIPPLE_ASIO_RIPPLESSLCONTEXT_H_INCLUDED
+#define RIPPLE_ASIO_RIPPLESSLCONTEXT_H_INCLUDED
+
+/** The SSL contexts used by Ripple.
+
+    This is what Ripple uses for its secure connections. The ECDSA curve
+    parameters are predefined and verified to be secure. The context is set to
+    sslv23, Transport Layer Security / General. This is primarily used for peer to peer servers that don't care
+    about certificates or identity verification.
+*/
+class RippleSSLContext : public SSLContext
+{
+public:
+    /** Retrieve raw DH parameters.
+        This is in the format expected by the OpenSSL function d2i_DHparams.
+        The vector is binary. An empty vector means the key size is unsupported.
+        @note The string may contain nulls in the middle. Use size() to
+              determine the actual size.
+    */
+    static std::string getRawDHParams (int keySize);
+
+    /** Creates a bare context.
+        This is for WebSocket connections that don't use certificates.
+    */
+    static RippleSSLContext* createBare ();
+
+    /** Create a context that allows anonymous connections.
+        No certificates are required. Peers use this context.
+        If the cipher list is invalid, a fatal error is raised.
+    */
+    static RippleSSLContext* createAnonymous (String const& cipherList);
+
+    /** Create a context with authentication requirements.
+        This is used for WebSocket connections.
+        The authentication credentials are loaded from the files with
+        the specified names. If an error occurs, a fatal error is raised.
+    */
+    static RippleSSLContext* createAuthenticated (
+        std::string key_file, std::string cert_file, std::string chain_file);
+
+protected:
+    explicit RippleSSLContext (ContextType& context);
+};
+
+#endif