summaryrefslogtreecommitdiff
path: root/lib/csharp/src/Transport/TTLSServerSocket.cs
diff options
context:
space:
mode:
Diffstat (limited to 'lib/csharp/src/Transport/TTLSServerSocket.cs')
-rw-r--r--lib/csharp/src/Transport/TTLSServerSocket.cs223
1 files changed, 0 insertions, 223 deletions
diff --git a/lib/csharp/src/Transport/TTLSServerSocket.cs b/lib/csharp/src/Transport/TTLSServerSocket.cs
deleted file mode 100644
index 716a97ca8..000000000
--- a/lib/csharp/src/Transport/TTLSServerSocket.cs
+++ /dev/null
@@ -1,223 +0,0 @@
-/**
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements. See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership. The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License. You may obtain a copy of the License at
- *
- * http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied. See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
-
-using System;
-using System.Net.Security;
-using System.Net.Sockets;
-using System.Security.Authentication;
-using System.Security.Cryptography.X509Certificates;
-
-namespace Thrift.Transport
-{
- /// <summary>
- /// SSL Server Socket Wrapper Class
- /// </summary>
- public class TTLSServerSocket : TServerTransport
- {
- /// <summary>
- /// Underlying tcp server
- /// </summary>
- private TcpListener server = null;
-
- /// <summary>
- /// The port where the socket listen
- /// </summary>
- private int port = 0;
-
- /// <summary>
- /// Timeout for the created server socket
- /// </summary>
- private readonly int clientTimeout;
-
- /// <summary>
- /// Whether or not to wrap new TSocket connections in buffers
- /// </summary>
- private bool useBufferedSockets = false;
-
- /// <summary>
- /// The servercertificate with the private- and public-key
- /// </summary>
- private X509Certificate serverCertificate;
-
- /// <summary>
- /// The function to validate the client certificate.
- /// </summary>
- private RemoteCertificateValidationCallback clientCertValidator;
-
- /// <summary>
- /// The function to determine which certificate to use.
- /// </summary>
- private LocalCertificateSelectionCallback localCertificateSelectionCallback;
-
- /// <summary>
- /// The SslProtocols value that represents the protocol used for authentication.
- /// </summary>
- private readonly SslProtocols sslProtocols;
-
- /// <summary>
- /// Initializes a new instance of the <see cref="TTLSServerSocket" /> class.
- /// </summary>
- /// <param name="port">The port where the server runs.</param>
- /// <param name="certificate">The certificate object.</param>
- public TTLSServerSocket(int port, X509Certificate2 certificate)
- : this(port, 0, certificate)
- {
- }
-
- /// <summary>
- /// Initializes a new instance of the <see cref="TTLSServerSocket" /> class.
- /// </summary>
- /// <param name="port">The port where the server runs.</param>
- /// <param name="clientTimeout">Send/receive timeout.</param>
- /// <param name="certificate">The certificate object.</param>
- public TTLSServerSocket(int port, int clientTimeout, X509Certificate2 certificate)
- : this(port, clientTimeout, false, certificate)
- {
- }
-
- /// <summary>
- /// Initializes a new instance of the <see cref="TTLSServerSocket" /> class.
- /// </summary>
- /// <param name="port">The port where the server runs.</param>
- /// <param name="clientTimeout">Send/receive timeout.</param>
- /// <param name="useBufferedSockets">If set to <c>true</c> [use buffered sockets].</param>
- /// <param name="certificate">The certificate object.</param>
- /// <param name="clientCertValidator">The certificate validator.</param>
- /// <param name="localCertificateSelectionCallback">The callback to select which certificate to use.</param>
- /// <param name="sslProtocols">The SslProtocols value that represents the protocol used for authentication.</param>
- public TTLSServerSocket(
- int port,
- int clientTimeout,
- bool useBufferedSockets,
- X509Certificate2 certificate,
- RemoteCertificateValidationCallback clientCertValidator = null,
- LocalCertificateSelectionCallback localCertificateSelectionCallback = null,
- // TODO: Enable Tls11 and Tls12 (TLS 1.1 and 1.2) by default once we start using .NET 4.5+.
- SslProtocols sslProtocols = SslProtocols.Tls)
- {
- if (!certificate.HasPrivateKey)
- {
- throw new TTransportException(TTransportException.ExceptionType.Unknown, "Your server-certificate needs to have a private key");
- }
-
- this.port = port;
- this.clientTimeout = clientTimeout;
- this.serverCertificate = certificate;
- this.useBufferedSockets = useBufferedSockets;
- this.clientCertValidator = clientCertValidator;
- this.localCertificateSelectionCallback = localCertificateSelectionCallback;
- this.sslProtocols = sslProtocols;
- try
- {
- // Create server socket
- this.server = TSocketVersionizer.CreateTcpListener(this.port);
- this.server.Server.NoDelay = true;
- }
- catch (Exception ex)
- {
- server = null;
- throw new TTransportException("Could not create ServerSocket on port " + this.port + ".", ex);
- }
- }
-
- /// <summary>
- /// Starts the server.
- /// </summary>
- public override void Listen()
- {
- // Make sure accept is not blocking
- if (this.server != null)
- {
- try
- {
- this.server.Start();
- }
- catch (SocketException sx)
- {
- throw new TTransportException("Could not accept on listening socket: " + sx.Message, sx);
- }
- }
- }
-
- /// <summary>
- /// Callback for Accept Implementation
- /// </summary>
- /// <returns>
- /// TTransport-object.
- /// </returns>
- protected override TTransport AcceptImpl()
- {
- if (this.server == null)
- {
- throw new TTransportException(TTransportException.ExceptionType.NotOpen, "No underlying server socket.");
- }
-
- try
- {
- TcpClient client = this.server.AcceptTcpClient();
- client.SendTimeout = client.ReceiveTimeout = this.clientTimeout;
-
- //wrap the client in an SSL Socket passing in the SSL cert
- TTLSSocket socket = new TTLSSocket(
- client,
- this.serverCertificate,
- true,
- this.clientCertValidator,
- this.localCertificateSelectionCallback,
- this.sslProtocols);
-
- socket.setupTLS();
-
- if (useBufferedSockets)
- {
- TBufferedTransport trans = new TBufferedTransport(socket);
- return trans;
- }
- else
- {
- return socket;
- }
-
- }
- catch (Exception ex)
- {
- throw new TTransportException(ex.ToString(), ex);
- }
- }
-
- /// <summary>
- /// Stops the Server
- /// </summary>
- public override void Close()
- {
- if (this.server != null)
- {
- try
- {
- this.server.Stop();
- }
- catch (Exception ex)
- {
- throw new TTransportException("WARNING: Could not close server socket: " + ex, ex);
- }
- this.server = null;
- }
- }
- }
-}