Setup SSL context

CMakeLists.txt

@@ -172,6 +172,8 @@ endif()
 
 find_package(Threads REQUIRED)
 
+find_package(OpenSSL REQUIRED)
+
 include(CMakePushCheckState)
 include(CheckIncludeFileCXX)
 include_directories(${INCLUDE_DIRS})

server/CMakeLists.txt

@@ -116,6 +116,8 @@ else()
 endif()
 
 # list(APPEND SERVER_LIBRARIES Boost::boost)
+list(APPEND SERVER_LIBRARIES OpenSSL::Crypto OpenSSL::SSL)
+
 
 include_directories(${SERVER_INCLUDE})
 if(ANDROID)

server/control_server.cpp

@@ -39,8 +39,14 @@ static constexpr auto LOG_TAG = "ControlServer";
 
 ControlServer::ControlServer(boost::asio::io_context& io_context, const ServerSettings::Tcp& tcp_settings, const ServerSettings::Http& http_settings,
                              ControlMessageReceiver* controlMessageReceiver)
-    : io_context_(io_context), tcp_settings_(tcp_settings), http_settings_(http_settings), controlMessageReceiver_(controlMessageReceiver)
+    : io_context_(io_context), ssl_context_(boost::asio::ssl::context::sslv23), tcp_settings_(tcp_settings), http_settings_(http_settings),
+      controlMessageReceiver_(controlMessageReceiver)
 {
+    ssl_context_.set_options(boost::asio::ssl::context::default_workarounds | boost::asio::ssl::context::no_sslv2 | boost::asio::ssl::context::single_dh_use);
+    ssl_context_.set_password_callback(std::bind(&ControlServer::getPassword, this));
+    ssl_context_.use_certificate_chain_file("server.pem");
+    ssl_context_.use_private_key_file("server.pem", boost::asio::ssl::context::pem);
+    ssl_context_.use_tmp_dh_file("dh4096.pem");
 }
 
 
@@ -50,6 +56,12 @@ ControlServer::~ControlServer()
 }
 
 
+std::string ControlServer::getPassword() const
+{
+    return "test";
+}
+
+
 void ControlServer::cleanup()
 {
     auto new_end = std::remove_if(sessions_.begin(), sessions_.end(), [](const std::weak_ptr<ControlSession>& session) { return session.expired(); });
@@ -114,7 +126,13 @@ void ControlServer::startAccept()
     auto accept_handler_http = [this](error_code ec, tcp::socket socket)
     {
         if (!ec)
+        {
             handleAccept<ControlSessionHttp>(std::move(socket), http_settings_);
+            // auto session = make_shared<ControlSessionHttp<boost::asio::ssl::stream<tcp::socket>>>(
+            //                                  this, boost::asio::ssl::stream<tcp::socket>(std::move(socket), ssl_context_), http_settings_);
+            // onNewSession(std::move(session));
+            // startAccept();
+        }
         else
             LOG(ERROR, LOG_TAG) << "Error while accepting socket connection: " << ec.message() << "\n";
     };

server/control_server.hpp

@@ -25,6 +25,7 @@
 // 3rd party headers
 #include <boost/asio/io_context.hpp>
 #include <boost/asio/ip/tcp.hpp>
+#include <boost/asio/ssl.hpp>
 
 // standard headers
 #include <memory>
@@ -64,6 +65,8 @@ private:
     void onNewSession(std::shared_ptr<ControlSession> session) override;
     void onNewSession(std::shared_ptr<StreamSession> session) override;
 
+    std::string getPassword() const;
+
     mutable std::recursive_mutex session_mutex_;
     std::vector<std::weak_ptr<ControlSession>> sessions_;
 
@@ -71,6 +74,7 @@ private:
     std::vector<acceptor_ptr> acceptor_http_;
 
     boost::asio::io_context& io_context_;
+    boost::asio::ssl::context ssl_context_;
     ServerSettings::Tcp tcp_settings_;
     ServerSettings::Http http_settings_;
     ControlMessageReceiver* controlMessageReceiver_;