echo_server_tls.cpp File Reference

#include <websocketpp/config/asio.hpp>
#include <websocketpp/server.hpp>
#include <iostream>

Include dependency graph for echo_server_tls.cpp:

Go to the source code of this file.

Typedefs
typedef websocketpp::server< websocketpp::config::asio_tls >	server
typedef websocketpp::config::asio::message_type::ptr	message_ptr
typedef websocketpp::lib::shared_ptr< websocketpp::lib::asio::ssl::context >	context_ptr

Enumerations
enum	tls_mode { MOZILLA_INTERMEDIATE = 1 , MOZILLA_MODERN = 2 }

Functions
void	on_message (server *s, websocketpp::connection_hdl hdl, message_ptr msg)
void	on_http (server *s, websocketpp::connection_hdl hdl)
std::string	get_password ()
context_ptr	on_tls_init (tls_mode mode, websocketpp::connection_hdl hdl)
int	main ()

Typedef Documentation

context_ptr

typedef websocketpp::lib::shared_ptr<websocketpp::lib::asio::ssl::context> context_ptr

Definition at line 51 of file echo_server_tls.cpp.

message_ptr

typedef websocketpp::config::asio::message_type::ptr message_ptr

Definition at line 50 of file echo_server_tls.cpp.

server

typedef websocketpp::server<websocketpp::config::asio_tls> server

NOTES

This example uses a number of standard classes through the websocketpp::lib namespace. This is to allow easy switching between Boost, the C++11 STL, and the standalone Asio library. Your program need not use these namespaces if you do not need this sort of flexibility.

Definition at line 43 of file echo_server_tls.cpp.

Enumeration Type Documentation

tls_mode

enum tls_mode

Enumerator
MOZILLA_INTERMEDIATE
MOZILLA_MODERN

Definition at line 79 of file echo_server_tls.cpp.

              {
    MOZILLA_INTERMEDIATE = 1,
    MOZILLA_MODERN = 2
};

Function Documentation

get_password()

std::string get_password

(

)

Definition at line 73 of file echo_server_tls.cpp.

                         {
    return "test";
}

Here is the caller graph for this function:

main()

int main

(

void

)

Definition at line 133 of file echo_server_tls.cpp.

           {
    // Create a server endpoint
    server echo_server;
 
    // Initialize ASIO
    echo_server.init_asio();
 
    // Register our message handler
    echo_server.set_message_handler(bind(&on_message,&echo_server,::_1,::_2));
    echo_server.set_http_handler(bind(&on_http,&echo_server,::_1));
    echo_server.set_tls_init_handler(bind(&on_tls_init,MOZILLA_INTERMEDIATE,::_1));
 
    // Listen on port 9002
    echo_server.listen(9002);
 
    // Start the server accept loop
    echo_server.start_accept();
 
    // Start the ASIO io_service run loop
    echo_server.run();
 
}

Here is the call graph for this function:

on_http()

void on_http	(	server *	s,
		websocketpp::connection_hdl	hdl )

Definition at line 66 of file echo_server_tls.cpp.

                                                       {
    server::connection_ptr con = s->get_con_from_hdl(hdl);
    
    con->set_body("Hello World!");
    con->set_status(websocketpp::http::status_code::ok);
}

Here is the caller graph for this function:

on_message()

void on_message	(	server *	s,
		websocketpp::connection_hdl	hdl,
		message_ptr	msg )

Definition at line 53 of file echo_server_tls.cpp.

                                                                           {
    std::cout << "on_message called with hdl: " << hdl.lock().get()
              << " and message: " << msg->get_payload()
              << std::endl;
 
    try {
        s->send(hdl, msg->get_payload(), msg->get_opcode());
    } catch (const websocketpp::lib::error_code& e) {
        std::cout << "Echo failed because: " << e
                  << "(" << e.message() << ")" << std::endl;
    }
}

Here is the caller graph for this function:

on_tls_init()

context_ptr on_tls_init	(	tls_mode	mode,
		websocketpp::connection_hdl	hdl )

Definition at line 84 of file echo_server_tls.cpp.

                                                                      {
    namespace asio = websocketpp::lib::asio;
 
    std::cout << "on_tls_init called with hdl: " << hdl.lock().get() << std::endl;
    std::cout << "using TLS mode: " << (mode == MOZILLA_MODERN ? "Mozilla Modern" : "Mozilla Intermediate") << std::endl;
 
    context_ptr ctx = websocketpp::lib::make_shared<asio::ssl::context>(asio::ssl::context::sslv23);
 
    try {
        if (mode == MOZILLA_MODERN) {
            // Modern disables TLSv1
            ctx->set_options(asio::ssl::context::default_workarounds |
                             asio::ssl::context::no_sslv2 |
                             asio::ssl::context::no_sslv3 |
                             asio::ssl::context::no_tlsv1 |
                             asio::ssl::context::single_dh_use);
        } else {
            ctx->set_options(asio::ssl::context::default_workarounds |
                             asio::ssl::context::no_sslv2 |
                             asio::ssl::context::no_sslv3 |
                             asio::ssl::context::single_dh_use);
        }
        ctx->set_password_callback(bind(&get_password));
        ctx->use_certificate_chain_file("server.pem");
        ctx->use_private_key_file("server.pem", asio::ssl::context::pem);
        
        // Example method of generating this file:
        // `openssl dhparam -out dh.pem 2048`
        // Mozilla Intermediate suggests 1024 as the minimum size to use
        // Mozilla Modern suggests 2048 as the minimum size to use.
        ctx->use_tmp_dh_file("dh.pem");
        
        std::string ciphers;
        
        if (mode == MOZILLA_MODERN) {
            ciphers = "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!3DES:!MD5:!PSK";
        } else {
            ciphers = "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA";
        }
        
        if (SSL_CTX_set_cipher_list(ctx->native_handle() , ciphers.c_str()) != 1) {
            std::cout << "Error setting cipher list" << std::endl;
        }
    } catch (std::exception& e) {
        std::cout << "Exception: " << e.what() << std::endl;
    }
    return ctx;
}

Here is the call graph for this function:

Here is the caller graph for this function: