1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
|
// Copyright (C) 2019 The Qt Company Ltd.
// SPDX-License-Identifier: LicenseRef-Qt-Commercial OR GPL-3.0-only
#ifndef HTTPSSERVER_H
#define HTTPSSERVER_H
#include "httpreqrep.h"
#include "httpserver.h"
#include <QDebug>
#include <QtCore/qfile.h>
#include <QtNetwork/qsslkey.h>
#include <QtNetwork/qsslsocket.h>
#include <QtNetwork/qsslconfiguration.h>
#include <QtNetwork/qsslserver.h>
static QSslServer *createServer(const QString &certificateFileName, const QString &keyFileName,
const QString &ca)
{
QSslConfiguration configuration(QSslConfiguration::defaultConfiguration());
QFile keyFile(keyFileName);
if (keyFile.open(QIODevice::ReadOnly)) {
QSslKey key(keyFile.readAll(), QSsl::Rsa, QSsl::Pem, QSsl::PrivateKey);
if (!key.isNull()) {
configuration.setPrivateKey(key);
} else {
qCritical() << "Could not parse key: " << keyFileName;
}
} else {
qCritical() << "Could not find key: " << keyFileName;
}
QList<QSslCertificate> localCerts = QSslCertificate::fromPath(certificateFileName);
if (!localCerts.isEmpty()) {
configuration.setLocalCertificateChain(localCerts);
} else {
qCritical() << "Could not find certificate: " << certificateFileName;
}
if (!ca.isEmpty()) {
QList<QSslCertificate> caCerts = QSslCertificate::fromPath(ca);
if (!caCerts.isEmpty()) {
configuration.addCaCertificates(caCerts);
configuration.setPeerVerifyMode(QSslSocket::VerifyPeer);
} else {
qCritical() << "Could not find certificate: " << certificateFileName;
}
}
QSslServer *server = new QSslServer();
server->setSslConfiguration(configuration);
return server;
}
struct HttpsServer : HttpServer
{
HttpsServer(const QString &certPath, const QString &keyPath, const QString &ca,
quint16 port = 0, QObject *parent = nullptr)
: HttpServer(createServer(certPath, keyPath, ca), "https", QHostAddress::LocalHost, port,
parent)
{
}
void setVerifyMode(const QSslSocket::PeerVerifyMode verifyMode)
{
QSslServer *server = static_cast<QSslServer *>(getTcpServer());
QSslConfiguration config = server->sslConfiguration();
config.setPeerVerifyMode(verifyMode);
server->setSslConfiguration(config);
}
};
#endif
|
