From 04a5aa7c5ce82f59ef7f1255264f0fdd7400ee77 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Lo=C3=AFc=20Hoguin?= <essen@dev-extend.eu>
Date: Sun, 3 Apr 2011 18:35:35 +0200
Subject: Add initial SSL transport support.

Code is working but hasn't been benchmarked yet.
---
 src/cowboy_ssl_transport.erl | 87 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 87 insertions(+)
 create mode 100644 src/cowboy_ssl_transport.erl

(limited to 'src/cowboy_ssl_transport.erl')

diff --git a/src/cowboy_ssl_transport.erl b/src/cowboy_ssl_transport.erl
new file mode 100644
index 0000000..ec0f8c8
--- /dev/null
+++ b/src/cowboy_ssl_transport.erl
@@ -0,0 +1,87 @@
+%% Copyright (c) 2011, Loïc Hoguin <essen@dev-extend.eu>
+%%
+%% Permission to use, copy, modify, and/or distribute this software for any
+%% purpose with or without fee is hereby granted, provided that the above
+%% copyright notice and this permission notice appear in all copies.
+%%
+%% THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+%% WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+%% MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+%% ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+%% WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+%% ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+%% OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+
+-module(cowboy_ssl_transport).
+-export([name/0, listen/1, accept/1, recv/3, send/2, setopts/2,
+	controlling_process/2, peername/1, close/1]). %% API.
+
+-include("include/types.hrl").
+
+%% API.
+
+-spec name() -> ssl.
+name() -> ssl.
+
+-spec listen([{port, Port::port_number()} | {certfile, CertPath::string()}
+	| {keyfile, KeyPath::string()} | {password, Password::string()}])
+	-> {ok, LSocket::socket()} | {error, Reason::posix()}.
+listen(Opts) ->
+	{port, Port} = lists:keyfind(port, 1, Opts),
+	{certfile, CertFile} = lists:keyfind(certfile, 1, Opts),
+	{keyfile, KeyFile} = lists:keyfind(keyfile, 1, Opts),
+	{password, Password} = lists:keyfind(password, 1, Opts),
+	ssl:listen(Port, [binary, {active, false},
+		{packet, raw}, {reuseaddr, true},
+		{certfile, CertFile}, {keyfile, KeyFile}, {password, Password}]).
+
+-spec accept(LSocket::socket())
+	-> {ok, Socket::socket()} | {error, Reason::closed | timeout | posix()}.
+accept(LSocket) ->
+	case ssl:transport_accept(LSocket) of
+		{ok, CSocket} ->
+			ssl_accept(CSocket);
+		{error, Reason} ->
+			{error, Reason}
+	end.
+
+-spec recv(Socket::socket(), Length::integer(), Timeout::timeout())
+	-> {ok, Packet::term()} | {error, Reason::closed | posix()}.
+recv(Socket, Length, Timeout) ->
+	ssl:recv(Socket, Length, Timeout).
+
+-spec send(Socket::socket(), Packet::iolist())
+	-> ok | {error, Reason::posix()}.
+send(Socket, Packet) ->
+	ssl:send(Socket, Packet).
+
+-spec setopts(Socket::socket(), Opts::list(term()))
+	-> ok | {error, Reason::posix()}.
+setopts(Socket, Opts) ->
+	ssl:setopts(Socket, Opts).
+
+-spec controlling_process(Socket::socket(), Pid::pid())
+	-> ok | {error, Reason::closed | not_owner | posix()}.
+controlling_process(Socket, Pid) ->
+	ssl:controlling_process(Socket, Pid).
+
+-spec peername(Socket::socket())
+	-> {ok, {Address::ip_address(), Port::port_number()}} | {error, posix()}.
+peername(Socket) ->
+	ssl:peername(Socket).
+
+-spec close(Socket::socket()) -> ok.
+close(Socket) ->
+	ssl:close(Socket).
+
+%% Internal.
+
+-spec ssl_accept(CSocket::socket())
+	-> {ok, Socket::socket()} | {error, Reason::closed | timeout | posix()}.
+ssl_accept(CSocket) ->
+	case ssl:ssl_accept(CSocket) of
+		ok ->
+			{ok, CSocket};
+		{error, Reason} ->
+			{error, Reason}
+	end.
-- 
cgit v1.2.3