/***************************************************************************
- * Copyright (C) 2005-08 by the Quassel Project *
+ * Copyright (C) 2005-09 by the Quassel Project *
* devel@quassel-irc.org *
* *
* This program is free software; you can redistribute it and/or modify *
#include "sslserver.h"
-#ifndef QT_NO_OPENSSL
+#ifdef HAVE_SSL
# include <QSslSocket>
#endif
#include <QFile>
#include <QDebug>
+#include "logger.h"
#include "util.h"
-#ifndef QT_NO_OPENSSL
+#ifdef HAVE_SSL
SslServer::SslServer(QObject *parent)
: QTcpServer(parent)
{
- QFile certFile(quasselDir().absolutePath() + "/quasselCert.pem");
- certFile.open(QIODevice::ReadOnly);
- _cert = QSslCertificate(&certFile);
- certFile.close();
-
- certFile.open(QIODevice::ReadOnly);
- _key = QSslKey(&certFile, QSsl::Rsa);
- certFile.close();
-
- _certIsValid = !_cert.isNull() && _cert.isValid() && !_key.isNull();
- if(!_certIsValid) {
- qWarning() << "SslServer: SSL Certificate is either missing or has a wrong format!\n"
- << " Quassel Core will still work, but cannot provide SSL for client connections.\n"
- << " Please see http://quassel-irc.org/faq/cert to learn how to enable SSL support.";
- }
+ setCertificate(quasselDir().absolutePath() + "/quasselCert.pem");
}
QTcpSocket *SslServer::nextPendingConnection() {
}
}
-#endif // QT_NO_OPENSSL
+bool SslServer::setCertificate(const QString &path) {
+ _certIsValid = false;
+
+ if (path.isNull()) {
+ return false;
+ }
+
+ QFile certFile(path);
+ if (! certFile.exists()) {
+ qWarning() << "SslServer: Certificate file" << qPrintable(path) << "does not exist";
+ return false;
+ }
+
+ if (! certFile.open(QIODevice::ReadOnly)) {
+ qWarning()
+ << "SslServer: Failed to open certificate file" << qPrintable(path)
+ << "error:" << certFile.error();
+ return false;
+ }
+ _cert = QSslCertificate(&certFile);
+
+ if (! certFile.reset()) {
+ qWarning() << "SslServer: IO error reading certificate file";
+ return false;
+ }
+
+ _key = QSslKey(&certFile, QSsl::Rsa);
+ certFile.close();
+
+ if (_cert.isNull()) {
+ qWarning() << "SslServer:" << qPrintable(path) << "contains no certificate data";
+ return false;
+ }
+ if (! _cert.isValid()) {
+ qWarning() << "SslServer: Invalid certificate";
+ return false;
+ }
+ if (_key.isNull()) {
+ qWarning() << "SslServer:" << qPrintable(path) << "contains no key data";
+ return false;
+ }
+
+ _certIsValid = true;
+
+ return _certIsValid;
+}
+
+#endif // HAVE_SSL