X-Git-Url: https://git.quassel-irc.org/?p=quassel.git;a=blobdiff_plain;f=src%2Fcore%2Fsslserver.cpp;h=c31b507f73638c01ce17fe28916bb34fa86c22d0;hp=987db4bad561f78dc20ba9745d49ae1f059f3fde;hb=694f9bfbf7f1af19108461c7e00d133e55082bce;hpb=61c8d84d1c849373e0f115dc748ed45cff95287d diff --git a/src/core/sslserver.cpp b/src/core/sslserver.cpp index 987db4ba..c31b507f 100644 --- a/src/core/sslserver.cpp +++ b/src/core/sslserver.cpp @@ -32,98 +32,106 @@ #ifdef HAVE_SSL SslServer::SslServer(QObject *parent) - : QTcpServer(parent), - _isCertValid(false) + : QTcpServer(parent), + _isCertValid(false) { - static bool sslWarningShown = false; - if(!setCertificate(Quassel::configDirPath() + "quasselCert.pem")) { - if(!sslWarningShown) { - quWarning() - << "SslServer: Unable to set certificate file\n" - << " Quassel Core will still work, but cannot provide SSL for client connections.\n" - << " Please see http://quassel-irc.org/faq/cert to learn how to enable SSL support."; - sslWarningShown=true; + static bool sslWarningShown = false; + if (!setCertificate(Quassel::configDirPath() + "quasselCert.pem")) { + if (!sslWarningShown) { + quWarning() + << "SslServer: Unable to set certificate file\n" + << " Quassel Core will still work, but cannot provide SSL for client connections.\n" + << " Please see http://quassel-irc.org/faq/cert to learn how to enable SSL support."; + sslWarningShown = true; + } } - } } -QTcpSocket *SslServer::nextPendingConnection() { - if(_pendingConnections.isEmpty()) - return 0; - else - return _pendingConnections.takeFirst(); + +QTcpSocket *SslServer::nextPendingConnection() +{ + if (_pendingConnections.isEmpty()) + return 0; + else + return _pendingConnections.takeFirst(); } -void SslServer::incomingConnection(int socketDescriptor) { - QSslSocket *serverSocket = new QSslSocket(this); - if(serverSocket->setSocketDescriptor(socketDescriptor)) { - if(isCertValid()) { - serverSocket->setLocalCertificate(_cert); - serverSocket->setPrivateKey(_key); - serverSocket->addCaCertificates(_ca); + +void SslServer::incomingConnection(int socketDescriptor) +{ + QSslSocket *serverSocket = new QSslSocket(this); + if (serverSocket->setSocketDescriptor(socketDescriptor)) { + if (isCertValid()) { + serverSocket->setLocalCertificate(_cert); + serverSocket->setPrivateKey(_key); + serverSocket->addCaCertificates(_ca); + } + _pendingConnections << serverSocket; + emit newConnection(); + } + else { + delete serverSocket; } - _pendingConnections << serverSocket; - emit newConnection(); - } else { - delete serverSocket; - } } -bool SslServer::setCertificate(const QString &path) { - _isCertValid = false; - - if(path.isEmpty()) - return false; - - QFile certFile(path); - if(!certFile.exists()) { - quWarning() << "SslServer: Certificate file" << qPrintable(path) << "does not exist"; - return false; - } - - if(!certFile.open(QIODevice::ReadOnly)) { - quWarning() - << "SslServer: Failed to open certificate file" << qPrintable(path) - << "error:" << certFile.error(); - return false; - } - - QList certList = QSslCertificate::fromDevice(&certFile); - - if (certList.isEmpty()) { - quWarning() << "SslServer: Certificate file doesn't contain a certificate"; - return false; - } - - _cert = certList[0]; - certList.removeFirst(); // remove server cert - - // store CA and intermediates certs - _ca = certList; - - if(!certFile.reset()) { - quWarning() << "SslServer: IO error reading certificate file"; - return false; - } - - _key = QSslKey(&certFile, QSsl::Rsa); - certFile.close(); - - if(_cert.isNull()) { - quWarning() << "SslServer:" << qPrintable(path) << "contains no certificate data"; - return false; - } - if(!_cert.isValid()) { - quWarning() << "SslServer: Invalid certificate (most likely expired)"; - } - if(_key.isNull()) { - quWarning() << "SslServer:" << qPrintable(path) << "contains no key data"; - return false; - } - - _isCertValid = true; - - return _isCertValid; + +bool SslServer::setCertificate(const QString &path) +{ + _isCertValid = false; + + if (path.isEmpty()) + return false; + + QFile certFile(path); + if (!certFile.exists()) { + quWarning() << "SslServer: Certificate file" << qPrintable(path) << "does not exist"; + return false; + } + + if (!certFile.open(QIODevice::ReadOnly)) { + quWarning() + << "SslServer: Failed to open certificate file" << qPrintable(path) + << "error:" << certFile.error(); + return false; + } + + QList certList = QSslCertificate::fromDevice(&certFile); + + if (certList.isEmpty()) { + quWarning() << "SslServer: Certificate file doesn't contain a certificate"; + return false; + } + + _cert = certList[0]; + certList.removeFirst(); // remove server cert + + // store CA and intermediates certs + _ca = certList; + + if (!certFile.reset()) { + quWarning() << "SslServer: IO error reading certificate file"; + return false; + } + + _key = QSslKey(&certFile, QSsl::Rsa); + certFile.close(); + + if (_cert.isNull()) { + quWarning() << "SslServer:" << qPrintable(path) << "contains no certificate data"; + return false; + } + if (!_cert.isValid()) { + quWarning() << "SslServer: Invalid certificate (most likely expired)"; + } + if (_key.isNull()) { + quWarning() << "SslServer:" << qPrintable(path) << "contains no key data"; + return false; + } + + _isCertValid = true; + + return _isCertValid; } + #endif // HAVE_SSL