lib/csharp/src/Transport/TTLSServerSocket.cs

/**
 * Licensed to the Apache Software Foundation (ASF) under one
 * or more contributor license agreements. See the NOTICE file
 * distributed with this work for additional information
 * regarding copyright ownership. The ASF licenses this file
 * to you under the Apache License, Version 2.0 (the
 * "License"); you may not use this file except in compliance
 * with the License. You may obtain a copy of the License at
 *
 *   http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing,
 * software distributed under the License is distributed on an
 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
 * KIND, either express or implied. See the License for the
 * specific language governing permissions and limitations
 * under the License.
 */

using System;
using System.Net.Sockets;
using System.Security.Cryptography.X509Certificates;

namespace Thrift.Transport
{
	/// <summary>
	/// SSL Server Socket Wrapper Class
	/// </summary>
	public class TTLSServerSocket : TServerTransport
	{
		/// <summary>
		/// Underlying tcp server
		/// </summary>
		private TcpListener server = null;

		/// <summary>
		/// The port where the socket listen
		/// </summary>
		private int port = 0;

		/// <summary>
		/// Timeout for the created server socket
		/// </summary>
		private int clientTimeout = 0;

		/// <summary>
		/// Whether or not to wrap new TSocket connections in buffers
		/// </summary>
		private bool useBufferedSockets = false;

		/// <summary>
		/// The servercertificate with the private- and public-key
		/// </summary>
		private X509Certificate serverCertificate;


		/// <summary>
		/// Initializes a new instance of the <see cref="TTLSServerSocket" /> class.
		/// </summary>
		/// <param name="port">The port where the server runs.</param>
		/// <param name="certificate">The certificate object.</param>
		public TTLSServerSocket(int port, X509Certificate2 certificate)
			: this(port,  0, certificate)
		{
		}

		/// <summary>
		/// Initializes a new instance of the <see cref="TTLSServerSocket" /> class.
		/// </summary>
		/// <param name="port">The port where the server runs.</param>
		/// <param name="clientTimeout">Send/receive timeout.</param>
		/// <param name="certificate">The certificate object.</param>
		public TTLSServerSocket(int port, int clientTimeout, X509Certificate2 certificate)
			: this(port, clientTimeout, false, certificate)
		{
		}

		/// <summary>
		/// Initializes a new instance of the <see cref="TTLSServerSocket" /> class.
		/// </summary>
		/// <param name="port">The port where the server runs.</param>
		/// <param name="clientTimeout">Send/receive timeout.</param>
		/// <param name="useBufferedSockets">If set to <c>true</c> [use buffered sockets].</param>
		/// <param name="certificate">The certificate object.</param>
		public TTLSServerSocket(int port, int clientTimeout, bool useBufferedSockets, X509Certificate2 certificate)
		{
			if (!certificate.HasPrivateKey)
			{
				throw new TTransportException(TTransportException.ExceptionType.Unknown, "Your server-certificate needs to have a private key");
			}

			this.port = port;
			this.serverCertificate = certificate;
			this.useBufferedSockets = useBufferedSockets;
			try
			{
				// Create server socket
				server = new TcpListener(System.Net.IPAddress.Any, this.port);
				server.Server.NoDelay = true;
			}
			catch (Exception)
			{
				server = null;
				throw new TTransportException("Could not create ServerSocket on port " + port + ".");
			}
		}

		/// <summary>
		/// Starts the server.
		/// </summary>
		public override void Listen()
		{
			// Make sure accept is not blocking
			if (this.server != null)
			{
				try
				{
					this.server.Start();
				}
				catch (SocketException sx)
				{
					throw new TTransportException("Could not accept on listening socket: " + sx.Message);
				}
			}
		}

		/// <summary>
		/// Callback for Accept Implementation
		/// </summary>
		/// <returns>
		/// TTransport-object.
		/// </returns>
		protected override TTransport AcceptImpl()
		{
			if (this.server == null)
			{
				throw new TTransportException(TTransportException.ExceptionType.NotOpen, "No underlying server socket.");
			}

			try
			{
				TcpClient client = this.server.AcceptTcpClient();
				client.SendTimeout = client.ReceiveTimeout = this.clientTimeout;

				//wrap the client in an SSL Socket passing in the SSL cert
				TTLSSocket socket = new TTLSSocket(client, this.serverCertificate, true);

				socket.setupTLS();

				if (useBufferedSockets)
				{
					TBufferedTransport trans = new TBufferedTransport(socket);
					return trans;
				}
				else
				{
					return socket;
				}
				
			}
			catch (Exception ex)
			{
				throw new TTransportException(ex.ToString());
			}
		}

		/// <summary>
		/// Stops the Server
		/// </summary>
		public override void Close()
		{
			if (this.server != null)
			{
				try
				{
					this.server.Stop();
				}
				catch (Exception ex)  
				{
					throw new TTransportException("WARNING: Could not close server socket: " + ex);
				}
				this.server = null;
			}
		}
	}
}