iiop_ssl_transport.h

来自「这是广泛使用的通信开源项目,对于大容量,高并发的通讯要求完全能够胜任,他广泛可用」· C头文件 代码 · 共 87 行

// -*- C++ -*-

//=============================================================================
/**
 *  @file   IIOP_SSL_Transport.h
 *
 *  IIOP_SSL_Transport.h,v 1.6 2003/07/21 23:51:33 dhinton Exp
 *
 *  @author Ossama Othman <[e-mail]>
 */
//=============================================================================


#ifndef TAO_IIOP_SSL_TRANSPORT_H
#define TAO_IIOP_SSL_TRANSPORT_H

#include /**/ "ace/pre.h"

#include "SSLIOP_Export.h"

#if !defined (ACE_LACKS_PRAGMA_ONCE)
#pragma once
#endif /* ACE_LACKS_PRAGMA_ONCE */

#include "SSLIOP_Current.h"

#include "tao/IIOP_Transport.h"


class TAO_ORB_Core;
class TAO_IIOP_SSL_Connection_Handler;
class TAO_Resume_Handle;


/**
 * @class TAO_IIOP_SSL_Transport
 *
 * @brief
 * IIOP Transport designed to be "SSL aware," i.e. it is
 * aware of the existence of the SSLIOP Transport.   It makes
 * sure that SSL session state from a previous connection is not
 * associated with the non-SSL connection handled by this handler.
 *
 * However, this class overrides the handle_input() method to
 * invalidate the current TSS SSL state during a standard IIOP
 * (insecure) upcall.  This prevents SSL session state from a previous
 * SSL connection from being associated with non-SSL connections
 * processed by this connection handler.  In particular, this is very
 * important for closing a security hole in nested upcalls.  For
 * example, an SSLIOP request is made.  During that secure upcall, an
 * insecure nested upcall is made.  A naive implementation would
 * associate the TSS SSL state from the secure upcall with the
 * insecure upcall.  This implementation closes that security hole.
 */

class TAO_SSLIOP_Export TAO_IIOP_SSL_Transport : public TAO_IIOP_Transport
{
public:
  /// Constructor.
  TAO_IIOP_SSL_Transport (TAO_IIOP_SSL_Connection_Handler *handler,
                          TAO_ORB_Core *orb_core,
                          TAO_SSLIOP_Current_ptr current,
                          CORBA::Boolean flag = 0);

  /// Default destructor.
  ~TAO_IIOP_SSL_Transport (void);

  /** @name Overridden Template Methods
   *
   * Please check the documentation in "tao/Transport.h" for more
   * details.
   */
  virtual int handle_input (TAO_Resume_Handle &rh,
                            ACE_Time_Value *max_wait_time = 0,
                            int block = 0);
protected:

  /// Reference to the SSLIOP::Current object (downcast to gain access
  /// to the low-level management methods).
  TAO_SSLIOP_Current_var current_;

};


#include /**/ "ace/post.h"
#endif /*TAO_IIOP_SSL_TRANSPORT_H*/