/// <summary>
/// 反初始化SSL环境
/// </summary>
public virtual void Uninitialize()
{
if (pServer != IntPtr.Zero)
{
SSLSdk.HP_SSLServer_CleanupSSLContext(pServer);
}
}
/// <summary>
/// 反初始化SSL环境
/// </summary>
public virtual void Uninitialize()
{
if (pClient != IntPtr.Zero)
{
SSLSdk.HP_SSLClient_CleanupSSLContext(pClient);
}
}
/// <summary>
/// 反初始化SSL环境
/// </summary>
protected virtual void Uninitialize()
{
if (Interlocked.Decrement(ref ObjectReferer) == 0 && pAgent != IntPtr.Zero)
{
SSLSdk.HP_SSLAgent_CleanupSSLContext(pAgent);
}
}
/// <summary>
/// 初始化SSL环境
/// </summary>
/// <returns></returns>
public virtual bool Initialize()
{
if (pClient != IntPtr.Zero)
{
PemCertFile = string.IsNullOrWhiteSpace(PemCertFile) ? null : PemCertFile;
PemKeyFile = string.IsNullOrWhiteSpace(PemKeyFile) ? null : PemKeyFile;
KeyPasswod = string.IsNullOrWhiteSpace(KeyPasswod) ? null : KeyPasswod;
CAPemCertFileOrPath = string.IsNullOrWhiteSpace(CAPemCertFileOrPath) ? null : CAPemCertFileOrPath;
return(SSLSdk.HP_SSLClient_SetupSSLContext(pClient, VerifyMode, PemCertFile, PemKeyFile, KeyPasswod, CAPemCertFileOrPath));
}
return(false);
}
/// <summary>
/// 名称：增加 SNI 主机证书（只用于服务端）
/// 描述：SSL 服务端在 SetupSSLContext() 成功后可以调用本方法增加多个 SNI 主机证书
/// 返回值：正数 -- 成功，并返回 SNI 主机证书对应的索引，该索引用于在 SNI 回调函数中定位 SNI 主机
/// 返回值：负数 -- 失败，可通过 SYS_GetLastError() 获取失败原因
/// </summary>
/// <param name="verifyMode">SSL 验证模式（参考 EnSSLVerifyMode）</param>
/// <param name="pemCertFile">证书文件</param>
/// <param name="pemKeyFile">私钥文件</param>
/// <param name="keyPasswod">私钥密码（没有密码则为空）</param>
/// <param name="caPemCertFileOrPath">CA 证书文件或目录（单向验证可选）</param>
/// <returns></returns>
public int AddServerContext(SSLVerifyMode verifyMode, string pemCertFile, string pemKeyFile, string keyPasswod, string caPemCertFileOrPath)
{
if (string.IsNullOrWhiteSpace(pemCertFile))
{
throw new ArgumentException("参数无效", pemCertFile);
}
if (string.IsNullOrWhiteSpace(pemKeyFile))
{
throw new ArgumentException("参数无效", pemKeyFile);
}
keyPasswod = string.IsNullOrWhiteSpace(keyPasswod) ? null : keyPasswod;
caPemCertFileOrPath = string.IsNullOrWhiteSpace(caPemCertFileOrPath) ? null : caPemCertFileOrPath;
return(SSLSdk.HP_SSLServer_AddSSLContext(pServer, verifyMode, pemCertFile, pemKeyFile, KeyPasswod, caPemCertFileOrPath));
}
public override void Destroy()
{
Stop();
if (pClient != IntPtr.Zero)
{
SSLSdk.Destroy_HP_SSLClient(pClient);
pClient = IntPtr.Zero;
}
if (pListener != IntPtr.Zero)
{
Sdk.Destroy_HP_TcpClientListener(pListener);
pListener = IntPtr.Zero;
}
IsCreate = false;
}
/// <summary>
/// 终止服务并释放资源
/// </summary>
public override void Destroy()
{
Stop();
if (pServer != IntPtr.Zero)
{
SSLSdk.Destroy_HP_SSLPullServer(pServer);
pServer = IntPtr.Zero;
}
if (pListener != IntPtr.Zero)
{
Sdk.Destroy_HP_TcpPullServerListener(pListener);
pListener = IntPtr.Zero;
}
IsCreate = false;
}
/// <summary>
/// 初始化SSL环境
/// </summary>
/// <returns></returns>
protected virtual bool Initialize()
{
lock (SSLInitLock)
{
//if (SSLSdk.HP_SSL_IsValid() == false)
{
PemCertFile = string.IsNullOrWhiteSpace(PemCertFile) ? null : PemCertFile;
PemKeyFile = string.IsNullOrWhiteSpace(PemKeyFile) ? null : PemKeyFile;
KeyPasswod = string.IsNullOrWhiteSpace(KeyPasswod) ? null : KeyPasswod;
CAPemCertFileOrPath = string.IsNullOrWhiteSpace(CAPemCertFileOrPath) ? null : CAPemCertFileOrPath;
var ret = SSLSdk.HP_SSLAgent_SetupSSLContext(pAgent, VerifyMode, PemCertFile, PemKeyFile, KeyPasswod, CAPemCertFileOrPath);
System.Diagnostics.Trace.WriteLine($"ssl Initialize : {ret}");
}
return(true);
}
}
/// <summary>
/// 名称：增加 SNI 主机证书（只用于服务端）
/// 描述：SSL 服务端在 SetupSSLContext() 成功后可以调用本方法增加多个 SNI 主机证书
/// 返回值：正数 -- 成功，并返回 SNI 主机证书对应的索引，该索引用于在 SNI 回调函数中定位 SNI 主机
/// 返回值：负数 -- 失败，可通过 SYS_GetLastError() 获取失败原因
/// </summary>
/// <param name="verifyMode">SSL 验证模式（参考 EnSSLVerifyMode）</param>
/// <param name="pemCertFile">证书文件</param>
/// <param name="pemKeyFile">私钥文件</param>
/// <param name="keyPasswod">私钥密码（没有密码则为空）</param>
/// <param name="caPemCertFileOrPath">CA 证书文件或目录（单向验证可选）</param>
/// <returns></returns>
public int AddServerContext(SSLVerifyMode verifyMode, string pemCertFile, string pemKeyFile, string keyPasswod, string caPemCertFileOrPath)
{
/*if (SSLSdk.HP_SSL_IsValid() == false)
* {
* throw new InvalidOperationException("请先调用Initialize()方法初始化SSL环境");
* }*/
if (string.IsNullOrWhiteSpace(pemCertFile))
{
throw new ArgumentException("参数无效", pemCertFile);
}
if (string.IsNullOrWhiteSpace(pemKeyFile))
{
throw new ArgumentException("参数无效", pemKeyFile);
}
keyPasswod = string.IsNullOrWhiteSpace(keyPasswod) ? null : keyPasswod;
caPemCertFileOrPath = string.IsNullOrWhiteSpace(caPemCertFileOrPath) ? null : caPemCertFileOrPath;
return(SSLSdk.HP_SSLServer_AddSSLContext(pServer, verifyMode, pemCertFile, pemKeyFile, KeyPasswod, caPemCertFileOrPath));
}
protected override bool CreateListener()
{
if (IsCreate == true || pListener != IntPtr.Zero || pServer != IntPtr.Zero)
{
return(false);
}
pListener = Sdk.Create_HP_TcpServerListener();
if (pListener == IntPtr.Zero)
{
return(false);
}
pServer = SSLSdk.Create_HP_SSLServer(pListener);
if (pServer == IntPtr.Zero)
{
return(false);
}
IsCreate = true;
return(true);
}
/// <summary>
/// 创建socket监听&服务组件
/// </summary>
/// <returns></returns>
protected override bool CreateListener()
{
if (IsCreate == true || pListener != IntPtr.Zero || pAgent != IntPtr.Zero)
{
return(false);
}
pListener = Sdk.Create_HP_TcpPackAgentListener();
if (pListener == IntPtr.Zero)
{
return(false);
}
pAgent = SSLSdk.Create_HP_SSLPackAgent(pListener);
if (pAgent == IntPtr.Zero)
{
return(false);
}
IsCreate = true;
return(true);
}
/// <summary>
/// 启动 SSL 握手
/// 当通信组件设置为非自动握手时，需要调用本方法启动 SSL 握手
/// </summary>
/// <param name="connId"></param>
/// <returns></returns>
public bool StartSSLHandShake()
{
return(SSLSdk.HP_SSLClient_StartSSLHandShake(pClient));
}
/// <summary>
/// 启动 SSL 握手
/// 当通信组件设置为非自动握手时，需要调用本方法启动 SSL 握手
/// </summary>
/// <param name="connId"></param>
/// <returns></returns>
public bool StartSSLHandShake(IntPtr connId)
{
return(SSLSdk.HP_SSLAgent_StartSSLHandShake(pAgent, connId));
}
/// <summary>
/// 启动 SSL 握手
/// 当通信组件设置为非自动握手时，需要调用本方法启动 SSL 握手
/// </summary>
/// <param name="connId"></param>
/// <returns></returns>
public bool StartSSLHandShake(IntPtr connId)
{
return(SSLSdk.HP_SSLServer_StartSSLHandShake(pServer, connId));
}
