3 Secure Servers

3 Secure Servers🔗ℹ

class

class ssl.Listener():

constructor (

~host: host :: maybe(String) = #false,

~port: port :: network.ListenPortNumber,

~context: context :: ssl.Context.Server = ssl.Context.Server(),

~reuse: reuse :: Any = #false,

~max_allow_wait: max_allow_wait :: Nat = 5,

) :~ ssl.Listener

Implements an SSL server through an underlying TCP listener. The server is configured via context, while the reuse and max_allow_wait arguments are as for network.TCP.listen.

Call TCPListener.load_certificate_chain and TCPListener.load_private_key to avoid a “no shared cipher” error on accepting connections. The file whose path is collect.file_path(~collect: "openssl", ~file: "test.pem") is a suitable argument for both calls when testing. Since "test.pem" is public, however, such a test configuration obviously provides no security.

An SSL listener is a synchronizable event. It is ready—with itself as its value—when the underlying TCP listener is ready. At that point, however, accepting a connection with ssl.Listener.accept may not complete immediately, because further communication is needed to establish the connection.

An SSL listener implements Closeable, so it can be used with Closeable.let.

function

fun ssl.listen(

~host: host :: maybe(String) = #false,