From ba670f052d72bdc0cc6c3d9c0a8d11c4b937cc4b Mon Sep 17 00:00:00 2001
From: Amauri de Melo Junior <amaurimelojunior@gmail.com>
Date: Sun, 6 Dec 2020 12:04:05 -0300
Subject: [PATCH] Allowing TLS options (for WSS) on App facade

---
 src/Ratchet/App.php            | 30 ++++++++++++----
 src/Ratchet/Tls/TlsOptions.php | 64 ++++++++++++++++++++++++++++++++++
 2 files changed, 88 insertions(+), 6 deletions(-)
 create mode 100644 src/Ratchet/Tls/TlsOptions.php

diff --git a/src/Ratchet/App.php b/src/Ratchet/App.php
index f1cd4ddb..09ed6c49 100644
--- a/src/Ratchet/App.php
+++ b/src/Ratchet/App.php
@@ -1,5 +1,8 @@
 <?php
+
 namespace Ratchet;
+
+use Ratchet\Tls\TlsOptions;
 use React\EventLoop\LoopInterface;
 use React\EventLoop\Factory as LoopFactory;
 use React\Socket\Server as Reactor;
@@ -24,6 +27,8 @@
  * A few configuration assumptions are made and some best-practice security conventions are applied by default.
  */
 class App {
+    const OPTION_TLS = 'tls';
+
     /**
      * @var \Symfony\Component\Routing\RouteCollection
      */
@@ -57,12 +62,19 @@ class App {
     protected $_routeCounter = 0;
 
     /**
-     * @param string        $httpHost   HTTP hostname clients intend to connect to. MUST match JS `new WebSocket('ws://$httpHost');`
-     * @param int           $port       Port to listen on. If 80, assuming production, Flash on 843 otherwise expecting Flash to be proxied through 8843
-     * @param string        $address    IP address to bind to. Default is localhost/proxy only. '0.0.0.0' for any machine.
-     * @param LoopInterface $loop       Specific React\EventLoop to bind the application to. null will create one for you.
+     * @param string          $httpHost HTTP hostname clients intend to connect to. MUST match JS `new WebSocket('ws://$httpHost');`
+     * @param int             $port Port to listen on. If 80, assuming production, Flash on 843 otherwise expecting Flash to be proxied through 8843
+     * @param string          $address IP address to bind to. Default is localhost/proxy only. '0.0.0.0' for any machine.
+     * @param LoopInterface   $loop Specific React\EventLoop to bind the application to. null will create one for you.
+     * @param TlsOptions|null $tlsOptions Set of options for TSL/WSS used on Reactor initialization
      */
-    public function __construct($httpHost = 'localhost', $port = 8080, $address = '127.0.0.1', LoopInterface $loop = null) {
+    public function __construct(
+        $httpHost = 'localhost',
+        $port = 8080,
+        $address = '127.0.0.1',
+        LoopInterface $loop = null,
+        TlsOptions $tlsOptions = null
+    ) {
         if (extension_loaded('xdebug') && getenv('RATCHET_DISABLE_XDEBUG_WARN') === false) {
             trigger_error('XDebug extension detected. Remember to disable this if performance testing or going live!', E_USER_WARNING);
         }
@@ -74,7 +86,13 @@ public function __construct($httpHost = 'localhost', $port = 8080, $address = '1
         $this->httpHost = $httpHost;
         $this->port = $port;
 
-        $socket = new Reactor($address . ':' . $port, $loop);
+        $options = [];
+
+        if (null !== $tlsOptions) {
+            $options[self::OPTION_TLS] = $tlsOptions->toArray();
+        }
+
+        $socket = new Reactor($address . ':' . $port, $loop, $options);
 
         $this->routes  = new RouteCollection;
         $this->_server = new IoServer(new HttpServer(new Router(new UrlMatcher($this->routes, new RequestContext))), $socket, $loop);
diff --git a/src/Ratchet/Tls/TlsOptions.php b/src/Ratchet/Tls/TlsOptions.php
new file mode 100644
index 00000000..e36d35cb
--- /dev/null
+++ b/src/Ratchet/Tls/TlsOptions.php
@@ -0,0 +1,64 @@
+<?php
+
+namespace Ratchet\Tls;
+
+class TlsOptions
+{
+    const FIELD_CERTIFICATE_PATH = 'local_cert';
+    const FIELD_CERTIFICATE_KEY = 'local_pk';
+    const FIELD_ALLOW_SELF_SIGNED = 'allow_self_signed';
+    const FIELD_VERIFY_PEER = 'verify_peer';
+    const FIELD_VERIFY_PEER_NAME = 'verify_peer_name';
+
+    /** @var string */
+    private $certificatePath;
+
+    /** @var string */
+    private $certificateKey;
+
+    /** @var bool */
+    private $allowSelfSigned;
+
+    /** @var bool */
+    private $verifyPeer;
+
+    /** @var bool */
+    private $verifyPeerName;
+
+    /**
+     * TlsOptions constructor.
+     *
+     * @param string $certificatePath
+     * @param string $certificateKey
+     * @param bool   $allowSelfSigned
+     * @param bool   $verifyPeer
+     * @param bool   $verifyPeerName
+     */
+    public function __construct(
+        $certificatePath,
+        $certificateKey,
+        $allowSelfSigned = false,
+        $verifyPeer = true,
+        $verifyPeerName = true
+    ) {
+        $this->certificatePath = $certificatePath;
+        $this->certificateKey = $certificateKey;
+        $this->allowSelfSigned = $allowSelfSigned;
+        $this->verifyPeer = $verifyPeer;
+        $this->verifyPeerName = $verifyPeerName;
+    }
+
+    /**
+     * @return array
+     */
+    public function toArray()
+    {
+        return [
+            self::FIELD_CERTIFICATE_PATH => $this->certificatePath,
+            self::FIELD_CERTIFICATE_KEY => $this->certificateKey,
+            self::FIELD_ALLOW_SELF_SIGNED => $this->allowSelfSigned,
+            self::FIELD_VERIFY_PEER => $this->verifyPeer,
+            self::FIELD_VERIFY_PEER_NAME => $this->verifyPeerName,
+        ];
+    }
+}
\ No newline at end of file