createSecureSocket static method

Future<SecureSocket> createSecureSocket(String host, String port, SecureSocketConfig secureSocketConfig, { Duration? timeout, })

method that creates and returns a SecureSocket. If decryptPackets is set to true,the TLS keys are logged into a file.

Implementation

static Future<SecureSocket> createSecureSocket(
    String host, String port, SecureSocketConfig secureSocketConfig,
    {Duration? timeout}) async {
  SecurityContext securityContext = SecurityContext.defaultContext;

  // Bound the TCP connect and the TLS handshake so a dead/black-hole network
  // cannot block here indefinitely. Precedence: explicit [timeout] > config.connectTimeout
  // > process default, always capped at AtNetworkTimeouts.maxAllowed.
  final Duration connectTimeout = AtNetworkTimeouts.cap(timeout ??
      secureSocketConfig.connectTimeout ??
      AtNetworkTimeouts.defaultTimeout);

  bool certsProvided = false;
  if (secureSocketConfig.pathToCerts != null &&
      await File(secureSocketConfig.pathToCerts!).exists()) {
    securityContext.setTrustedCertificates(secureSocketConfig.pathToCerts!);
    certsProvided = true;
  }

  if (!secureSocketConfig.decryptPackets) {
    return connectTls(host, int.parse(port),
        context: securityContext, timeout: connectTimeout);
  } else {
    // USE ONLY FOR DEBUGGING / DEMO PURPOSES
    _logger.warning('decryptPackets is set;'
        ' it should only be set for demo or debugging purposes');
    try {
      File? keysFile = secureSocketConfig.tlsKeysSavePath != null
          ? File(secureSocketConfig.tlsKeysSavePath!)
          : null;
      if (!certsProvided) {
        throw AtException(
            'decryptPackets set to true but path to trusted certificated not provided');
      }
      return await connectTls(host, int.parse(port),
          context: securityContext,
          timeout: connectTimeout,
          keyLog: (line) =>
              keysFile?.writeAsStringSync(line, mode: FileMode.append));
    } catch (e) {
      throw AtException(e.toString());
    }
  }
}