# Net::Server::Proto::SSL - Net::Server SSL protocol. - perldoc - [phpMan]

## NAME
    [Net::Server::Proto::SSL](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AProto%3A%3ASSL/markdown) - [Net::Server](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer/markdown) SSL protocol.

## SYNOPSIS
    Until this release, it was preferable to use the [Net::Server::Proto::SSLEAY](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AProto%3A%3ASSLEAY/markdown) module. Recent
    versions include code that overcomes original limitations.

    See [Net::Server::Proto](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AProto/markdown). See [Net::Server::Proto::SSLEAY](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AProto%3A%3ASSLEAY/markdown).

        use base qw([Net::Server::HTTP](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AHTTP/markdown));
        main->run(
            proto => 'ssl',
            SSL_key_file  => "/path/to/my/file.key",
            SSL_cert_file => "/path/to/my/file.crt",
        );


        # OR

        sub SSL_key_file  { "/path/to/my/file.key" }
        sub SSL_cert_file { "/path/to/my/file.crt" }
        main->run(proto = 'ssl');


        # OR

        main->run(
            port => [443, 8443, "80/tcp"],  # bind to two ssl ports and one tcp
            proto => "ssl",       # use ssl as the default
            ipv  => "*",          # bind both IPv4 and IPv6 interfaces
            SSL_key_file  => "/path/to/my/file.key",
            SSL_cert_file => "/path/to/my/file.crt",
        );


        # OR

        main->run(port => [{
            port  => "443",
            proto => "ssl",
            # ipv => 4, # default - only do IPv4
            SSL_key_file  => "/path/to/my/file.key",
            SSL_cert_file => "/path/to/my/file.crt",
        }, {
            port  => "8443",
            proto => "ssl",
            ipv   => "*", # IPv4 and IPv6
            SSL_key_file  => "/path/to/my/file2.key", # separate key
            SSL_cert_file => "/path/to/my/file2.crt", # separate cert

            SSL_foo => 1, # Any key prefixed with SSL_ passed as a port hashref
                          # key/value will automatically be passed to [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown)
        }]);

## DESCRIPTION
    Protocol module for [Net::Server](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer/markdown) based on [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown). This module implements a secure socket
    layer over tcp (also known as SSL) via the [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown) module. If this module does not work
    in your situation, please also consider using the SSLEAY protocol ([Net::Server::Proto::SSLEAY](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AProto%3A%3ASSLEAY/markdown))
    which interfaces directly with [Net::SSLeay](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3ASSLeay/markdown). See [Net::Server::Proto](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AProto/markdown).

    If you know that your server will only need IPv4 (which is the default for [Net::Server](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer/markdown)), you can
    load [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown) in inet4 mode which will prevent it from using Socket6, [IO::Socket::IP](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3AIP/markdown), or
    [IO::Socket::INET6](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3AINET6/markdown) since they would represent additional and unused overhead.

        use [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown) qw(inet4);
        use base qw([Net::Server::Fork](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AFork/markdown));

        __PACKAGE__->run(proto => "ssl");

## PARAMETERS
    In addition to the normal [Net::Server](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer/markdown) parameters, any of the SSL parameters from [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown)
    may also be specified. See [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown) for information on setting this up. All arguments
    prefixed with SSL_ will be passed to the [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown)->configure method.

## BUGS
    Until version [Net::Server](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer/markdown) version 2, [Net::Server::Proto::SSL](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer%3A%3AProto%3A%3ASSL/markdown) used the default
    [IO::Socket::SSL::accept](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL%3A%3Aaccept/markdown) method. This old approach introduces a DDOS vulnerability into the
    server, where the socket is accepted, but the parent server then has to block until the client
    negotiates the SSL connection. This has now been overcome by overriding the accept method and
    accepting the SSL negotiation after the parent socket has had the chance to go back to
    listening.

## LICENCE
    Distributed under the same terms as [Net::Server](https://www.chedong.com/phpMan.php/perldoc/Net%3A%3AServer/markdown)

## THANKS
    Thanks to Vadim for pointing out the [IO::Socket::SSL](https://www.chedong.com/phpMan.php/perldoc/IO%3A%3ASocket%3A%3ASSL/markdown) accept was returning objects blessed into
    the wrong class.