net: functions describing ssl connection

include/seastar/net/tls.hh

@@ -529,6 +529,30 @@ namespace tls {
     */
     future<session_data> get_session_resume_data(connected_socket&);
 
+    /**
+     * Returns true if the hanshake has been completed.
+     *
+     * If the socket is not connected a system_error exception will be thrown.
+     * If the socket is not a TLS socket an exception will be thrown.
+    */
+    bool is_operational(connected_socket& socket);
+
+    /**
+     * Returns the cipher suite used in the connection.
+     *
+     * If the socket is not connected a system_error exception will be thrown.
+     * If the socket is not a TLS socket an exception will be thrown.
+    */
+    sstring get_cipher_suite(connected_socket& socket);
+
+    /**
+     * Returns the protocol version used in the connection.
+     *
+     * If the socket is not connected a system_error exception will be thrown.
+     * If the socket is not a TLS socket an exception will be thrown.
+    */
+    sstring get_protocol_version(connected_socket& socket);
+
     std::ostream& operator<<(std::ostream&, const subject_alt_name::value_type&);
     std::ostream& operator<<(std::ostream&, const subject_alt_name&);
 

src/net/tls.cc

@@ -1810,6 +1810,19 @@ class session : public enable_lw_shared_from_this<session> {
     }
 
     struct session_ref;
+
+    bool is_operational() const {
+        return gnutls_record_get_direction(*this) >= 0; // handshake succeeded
+    }
+
+    sstring get_cipher_suite() const {
+        return gnutls_ciphersuite_get(*this);
+    }
+
+    sstring get_protocol_version() const {
+        return gnutls_protocol_get_name(gnutls_protocol_get_version(*this));
+    }
+
 private:
 
     using x509_ctr_ptr = std::unique_ptr<gnutls_x509_crt_int, void (*)(gnutls_x509_crt_t)>;
@@ -1953,6 +1966,15 @@ class tls_connected_socket_impl : public net::connected_socket_impl, public sess
     future<session_data> get_session_resume_data() {
         return _session->get_session_resume_data();
     }
+    bool is_operational() {
+        return _session->is_operational();
+    }
+    sstring get_cipher_suite() {
+        return _session->get_cipher_suite();
+    }
+    sstring get_protocol_version() {
+        return _session->get_protocol_version();
+    }
 };
 
 
@@ -2147,6 +2169,18 @@ future<tls::session_data> tls::get_session_resume_data(connected_socket& socket)
     return get_tls_socket(socket)->get_session_resume_data();
 }
 
+bool tls::is_operational(connected_socket& socket) {
+    return get_tls_socket(socket)->is_operational();
+}
+
+sstring tls::get_cipher_suite(connected_socket& socket) {
+    return get_tls_socket(socket)->get_cipher_suite();
+}
+
+sstring tls::get_protocol_version(connected_socket& socket) {
+    return get_tls_socket(socket)->get_protocol_version();
+}
+
 std::string_view tls::format_as(subject_alt_name_type type) {
     switch (type) {
         case subject_alt_name_type::dnsname: