ronin-support 1.0.7 → 1.1.0.rc1

data/lib/ronin/support/network/ssl/mixin.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 #
-# Copyright (c) 2006-2023 Hal Brodigan (postmodern.mod3 at gmail.com)
+# Copyright (c) 2006-2024 Hal Brodigan (postmodern.mod3 at gmail.com)
 #
 # Ronin Support is free software: you can redistribute it and/or modify
 # it under the terms of the GNU Lesser General Public License as published
@@ -17,8 +17,6 @@
 #
 
 require 'ronin/support/network/ssl'
-require 'ronin/support/network/tcp/mixin'
-require 'ronin/support/crypto/cert'
 
 module Ronin
   module Support
@@ -28,50 +26,55 @@ module Ronin
         # Provides helper methods for communicating with SSL-enabled services.
         #
         module Mixin
-          include TCP::Mixin
-
           #
-          # Creates a new SSL Context.
+          # @!macro context_kwargs
+          #   @option kwargs [1, 1.1, 1.2, 1.3, Symbol, nil] :version
+          #     The SSL version to use.
           #
-          # @param [Hash{Symbol => Object}] kwargs
-          #   Additional keyword arguments.
+          #   @option kwargs [Symbol, Boolean] :verify
+          #     Specifies whether to verify the SSL certificate.
+          #     May be one of the following:
+          #
+          #     * `:none`
+          #     * `:peer`
+          #     * `:fail_if_no_peer_cert`
+          #     * `:client_once`
           #
-          # @option kwargs [1, 1.1, 1.2, String, Symbol, nil] :version
-          #   The SSL version to use.
+          #   @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
+          #     The RSA key to use for the SSL context.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
+          #   @option kwargs [String] :key_file
+          #     The path to the SSL `.key` file.
           #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
+          #   @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
+          #     The X509 certificate to use for the SSL context.
           #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
+          #   @option kwargs [String] :cert_file
+          #     The path to the SSL `.crt` file.
           #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
+          #   @option kwargs [String] :ca_bundle
+          #     Path to the CA certificate file or directory.
           #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
+
+          #
+          # Creates a new SSL Context.
           #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
+          # @param [Hash{Symbol => Object}] kwargs
+          #   Additional keyword arguments.
           #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro context_kwargs
           #
           # @return [OpenSSL::SSL::SSLContext]
           #   The newly created SSL Context.
           #
           # @api semipublic
           #
+          # @see SSL.context
+          #
           # @since 0.6.0
           #
           def ssl_context(**kwargs)
-            Network::SSL.context(**kwargs)
+            SSL.context(**kwargs)
           end
 
           #
@@ -83,44 +86,32 @@ module Ronin
           # @param [Hash{Symbol => Object}] kwargs
           #   Additional keyword arguments for {#ssl_context}.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro context_kwargs
           #
           # @return [OpenSSL::SSL::SSLSocket]
           #   The new SSL Socket.
           #
           # @api public
           #
+          # @see SSL.socket
+          #
           # @since 0.6.0
           #
           def ssl_socket(socket,**kwargs)
-            ssl_socket = OpenSSL::SSL::SSLSocket.new(socket,ssl_context(**kwargs))
-
-            ssl_socket.sync_close = true
-            return ssl_socket
+            SSL.socket(socket,**kwargs)
           end
 
+          #
+          # @!macro connect_kwargs
+          #   @option kwargs [String] :bind_host
+          #     The local host to bind to.
+          #
+          #   @option kwargs [Integer] :bind_port
+          #     The local port to bind to.
+          #
+          #   @!macro context_kwargs
+          #
+
           #
           # Tests whether a remote SSLed TCP port is open.
           #
@@ -130,41 +121,13 @@ module Ronin
           # @param [Integer] port
           #   The port to connect to.
           #
-          # @param [String] bind_host
-          #   The local host to bind to.
-          #
-          # @param [Integer] bind_port
-          #   The local port to bind to.
-          #
-          # @param [Integer] timeout (5)
-          #   The maximum time to attempt connecting.
-          #
           # @param [Hash{Symbol => Object}] kwargs
           #   Additional keyword arguments for {#ssl_connect}.
           #
-          # @option options [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
+          # @!macro connect_kwargs
           #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @option kwargs [Integer] :timeout (5)
+          #   The maximum time to attempt connecting.
           #
           # @return [Boolean, nil]
           #   Specifies whether the remote SSLed TCP port is open.
@@ -179,21 +142,12 @@ module Ronin
           #
           # @api public
           #
+          # @see SSL.open?
+          #
           # @since 0.6.0
           #
-          def ssl_open?(host,port, bind_host: nil, bind_port: nil, timeout: 5,
-                                                                   **kwargs)
-            Timeout.timeout(timeout) do
-              ssl_connect(host,port, bind_host: bind_host,
-                                     bind_port: bind_port,
-                                     **kwargs)
-            end
-
-            return true
-          rescue Timeout::Error
-            return nil
-          rescue SocketError, SystemCallError
-            return false
+          def ssl_open?(host,port,**kwargs)
+            SSL.open?(host,port,**kwargs)
           end
 
           #
@@ -205,38 +159,10 @@ module Ronin
           # @param [Integer] port
           #   The port to connect to.
           #
-          # @param [String] bind_host
-          #   The local host to bind to.
-          #
-          # @param [Integer] bind_port
-          #   The local port to bind to.
-          #
           # @param [Hash{Symbol => Object}] kwargs
           #   Additional keyword arguments for {#ssl_socket}.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro connect_kwargs
           #
           # @yield [ssl_socket]
           #   The given block will be passed the new SSL socket. Once the block
@@ -260,23 +186,12 @@ module Ronin
           #   end
           #
           # @see http://rubydoc.info/stdlib/openssl/OpenSSL/SSL/SSLSocket
+          # @see SSL.connect
           #
           # @api public
           #
-          def ssl_connect(host,port, bind_host: nil, bind_port: nil, **kwargs)
-            socket     = tcp_connect(host,port,bind_host: bind_host,
-                                               bind_port: bind_port)
-            ssl_socket = ssl_socket(socket,**kwargs)
-
-            ssl_socket.hostname = host
-            ssl_socket.connect
-
-            if block_given?
-              yield ssl_socket
-              ssl_socket.close
-            else
-              return ssl_socket
-            end
+          def ssl_connect(host,port,**kwargs,&block)
+            SSL.connect(host,port,**kwargs,&block)
           end
 
           #
@@ -291,38 +206,10 @@ module Ronin
           # @param [Integer] port
           #   The port to connect to.
           #
-          # @param [String] bind_host
-          #   The local host to bind to.
-          #
-          # @param [Integer] bind_port
-          #   The local port to bind to.
-          #
           # @param [Hash{Symbol => Object}] kwargs
           #   Additional keyword arguments for {#ssl_connect}.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro connect_kwargs
           #
           # @yield [ssl_socket]
           #   The given block will be passed the newly created SSL Socket.
@@ -332,18 +219,12 @@ module Ronin
           #
           # @api public
           #
+          # @see SSL.connect_and_send
+          #
           # @since 0.6.0
           #
-          def ssl_connect_and_send(data,host,port, bind_host: nil,
-                                                   bind_port: nil,
-                                                   **kwargs)
-            socket = ssl_connect(host,port, bind_host: bind_host,
-                                            bind_port: bind_port,
-                                            **kwargs)
-            socket.write(data)
-
-            yield socket if block_given?
-            return socket
+          def ssl_connect_and_send(data,host,port,**kwargs,&block)
+            SSL.connect_and_send(data,host,port,**kwargs,&block)
           end
 
           #
@@ -356,47 +237,17 @@ module Ronin
           #   The port to connect to.
           #
           # @param [Hash{Symbol => Object}] kwargs
-          #   Additional keyword arguments.
-          #
-          # @option kwargs [String] :bind_host
-          #   The local host to bind to.
-          #
-          # @option kwargs [Integer] :bind_port
-          #   The local port to bind to.
-          #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
+          #   Additional keyword arguments {#ssl_connect}.
           #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro connect_kwargs
           #
           # @return [Crypto::Cert]
           #   The server's certificate.
           #
+          # @see SSL.get_cert
+          #
           def ssl_cert(host,port,**kwargs)
-            socket = ssl_connect(host,port,**kwargs)
-            cert   = Crypto::Cert(socket.peer_cert)
-
-            socket.close
-            return cert
+            SSL.get_cert(host,port,**kwargs)
           end
 
           #
@@ -409,38 +260,10 @@ module Ronin
           # @param [Integer] port
           #   The port to connect to.
           #
-          # @param [String] bind_host
-          #   The local host to bind to.
-          #
-          # @param [Integer] bind_port
-          #   The local port to bind to.
-          #
           # @param [Hash{Symbol => Object}] kwargs
           #   Additional keyword arguments for {#ssl_connect}.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro connect_kwargs
           #
           # @yield [banner]
           #   If a block is given, it will be passed the grabbed banner.
@@ -457,19 +280,12 @@ module Ronin
           #
           # @api public
           #
+          # @see SSL.banner
+          #
           # @since 0.6.0
           #
-          def ssl_banner(host,port, bind_host: nil, bind_port: nil, **kwargs)
-            banner = nil
-
-            ssl_connect(host,port, bind_host: bind_host,
-                                   bind_port: bind_port,
-                                   **kwargs) do |ssl_socket|
-              banner = ssl_socket.readline.strip
-            end
-
-            yield banner if block_given?
-            return banner
+          def ssl_banner(host,port,**kwargs,&block)
+            SSL.banner(host,port,**kwargs,&block)
           end
 
           #
@@ -485,38 +301,10 @@ module Ronin
           # @param [Integer] port
           #   The port to connect to.
           #
-          # @param [String] bind_host
-          #   The local host to bind to.
-          #
-          # @param [Integer] bind_port
-          #   The local port to bind to.
-          #
           # @param [Hash{Symbol => Object}] kwargs
           #   Additional keyword arguments for {#ssl_connect}.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key
-          #   The RSA key to use for the SSL context.
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro connect_kwargs
           #
           # @return [true]
           #   The data was successfully sent.
@@ -528,102 +316,123 @@ module Ronin
           #
           # @api public
           #
+          # @see SSL.send
+          #
           # @since 0.6.0
           #
-          def ssl_send(data,host,port, bind_host: nil, bind_port: nil,**kwargs)
-            ssl_connect(host,port, bind_host: bind_host,
-                                   bind_port: bind_port,**kwargs) do |socket|
-              socket.write(data)
-            end
-
-            return true
+          def ssl_send(data,host,port,**kwargs)
+            SSL.send(data,host,port,**kwargs)
           end
 
+          #
+          # @!macro server_context_kwargs
+          #   @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key (SSL.key)
+          #     The RSA key to use for the SSL context.
+          #
+          #   @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert (SSL.cert)
+          #     The X509 certificate to use for the SSL context.
+          #
+          #   @!macro context_kwargs
+          #
+
           #
           # Accepts an SSL session from an existing TCP socket.
           #
           # @param [TCPSocket] socket
           #   The existing TCP socket.
           #
-          # @param [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] key
-          #   The RSA key to use for the SSL context.
-          #
-          # @param [Crypto::Cert, OpenSSL::X509::Certificate, nil] cert
-          #   The X509 certificate to use for the SSL context.
-          #
           # @param [Hash{Symbol => Object}] kwargs
           #   Additional keyword arguments for {#ssl_socket}.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
-          #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro server_context_kwargs
           #
           # @return [OpenSSL::SSL::SSLSocket]
           #   The new SSL Socket.
           #
           # @api public
           #
+          # @see SSL.server_socket
+          #
           # @since 0.6.0
           #
-          def ssl_server_socket(socket, key:  Network::SSL.key,
-                                        cert: Network::SSL.cert,
-                                        **kwargs)
-            return ssl_socket(socket, cert: cert, key: key, **kwargs)
+          def ssl_server_socket(socket,**kwargs)
+            SSL.server_socket(socket,**kwargs)
           end
 
           #
-          # Creates a new SSL socket listening on a given host and port,
-          # accepting clients in a loop.
+          # @!macro server_kwargs
+          #   @option kwargs [Integer] :port (0)
+          #     The local port to listen on.
           #
-          # @param [Integer] port
-          #   The local port to listen on.
+          #   @option kwargs [String, nil] :host
+          #     The host to bind to.
           #
-          # @param [String] host
-          #   The host to bind to.
+          #   @option kwargs [Integer] :backlog (5)
+          #     The maximum backlog of pending connections.
+          #
+          #   @!macro server_context_kwargs
+          #
+
+          #
+          # Creates a new SSL server listening on a given host and port.
+          #
+          # @param [Hash{Symbol => Object}] kwargs
+          #   Additional keyword arguments for {#ssl_context}.
+          #
+          # @!macro server_kwargs
+          #
+          # @yield [server]
+          #   The given block will be passed the newly created SSL server.
+          #
+          # @yieldparam [OpenSSL::SSL::SSLServer] server
+          #   The newly created SSL server.
+          #
+          # @return [OpenSSL::SSL::SSLServer]
+          #   The newly created SSL server.
+          #
+          # @api public
+          #
+          # @since 1.1.0
           #
-          # @param [Integer] backlog (5)
-          #   The maximum backlog of pending connections.
+          def ssl_server(**kwargs,&block)
+            SSL.server(**kwargs,&block)
+          end
+
+          #
+          # Creates a new temporary SSL server listening on a given host and
+          # port.
           #
           # @param [Hash{Symbol => Object}] kwargs
-          #   Additional keyword arguments for {#ssl_server_socket}.
+          #   Additional keyword arguments for {#ssl_context}.
           #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
+          # @!macro server_kwargs
           #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
+          # @yield [server]
+          #   The given block will be passed the newly created SSL server.
+          #   Once the block has finished, the server will be closed.
           #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key (Network::SSL.key)
-          #   The RSA key to use for the SSL context.
+          # @yieldparam [OpenSSL::SSL::SSLServer] server
+          #   The newly created SSL server.
           #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
+          # @return [OpenSSL::SSL::SSLServer]
+          #   The newly created SSL server.
+          #
+          # @api public
+          #
+          # @since 1.1.0
+          #
+          def ssl_server_session(**kwargs,&block)
+            SSL.server_session(**kwargs,&block)
+          end
+
           #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert (Network::SSL.cert)
-          #   The X509 certificate to use for the SSL context.
+          # Creates a new SSL socket listening on a given host and port,
+          # accepting clients in a loop.
           #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
+          # @param [Hash{Symbol => Object}] kwargs
+          #   Additional keyword arguments for {#ssl_context}.
           #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
+          # @!macro server_kwargs
           #
           # @yield [client]
           #   The given block will be passed the newly connected client.
@@ -645,62 +454,22 @@ module Ronin
           #
           # @api public
           #
+          # @see SSL.server_loop
+          #
           # @since 0.6.0
           #
-          def ssl_server_loop(port: nil, host: nil, backlog: 5, **kwargs)
-            return tcp_server_session(port: port, host: host, backlog: backlog) do |server|
-              loop do
-                client     = server.accept
-                ssl_client = ssl_server_socket(client,**kwargs)
-                ssl_client.accept
-
-                yield ssl_client if block_given?
-                ssl_client.close
-              end
-            end
+          def ssl_server_loop(**kwargs,&block)
+            SSL.server_loop(**kwargs,&block)
           end
 
           #
           # Creates a new SSL socket listening on a given host and port,
           # accepts only one client and then stops listening.
           #
-          # @param [Integer] port
-          #   The local port to listen on.
-          #
-          # @param [String] host
-          #   The host to bind to.
-          #
           # @param [Hash{Symbol => Object}] kwargs
-          #   Additional keyword arguments for {#ssl_server_socket}.
-          #
-          # @option kwargs [Symbol, Boolean] :verify
-          #   Specifies whether to verify the SSL certificate.
-          #   May be one of the following:
-          #
-          #   * `:none`
-          #   * `:peer`
-          #   * `:fail_if_no_peer_cert`
-          #   * `:client_once`
-          #
-          # @option kwargs [Crypto::Key::RSA, OpenSSL::PKey::RSA, nil] :key (Network::SSL.key)
-          #   The RSA key to use for the SSL context.
-          #
-          # @option kwargs [String] :key_file
-          #   The path to the SSL `.key` file.
-          #
-          # @option kwargs [Crypto::Cert, OpenSSL::X509::Certificate, nil] :cert (Network::SSL.cert)
-          #   The X509 certificate to use for the SSL context.
-          #
-          # @option kwargs [String] :cert_file
-          #   The path to the SSL `.crt` file.
+          #   Additional keyword arguments for {#ssl_context}.
           #
-          # @option kwargs [String] :ca_bundle
-          #   Path to the CA certificate file or directory.
-          #
-          # @example
-          #   ssl_accept(1337) do |client|
-          #     client.puts 'lol'
-          #   end
+          # @!macro server_kwargs
           #
           # @yield [client]
           #   The given block will be passed the newly connected client.
@@ -713,6 +482,11 @@ module Ronin
           # @return [nil]
           #
           # @example
+          #   ssl_accept(1337) do |client|
+          #     client.puts 'lol'
+          #   end
+          #
+          # @example Using a self-signed certificate:
           #   # $ openssl genrsa -out ssl.key 1024
           #   # $ openssl req -new -key ssl.key -x509 -days 3653 -out ssl.crt
           #   # $ cat ssl.key ssl.crt > ssl.pem
@@ -723,17 +497,12 @@ module Ronin
           #
           # @api public
           #
+          # @see SSL.accept
+          #
           # @since 0.6.0
           #
-          def ssl_accept(port: nil, host: nil,**kwargs)
-            tcp_server_session(port: port, host: host, backlog: 1) do |server|
-              client     = server.accept
-              ssl_client = ssl_server_socket(client,options)
-              ssl_client.accept
-
-              yield ssl_client if block_given?
-              ssl_client.close
-            end
+          def ssl_accept(**kwargs,&block)
+            SSL.accept(**kwargs,&block)
           end
         end
       end