1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
|
/*
* Copyright (c) 2017-2019 Cisco and/or its affiliates.
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at:
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
#pragma once
#include <implementation/socket_producer.h>
#include <openssl/ssl.h>
#include <condition_variable>
#include <mutex>
namespace transport {
namespace implementation {
class P2PSecureProducerSocket;
class TLSProducerSocket : virtual public ProducerSocket {
friend class P2PSecureProducerSocket;
public:
explicit TLSProducerSocket(interface::ProducerSocket *producer_socket,
P2PSecureProducerSocket *parent,
const Name &handshake_name);
~TLSProducerSocket();
uint32_t produce(Name content_name, const uint8_t *buffer, size_t buffer_size,
bool is_last = true, uint32_t start_offset = 0) override {
return produce(content_name, utils::MemBuf::copyBuffer(buffer, buffer_size),
is_last, start_offset);
}
uint32_t produce(Name content_name, std::unique_ptr<utils::MemBuf> &&buffer,
bool is_last = true, uint32_t start_offset = 0) override;
void produce(ContentObject &content_object) override;
void asyncProduce(const Name &suffix, const uint8_t *buf, size_t buffer_size,
bool is_last = true,
uint32_t *start_offset = nullptr) override;
void asyncProduce(Name content_name, std::unique_ptr<utils::MemBuf> &&buffer,
bool is_last, uint32_t offset,
uint32_t **last_segment = nullptr) override;
void asyncProduce(ContentObject &content_object) override;
virtual void accept();
virtual int async_accept();
virtual int setSocketOption(
int socket_option_key,
ProducerInterestCallback socket_option_value) override;
virtual int setSocketOption(
int socket_option_key,
ProducerContentCallback socket_option_value) override;
virtual int getSocketOption(
int socket_option_key,
ProducerContentCallback **socket_option_value) override;
int getSocketOption(int socket_option_key,
ProducerContentCallback &socket_option_value);
int getSocketOption(int socket_option_key,
ProducerInterestCallback &socket_option_value);
using ProducerSocket::getSocketOption;
using ProducerSocket::onInterest;
using ProducerSocket::setSocketOption;
protected:
enum HandshakeState {
UNINITIATED,
CLIENT_HELLO, // when CLIENT_HELLO interest has been received
CLIENT_FINISHED, // when CLIENT_FINISHED interest has been received
SERVER_FINISHED, // when handshake is done
};
/* Callback invoked once an interest has been received and its payload
* decrypted */
ProducerInterestCallback on_interest_input_decrypted_;
ProducerInterestCallback on_interest_process_decrypted_;
ProducerContentCallback on_content_produced_application_;
std::mutex mtx_;
/* Condition variable for the wait */
std::condition_variable cv_;
/* Bool variable, true if there is something to read (an interest arrived) */
bool something_to_read_;
/* Bool variable, true if CLIENT_FINISHED interest has been received */
HandshakeState handshake_state_;
/* First interest that open a secure connection */
transport::core::Name name_;
/* SSL handle */
SSL *ssl_;
SSL_CTX *ctx_;
Packet::MemBufPtr handshake_packet_;
std::unique_ptr<utils::MemBuf> head_;
std::uint32_t last_segment_;
std::uint32_t key_id_;
std::thread *handshake;
P2PSecureProducerSocket *parent_;
bool first_;
Name handshake_name_;
int tls_chunks_;
int to_call_oncontentproduced_;
bool still_writing_;
utils::EventThread encryption_thread_;
void onInterest(ProducerSocket &p, Interest &interest);
void cacheMiss(interface::ProducerSocket &p, Interest &interest);
/* Return the number of read bytes in readbytes */
static int read(BIO *b, char *buf, size_t size, size_t *readbytes);
/* Return the number of read bytes in the return param */
static int readOld(BIO *h, char *buf, int size);
/* Return the number of written bytes in written */
static int write(BIO *b, const char *buf, size_t size, size_t *written);
/* Return the number of written bytes in the return param */
static int writeOld(BIO *h, const char *buf, int num);
static long ctrl(BIO *b, int cmd, long num, void *ptr);
static int addHicnKeyIdCb(SSL *s, unsigned int ext_type, unsigned int context,
const unsigned char **out, size_t *outlen, X509 *x,
size_t chainidx, int *al, void *add_arg);
static void freeHicnKeyIdCb(SSL *s, unsigned int ext_type,
unsigned int context, const unsigned char *out,
void *add_arg);
static int parseHicnKeyIdCb(SSL *s, unsigned int ext_type,
unsigned int context, const unsigned char *in,
size_t inlen, X509 *x, size_t chainidx, int *al,
void *add_arg);
void onContentProduced(interface::ProducerSocket &p,
const std::error_code &err, uint64_t bytes_written);
HandshakeState getHandshakeState();
};
} // namespace implementation
} // end namespace transport
|
