sgjesse@google.com
54f6939ffc
The required setting of the internet adddress of the peer for NSS is now using the internet address which have already been looked up in Dart code for normal secure socket connect. In the cases where SecureSocket.secure and RawSecureSocket.secure is used with a host name, the internet address of the already connected socket will be used. If that is not sufficient an IntetnetAddress from DNS lookup in Dart can be passed instead of just a host name. R=ajohnsen@google.com, whesse@google.com BUG=http://dartbug.com/11103 Review URL: https://codereview.chromium.org//17381012 git-svn-id: https://dart.googlecode.com/svn/branches/bleeding_edge/dart@24174 260f80e4-7a28-3924-810f-c04153c831b5
130 lines
4.0 KiB
C++
130 lines
4.0 KiB
C++
// Copyright (c) 2012, the Dart project authors. Please see the AUTHORS file
|
|
// for details. All rights reserved. Use of this source code is governed by a
|
|
// BSD-style license that can be found in the LICENSE file.
|
|
|
|
#ifndef BIN_SECURE_SOCKET_H_
|
|
#define BIN_SECURE_SOCKET_H_
|
|
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <stdio.h>
|
|
#include <sys/types.h>
|
|
|
|
#include <prinit.h>
|
|
#include <prerror.h>
|
|
#include <prnetdb.h>
|
|
#include <ssl.h>
|
|
|
|
#include "platform/globals.h"
|
|
#include "platform/thread.h"
|
|
|
|
#include "bin/builtin.h"
|
|
#include "bin/dartutils.h"
|
|
#include "bin/socket.h"
|
|
#include "bin/utils.h"
|
|
|
|
namespace dart {
|
|
namespace bin {
|
|
|
|
static void ThrowException(const char* message) {
|
|
Dart_Handle socket_exception =
|
|
DartUtils::NewDartSocketException(message, Dart_Null());
|
|
Dart_ThrowException(socket_exception);
|
|
}
|
|
|
|
|
|
/* Handle an error reported from the NSS library. */
|
|
static void ThrowPRException(const char* message) {
|
|
PRErrorCode error_code = PR_GetError();
|
|
const char* error_message = PR_ErrorToString(error_code, PR_LANGUAGE_EN);
|
|
OSError os_error_struct(error_code, error_message, OSError::kNSS);
|
|
Dart_Handle os_error = DartUtils::NewDartOSError(&os_error_struct);
|
|
Dart_Handle socket_exception =
|
|
DartUtils::NewDartSocketException(message, os_error);
|
|
Dart_ThrowException(socket_exception);
|
|
}
|
|
|
|
/*
|
|
* SSLFilter encapsulates the NSS SSL(TLS) code in a filter, that communicates
|
|
* with the containing _SecureFilterImpl Dart object through four shared
|
|
* ExternalByteArray buffers, for reading and writing plaintext, and
|
|
* reading and writing encrypted text. The filter handles handshaking
|
|
* and certificate verification.
|
|
*/
|
|
class SSLFilter {
|
|
public:
|
|
// These enums must agree with those in sdk/lib/io/secure_socket.dart.
|
|
enum BufferIndex {
|
|
kReadPlaintext,
|
|
kWritePlaintext,
|
|
kReadEncrypted,
|
|
kWriteEncrypted,
|
|
kNumBuffers,
|
|
kFirstEncrypted = kReadEncrypted
|
|
};
|
|
|
|
SSLFilter()
|
|
: string_start_(NULL),
|
|
string_length_(NULL),
|
|
handshake_complete_(NULL),
|
|
bad_certificate_callback_(NULL),
|
|
in_handshake_(false),
|
|
client_certificate_name_(NULL),
|
|
filter_(NULL) { }
|
|
|
|
void Init(Dart_Handle dart_this);
|
|
void Connect(const char* host,
|
|
RawAddr* raw_addr,
|
|
int port,
|
|
bool is_server,
|
|
const char* certificate_name,
|
|
bool request_client_certificate,
|
|
bool require_client_certificate,
|
|
bool send_client_certificate);
|
|
void Destroy();
|
|
void Handshake();
|
|
void RegisterHandshakeCompleteCallback(Dart_Handle handshake_complete);
|
|
void RegisterBadCertificateCallback(Dart_Handle callback);
|
|
Dart_Handle bad_certificate_callback() {
|
|
return Dart_HandleFromPersistent(bad_certificate_callback_);
|
|
}
|
|
static void InitializeLibrary(const char* certificate_database,
|
|
const char* password,
|
|
bool use_builtin_root_certificates,
|
|
bool report_duplicate_initialization = true);
|
|
intptr_t ProcessBuffer(int bufferIndex);
|
|
Dart_Handle PeerCertificate();
|
|
|
|
private:
|
|
static const int kMemioBufferSize = 20 * KB;
|
|
static bool library_initialized_;
|
|
static const char* password_;
|
|
static dart::Mutex mutex_; // To protect library initialization.
|
|
|
|
uint8_t* buffers_[kNumBuffers];
|
|
int buffer_size_;
|
|
int encrypted_buffer_size_;
|
|
Dart_PersistentHandle string_start_;
|
|
Dart_PersistentHandle string_length_;
|
|
Dart_PersistentHandle dart_buffer_objects_[kNumBuffers];
|
|
Dart_PersistentHandle handshake_complete_;
|
|
Dart_PersistentHandle bad_certificate_callback_;
|
|
bool in_handshake_;
|
|
bool is_server_;
|
|
char* client_certificate_name_;
|
|
PRFileDesc* filter_;
|
|
|
|
static bool isEncrypted(int i) {
|
|
return static_cast<BufferIndex>(i) >= kFirstEncrypted;
|
|
}
|
|
void InitializeBuffers(Dart_Handle dart_this);
|
|
void InitializePlatformData();
|
|
|
|
DISALLOW_COPY_AND_ASSIGN(SSLFilter);
|
|
};
|
|
|
|
} // namespace bin
|
|
} // namespace dart
|
|
|
|
#endif // BIN_SECURE_SOCKET_H_
|