asiva@google.com
89ef11e004
- Modify bin.gypi to ensure that the io library and patch files are read directly from the sources. Remove the source buffer generation step in the gypi files for all the io library and patch files. - Restructure the code a bit to eliminate some code duplication. - Delete runtime/tools/concat_library.py R=ager@google.com, sgjesse@google.com Review URL: https://codereview.chromium.org//14752008 git-svn-id: https://dart.googlecode.com/svn/branches/bleeding_edge/dart@22514 260f80e4-7a28-3924-810f-c04153c831b5
132 lines
4.1 KiB
C++
132 lines
4.1 KiB
C++
// Copyright (c) 2012, the Dart project authors. Please see the AUTHORS file
|
|
// for details. All rights reserved. Use of this source code is governed by a
|
|
// BSD-style license that can be found in the LICENSE file.
|
|
|
|
#ifndef BIN_SECURE_SOCKET_H_
|
|
#define BIN_SECURE_SOCKET_H_
|
|
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <stdio.h>
|
|
#include <sys/types.h>
|
|
|
|
#include <prinit.h>
|
|
#include <prerror.h>
|
|
#include <prnetdb.h>
|
|
#include <ssl.h>
|
|
|
|
#include "platform/globals.h"
|
|
#include "platform/thread.h"
|
|
|
|
#include "bin/builtin.h"
|
|
#include "bin/dartutils.h"
|
|
#include "bin/utils.h"
|
|
|
|
namespace dart {
|
|
namespace bin {
|
|
|
|
static void ThrowException(const char* message) {
|
|
Dart_Handle socket_io_exception =
|
|
DartUtils::NewDartSocketIOException(message, Dart_Null());
|
|
Dart_ThrowException(socket_io_exception);
|
|
}
|
|
|
|
|
|
/* Handle an error reported from the NSS library. */
|
|
static void ThrowPRException(const char* message) {
|
|
PRErrorCode error_code = PR_GetError();
|
|
int error_length = PR_GetErrorTextLength();
|
|
char* error_message = static_cast<char*>(malloc(error_length + 1));
|
|
ASSERT(error_message != NULL);
|
|
int copied_length = PR_GetErrorText(error_message);
|
|
ASSERT(copied_length == error_length);
|
|
error_message[error_length] = '\0';
|
|
OSError os_error_struct(error_code, error_message, OSError::kNSS);
|
|
Dart_Handle os_error = DartUtils::NewDartOSError(&os_error_struct);
|
|
Dart_Handle socket_io_exception =
|
|
DartUtils::NewDartSocketIOException(message, os_error);
|
|
free(error_message);
|
|
Dart_ThrowException(socket_io_exception);
|
|
}
|
|
|
|
/*
|
|
* SSLFilter encapsulates the NSS SSL(TLS) code in a filter, that communicates
|
|
* with the containing _SecureFilterImpl Dart object through four shared
|
|
* ExternalByteArray buffers, for reading and writing plaintext, and
|
|
* reading and writing encrypted text. The filter handles handshaking
|
|
* and certificate verification.
|
|
*/
|
|
class SSLFilter {
|
|
public:
|
|
// These enums must agree with those in sdk/lib/io/secure_socket.dart.
|
|
enum BufferIndex {
|
|
kReadPlaintext,
|
|
kWritePlaintext,
|
|
kReadEncrypted,
|
|
kWriteEncrypted,
|
|
kNumBuffers,
|
|
kFirstEncrypted = kReadEncrypted
|
|
};
|
|
|
|
SSLFilter()
|
|
: string_start_(NULL),
|
|
string_length_(NULL),
|
|
handshake_complete_(NULL),
|
|
bad_certificate_callback_(NULL),
|
|
in_handshake_(false),
|
|
client_certificate_name_(NULL),
|
|
filter_(NULL) { }
|
|
|
|
void Init(Dart_Handle dart_this);
|
|
void Connect(const char* host,
|
|
int port,
|
|
bool is_server,
|
|
const char* certificate_name,
|
|
bool request_client_certificate,
|
|
bool require_client_certificate,
|
|
bool send_client_certificate);
|
|
void Destroy();
|
|
void Handshake();
|
|
void RegisterHandshakeCompleteCallback(Dart_Handle handshake_complete);
|
|
void RegisterBadCertificateCallback(Dart_Handle callback);
|
|
Dart_Handle bad_certificate_callback() { return bad_certificate_callback_; }
|
|
static void InitializeLibrary(const char* certificate_database,
|
|
const char* password,
|
|
bool use_builtin_root_certificates,
|
|
bool report_duplicate_initialization = true);
|
|
intptr_t ProcessBuffer(int bufferIndex);
|
|
Dart_Handle PeerCertificate();
|
|
|
|
private:
|
|
static const int kMemioBufferSize = 20 * KB;
|
|
static bool library_initialized_;
|
|
static const char* password_;
|
|
static dart::Mutex mutex_; // To protect library initialization.
|
|
|
|
uint8_t* buffers_[kNumBuffers];
|
|
int buffer_size_;
|
|
int encrypted_buffer_size_;
|
|
Dart_Handle string_start_;
|
|
Dart_Handle string_length_;
|
|
Dart_Handle dart_buffer_objects_[kNumBuffers];
|
|
Dart_Handle handshake_complete_;
|
|
Dart_Handle bad_certificate_callback_;
|
|
bool in_handshake_;
|
|
bool is_server_;
|
|
char* client_certificate_name_;
|
|
PRFileDesc* filter_;
|
|
|
|
static bool isEncrypted(int i) {
|
|
return static_cast<BufferIndex>(i) >= kFirstEncrypted;
|
|
}
|
|
void InitializeBuffers(Dart_Handle dart_this);
|
|
void InitializePlatformData();
|
|
|
|
DISALLOW_COPY_AND_ASSIGN(SSLFilter);
|
|
};
|
|
|
|
} // namespace bin
|
|
} // namespace dart
|
|
|
|
#endif // BIN_SECURE_SOCKET_H_
|