| Index: remoting/jingle_glue/ssl_socket_adapter.cc
|
| diff --git a/remoting/jingle_glue/ssl_socket_adapter.cc b/remoting/jingle_glue/ssl_socket_adapter.cc
|
| new file mode 100644
|
| index 0000000000000000000000000000000000000000..03abdc470070c36192377d1e0116ea603fa8a8d6
|
| --- /dev/null
|
| +++ b/remoting/jingle_glue/ssl_socket_adapter.cc
|
| @@ -0,0 +1,359 @@
|
| +// Copyright (c) 2010 The Chromium Authors. All rights reserved.
|
| +// Use of this source code is governed by a BSD-style license that can be
|
| +// found in the LICENSE file.
|
| +
|
| +#include "remoting/jingle_glue/ssl_socket_adapter.h"
|
| +
|
| +#include "base/compiler_specific.h"
|
| +#include "base/message_loop.h"
|
| +#include "net/base/address_list.h"
|
| +#include "net/base/net_errors.h"
|
| +#include "net/base/ssl_config_service.h"
|
| +#include "net/base/sys_addrinfo.h"
|
| +#include "net/socket/client_socket_factory.h"
|
| +#include "net/url_request/url_request_context.h"
|
| +
|
| +namespace remoting {
|
| +
|
| +namespace {
|
| +
|
| +// Convert values from <errno.h> to values from "net/base/net_errors.h"
|
| +int MapPosixError(int err) {
|
| + // There are numerous posix error codes, but these are the ones we thus far
|
| + // find interesting.
|
| + switch (err) {
|
| + case EAGAIN:
|
| +#if EWOULDBLOCK != EAGAIN
|
| + case EWOULDBLOCK:
|
| +#endif
|
| + return net::ERR_IO_PENDING;
|
| + case ENETDOWN:
|
| + return net::ERR_INTERNET_DISCONNECTED;
|
| + case ETIMEDOUT:
|
| + return net::ERR_TIMED_OUT;
|
| + case ECONNRESET:
|
| + case ENETRESET: // Related to keep-alive
|
| + return net::ERR_CONNECTION_RESET;
|
| + case ECONNABORTED:
|
| + return net::ERR_CONNECTION_ABORTED;
|
| + case ECONNREFUSED:
|
| + return net::ERR_CONNECTION_REFUSED;
|
| + case EHOSTUNREACH:
|
| + case ENETUNREACH:
|
| + return net::ERR_ADDRESS_UNREACHABLE;
|
| + case EADDRNOTAVAIL:
|
| + return net::ERR_ADDRESS_INVALID;
|
| + case 0:
|
| + return net::OK;
|
| + default:
|
| + LOG(WARNING) << "Unknown error " << err << " mapped to net::ERR_FAILED";
|
| + return net::ERR_FAILED;
|
| + }
|
| +}
|
| +
|
| +} // namespace
|
| +
|
| +SSLSocketAdapter* SSLSocketAdapter::Create(AsyncSocket* socket) {
|
| + return new SSLSocketAdapter(socket);
|
| +}
|
| +
|
| +SSLSocketAdapter::SSLSocketAdapter(AsyncSocket* socket)
|
| + : SSLAdapter(socket),
|
| + ignore_bad_cert_(false),
|
| + ALLOW_THIS_IN_INITIALIZER_LIST(
|
| + connected_callback_(this, &SSLSocketAdapter::OnConnected)),
|
| + ALLOW_THIS_IN_INITIALIZER_LIST(
|
| + read_callback_(this, &SSLSocketAdapter::OnRead)),
|
| + ALLOW_THIS_IN_INITIALIZER_LIST(
|
| + write_callback_(this, &SSLSocketAdapter::OnWrite)),
|
| + ssl_state_(SSLSTATE_NONE),
|
| + read_state_(IOSTATE_NONE),
|
| + write_state_(IOSTATE_NONE) {
|
| + transport_socket_ = new TransportSocket(socket, this);
|
| +}
|
| +
|
| +int SSLSocketAdapter::StartSSL(const char* hostname, bool restartable) {
|
| + DCHECK(!restartable);
|
| + hostname_ = hostname;
|
| +
|
| + if (socket_->GetState() != Socket::CS_CONNECTED) {
|
| + ssl_state_ = SSLSTATE_WAIT;
|
| + return 0;
|
| + } else {
|
| + return BeginSSL();
|
| + }
|
| +}
|
| +
|
| +int SSLSocketAdapter::BeginSSL() {
|
| + if (!MessageLoop::current()) {
|
| + // Certificate verification is done via the Chrome message loop.
|
| + // Without this check, if we don't have a chrome message loop the
|
| + // SSL connection just hangs silently.
|
| + LOG(DFATAL) << "Chrome message loop (needed by SSL certificate "
|
| + << "verification) does not exist";
|
| + return net::ERR_UNEXPECTED;
|
| + }
|
| +
|
| + // SSLConfigService is not thread-safe, and the default values for SSLConfig
|
| + // are correct for us, so we don't use the config service to initialize this
|
| + // object.
|
| + net::SSLConfig ssl_config;
|
| + transport_socket_->set_addr(talk_base::SocketAddress(hostname_, 0));
|
| + ssl_socket_.reset(
|
| + net::ClientSocketFactory::GetDefaultFactory()->CreateSSLClientSocket(
|
| + transport_socket_, hostname_.c_str(), ssl_config));
|
| +
|
| + int result = ssl_socket_->Connect(&connected_callback_);
|
| +
|
| + if (result == net::ERR_IO_PENDING || result == net::OK) {
|
| + return 0;
|
| + } else {
|
| + LOG(ERROR) << "Could not start SSL: " << net::ErrorToString(result);
|
| + return result;
|
| + }
|
| +}
|
| +
|
| +int SSLSocketAdapter::Send(const void* buf, size_t len) {
|
| + if (ssl_state_ != SSLSTATE_CONNECTED) {
|
| + return AsyncSocketAdapter::Send(buf, len);
|
| + } else {
|
| + scoped_refptr<net::IOBuffer> transport_buf = new net::IOBuffer(len);
|
| + memcpy(transport_buf->data(), buf, len);
|
| +
|
| + int result = ssl_socket_->Write(transport_buf, len, NULL);
|
| + if (result == net::ERR_IO_PENDING) {
|
| + SetError(EWOULDBLOCK);
|
| + }
|
| + transport_buf = NULL;
|
| + return result;
|
| + }
|
| +}
|
| +
|
| +int SSLSocketAdapter::Recv(void* buf, size_t len) {
|
| + switch (ssl_state_) {
|
| + case SSLSTATE_NONE:
|
| + return AsyncSocketAdapter::Recv(buf, len);
|
| +
|
| + case SSLSTATE_WAIT:
|
| + SetError(EWOULDBLOCK);
|
| + return -1;
|
| +
|
| + case SSLSTATE_CONNECTED:
|
| + switch (read_state_) {
|
| + case IOSTATE_NONE: {
|
| + transport_buf_ = new net::IOBuffer(len);
|
| + int result = ssl_socket_->Read(transport_buf_, len, &read_callback_);
|
| + if (result >= 0) {
|
| + memcpy(buf, transport_buf_->data(), len);
|
| + }
|
| +
|
| + if (result == net::ERR_IO_PENDING) {
|
| + read_state_ = IOSTATE_PENDING;
|
| + SetError(EWOULDBLOCK);
|
| + } else {
|
| + if (result < 0) {
|
| + SetError(result);
|
| + LOG(INFO) << "Socket error " << result;
|
| + }
|
| + transport_buf_ = NULL;
|
| + }
|
| + return result;
|
| + }
|
| + case IOSTATE_PENDING:
|
| + SetError(EWOULDBLOCK);
|
| + return -1;
|
| +
|
| + case IOSTATE_COMPLETE:
|
| + memcpy(buf, transport_buf_->data(), len);
|
| + transport_buf_ = NULL;
|
| + read_state_ = IOSTATE_NONE;
|
| + return data_transferred_;
|
| + }
|
| + }
|
| +
|
| + NOTREACHED();
|
| + return -1;
|
| +}
|
| +
|
| +void SSLSocketAdapter::OnConnected(int result) {
|
| + if (result == net::OK) {
|
| + ssl_state_ = SSLSTATE_CONNECTED;
|
| + OnConnectEvent(this);
|
| + } else {
|
| + LOG(WARNING) << "OnConnected failed with error " << result;
|
| + }
|
| +}
|
| +
|
| +void SSLSocketAdapter::OnRead(int result) {
|
| + DCHECK(read_state_ == IOSTATE_PENDING);
|
| + read_state_ = IOSTATE_COMPLETE;
|
| + data_transferred_ = result;
|
| + AsyncSocketAdapter::OnReadEvent(this);
|
| +}
|
| +
|
| +void SSLSocketAdapter::OnWrite(int result) {
|
| + DCHECK(write_state_ == IOSTATE_PENDING);
|
| + write_state_ = IOSTATE_COMPLETE;
|
| + data_transferred_ = result;
|
| + AsyncSocketAdapter::OnWriteEvent(this);
|
| +}
|
| +
|
| +void SSLSocketAdapter::OnConnectEvent(talk_base::AsyncSocket* socket) {
|
| + if (ssl_state_ != SSLSTATE_WAIT) {
|
| + AsyncSocketAdapter::OnConnectEvent(socket);
|
| + } else {
|
| + ssl_state_ = SSLSTATE_NONE;
|
| + int result = BeginSSL();
|
| + if (0 != result) {
|
| + // TODO(zork): Handle this case gracefully.
|
| + LOG(WARNING) << "BeginSSL() failed with " << result;
|
| + }
|
| + }
|
| +}
|
| +
|
| +TransportSocket::TransportSocket(talk_base::AsyncSocket* socket,
|
| + SSLSocketAdapter *ssl_adapter)
|
| + : read_callback_(NULL),
|
| + write_callback_(NULL),
|
| + read_buffer_len_(0),
|
| + write_buffer_len_(0),
|
| + socket_(socket) {
|
| + socket_->SignalReadEvent.connect(this, &TransportSocket::OnReadEvent);
|
| + socket_->SignalWriteEvent.connect(this, &TransportSocket::OnWriteEvent);
|
| +}
|
| +
|
| +int TransportSocket::Connect(net::CompletionCallback* callback) {
|
| + // Connect is never called by SSLClientSocket, instead SSLSocketAdapter
|
| + // calls Connect() on socket_ directly.
|
| + NOTREACHED();
|
| + return false;
|
| +}
|
| +
|
| +void TransportSocket::Disconnect() {
|
| + socket_->Close();
|
| +}
|
| +
|
| +bool TransportSocket::IsConnected() const {
|
| + return (socket_->GetState() == talk_base::Socket::CS_CONNECTED);
|
| +}
|
| +
|
| +bool TransportSocket::IsConnectedAndIdle() const {
|
| + // Not implemented.
|
| + NOTREACHED();
|
| + return false;
|
| +}
|
| +
|
| +int TransportSocket::GetPeerAddress(net::AddressList* address) const {
|
| + talk_base::SocketAddress socket_address = socket_->GetRemoteAddress();
|
| +
|
| + // libjingle supports only IPv4 addresses.
|
| + sockaddr_in ipv4addr;
|
| + socket_address.ToSockAddr(&ipv4addr);
|
| +
|
| + struct addrinfo ai;
|
| + memset(&ai, 0, sizeof(ai));
|
| + ai.ai_family = ipv4addr.sin_family;
|
| + ai.ai_socktype = SOCK_STREAM;
|
| + ai.ai_protocol = IPPROTO_TCP;
|
| + ai.ai_addr = reinterpret_cast<struct sockaddr*>(&ipv4addr);
|
| + ai.ai_addrlen = sizeof(ipv4addr);
|
| +
|
| + address->Copy(&ai, false);
|
| + return net::OK;
|
| +}
|
| +
|
| +int TransportSocket::Read(net::IOBuffer* buf, int buf_len,
|
| + net::CompletionCallback* callback) {
|
| + DCHECK(buf);
|
| + DCHECK(!read_callback_);
|
| + DCHECK(!read_buffer_.get());
|
| + int result = socket_->Recv(buf->data(), buf_len);
|
| + if (result < 0) {
|
| + result = MapPosixError(socket_->GetError());
|
| + if (result == net::ERR_IO_PENDING) {
|
| + read_callback_ = callback;
|
| + read_buffer_ = buf;
|
| + read_buffer_len_ = buf_len;
|
| + }
|
| + }
|
| + return result;
|
| +}
|
| +
|
| +int TransportSocket::Write(net::IOBuffer* buf, int buf_len,
|
| + net::CompletionCallback* callback) {
|
| + DCHECK(buf);
|
| + DCHECK(!write_callback_);
|
| + DCHECK(!write_buffer_.get());
|
| + int result = socket_->Send(buf->data(), buf_len);
|
| + if (result < 0) {
|
| + result = MapPosixError(socket_->GetError());
|
| + if (result == net::ERR_IO_PENDING) {
|
| + write_callback_ = callback;
|
| + write_buffer_ = buf;
|
| + write_buffer_len_ = buf_len;
|
| + }
|
| + }
|
| + return result;
|
| +}
|
| +
|
| +bool TransportSocket::SetReceiveBufferSize(int32 size) {
|
| + // Not implemented.
|
| + return false;
|
| +}
|
| +
|
| +bool TransportSocket::SetSendBufferSize(int32 size) {
|
| + // Not implemented.
|
| + return false;
|
| +}
|
| +
|
| +void TransportSocket::OnReadEvent(talk_base::AsyncSocket* socket) {
|
| + if (read_callback_) {
|
| + DCHECK(read_buffer_.get());
|
| + net::CompletionCallback* callback = read_callback_;
|
| + scoped_refptr<net::IOBuffer> buffer = read_buffer_;
|
| + int buffer_len = read_buffer_len_;
|
| +
|
| + read_callback_ = NULL;
|
| + read_buffer_ = NULL;
|
| + read_buffer_len_ = 0;
|
| +
|
| + int result = socket_->Recv(buffer->data(), buffer_len);
|
| + if (result < 0) {
|
| + result = MapPosixError(socket_->GetError());
|
| + if (result == net::ERR_IO_PENDING) {
|
| + read_callback_ = callback;
|
| + read_buffer_ = buffer;
|
| + read_buffer_len_ = buffer_len;
|
| + return;
|
| + }
|
| + }
|
| + callback->RunWithParams(Tuple1<int>(result));
|
| + }
|
| +}
|
| +
|
| +void TransportSocket::OnWriteEvent(talk_base::AsyncSocket* socket) {
|
| + if (write_callback_) {
|
| + DCHECK(write_buffer_.get());
|
| + net::CompletionCallback* callback = write_callback_;
|
| + scoped_refptr<net::IOBuffer> buffer = write_buffer_;
|
| + int buffer_len = write_buffer_len_;
|
| +
|
| + write_callback_ = NULL;
|
| + write_buffer_ = NULL;
|
| + write_buffer_len_ = 0;
|
| +
|
| + int result = socket_->Send(buffer->data(), buffer_len);
|
| + if (result < 0) {
|
| + result = MapPosixError(socket_->GetError());
|
| + if (result == net::ERR_IO_PENDING) {
|
| + write_callback_ = callback;
|
| + write_buffer_ = buffer;
|
| + write_buffer_len_ = buffer_len;
|
| + return;
|
| + }
|
| + }
|
| + callback->RunWithParams(Tuple1<int>(result));
|
| + }
|
| +}
|
| +
|
| +} // namespace remoting
|
|
|