Add P2PDatagramSocket and P2PStreamSocket interfaces.

remoting/protocol/ssl_hmac_channel_authenticator.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "remoting/protocol/ssl_hmac_channel_authenticator.h"
 
 #include "base/bind.h"
 #include "base/bind_helpers.h"
 #include "base/callback_helpers.h"
 #include "base/logging.h"
 #include "crypto/secure_util.h"
 #include "net/base/host_port_pair.h"
 #include "net/base/io_buffer.h"
 #include "net/base/net_errors.h"
 #include "net/cert/cert_status_flags.h"
 #include "net/cert/cert_verifier.h"
 #include "net/cert/x509_certificate.h"
 #include "net/http/transport_security_state.h"
 #include "net/socket/client_socket_factory.h"
 #include "net/socket/client_socket_handle.h"
 #include "net/socket/ssl_client_socket.h"
 #include "net/socket/ssl_client_socket_openssl.h"
 #include "net/socket/ssl_server_socket.h"
 #include "net/ssl/ssl_config_service.h"
 #include "remoting/base/rsa_key_pair.h"
 #include "remoting/protocol/auth_util.h"
+#include "remoting/protocol/p2p_socket.h"
 
 namespace remoting {
 namespace protocol {
 
 namespace {
 
 // A CertVerifier which rejects every certificate.
 class FailingCertVerifier : public net::CertVerifier {
  public:
   FailingCertVerifier() {}
   ~FailingCertVerifier() override {}
 
   int Verify(net::X509Certificate* cert,
              const std::string& hostname,
              const std::string& ocsp_response,
              int flags,
              net::CRLSet* crl_set,
              net::CertVerifyResult* verify_result,
              const net::CompletionCallback& callback,
              scoped_ptr<Request>* out_req,
              const net::BoundNetLog& net_log) override {
     verify_result->verified_cert = cert;
     verify_result->cert_status = net::CERT_STATUS_INVALID;
     return net::ERR_CERT_INVALID;
   }
 };
 
+// Implements net::StreamSocket interface on top of P2PStreamSocket to be passed
+// to net::SSLClientSocket and net::SSLServerSocket.
+class NetStreamSocketAdapter : public net::StreamSocket {
+ public:
+  NetStreamSocketAdapter(scoped_ptr<P2PStreamSocket> socket)
+      : socket_(socket.Pass()) {}
+  ~NetStreamSocketAdapter() override {}
+
+  int Read(net::IOBuffer* buf, int buf_len,
+           const net::CompletionCallback& callback) override {
+    return socket_->Read(buf, buf_len, callback);
+  }
+  int Write(net::IOBuffer* buf, int buf_len,
+            const net::CompletionCallback& callback) override {
+    return socket_->Write(buf, buf_len, callback);
+  }
+  int SetReceiveBufferSize(int32_t size) override {
+    return socket_->SetReceiveBufferSize(size);
+  }
+
+  int SetSendBufferSize(int32_t size) override {
+    return socket_->SetSendBufferSize(size);
+  }
+
+  int Connect(const net::CompletionCallback& callback) override {
+    NOTREACHED();
+    return net::ERR_FAILED;
+  }
+  void Disconnect() override { socket_.reset(); }
+  bool IsConnected() const override { return true; }
+  bool IsConnectedAndIdle() const override { return true; }
+  int GetPeerAddress(net::IPEndPoint* address) const override {
+    // SSL sockets call this function so it must return some result.
+    net::IPAddressNumber ip_address(net::kIPv4AddressSize);
+    *address = net::IPEndPoint(ip_address, 0);
+    return net::OK;
+  }
+  int GetLocalAddress(net::IPEndPoint* address) const override {
+    NOTREACHED();
+    return net::ERR_FAILED;
+  }
+  const net::BoundNetLog& NetLog() const override { return net_log_; }
+  void SetSubresourceSpeculation() override { NOTREACHED(); }
+  void SetOmniboxSpeculation() override { NOTREACHED(); }
+  bool WasEverUsed() const override {
+    NOTREACHED();
+    return true;
+  }
+  bool UsingTCPFastOpen() const override {
+    NOTREACHED();
+    return false;
+  }
+  void EnableTCPFastOpenIfSupported() override { NOTREACHED(); }
+  bool WasNpnNegotiated() const override {
+    NOTREACHED();
+    return false;
+  }
+  net::NextProto GetNegotiatedProtocol() const override {
+    NOTREACHED();
+    return net::kProtoUnknown;
+  }
+  bool GetSSLInfo(net::SSLInfo* ssl_info) override {
+    NOTREACHED();
+    return false;
+  }
+  void GetConnectionAttempts(net::ConnectionAttempts* out) const override {
+    NOTREACHED();
+  }
+  void ClearConnectionAttempts() override { NOTREACHED(); }
+  void AddConnectionAttempts(const net::ConnectionAttempts& attempts) override {
+    NOTREACHED();
+  }
+
+ private:
+  scoped_ptr<P2PStreamSocket> socket_;
+  net::BoundNetLog net_log_;
+};
+
+// Implements P2PStreamSocket interface on top of net::StreamSocket.
+class P2PStreamSocketAdapter : public P2PStreamSocket {
+ public:
+  P2PStreamSocketAdapter(scoped_ptr<net::StreamSocket> socket)
+      : socket_(socket.Pass()) {}
+  ~P2PStreamSocketAdapter() override {}
+
+  int Read(net::IOBuffer* buf, int buf_len,
+           const net::CompletionCallback& callback) override {
+    return socket_->Read(buf, buf_len, callback);
+  }
+  int Write(net::IOBuffer* buf, int buf_len,
+            const net::CompletionCallback& callback) override {
+    return socket_->Write(buf, buf_len, callback);
+  }
+  int SetReceiveBufferSize(int32_t size) override {
+    return socket_->SetReceiveBufferSize(size);
+  }
+
+  int SetSendBufferSize(int32_t size) override {
+    return socket_->SetSendBufferSize(size);
+  }
+
+ private:
+  scoped_ptr<net::StreamSocket> socket_;
+};
+
 }  // namespace
 
 // static
 scoped_ptr<SslHmacChannelAuthenticator>
 SslHmacChannelAuthenticator::CreateForClient(
       const std::string& remote_cert,
       const std::string& auth_key) {
   scoped_ptr<SslHmacChannelAuthenticator> result(
       new SslHmacChannelAuthenticator(auth_key));
   result->remote_cert_ = remote_cert;
@@ skipping 14 matching lines @@
 
 SslHmacChannelAuthenticator::SslHmacChannelAuthenticator(
     const std::string& auth_key)
     : auth_key_(auth_key) {
 }
 
 SslHmacChannelAuthenticator::~SslHmacChannelAuthenticator() {
 }
 
 void SslHmacChannelAuthenticator::SecureAndAuthenticate(
-    scoped_ptr<net::StreamSocket> socket, const DoneCallback& done_callback) {
+    scoped_ptr<P2PStreamSocket> socket,
+    const DoneCallback& done_callback) {
   DCHECK(CalledOnValidThread());
-  DCHECK(socket->IsConnected());
 
   done_callback_ = done_callback;
 
   int result;
   if (is_ssl_server()) {
 #if defined(OS_NACL)
     // Client plugin doesn't use server SSL sockets, and so SSLServerSocket
     // implementation is not compiled for NaCl as part of net_nacl.
     NOTREACHED();
     result = net::ERR_FAILED;
 #else
     scoped_refptr<net::X509Certificate> cert =
         net::X509Certificate::CreateFromBytes(
             local_cert_.data(), local_cert_.length());
     if (!cert.get()) {
       LOG(ERROR) << "Failed to parse X509Certificate";
       NotifyError(net::ERR_FAILED);
       return;
     }
 
     net::SSLConfig ssl_config;
     ssl_config.require_ecdhe = true;
 
-    scoped_ptr<net::SSLServerSocket> server_socket =
-        net::CreateSSLServerSocket(socket.Pass(),
-                                   cert.get(),
-                                   local_key_pair_->private_key(),
-                                   ssl_config);
+    scoped_ptr<net::SSLServerSocket> server_socket = net::CreateSSLServerSocket(
+        make_scoped_ptr(new NetStreamSocketAdapter(socket.Pass())), cert.get(),
+        local_key_pair_->private_key(), ssl_config);
     net::SSLServerSocket* raw_server_socket = server_socket.get();
     socket_ = server_socket.Pass();
     result = raw_server_socket->Handshake(
         base::Bind(&SslHmacChannelAuthenticator::OnConnected,
                    base::Unretained(this)));
 #endif
   } else {
     transport_security_state_.reset(new net::TransportSecurityState);
     cert_verifier_.reset(new FailingCertVerifier);
 
@@ skipping 10 matching lines @@
     ssl_config.rev_checking_enabled = false;
     ssl_config.allowed_bad_certs.push_back(cert_and_status);
     ssl_config.require_ecdhe = true;
 
     net::HostPortPair host_and_port(kSslFakeHostName, 0);
     net::SSLClientSocketContext context;
     context.transport_security_state = transport_security_state_.get();
     context.cert_verifier = cert_verifier_.get();
     scoped_ptr<net::ClientSocketHandle> socket_handle(
         new net::ClientSocketHandle);
-    socket_handle->SetSocket(socket.Pass());
+    socket_handle->SetSocket(
+        make_scoped_ptr(new NetStreamSocketAdapter(socket.Pass())));
 
 #if defined(OS_NACL)
     // net_nacl doesn't include ClientSocketFactory.
     socket_.reset(new net::SSLClientSocketOpenSSL(
         socket_handle.Pass(), host_and_port, ssl_config, context));
 #else
     socket_ =
         net::ClientSocketFactory::GetDefaultFactory()->CreateSSLClientSocket(
             socket_handle.Pass(), host_and_port, ssl_config, context);
 #endif
@@ skipping 145 matching lines @@
   return crypto::SecureMemEqual(received_auth_bytes.data(),
                                 &(auth_bytes[0]), kAuthDigestLength);
 }
 
 void SslHmacChannelAuthenticator::CheckDone(bool* callback_called) {
   if (auth_write_buf_.get() == nullptr && auth_read_buf_.get() == nullptr) {
     DCHECK(socket_.get() != nullptr);
     if (callback_called)
       *callback_called = true;
 
-    base::ResetAndReturn(&done_callback_).Run(net::OK, socket_.Pass());
+    base::ResetAndReturn(&done_callback_)
+        .Run(net::OK,
+             make_scoped_ptr(new P2PStreamSocketAdapter(socket_.Pass())));
   }
 }
 
 void SslHmacChannelAuthenticator::NotifyError(int error) {
   base::ResetAndReturn(&done_callback_).Run(error, nullptr);
 }
 
 }  // namespace protocol
 }  // namespace remoting