SSLTCP (pseudo-SSL with fake handshake and unencrypted data) support for p2p socket.

content/browser/renderer_host/p2p/socket_host_tcp.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "content/browser/renderer_host/p2p/socket_host_tcp.h"
 
 #include "base/sys_byteorder.h"
 #include "content/common/p2p_messages.h"
 #include "ipc/ipc_sender.h"
+#include "jingle/glue/fake_ssl_client_socket.h"
 #include "net/base/io_buffer.h"
 #include "net/base/net_errors.h"
 #include "net/base/net_util.h"
 #include "net/socket/tcp_client_socket.h"
 
 namespace {
 
 typedef uint16 PacketLength;
 const int kPacketHeaderSize = sizeof(PacketLength);
 const int kReadBufferSize = 4096;
 const int kPacketLengthOffset = 2;
 const int kTurnChannelDataHeaderSize = 4;
 
+bool IsSslClientSocket(content::P2PSocketType type) {
+  return (type == content::P2P_SOCKET_SSLTCP_CLIENT ||
+          type == content::P2P_SOCKET_STUN_SSLTCP_CLIENT);
+}
+
 }  // namespace
 
 namespace content {
 
 P2PSocketHostTcpBase::P2PSocketHostTcpBase(IPC::Sender* message_sender,
-                                           int id)
+                                           int id,
+                                           P2PSocketType type)
     : P2PSocketHost(message_sender, id),
       write_pending_(false),
-      connected_(false) {
+      connected_(false),
+      type_(type) {
 }
 
 P2PSocketHostTcpBase::~P2PSocketHostTcpBase() {
   if (state_ == STATE_OPEN) {
     DCHECK(socket_.get());
     socket_.reset();
   }
 }
 
 bool P2PSocketHostTcpBase::InitAccepted(const net::IPEndPoint& remote_address,
                                         net::StreamSocket* socket) {
   DCHECK(socket);
   DCHECK_EQ(state_, STATE_UNINITIALIZED);
 
   remote_address_ = remote_address;
+  // TODO(ronghuawu): Add FakeSSLServerSocket.
   socket_.reset(socket);
   state_ = STATE_OPEN;
   DoRead();
   return state_ != STATE_ERROR;
 }
 
 bool P2PSocketHostTcpBase::Init(const net::IPEndPoint& local_address,
                             const net::IPEndPoint& remote_address) {
   DCHECK_EQ(state_, STATE_UNINITIALIZED);
 
   remote_address_ = remote_address;
   state_ = STATE_CONNECTING;
   scoped_ptr<net::TCPClientSocket> tcp_socket(new net::TCPClientSocket(
       net::AddressList(remote_address),
       NULL, net::NetLog::Source()));
   if (tcp_socket->Bind(local_address) != net::OK) {
     OnError();
     return false;
   }
-  socket_.reset(tcp_socket.release());
+  if (IsSslClientSocket(type_)) {
+    socket_.reset(new jingle_glue::FakeSSLClientSocket(tcp_socket.release()));

[piman, 2013/06/20 20:53:15]

Is this production code? Why are we using a "fake" socket? Or is that class
misnamed?

[Ronghua Wu (Left Chromium), 2013/06/20 21:05:28]

I would say it's the name that's misleading. This is production code, we already
use it in jingle/glue/xmpp_client_socket_factory.cc.

From the fake_ssl_client_socket.h:

// This StreamSocket implementation is to be used with servers that
// accept connections on port 443 but don't really use SSL.  For
// example, the Google Talk servers do this to bypass proxies.  (The
// connection is upgraded to TLS as part of the XMPP negotiation, so
// security is preserved.)  A "fake" SSL handshake is done immediately
// after connection to fool proxies into thinking that this is a real
// SSL connection.
//
// NOTE: This StreamSocket implementation does *not* do a real SSL
// handshake nor does it do any encryption!

+  } else {
+    socket_ = tcp_socket.PassAs<net::StreamSocket>();
+  }
 
   int result = socket_->Connect(
       base::Bind(&P2PSocketHostTcp::OnConnected, base::Unretained(this)));
   if (result != net::ERR_IO_PENDING) {
     OnConnected(result);
   }
 
   return state_ != STATE_ERROR;
 }
 
@@ skipping 188 matching lines @@
     pos += consumed;
   }
   // We've consumed all complete packets from the buffer; now move any remaining
   // bytes to the head of the buffer and set offset to reflect this.
   if (pos && pos <= read_buffer_->offset()) {
     memmove(head, head + pos, read_buffer_->offset() - pos);
     read_buffer_->set_offset(read_buffer_->offset() - pos);
   }
 }
 
-P2PSocketHostTcp::P2PSocketHostTcp(IPC::Sender* message_sender, int id)
-    : P2PSocketHostTcpBase(message_sender, id) {
+P2PSocketHostTcp::P2PSocketHostTcp(IPC::Sender* message_sender,
+                                   int id,
+                                   P2PSocketType type)
+    : P2PSocketHostTcpBase(message_sender, id, type) {
+  DCHECK(type == P2P_SOCKET_TCP_CLIENT || type == P2P_SOCKET_SSLTCP_CLIENT);
 }
 
 P2PSocketHostTcp::~P2PSocketHostTcp() {
 }
 
 int P2PSocketHostTcp::ProcessInput(char* input, int input_len) {
   if (input_len < kPacketHeaderSize)
     return 0;
   int packet_size = base::NetToHost16(*reinterpret_cast<uint16*>(input));
   if (input_len < packet_size + kPacketHeaderSize)
@@ skipping 13 matching lines @@
   scoped_refptr<net::DrainableIOBuffer> buffer =
       new net::DrainableIOBuffer(new net::IOBuffer(size), size);
   *reinterpret_cast<uint16*>(buffer->data()) = base::HostToNet16(data.size());
   memcpy(buffer->data() + kPacketHeaderSize, &data[0], data.size());
 
   WriteOrQueue(buffer);
 }
 
 // P2PSocketHostStunTcp
 P2PSocketHostStunTcp::P2PSocketHostStunTcp(IPC::Sender* message_sender,
-                                           int id)
-    : P2PSocketHostTcpBase(message_sender, id) {
+                                           int id,
+                                           P2PSocketType type)
+    : P2PSocketHostTcpBase(message_sender, id, type) {
+  DCHECK(type == P2P_SOCKET_SSLTCP_CLIENT ||
+         type == P2P_SOCKET_STUN_SSLTCP_CLIENT);
 }
 
 P2PSocketHostStunTcp::~P2PSocketHostStunTcp() {
 }
 
 int P2PSocketHostStunTcp::ProcessInput(char* input, int input_len) {
   if (input_len < kPacketHeaderSize + kPacketLengthOffset)
     return 0;
 
   int pad_bytes;
@@ skipping 66 matching lines @@
   } else {
     packet_size += kTurnChannelDataHeaderSize;
     // Calculate any padding if present.
     if (packet_size % 4)
       *pad_bytes = 4 - packet_size % 4;
   }
   return packet_size;
 }
 
 }  // namespace content