OLD | NEW |
1 // Copyright (c) 2016 The Chromium Authors. All rights reserved. | 1 // Copyright (c) 2016 The Chromium Authors. All rights reserved. |
2 // Use of this source code is governed by a BSD-style license that can be | 2 // Use of this source code is governed by a BSD-style license that can be |
3 // found in the LICENSE file. | 3 // found in the LICENSE file. |
4 | 4 |
5 #include "net/quic/quartc/quartc_session.h" | 5 #include "net/quic/quartc/quartc_session.h" |
6 | 6 |
7 #include "base/rand_util.h" | 7 #include "base/rand_util.h" |
| 8 #include "net/quic/platform/api/quic_string_piece.h" |
8 | 9 |
9 namespace { | 10 namespace { |
10 | 11 |
11 // Default priority for incoming QUIC streams. | 12 // Default priority for incoming QUIC streams. |
12 // TODO(zhihuang): Determine if this value is correct. | 13 // TODO(zhihuang): Determine if this value is correct. |
13 static const net::SpdyPriority kDefaultPriority = 3; | 14 static const net::SpdyPriority kDefaultPriority = 3; |
14 | 15 |
15 // Arbitrary server port number for net::QuicCryptoClientConfig. | 16 // Arbitrary server port number for net::QuicCryptoClientConfig. |
16 const int kQuicServerPort = 0; | 17 const int kQuicServerPort = 0; |
17 | 18 |
18 // Length of HKDF input keying material, equal to its number of bytes. | 19 // Length of HKDF input keying material, equal to its number of bytes. |
19 // https://tools.ietf.org/html/rfc5869#section-2.2. | 20 // https://tools.ietf.org/html/rfc5869#section-2.2. |
20 // TODO(zhihuang): Verify that input keying material length is correct. | 21 // TODO(zhihuang): Verify that input keying material length is correct. |
21 const size_t kInputKeyingMaterialLength = 32; | 22 const size_t kInputKeyingMaterialLength = 32; |
22 | 23 |
23 // Used by QuicCryptoServerConfig to provide dummy proof credentials. | 24 // Used by QuicCryptoServerConfig to provide dummy proof credentials. |
24 // TODO(zhihuang): Remove when secure P2P QUIC handshake is possible. | 25 // TODO(zhihuang): Remove when secure P2P QUIC handshake is possible. |
25 class DummyProofSource : public net::ProofSource { | 26 class DummyProofSource : public net::ProofSource { |
26 public: | 27 public: |
27 DummyProofSource() {} | 28 DummyProofSource() {} |
28 ~DummyProofSource() override {} | 29 ~DummyProofSource() override {} |
29 | 30 |
30 // ProofSource override. | 31 // ProofSource override. |
31 void GetProof(const net::QuicSocketAddress& server_addr, | 32 void GetProof(const net::QuicSocketAddress& server_addr, |
32 const std::string& hostname, | 33 const std::string& hostname, |
33 const std::string& server_config, | 34 const std::string& server_config, |
34 net::QuicVersion quic_version, | 35 net::QuicVersion quic_version, |
35 base::StringPiece chlo_hash, | 36 net::QuicStringPiece chlo_hash, |
36 const net::QuicTagVector& connection_options, | 37 const net::QuicTagVector& connection_options, |
37 std::unique_ptr<Callback> callback) override { | 38 std::unique_ptr<Callback> callback) override { |
38 net::QuicReferenceCountedPointer<net::ProofSource::Chain> chain; | 39 net::QuicReferenceCountedPointer<net::ProofSource::Chain> chain; |
39 net::QuicCryptoProof proof; | 40 net::QuicCryptoProof proof; |
40 std::vector<std::string> certs; | 41 std::vector<std::string> certs; |
41 certs.push_back("Dummy cert"); | 42 certs.push_back("Dummy cert"); |
42 chain = new ProofSource::Chain(certs); | 43 chain = new ProofSource::Chain(certs); |
43 proof.signature = "Dummy signature"; | 44 proof.signature = "Dummy signature"; |
44 proof.leaf_cert_scts = "Dummy timestamp"; | 45 proof.leaf_cert_scts = "Dummy timestamp"; |
45 callback->Run(true, chain, proof, nullptr /* details */); | 46 callback->Run(true, chain, proof, nullptr /* details */); |
46 } | 47 } |
47 }; | 48 }; |
48 | 49 |
49 // Used by QuicCryptoClientConfig to ignore the peer's credentials | 50 // Used by QuicCryptoClientConfig to ignore the peer's credentials |
50 // and establish an insecure QUIC connection. | 51 // and establish an insecure QUIC connection. |
51 // TODO(zhihuang): Remove when secure P2P QUIC handshake is possible. | 52 // TODO(zhihuang): Remove when secure P2P QUIC handshake is possible. |
52 class InsecureProofVerifier : public net::ProofVerifier { | 53 class InsecureProofVerifier : public net::ProofVerifier { |
53 public: | 54 public: |
54 InsecureProofVerifier() {} | 55 InsecureProofVerifier() {} |
55 ~InsecureProofVerifier() override {} | 56 ~InsecureProofVerifier() override {} |
56 | 57 |
57 // ProofVerifier override. | 58 // ProofVerifier override. |
58 net::QuicAsyncStatus VerifyProof( | 59 net::QuicAsyncStatus VerifyProof( |
59 const std::string& hostname, | 60 const std::string& hostname, |
60 const uint16_t port, | 61 const uint16_t port, |
61 const std::string& server_config, | 62 const std::string& server_config, |
62 net::QuicVersion quic_version, | 63 net::QuicVersion quic_version, |
63 base::StringPiece chlo_hash, | 64 net::QuicStringPiece chlo_hash, |
64 const std::vector<std::string>& certs, | 65 const std::vector<std::string>& certs, |
65 const std::string& cert_sct, | 66 const std::string& cert_sct, |
66 const std::string& signature, | 67 const std::string& signature, |
67 const net::ProofVerifyContext* context, | 68 const net::ProofVerifyContext* context, |
68 std::string* error_details, | 69 std::string* error_details, |
69 std::unique_ptr<net::ProofVerifyDetails>* verify_details, | 70 std::unique_ptr<net::ProofVerifyDetails>* verify_details, |
70 std::unique_ptr<net::ProofVerifierCallback> callback) override { | 71 std::unique_ptr<net::ProofVerifierCallback> callback) override { |
71 return net::QUIC_SUCCESS; | 72 return net::QUIC_SUCCESS; |
72 } | 73 } |
73 | 74 |
(...skipping 201 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
275 ActivateStream(std::unique_ptr<QuicStream>(stream)); | 276 ActivateStream(std::unique_ptr<QuicStream>(stream)); |
276 // Register the stream to the QuicWriteBlockedList. |priority| is clamped | 277 // Register the stream to the QuicWriteBlockedList. |priority| is clamped |
277 // between 0 and 7, with 0 being the highest priority and 7 the lowest | 278 // between 0 and 7, with 0 being the highest priority and 7 the lowest |
278 // priority. | 279 // priority. |
279 write_blocked_streams()->RegisterStream(stream->id(), priority); | 280 write_blocked_streams()->RegisterStream(stream->id(), priority); |
280 } | 281 } |
281 return stream; | 282 return stream; |
282 } | 283 } |
283 | 284 |
284 } // namespace net | 285 } // namespace net |
OLD | NEW |