| OLD | NEW |
| (Empty) |
| 1 // Copyright 2013 The Chromium Authors. All rights reserved. | |
| 2 // Use of this source code is governed by a BSD-style license that can be | |
| 3 // found in the LICENSE file. | |
| 4 | |
| 5 #ifndef CHROME_BROWSER_EXTENSIONS_API_CAST_CHANNEL_CAST_SOCKET_H_ | |
| 6 #define CHROME_BROWSER_EXTENSIONS_API_CAST_CHANNEL_CAST_SOCKET_H_ | |
| 7 | |
| 8 #include <queue> | |
| 9 #include <string> | |
| 10 | |
| 11 #include "base/basictypes.h" | |
| 12 #include "base/callback.h" | |
| 13 #include "base/cancelable_callback.h" | |
| 14 #include "base/gtest_prod_util.h" | |
| 15 #include "base/memory/ref_counted.h" | |
| 16 #include "base/memory/weak_ptr.h" | |
| 17 #include "base/threading/thread_checker.h" | |
| 18 #include "base/timer/timer.h" | |
| 19 #include "chrome/common/extensions/api/cast_channel.h" | |
| 20 #include "extensions/browser/api/api_resource.h" | |
| 21 #include "extensions/browser/api/api_resource_manager.h" | |
| 22 #include "net/base/completion_callback.h" | |
| 23 #include "net/base/io_buffer.h" | |
| 24 #include "net/base/ip_endpoint.h" | |
| 25 #include "net/base/net_log.h" | |
| 26 | |
| 27 namespace net { | |
| 28 class AddressList; | |
| 29 class CertVerifier; | |
| 30 class SSLClientSocket; | |
| 31 class StreamSocket; | |
| 32 class TCPClientSocket; | |
| 33 class TransportSecurityState; | |
| 34 } | |
| 35 | |
| 36 namespace extensions { | |
| 37 namespace api { | |
| 38 namespace cast_channel { | |
| 39 | |
| 40 class CastMessage; | |
| 41 | |
| 42 // This class implements a channel between Chrome and a Cast device using a TCP | |
| 43 // socket with SSL. The channel may authenticate that the receiver is a genuine | |
| 44 // Cast device. All CastSocket objects must be used only on the IO thread. | |
| 45 // | |
| 46 // NOTE: Not called "CastChannel" to reduce confusion with the generated API | |
| 47 // code. | |
| 48 class CastSocket : public ApiResource, | |
| 49 public base::SupportsWeakPtr<CastSocket> { | |
| 50 public: | |
| 51 // Object to be informed of incoming messages and errors. | |
| 52 class Delegate { | |
| 53 public: | |
| 54 // An error occurred on the channel. | |
| 55 // It is fine to delete the socket in this callback. | |
| 56 virtual void OnError(const CastSocket* socket, ChannelError error) = 0; | |
| 57 // A message was received on the channel. | |
| 58 // Do NOT delete the socket in this callback. | |
| 59 virtual void OnMessage(const CastSocket* socket, | |
| 60 const MessageInfo& message) = 0; | |
| 61 | |
| 62 protected: | |
| 63 virtual ~Delegate() {} | |
| 64 }; | |
| 65 | |
| 66 // Creates a new CastSocket that connects to |ip_endpoint| with | |
| 67 // |channel_auth|. |owner_extension_id| is the id of the extension that opened | |
| 68 // the socket. |channel_auth| must not be CHANNEL_AUTH_NONE. | |
| 69 CastSocket(const std::string& owner_extension_id, | |
| 70 const net::IPEndPoint& ip_endpoint, | |
| 71 ChannelAuthType channel_auth, | |
| 72 CastSocket::Delegate* delegate, | |
| 73 net::NetLog* net_log, | |
| 74 const base::TimeDelta& connect_timeout); | |
| 75 virtual ~CastSocket(); | |
| 76 | |
| 77 // The IP endpoint for the destination of the channel. | |
| 78 const net::IPEndPoint& ip_endpoint() const { return ip_endpoint_; } | |
| 79 | |
| 80 // The authentication level requested for the channel. | |
| 81 ChannelAuthType channel_auth() const { return channel_auth_; } | |
| 82 | |
| 83 // Returns a cast:// or casts:// URL for the channel endpoint. | |
| 84 // For backwards compatibility. | |
| 85 std::string CastUrl() const; | |
| 86 | |
| 87 // Channel id for the ApiResourceManager. | |
| 88 int id() const { return channel_id_; } | |
| 89 | |
| 90 // Sets the channel id. | |
| 91 void set_id(int channel_id) { channel_id_ = channel_id; } | |
| 92 | |
| 93 // Returns the state of the channel. Virtual for testing. | |
| 94 virtual ReadyState ready_state() const; | |
| 95 | |
| 96 // Returns the last error that occurred on this channel, or | |
| 97 // CHANNEL_ERROR_NONE if no error has occurred. Virtual for testing. | |
| 98 virtual ChannelError error_state() const; | |
| 99 | |
| 100 // Connects the channel to the peer. If successful, the channel will be in | |
| 101 // READY_STATE_OPEN. | |
| 102 // It is fine to delete the CastSocket object in |callback|. | |
| 103 virtual void Connect(const net::CompletionCallback& callback); | |
| 104 | |
| 105 // Sends a message over a connected channel. The channel must be in | |
| 106 // READY_STATE_OPEN. | |
| 107 // | |
| 108 // Note that if an error occurs the following happens: | |
| 109 // 1. Completion callbacks for all pending writes are invoked with error. | |
| 110 // 2. Delegate::OnError is called once. | |
| 111 // 3. Castsocket is closed. | |
| 112 // | |
| 113 // DO NOT delete the CastSocket object in write completion callback. | |
| 114 // But it is fine to delete the socket in Delegate::OnError | |
| 115 virtual void SendMessage(const MessageInfo& message, | |
| 116 const net::CompletionCallback& callback); | |
| 117 | |
| 118 // Closes the channel. On completion, the channel will be in | |
| 119 // READY_STATE_CLOSED. | |
| 120 // It is fine to delete the CastSocket object in |callback|. | |
| 121 virtual void Close(const net::CompletionCallback& callback); | |
| 122 | |
| 123 protected: | |
| 124 // Message header struct. If fields are added, be sure to update | |
| 125 // header_size(). Protected to allow use of *_size() methods in unit tests. | |
| 126 struct MessageHeader { | |
| 127 MessageHeader(); | |
| 128 // Sets the message size. | |
| 129 void SetMessageSize(size_t message_size); | |
| 130 // Prepends this header to |str|. | |
| 131 void PrependToString(std::string* str); | |
| 132 // Reads |header| from the beginning of |buffer|. | |
| 133 static void ReadFromIOBuffer(net::GrowableIOBuffer* buffer, | |
| 134 MessageHeader* header); | |
| 135 // Size (in bytes) of the message header. | |
| 136 static uint32 header_size() { return sizeof(uint32); } | |
| 137 | |
| 138 // Maximum size (in bytes) of a message payload on the wire (does not | |
| 139 // include header). | |
| 140 static uint32 max_message_size() { return 65536; } | |
| 141 | |
| 142 std::string ToString(); | |
| 143 // The size of the following protocol message in bytes, in host byte order. | |
| 144 uint32 message_size; | |
| 145 }; | |
| 146 | |
| 147 private: | |
| 148 friend class ApiResourceManager<CastSocket>; | |
| 149 friend class CastSocketTest; | |
| 150 friend class TestCastSocket; | |
| 151 | |
| 152 static const char* service_name() { return "CastSocketManager"; } | |
| 153 | |
| 154 // Internal connection states. | |
| 155 enum ConnectionState { | |
| 156 CONN_STATE_NONE, | |
| 157 CONN_STATE_TCP_CONNECT, | |
| 158 CONN_STATE_TCP_CONNECT_COMPLETE, | |
| 159 CONN_STATE_SSL_CONNECT, | |
| 160 CONN_STATE_SSL_CONNECT_COMPLETE, | |
| 161 CONN_STATE_AUTH_CHALLENGE_SEND, | |
| 162 CONN_STATE_AUTH_CHALLENGE_SEND_COMPLETE, | |
| 163 CONN_STATE_AUTH_CHALLENGE_REPLY_COMPLETE, | |
| 164 }; | |
| 165 | |
| 166 // Internal write states. | |
| 167 enum WriteState { | |
| 168 WRITE_STATE_NONE, | |
| 169 WRITE_STATE_WRITE, | |
| 170 WRITE_STATE_WRITE_COMPLETE, | |
| 171 WRITE_STATE_DO_CALLBACK, | |
| 172 WRITE_STATE_ERROR, | |
| 173 }; | |
| 174 | |
| 175 // Internal read states. | |
| 176 enum ReadState { | |
| 177 READ_STATE_NONE, | |
| 178 READ_STATE_READ, | |
| 179 READ_STATE_READ_COMPLETE, | |
| 180 READ_STATE_DO_CALLBACK, | |
| 181 READ_STATE_ERROR, | |
| 182 }; | |
| 183 | |
| 184 // Creates an instance of TCPClientSocket. | |
| 185 virtual scoped_ptr<net::TCPClientSocket> CreateTcpSocket(); | |
| 186 // Creates an instance of SSLClientSocket with the given underlying |socket|. | |
| 187 virtual scoped_ptr<net::SSLClientSocket> CreateSslSocket( | |
| 188 scoped_ptr<net::StreamSocket> socket); | |
| 189 // Extracts peer certificate from SSLClientSocket instance when the socket | |
| 190 // is in cert error state. | |
| 191 // Returns whether certificate is successfully extracted. | |
| 192 virtual bool ExtractPeerCert(std::string* cert); | |
| 193 // Verifies whether the challenge reply received from the peer is valid: | |
| 194 // 1. Signature in the reply is valid. | |
| 195 // 2. Certificate is rooted to a trusted CA. | |
| 196 virtual bool VerifyChallengeReply(); | |
| 197 | |
| 198 // Invoked by a cancelable closure when connection setup time | |
| 199 // exceeds the interval specified at |connect_timeout|. | |
| 200 void CancelConnect(); | |
| 201 | |
| 202 ///////////////////////////////////////////////////////////////////////////// | |
| 203 // Following methods work together to implement the following flow: | |
| 204 // 1. Create a new TCP socket and connect to it | |
| 205 // 2. Create a new SSL socket and try connecting to it | |
| 206 // 3. If connection fails due to invalid cert authority, then extract the | |
| 207 // peer certificate from the error. | |
| 208 // 4. Whitelist the peer certificate and try #1 and #2 again. | |
| 209 // 5. If SSL socket is connected successfully, and if protocol is casts:// | |
| 210 // then issue an auth challenge request. | |
| 211 // 6. Validate the auth challenge response. | |
| 212 // | |
| 213 // Main method that performs connection state transitions. | |
| 214 void DoConnectLoop(int result); | |
| 215 // Each of the below Do* method is executed in the corresponding | |
| 216 // connection state. For example when connection state is TCP_CONNECT | |
| 217 // DoTcpConnect is called, and so on. | |
| 218 int DoTcpConnect(); | |
| 219 int DoTcpConnectComplete(int result); | |
| 220 int DoSslConnect(); | |
| 221 int DoSslConnectComplete(int result); | |
| 222 int DoAuthChallengeSend(); | |
| 223 int DoAuthChallengeSendComplete(int result); | |
| 224 int DoAuthChallengeReplyComplete(int result); | |
| 225 ///////////////////////////////////////////////////////////////////////////// | |
| 226 | |
| 227 ///////////////////////////////////////////////////////////////////////////// | |
| 228 // Following methods work together to implement write flow. | |
| 229 // | |
| 230 // Main method that performs write flow state transitions. | |
| 231 void DoWriteLoop(int result); | |
| 232 // Each of the below Do* method is executed in the corresponding | |
| 233 // write state. For example when write state is WRITE_STATE_WRITE_COMPLETE | |
| 234 // DowriteComplete is called, and so on. | |
| 235 int DoWrite(); | |
| 236 int DoWriteComplete(int result); | |
| 237 int DoWriteCallback(); | |
| 238 int DoWriteError(int result); | |
| 239 ///////////////////////////////////////////////////////////////////////////// | |
| 240 | |
| 241 ///////////////////////////////////////////////////////////////////////////// | |
| 242 // Following methods work together to implement read flow. | |
| 243 // | |
| 244 // Main method that performs write flow state transitions. | |
| 245 void DoReadLoop(int result); | |
| 246 // Each of the below Do* method is executed in the corresponding | |
| 247 // write state. For example when write state is READ_STATE_READ_COMPLETE | |
| 248 // DoReadComplete is called, and so on. | |
| 249 int DoRead(); | |
| 250 int DoReadComplete(int result); | |
| 251 int DoReadCallback(); | |
| 252 int DoReadError(int result); | |
| 253 ///////////////////////////////////////////////////////////////////////////// | |
| 254 | |
| 255 // Runs the external connection callback and resets it. | |
| 256 void DoConnectCallback(int result); | |
| 257 // Adds |message| to the write queue and starts the write loop if needed. | |
| 258 void SendCastMessageInternal(const CastMessage& message, | |
| 259 const net::CompletionCallback& callback); | |
| 260 void PostTaskToStartConnectLoop(int result); | |
| 261 void PostTaskToStartReadLoop(); | |
| 262 void StartReadLoop(); | |
| 263 // Parses the contents of header_read_buffer_ and sets current_message_size_ | |
| 264 // to the size of the body of the message. | |
| 265 bool ProcessHeader(); | |
| 266 // Parses the contents of body_read_buffer_ and sets current_message_ to | |
| 267 // the message received. | |
| 268 bool ProcessBody(); | |
| 269 // Closes socket, updating the error state and signaling the delegate that | |
| 270 // |error| has occurred. | |
| 271 void CloseWithError(ChannelError error); | |
| 272 // Serializes the content of message_proto (with a header) to |message_data|. | |
| 273 static bool Serialize(const CastMessage& message_proto, | |
| 274 std::string* message_data); | |
| 275 | |
| 276 virtual bool CalledOnValidThread() const; | |
| 277 | |
| 278 virtual base::Timer* GetTimer(); | |
| 279 | |
| 280 base::ThreadChecker thread_checker_; | |
| 281 | |
| 282 // The id of the channel. | |
| 283 int channel_id_; | |
| 284 | |
| 285 // The IP endpoint that the the channel is connected to. | |
| 286 net::IPEndPoint ip_endpoint_; | |
| 287 // Receiver authentication requested for the channel. | |
| 288 ChannelAuthType channel_auth_; | |
| 289 // Delegate to inform of incoming messages and errors. | |
| 290 Delegate* delegate_; | |
| 291 | |
| 292 // IOBuffer for reading the message header. | |
| 293 scoped_refptr<net::GrowableIOBuffer> header_read_buffer_; | |
| 294 // IOBuffer for reading the message body. | |
| 295 scoped_refptr<net::GrowableIOBuffer> body_read_buffer_; | |
| 296 // IOBuffer to currently read into. | |
| 297 scoped_refptr<net::GrowableIOBuffer> current_read_buffer_; | |
| 298 // The number of bytes in the current message body. | |
| 299 uint32 current_message_size_; | |
| 300 // Last message received on the socket. | |
| 301 scoped_ptr<CastMessage> current_message_; | |
| 302 | |
| 303 // The NetLog for this service. | |
| 304 net::NetLog* net_log_; | |
| 305 // The NetLog source for this service. | |
| 306 net::NetLog::Source net_log_source_; | |
| 307 | |
| 308 // CertVerifier is owned by us but should be deleted AFTER SSLClientSocket | |
| 309 // since in some cases the destructor of SSLClientSocket may call a method | |
| 310 // to cancel a cert verification request. | |
| 311 scoped_ptr<net::CertVerifier> cert_verifier_; | |
| 312 scoped_ptr<net::TransportSecurityState> transport_security_state_; | |
| 313 | |
| 314 // Owned ptr to the underlying TCP socket. | |
| 315 scoped_ptr<net::TCPClientSocket> tcp_socket_; | |
| 316 // Owned ptr to the underlying SSL socket. | |
| 317 scoped_ptr<net::SSLClientSocket> socket_; | |
| 318 // Certificate of the peer. This field may be empty if the peer | |
| 319 // certificate is not yet fetched. | |
| 320 std::string peer_cert_; | |
| 321 // Reply received from the receiver to a challenge request. | |
| 322 scoped_ptr<CastMessage> challenge_reply_; | |
| 323 | |
| 324 // Callback invoked when the socket is connected or fails to connect. | |
| 325 net::CompletionCallback connect_callback_; | |
| 326 | |
| 327 // Duration to wait before timing out. | |
| 328 base::TimeDelta connect_timeout_; | |
| 329 // Timer invoked when the connection has timed out. | |
| 330 scoped_ptr<base::Timer> connect_timeout_timer_; | |
| 331 // Set when a timeout is triggered and the connection process has | |
| 332 // canceled. | |
| 333 bool is_canceled_; | |
| 334 | |
| 335 // Connection flow state machine state. | |
| 336 ConnectionState connect_state_; | |
| 337 // Write flow state machine state. | |
| 338 WriteState write_state_; | |
| 339 // Read flow state machine state. | |
| 340 ReadState read_state_; | |
| 341 // The last error encountered by the channel. | |
| 342 ChannelError error_state_; | |
| 343 // The current status of the channel. | |
| 344 ReadyState ready_state_; | |
| 345 | |
| 346 // Holds a message to be written to the socket. |callback| is invoked when the | |
| 347 // message is fully written or an error occurrs. | |
| 348 struct WriteRequest { | |
| 349 explicit WriteRequest(const net::CompletionCallback& callback); | |
| 350 ~WriteRequest(); | |
| 351 // Sets the content of the request by serializing |message| into |io_buffer| | |
| 352 // and prepending the header. Must only be called once. | |
| 353 bool SetContent(const CastMessage& message_proto); | |
| 354 | |
| 355 net::CompletionCallback callback; | |
| 356 scoped_refptr<net::DrainableIOBuffer> io_buffer; | |
| 357 }; | |
| 358 // Queue of pending writes. The message at the front of the queue is the one | |
| 359 // being written. | |
| 360 std::queue<WriteRequest> write_queue_; | |
| 361 | |
| 362 FRIEND_TEST_ALL_PREFIXES(CastSocketTest, TestFullSecureConnectionFlowAsync); | |
| 363 FRIEND_TEST_ALL_PREFIXES(CastSocketTest, TestRead); | |
| 364 FRIEND_TEST_ALL_PREFIXES(CastSocketTest, TestReadHeaderParseError); | |
| 365 FRIEND_TEST_ALL_PREFIXES(CastSocketTest, TestReadMany); | |
| 366 FRIEND_TEST_ALL_PREFIXES(CastSocketTest, TestWriteErrorLargeMessage); | |
| 367 DISALLOW_COPY_AND_ASSIGN(CastSocket); | |
| 368 }; | |
| 369 | |
| 370 } // namespace cast_channel | |
| 371 } // namespace api | |
| 372 } // namespace extensions | |
| 373 | |
| 374 #endif // CHROME_BROWSER_EXTENSIONS_API_CAST_CHANNEL_CAST_SOCKET_H_ | |
| OLD | NEW |