OLD | NEW |
| (Empty) |
1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. | |
2 // Use of this source code is governed by a BSD-style license that can be | |
3 // found in the LICENSE file. | |
4 | |
5 #ifndef NET_QUIC_CRYPTO_CRYPTO_SERVER_CONFIG_PROTOBUF_H_ | |
6 #define NET_QUIC_CRYPTO_CRYPTO_SERVER_CONFIG_PROTOBUF_H_ | |
7 | |
8 #include <string> | |
9 #include <vector> | |
10 | |
11 #include "base/logging.h" | |
12 #include "base/stl_util.h" | |
13 #include "base/strings/string_piece.h" | |
14 #include "net/base/net_export.h" | |
15 #include "net/quic/crypto/crypto_protocol.h" | |
16 | |
17 namespace net { | |
18 | |
19 // QuicServerConfigProtobuf contains QUIC server config block and the private | |
20 // keys needed to prove ownership. | |
21 // TODO(rch): sync with server more rationally. | |
22 class NET_EXPORT_PRIVATE QuicServerConfigProtobuf { | |
23 public: | |
24 // PrivateKey contains a QUIC tag of a key exchange algorithm and a | |
25 // serialised private key for that algorithm. The format of the serialised | |
26 // private key is specific to the algorithm in question. | |
27 class NET_EXPORT_PRIVATE PrivateKey { | |
28 public: | |
29 QuicTag tag() const { | |
30 return tag_; | |
31 } | |
32 void set_tag(QuicTag tag) { | |
33 tag_ = tag; | |
34 } | |
35 std::string private_key() const { | |
36 return private_key_; | |
37 } | |
38 void set_private_key(std::string key) { | |
39 private_key_ = key; | |
40 } | |
41 | |
42 private: | |
43 QuicTag tag_; | |
44 std::string private_key_; | |
45 }; | |
46 | |
47 QuicServerConfigProtobuf(); | |
48 ~QuicServerConfigProtobuf(); | |
49 | |
50 size_t key_size() const { | |
51 return keys_.size(); | |
52 } | |
53 | |
54 const PrivateKey& key(size_t i) const { | |
55 DCHECK_GT(keys_.size(), i); | |
56 return *keys_[i]; | |
57 } | |
58 | |
59 std::string config() const { | |
60 return config_; | |
61 } | |
62 | |
63 void set_config(base::StringPiece config) { | |
64 config.CopyToString(&config_); | |
65 } | |
66 | |
67 QuicServerConfigProtobuf::PrivateKey* add_key() { | |
68 keys_.push_back(new PrivateKey); | |
69 return keys_.back(); | |
70 } | |
71 | |
72 void clear_key() { | |
73 STLDeleteElements(&keys_); | |
74 } | |
75 | |
76 bool has_primary_time() const { | |
77 return primary_time_ > 0; | |
78 } | |
79 | |
80 int64 primary_time() const { | |
81 return primary_time_; | |
82 } | |
83 | |
84 void set_primary_time(int64 primary_time) { | |
85 primary_time_ = primary_time; | |
86 } | |
87 | |
88 bool has_priority() const { | |
89 return priority_ > 0; | |
90 } | |
91 | |
92 uint64 priority() const { | |
93 return priority_; | |
94 } | |
95 | |
96 void set_priority(int64 priority) { | |
97 priority_ = priority; | |
98 } | |
99 | |
100 bool has_source_address_token_secret_override() const { | |
101 return !source_address_token_secret_override_.empty(); | |
102 } | |
103 | |
104 std::string source_address_token_secret_override() const { | |
105 return source_address_token_secret_override_; | |
106 } | |
107 | |
108 void set_source_address_token_secret_override( | |
109 base::StringPiece source_address_token_secret_override) { | |
110 source_address_token_secret_override.CopyToString( | |
111 &source_address_token_secret_override_); | |
112 } | |
113 | |
114 private: | |
115 std::vector<PrivateKey*> keys_; | |
116 | |
117 // config_ is a serialised config in QUIC wire format. | |
118 std::string config_; | |
119 | |
120 // primary_time_ contains a UNIX epoch seconds value that indicates when this | |
121 // config should become primary. | |
122 int64 primary_time_; | |
123 | |
124 // Relative priority of this config vs other configs with the same | |
125 // primary time. For use as a secondary sort key when selecting the | |
126 // primary config. | |
127 uint64 priority_; | |
128 | |
129 // Optional override to the secret used to box/unbox source address | |
130 // tokens when talking to clients that select this server config. | |
131 // It can be of any length as it is fed into a KDF before use. | |
132 std::string source_address_token_secret_override_; | |
133 | |
134 DISALLOW_COPY_AND_ASSIGN(QuicServerConfigProtobuf); | |
135 }; | |
136 | |
137 } // namespace net | |
138 | |
139 #endif // NET_QUIC_CRYPTO_CRYPTO_SERVER_CONFIG_PROTOBUF_H_ | |
OLD | NEW |