diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-28 14:29:10 +0000 |
commit | 2aa4a82499d4becd2284cdb482213d541b8804dd (patch) | |
tree | b80bf8bf13c3766139fbacc530efd0dd9d54394c /third_party/libwebrtc/webrtc/rtc_base/ssladapter.h | |
parent | Initial commit. (diff) | |
download | firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.tar.xz firefox-2aa4a82499d4becd2284cdb482213d541b8804dd.zip |
Adding upstream version 86.0.1.upstream/86.0.1upstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'third_party/libwebrtc/webrtc/rtc_base/ssladapter.h')
-rw-r--r-- | third_party/libwebrtc/webrtc/rtc_base/ssladapter.h | 99 |
1 files changed, 99 insertions, 0 deletions
diff --git a/third_party/libwebrtc/webrtc/rtc_base/ssladapter.h b/third_party/libwebrtc/webrtc/rtc_base/ssladapter.h new file mode 100644 index 0000000000..5a17015cdc --- /dev/null +++ b/third_party/libwebrtc/webrtc/rtc_base/ssladapter.h @@ -0,0 +1,99 @@ +/* + * Copyright 2004 The WebRTC Project Authors. All rights reserved. + * + * Use of this source code is governed by a BSD-style license + * that can be found in the LICENSE file in the root of the source + * tree. An additional intellectual property rights grant can be found + * in the file PATENTS. All contributing project authors may + * be found in the AUTHORS file in the root of the source tree. + */ + +#ifndef RTC_BASE_SSLADAPTER_H_ +#define RTC_BASE_SSLADAPTER_H_ + +#include "rtc_base/asyncsocket.h" +#include "rtc_base/sslstreamadapter.h" + +namespace rtc { + +class SSLAdapter; + +// Class for creating SSL adapters with shared state, e.g., a session cache, +// which allows clients to resume SSL sessions to previously-contacted hosts. +// Clients should create the factory using Create(), set up the factory as +// needed using SetMode, and then call CreateAdapter to create adapters when +// needed. +class SSLAdapterFactory { + public: + virtual ~SSLAdapterFactory() {} + // Specifies whether TLS or DTLS is to be used for the SSL adapters. + virtual void SetMode(SSLMode mode) = 0; + // Creates a new SSL adapter, but from a shared context. + virtual SSLAdapter* CreateAdapter(AsyncSocket* socket) = 0; + + static SSLAdapterFactory* Create(); +}; + +// Class that abstracts a client-to-server SSL session. It can be created +// standalone, via SSLAdapter::Create, or through a factory as described above, +// in which case it will share state with other SSLAdapters created from the +// same factory. +// After creation, call StartSSL to initiate the SSL handshake to the server. +class SSLAdapter : public AsyncSocketAdapter { + public: + explicit SSLAdapter(AsyncSocket* socket) : AsyncSocketAdapter(socket) {} + + // Methods that control server certificate verification, used in unit tests. + // Do not call these methods in production code. + // TODO(juberti): Remove the opportunistic encryption mechanism in + // BasicPacketSocketFactory that uses this function. + virtual void SetIgnoreBadCert(bool ignore) = 0; + + virtual void SetAlpnProtocols(const std::vector<std::string>& protos) = 0; + virtual void SetEllipticCurves(const std::vector<std::string>& curves) = 0; + + // Do DTLS or TLS (default is TLS, if unspecified) + virtual void SetMode(SSLMode mode) = 0; + + // Set the certificate this socket will present to incoming clients. + virtual void SetIdentity(SSLIdentity* identity) = 0; + + // Choose whether the socket acts as a server socket or client socket. + virtual void SetRole(SSLRole role) = 0; + + // StartSSL returns 0 if successful. + // If StartSSL is called while the socket is closed or connecting, the SSL + // negotiation will begin as soon as the socket connects. + // TODO(juberti): Remove |restartable|. + virtual int StartSSL(const char* hostname, bool restartable = false) = 0; + + // When an SSLAdapterFactory is used, an SSLAdapter may be used to resume + // a previous SSL session, which results in an abbreviated handshake. + // This method, if called after SSL has been established for this adapter, + // indicates whether the current session is a resumption of a previous + // session. + virtual bool IsResumedSession() = 0; + + // Create the default SSL adapter for this platform. On failure, returns null + // and deletes |socket|. Otherwise, the returned SSLAdapter takes ownership + // of |socket|. + static SSLAdapter* Create(AsyncSocket* socket); +}; + +/////////////////////////////////////////////////////////////////////////////// + +typedef bool (*VerificationCallback)(void* cert); + +// Call this on the main thread, before using SSL. +// Call CleanupSSLThread when finished with SSL. +bool InitializeSSL(VerificationCallback callback = nullptr); + +// Call to initialize additional threads. +bool InitializeSSLThread(); + +// Call to cleanup additional threads, and also the main thread. +bool CleanupSSL(); + +} // namespace rtc + +#endif // RTC_BASE_SSLADAPTER_H_ |