1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
|
// Copyright (c) 2006-2009 The Chromium Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#ifndef NET_SOCKET_SSL_CLIENT_SOCKET_MAC_H_
#define NET_SOCKET_SSL_CLIENT_SOCKET_MAC_H_
#include <Security/Security.h>
#include <string>
#include <vector>
#include "base/scoped_ptr.h"
#include "net/base/cert_verify_result.h"
#include "net/base/completion_callback.h"
#include "net/base/ssl_config_service.h"
#include "net/socket/ssl_client_socket.h"
namespace net {
class CertVerifier;
// An SSL client socket implemented with Secure Transport.
class SSLClientSocketMac : public SSLClientSocket {
public:
// Takes ownership of the transport_socket, which may already be connected.
// The given hostname will be compared with the name(s) in the server's
// certificate during the SSL handshake. ssl_config specifies the SSL
// settings.
SSLClientSocketMac(ClientSocket* transport_socket,
const std::string& hostname,
const SSLConfig& ssl_config);
~SSLClientSocketMac();
// SSLClientSocket methods:
virtual void GetSSLInfo(SSLInfo* ssl_info);
virtual void GetSSLCertRequestInfo(SSLCertRequestInfo* cert_request_info);
// ClientSocket methods:
virtual int Connect(CompletionCallback* callback);
virtual void Disconnect();
virtual bool IsConnected() const;
virtual bool IsConnectedAndIdle() const;
// Socket methods:
virtual int Read(IOBuffer* buf, int buf_len, CompletionCallback* callback);
virtual int Write(IOBuffer* buf, int buf_len, CompletionCallback* callback);
virtual bool SetReceiveBufferSize(int32 size);
virtual bool SetSendBufferSize(int32 size);
private:
void DoConnectCallback(int result);
void DoReadCallback(int result);
void DoWriteCallback(int result);
void OnHandshakeIOComplete(int result);
void OnTransportReadComplete(int result);
void OnTransportWriteComplete(int result);
int DoHandshakeLoop(int last_io_result);
int DoPayloadRead();
int DoPayloadWrite();
int DoHandshakeStart();
int DoVerifyCert();
int DoVerifyCertComplete(int result);
int DoHandshakeFinish();
static OSStatus SSLReadCallback(SSLConnectionRef connection,
void* data,
size_t* data_length);
static OSStatus SSLWriteCallback(SSLConnectionRef connection,
const void* data,
size_t* data_length);
CompletionCallbackImpl<SSLClientSocketMac> handshake_io_callback_;
CompletionCallbackImpl<SSLClientSocketMac> transport_read_callback_;
CompletionCallbackImpl<SSLClientSocketMac> transport_write_callback_;
scoped_ptr<ClientSocket> transport_;
std::string hostname_;
SSLConfig ssl_config_;
CompletionCallback* user_connect_callback_;
CompletionCallback* user_read_callback_;
CompletionCallback* user_write_callback_;
// Used by Read function.
scoped_refptr<IOBuffer> user_read_buf_;
int user_read_buf_len_;
// Used by Write function.
scoped_refptr<IOBuffer> user_write_buf_;
int user_write_buf_len_;
enum State {
STATE_NONE,
STATE_HANDSHAKE_START,
STATE_VERIFY_CERT,
STATE_VERIFY_CERT_COMPLETE,
STATE_HANDSHAKE_FINISH,
};
State next_handshake_state_;
scoped_refptr<X509Certificate> server_cert_;
std::vector<scoped_refptr<X509Certificate> > intermediate_certs_;
scoped_ptr<CertVerifier> verifier_;
CertVerifyResult server_cert_verify_result_;
bool completed_handshake_;
bool handshake_interrupted_;
SSLContextRef ssl_context_;
// These are buffers for holding data during I/O. The "slop" is the amount of
// space at the ends of the receive buffer that are allocated for holding data
// but don't (yet).
std::vector<char> send_buffer_;
int pending_send_error_;
std::vector<char> recv_buffer_;
int recv_buffer_head_slop_;
int recv_buffer_tail_slop_;
// This buffer holds data for Read() operations on the underlying transport
// (ClientSocket::Read()).
scoped_refptr<IOBuffer> read_io_buf_;
};
} // namespace net
#endif // NET_SOCKET_SSL_CLIENT_SOCKET_MAC_H_
|
