removed tabs
This commit is contained in:
parent
69c615d0a4
commit
69596e49dc
|
|
@ -0,0 +1,344 @@
|
||||||
|
/**
|
||||||
|
* SslConnected.h
|
||||||
|
*
|
||||||
|
* The actual tcp connection over SSL
|
||||||
|
*
|
||||||
|
* @copyright 2018 copernica BV
|
||||||
|
*/
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Include guard
|
||||||
|
*/
|
||||||
|
#pragma once
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Dependencies
|
||||||
|
*/
|
||||||
|
#include "tcpoutbuffer.h"
|
||||||
|
#include "tcpinbuffer.h"
|
||||||
|
#include "wait.h"
|
||||||
|
#include "sslwrapper.h"
|
||||||
|
#include "sslshutdown.h"
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set up namespace
|
||||||
|
*/
|
||||||
|
namespace AMQP {
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Class definition
|
||||||
|
*/
|
||||||
|
class SslConnected : public TcpState, private Watchable
|
||||||
|
{
|
||||||
|
private:
|
||||||
|
/**
|
||||||
|
* The SSL structure
|
||||||
|
* @var SslWrapper
|
||||||
|
*/
|
||||||
|
SslWrapper _ssl;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Socket file descriptor
|
||||||
|
* @var int
|
||||||
|
*/
|
||||||
|
int _socket;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The outgoing buffer
|
||||||
|
* @var TcpBuffer
|
||||||
|
*/
|
||||||
|
TcpOutBuffer _out;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The incoming buffer
|
||||||
|
* @var TcpInBuffer
|
||||||
|
*/
|
||||||
|
TcpInBuffer _in;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Are we now busy with sending or receiving?
|
||||||
|
* @var enum
|
||||||
|
*/
|
||||||
|
enum {
|
||||||
|
state_idle,
|
||||||
|
state_sending,
|
||||||
|
state_receiving
|
||||||
|
} _state;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Is the object already closed?
|
||||||
|
* @var bool
|
||||||
|
*/
|
||||||
|
bool _closed = false;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Cached reallocation instruction
|
||||||
|
* @var size_t
|
||||||
|
*/
|
||||||
|
size_t _reallocate = 0;
|
||||||
|
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Helper method to report an error
|
||||||
|
* @return bool Was an error reported?
|
||||||
|
*/
|
||||||
|
bool reportError()
|
||||||
|
{
|
||||||
|
// we have an error - report this to the user
|
||||||
|
_handler->onError(_connection, strerror(errno));
|
||||||
|
|
||||||
|
// done
|
||||||
|
return true;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Construct the next state
|
||||||
|
* @param monitor Object that monitors whether connection still exists
|
||||||
|
* @return TcpState*
|
||||||
|
*/
|
||||||
|
TcpState *nextState(const Monitor &monitor)
|
||||||
|
{
|
||||||
|
// if the object is still in a valid state, we can move to the close-state,
|
||||||
|
// otherwise there is no point in moving to a next state
|
||||||
|
return monitor.valid() ? new TcpClosed(this) : nullptr;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Proceed with the next operation after the previous operation was
|
||||||
|
* a success, possibly changing the filedescriptor-monitor
|
||||||
|
* @return TcpState*
|
||||||
|
*/
|
||||||
|
TcpState *proceed()
|
||||||
|
{
|
||||||
|
// if we still have an outgoing buffer we want to send out data
|
||||||
|
if (_out)
|
||||||
|
{
|
||||||
|
// we still have a buffer with outgoing data
|
||||||
|
_state = state_sending;
|
||||||
|
|
||||||
|
// let's wait until the socket becomes writable
|
||||||
|
_handler->monitor(_connection, _socket, readable | writable);
|
||||||
|
}
|
||||||
|
else if (_closed)
|
||||||
|
{
|
||||||
|
// we forget the current handler to prevent that things are changed
|
||||||
|
_handler = nullptr;
|
||||||
|
|
||||||
|
// start the state that closes the connection
|
||||||
|
return new SslShutdown(_connection, _socket, _ssl, _handler);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
// outgoing buffer is empty, we're idle again waiting for further input
|
||||||
|
_state = state_idle;
|
||||||
|
|
||||||
|
// let's wait until the socket becomes readable
|
||||||
|
_handler->monitor(_connection, _socket, readable);
|
||||||
|
}
|
||||||
|
|
||||||
|
// done
|
||||||
|
return this;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Method to repeat the previous call
|
||||||
|
* @param result result of an earlier openssl operation
|
||||||
|
* @return TcpState*
|
||||||
|
*/
|
||||||
|
TcpState *repeat(int result)
|
||||||
|
{
|
||||||
|
// error was returned, so we must investigate what is going on
|
||||||
|
auto error = SSL_get_error(_ssl, result);
|
||||||
|
|
||||||
|
// check the error
|
||||||
|
switch (error) {
|
||||||
|
case SSL_ERROR_WANT_READ:
|
||||||
|
// the operation must be repeated when readable
|
||||||
|
_handler->monitor(_connection, _socket, readable);
|
||||||
|
return this;
|
||||||
|
|
||||||
|
case SSL_ERROR_WANT_WRITE:
|
||||||
|
// wait until socket becomes writable again
|
||||||
|
_handler->monitor(_connection, _socket, readable | writable);
|
||||||
|
return this;
|
||||||
|
|
||||||
|
default:
|
||||||
|
|
||||||
|
// @todo check how to handle this
|
||||||
|
return this;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Parse the received buffer
|
||||||
|
* @param size
|
||||||
|
* @return TcpState
|
||||||
|
*/
|
||||||
|
TcpState *parse(size_t size)
|
||||||
|
{
|
||||||
|
// we need a local copy of the buffer - because it is possible that "this"
|
||||||
|
// object gets destructed halfway through the call to the parse() method
|
||||||
|
TcpInBuffer buffer(std::move(_in));
|
||||||
|
|
||||||
|
// because the object might soon be destructed, we create a monitor to check this
|
||||||
|
Monitor monitor(this);
|
||||||
|
|
||||||
|
// parse the buffer
|
||||||
|
auto processed = _connection->parse(buffer);
|
||||||
|
|
||||||
|
// "this" could be removed by now, check this
|
||||||
|
if (!monitor.valid()) return nullptr;
|
||||||
|
|
||||||
|
// shrink buffer
|
||||||
|
buffer.shrink(processed);
|
||||||
|
|
||||||
|
// restore the buffer as member
|
||||||
|
_in = std::move(buffer);
|
||||||
|
|
||||||
|
// do we have to reallocate?
|
||||||
|
if (_reallocate) _in.reallocate(_reallocate);
|
||||||
|
|
||||||
|
// we can remove the reallocate instruction
|
||||||
|
_reallocate = 0;
|
||||||
|
|
||||||
|
// done
|
||||||
|
return this;
|
||||||
|
}
|
||||||
|
|
||||||
|
public:
|
||||||
|
/**
|
||||||
|
* Constructor
|
||||||
|
* @param connection Parent TCP connection object
|
||||||
|
* @param socket The socket filedescriptor
|
||||||
|
* @param ssl The SSL structure
|
||||||
|
* @param buffer The buffer that was already built
|
||||||
|
* @param handler User-supplied handler object
|
||||||
|
*/
|
||||||
|
SslConnected(TcpConnection *connection, int socket, const SslWrapper &ssl, TcpOutBuffer &&buffer, TcpHandler *handler) :
|
||||||
|
TcpState(connection, handler),
|
||||||
|
_ssl(ssl),
|
||||||
|
_socket(socket),
|
||||||
|
_out(std::move(buffer)),
|
||||||
|
_in(4096),
|
||||||
|
_state(_out ? state_sending : state_idle)
|
||||||
|
{
|
||||||
|
// tell the handler to monitor the socket if there is an out
|
||||||
|
_handler->monitor(_connection, _socket, _state == state_sending ? writable : readable);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Destructor
|
||||||
|
*/
|
||||||
|
virtual ~SslConnected() noexcept
|
||||||
|
{
|
||||||
|
// skip if handler is already forgotten
|
||||||
|
if (_handler == nullptr) return;
|
||||||
|
|
||||||
|
// we no longer have to monitor the socket
|
||||||
|
_handler->monitor(_connection, _socket, 0);
|
||||||
|
|
||||||
|
// close the socket
|
||||||
|
close(_socket);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The filedescriptor of this connection
|
||||||
|
* @return int
|
||||||
|
*/
|
||||||
|
virtual int fileno() const override { return _socket; }
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Process the filedescriptor in the object
|
||||||
|
* @param fd The filedescriptor that is active
|
||||||
|
* @param flags AMQP::readable and/or AMQP::writable
|
||||||
|
* @return New implementation object
|
||||||
|
*/
|
||||||
|
virtual TcpState *process(int fd, int flags)
|
||||||
|
{
|
||||||
|
// the socket must be the one this connection writes to
|
||||||
|
if (fd != _socket) return this;
|
||||||
|
|
||||||
|
// because the object might soon be destructed, we create a monitor to check this
|
||||||
|
Monitor monitor(this);
|
||||||
|
|
||||||
|
// are we busy with sending or receiving data?
|
||||||
|
if (_state == state_sending)
|
||||||
|
{
|
||||||
|
// try to send more data from the outgoing buffer
|
||||||
|
auto result = _out.sendto(_ssl);
|
||||||
|
|
||||||
|
// if this is a success, we can proceed with the event loop
|
||||||
|
if (result > 0) return proceed();
|
||||||
|
|
||||||
|
// the operation failed, we may have to repeat our call
|
||||||
|
else return repeat(result);
|
||||||
|
}
|
||||||
|
else
|
||||||
|
{
|
||||||
|
// read data from ssl into the buffer
|
||||||
|
auto result = _in.receivefrom(_ssl, _connection->expected());
|
||||||
|
|
||||||
|
// if this is a success, we may have to update the monitor
|
||||||
|
if (result > 0) return parse(result);
|
||||||
|
|
||||||
|
// the operation failed, we may have to repeat our call
|
||||||
|
else return repeat(result);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Send data over the connection
|
||||||
|
* @param buffer buffer to send
|
||||||
|
* @param size size of the buffer
|
||||||
|
*/
|
||||||
|
virtual void send(const char *buffer, size_t size)
|
||||||
|
{
|
||||||
|
// put the data in the outgoing buffer
|
||||||
|
_out.add(buffer, size);
|
||||||
|
|
||||||
|
// if we're already busy with sending or receiving, we first have to wait
|
||||||
|
// for that operation to complete before we can move on
|
||||||
|
if (_state != state_idle) return;
|
||||||
|
|
||||||
|
// object is now busy sending
|
||||||
|
_state = state_sending;
|
||||||
|
|
||||||
|
// let's wait until the socket becomes writable
|
||||||
|
_handler->monitor(_connection, _socket, readable | writable);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Report that heartbeat negotiation is going on
|
||||||
|
* @param heartbeat suggested heartbeat
|
||||||
|
* @return uint16_t accepted heartbeat
|
||||||
|
*/
|
||||||
|
virtual uint16_t reportNegotiate(uint16_t heartbeat) override
|
||||||
|
{
|
||||||
|
// remember that we have to reallocate (_in member can not be accessed because it is moved away)
|
||||||
|
_reallocate = _connection->maxFrame();
|
||||||
|
|
||||||
|
// pass to base
|
||||||
|
return TcpState::reportNegotiate(heartbeat);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Report to the handler that the connection was nicely closed
|
||||||
|
*/
|
||||||
|
virtual void reportClosed() override
|
||||||
|
{
|
||||||
|
// remember that the object is closed
|
||||||
|
_closed = true;
|
||||||
|
|
||||||
|
// if the previous operation is still in progress
|
||||||
|
if (_state != state_idle) return;
|
||||||
|
|
||||||
|
// wait until the connection is writable
|
||||||
|
_handler->monitor(_connection, _socket, writable);
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* End of namespace
|
||||||
|
*/
|
||||||
|
}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,86 @@
|
||||||
|
/**
|
||||||
|
* SslContext.h
|
||||||
|
*
|
||||||
|
* Class to create and maintain a tcp ssl context
|
||||||
|
*
|
||||||
|
* @author Emiel Bruijntjes <emiel.bruijntjes@copernica.com>
|
||||||
|
* @copyright 2018 Copernica BV
|
||||||
|
*/
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Include guard
|
||||||
|
*/
|
||||||
|
#pragma once
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Begin of namespace
|
||||||
|
*/
|
||||||
|
namespace AMQP {
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Class definition
|
||||||
|
*/
|
||||||
|
class SslContext
|
||||||
|
{
|
||||||
|
private:
|
||||||
|
/**
|
||||||
|
* The wrapped context
|
||||||
|
* @var SSL_CTX
|
||||||
|
*/
|
||||||
|
SSL_CTX *_ctx;
|
||||||
|
|
||||||
|
public:
|
||||||
|
/**
|
||||||
|
* Constructor
|
||||||
|
* @param method
|
||||||
|
* @throws std::runtime_error
|
||||||
|
*/
|
||||||
|
SslContext(const SSL_METHOD *method) : _ctx(SSL_CTX_new(method))
|
||||||
|
{
|
||||||
|
// report error
|
||||||
|
if (_ctx == nullptr) throw std::runtime_error("failed to construct ssl context");
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Constructor that wraps around an existing context
|
||||||
|
* @param context
|
||||||
|
*/
|
||||||
|
SslContext(SSL_CTX *context) : _ctx(context)
|
||||||
|
{
|
||||||
|
// increment refcount
|
||||||
|
// @todo fix this
|
||||||
|
//SSL_ctx_up_ref(context);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Copy constructor
|
||||||
|
* @param that
|
||||||
|
*/
|
||||||
|
SslContext(SslContext &that) : _ctx(that._ctx)
|
||||||
|
{
|
||||||
|
// increment refcount
|
||||||
|
// @todo fix this
|
||||||
|
//SSL_ctx_up_ref(context);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Destructor
|
||||||
|
*/
|
||||||
|
virtual ~SslContext()
|
||||||
|
{
|
||||||
|
// free resource (this updates the refcount -1, and may destruct it)
|
||||||
|
SSL_CTX_free(_ctx);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Cast to the actual context
|
||||||
|
* @return SSL_CTX *
|
||||||
|
*/
|
||||||
|
operator SSL_CTX * () { return _ctx; }
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* End of namespace
|
||||||
|
*/
|
||||||
|
}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,252 @@
|
||||||
|
/**
|
||||||
|
* SslHandshake.h
|
||||||
|
*
|
||||||
|
* Implementation of the TCP state that is responsible for setting
|
||||||
|
* up the STARTTLS handshake.
|
||||||
|
*
|
||||||
|
* @copyright 2018 Copernica BV
|
||||||
|
*/
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Include guard
|
||||||
|
*/
|
||||||
|
#pragma once
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Dependencies
|
||||||
|
*/
|
||||||
|
#include "tcpoutbuffer.h"
|
||||||
|
#include "sslconnected.h"
|
||||||
|
#include "wait.h"
|
||||||
|
#include "sslwrapper.h"
|
||||||
|
#include "sslcontext.h"
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Set up namespace
|
||||||
|
*/
|
||||||
|
namespace AMQP {
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Class definition
|
||||||
|
*/
|
||||||
|
class SslHandshake : public TcpState, private Watchable
|
||||||
|
{
|
||||||
|
private:
|
||||||
|
/**
|
||||||
|
* SSL structure
|
||||||
|
* @var SslWrapper
|
||||||
|
*/
|
||||||
|
SslWrapper _ssl;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The socket file descriptor
|
||||||
|
* @var int
|
||||||
|
*/
|
||||||
|
int _socket;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The outgoing buffer
|
||||||
|
* @var TcpOutBuffer
|
||||||
|
*/
|
||||||
|
TcpOutBuffer _out;
|
||||||
|
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Report a new state
|
||||||
|
* @param state
|
||||||
|
* @return TcpState
|
||||||
|
*/
|
||||||
|
TcpState *nextstate(TcpState *state)
|
||||||
|
{
|
||||||
|
// forget the socket to prevent that it is closed by the destructor
|
||||||
|
_socket = -1;
|
||||||
|
|
||||||
|
// done
|
||||||
|
return state;
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Helper method to report an error
|
||||||
|
* @return TcpState*
|
||||||
|
*/
|
||||||
|
TcpState *reportError()
|
||||||
|
{
|
||||||
|
// we are no longer interested in any events for this socket
|
||||||
|
_handler->monitor(_connection, _socket, 0);
|
||||||
|
|
||||||
|
// we have an error - report this to the user
|
||||||
|
_handler->onError(_connection, "failed to setup ssl connection");
|
||||||
|
|
||||||
|
// done, go to the closed state
|
||||||
|
return new TcpClosed(_connection, _handler);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Proceed with the handshake
|
||||||
|
* @param events the events to wait for on the socket
|
||||||
|
* @return TcpState
|
||||||
|
*/
|
||||||
|
TcpState *proceed(int events)
|
||||||
|
{
|
||||||
|
// tell the handler that we want to listen for certain events
|
||||||
|
_handler->monitor(_connection, _socket, events);
|
||||||
|
|
||||||
|
// allow chaining
|
||||||
|
return this;
|
||||||
|
}
|
||||||
|
|
||||||
|
public:
|
||||||
|
/**
|
||||||
|
* Constructor
|
||||||
|
*
|
||||||
|
* @todo catch the exception!
|
||||||
|
*
|
||||||
|
* @param connection Parent TCP connection object
|
||||||
|
* @param socket The socket filedescriptor
|
||||||
|
* @param hostname The hostname to connect to
|
||||||
|
* @param context SSL context
|
||||||
|
* @param buffer The buffer that was already built
|
||||||
|
* @param handler User-supplied handler object
|
||||||
|
* @throws std::runtime_error
|
||||||
|
*/
|
||||||
|
SslHandshake(TcpConnection *connection, int socket, const std::string &hostname, TcpOutBuffer &&buffer, TcpHandler *handler) :
|
||||||
|
TcpState(connection, handler),
|
||||||
|
_ssl(SslContext(SSLv23_client_method())),
|
||||||
|
_socket(socket),
|
||||||
|
_out(std::move(buffer))
|
||||||
|
{
|
||||||
|
// we will be using the ssl context as a client
|
||||||
|
SSL_set_connect_state(_ssl);
|
||||||
|
|
||||||
|
// associate domain name with the connection
|
||||||
|
SSL_set_tlsext_host_name(_ssl, hostname.data());
|
||||||
|
|
||||||
|
// associate the ssl context with the socket filedescriptor
|
||||||
|
if (SSL_set_fd(_ssl, socket) == 0) throw std::runtime_error("failed to associate filedescriptor with ssl socket");
|
||||||
|
|
||||||
|
// we are going to wait until the socket becomes writable before we start the handshake
|
||||||
|
_handler->monitor(_connection, _socket, writable);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Destructor
|
||||||
|
*/
|
||||||
|
virtual ~SslHandshake() noexcept
|
||||||
|
{
|
||||||
|
// leap out if socket is invalidated
|
||||||
|
if (_socket < 0) return;
|
||||||
|
|
||||||
|
// close the socket
|
||||||
|
close(_socket);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The filedescriptor of this connection
|
||||||
|
* @return int
|
||||||
|
*/
|
||||||
|
virtual int fileno() const override { return _socket; }
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Process the filedescriptor in the object
|
||||||
|
* @param fd Filedescriptor that is active
|
||||||
|
* @param flags AMQP::readable and/or AMQP::writable
|
||||||
|
* @return New state object
|
||||||
|
*/
|
||||||
|
virtual TcpState *process(int fd, int flags) override
|
||||||
|
{
|
||||||
|
// must be the socket
|
||||||
|
if (fd != _socket) return this;
|
||||||
|
|
||||||
|
// start the ssl handshake
|
||||||
|
int result = SSL_do_handshake(_ssl);
|
||||||
|
|
||||||
|
// if the connection succeeds, we can move to the ssl-connected state
|
||||||
|
if (result == 1) return nextstate(new SslConnected(_connection, _socket, _ssl, std::move(_out), _handler));
|
||||||
|
|
||||||
|
// error was returned, so we must investigate what is going on
|
||||||
|
auto error = SSL_get_error(_ssl, result);
|
||||||
|
|
||||||
|
// check the error
|
||||||
|
switch (error) {
|
||||||
|
case SSL_ERROR_WANT_READ: return proceed(readable);
|
||||||
|
case SSL_ERROR_WANT_WRITE: return proceed(readable | writable);
|
||||||
|
default: return reportError();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Send data over the connection
|
||||||
|
* @param buffer buffer to send
|
||||||
|
* @param size size of the buffer
|
||||||
|
*/
|
||||||
|
virtual void send(const char *buffer, size_t size) override
|
||||||
|
{
|
||||||
|
// the handshake is still busy, outgoing data must be cached
|
||||||
|
_out.add(buffer, size);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Flush the connection, sent all buffered data to the socket
|
||||||
|
* @return TcpState new tcp state
|
||||||
|
*/
|
||||||
|
virtual TcpState *flush() override
|
||||||
|
{
|
||||||
|
// create an object to wait for the filedescriptor to becomes active
|
||||||
|
Wait wait(_socket);
|
||||||
|
|
||||||
|
// keep looping
|
||||||
|
while (true)
|
||||||
|
{
|
||||||
|
// start the ssl handshake
|
||||||
|
int result = SSL_do_handshake(_ssl);
|
||||||
|
|
||||||
|
// if the connection succeeds, we can move to the ssl-connected state
|
||||||
|
if (result == 1) return nextstate(new SslConnected(_connection, _socket, _ssl, std::move(_out), _handler));
|
||||||
|
|
||||||
|
// error was returned, so we must investigate what is going on
|
||||||
|
auto error = SSL_get_error(_ssl, result);
|
||||||
|
|
||||||
|
// check the error
|
||||||
|
switch (error)
|
||||||
|
{
|
||||||
|
// if openssl reports that socket readability or writability is needed,
|
||||||
|
// we wait for that until this situation is reached
|
||||||
|
case SSL_ERROR_WANT_READ: wait.readable(); break;
|
||||||
|
case SSL_ERROR_WANT_WRITE: wait.active(); break;
|
||||||
|
|
||||||
|
// something is wrong, we proceed to the next state
|
||||||
|
default: return reportError();
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Report to the handler that the connection was nicely closed
|
||||||
|
*/
|
||||||
|
virtual void reportClosed() override
|
||||||
|
{
|
||||||
|
// we no longer have to monitor the socket
|
||||||
|
_handler->monitor(_connection, _socket, 0);
|
||||||
|
|
||||||
|
// close the socket
|
||||||
|
close(_socket);
|
||||||
|
|
||||||
|
// socket is closed now
|
||||||
|
_socket = -1;
|
||||||
|
|
||||||
|
// copy the handler (if might destruct this object)
|
||||||
|
auto *handler = _handler;
|
||||||
|
|
||||||
|
// reset member before the handler can make a mess of it
|
||||||
|
_handler = nullptr;
|
||||||
|
|
||||||
|
// notify to handler
|
||||||
|
handler->onClosed(_connection);
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* End of namespace
|
||||||
|
*/
|
||||||
|
}
|
||||||
|
|
||||||
|
|
@ -0,0 +1,161 @@
|
||||||
|
/**
|
||||||
|
* SslShutdown.h
|
||||||
|
*
|
||||||
|
* Class that takes care of the final handshake to close a SSL connection
|
||||||
|
*
|
||||||
|
* @author Emiel Bruijntjes <emiel.bruijntjes@copernica.com>
|
||||||
|
* @copyright 2018 Copernica BV
|
||||||
|
*/
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Include guard
|
||||||
|
*/
|
||||||
|
#pragma once
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Begin of namespace
|
||||||
|
*/
|
||||||
|
namespace AMQP {
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Class definition
|
||||||
|
*/
|
||||||
|
class SslShutdown : public TcpState, private Watchable
|
||||||
|
{
|
||||||
|
private:
|
||||||
|
/**
|
||||||
|
* The SSL context
|
||||||
|
* @var SslWrapper
|
||||||
|
*/
|
||||||
|
SslWrapper _ssl;
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Socket file descriptor
|
||||||
|
* @var int
|
||||||
|
*/
|
||||||
|
int _socket;
|
||||||
|
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Proceed with the next operation after the previous operation was
|
||||||
|
* a success, possibly changing the filedescriptor-monitor
|
||||||
|
* @return TcpState*
|
||||||
|
*/
|
||||||
|
TcpState *proceed()
|
||||||
|
{
|
||||||
|
// construct monitor to prevent that we access members if object is destructed
|
||||||
|
Monitor monitor(this);
|
||||||
|
|
||||||
|
// we're no longer interested in events
|
||||||
|
_handler->monitor(_connection, _socket, 0);
|
||||||
|
|
||||||
|
// stop if object was destructed
|
||||||
|
if (!monitor) return nullptr;
|
||||||
|
|
||||||
|
// close the socket
|
||||||
|
close(_socket);
|
||||||
|
|
||||||
|
// forget the socket
|
||||||
|
_socket = -1;
|
||||||
|
|
||||||
|
// go to the closed state
|
||||||
|
return new TcpClosed(_connection, _handler);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Method to repeat the previous call
|
||||||
|
* @param result result of an earlier openssl operation
|
||||||
|
* @return TcpState*
|
||||||
|
*/
|
||||||
|
TcpState *repeat(int result)
|
||||||
|
{
|
||||||
|
// error was returned, so we must investigate what is going on
|
||||||
|
auto error = SSL_get_error(_ssl, result);
|
||||||
|
|
||||||
|
// check the error
|
||||||
|
switch (error) {
|
||||||
|
case SSL_ERROR_WANT_READ:
|
||||||
|
// the operation must be repeated when readable
|
||||||
|
_handler->monitor(_connection, _socket, readable);
|
||||||
|
return this;
|
||||||
|
|
||||||
|
case SSL_ERROR_WANT_WRITE:
|
||||||
|
// wait until socket becomes writable again
|
||||||
|
_handler->monitor(_connection, _socket, readable | writable);
|
||||||
|
return this;
|
||||||
|
|
||||||
|
default:
|
||||||
|
|
||||||
|
// @todo check how to handle this
|
||||||
|
return this;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
public:
|
||||||
|
/**
|
||||||
|
* Constructor
|
||||||
|
* @param connection Parent TCP connection object
|
||||||
|
* @param socket The socket filedescriptor
|
||||||
|
* @param ssl The SSL structure
|
||||||
|
* @param handler User-supplied handler object
|
||||||
|
*/
|
||||||
|
SslShutdown(TcpConnection *connection, int socket, const SslWrapper &ssl, TcpHandler *handler) :
|
||||||
|
TcpState(connection, handler),
|
||||||
|
_ssl(ssl),
|
||||||
|
_socket(socket)
|
||||||
|
{
|
||||||
|
// tell the handler to monitor the socket if there is an out
|
||||||
|
_handler->monitor(_connection, _socket, readable);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Destructor
|
||||||
|
*/
|
||||||
|
virtual ~SslShutdown() noexcept
|
||||||
|
{
|
||||||
|
// skip if handler is already forgotten
|
||||||
|
if (_handler == nullptr) return;
|
||||||
|
|
||||||
|
// we no longer have to monitor the socket
|
||||||
|
_handler->monitor(_connection, _socket, 0);
|
||||||
|
|
||||||
|
// close the socket
|
||||||
|
close(_socket);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* The filedescriptor of this connection
|
||||||
|
* @return int
|
||||||
|
*/
|
||||||
|
virtual int fileno() const override { return _socket; }
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Process the filedescriptor in the object
|
||||||
|
* @param fd The filedescriptor that is active
|
||||||
|
* @param flags AMQP::readable and/or AMQP::writable
|
||||||
|
* @return New implementation object
|
||||||
|
*/
|
||||||
|
virtual TcpState *process(int fd, int flags)
|
||||||
|
{
|
||||||
|
// the socket must be the one this connection writes to
|
||||||
|
if (fd != _socket) return this;
|
||||||
|
|
||||||
|
// because the object might soon be destructed, we create a monitor to check this
|
||||||
|
Monitor monitor(this);
|
||||||
|
|
||||||
|
// close the connection
|
||||||
|
auto result = SSL_shutdown(_ssl);
|
||||||
|
|
||||||
|
// if this is a success, we can proceed with the event loop
|
||||||
|
if (result > 0) return proceed();
|
||||||
|
|
||||||
|
// the operation failed, we may have to repeat our call
|
||||||
|
else return repeat(result);
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* End of namespace
|
||||||
|
*/
|
||||||
|
}
|
||||||
|
|
@ -0,0 +1,85 @@
|
||||||
|
/**
|
||||||
|
* SslWrapper.h
|
||||||
|
*
|
||||||
|
* Wrapper around a SSL pointer
|
||||||
|
*
|
||||||
|
* @author Emiel Bruijntjes <emiel.bruijntjes@copernica.com>
|
||||||
|
* @copyright 2018 Copernica BV
|
||||||
|
*/
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Include guard
|
||||||
|
*/
|
||||||
|
#pragma once
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Begin of namespace
|
||||||
|
*/
|
||||||
|
namespace AMQP {
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Class definition
|
||||||
|
*/
|
||||||
|
class SslWrapper
|
||||||
|
{
|
||||||
|
private:
|
||||||
|
/**
|
||||||
|
* The wrapped object
|
||||||
|
* @var SSL*
|
||||||
|
*/
|
||||||
|
SSL *_ssl;
|
||||||
|
|
||||||
|
public:
|
||||||
|
/**
|
||||||
|
* Constructor
|
||||||
|
* @param ctx
|
||||||
|
*/
|
||||||
|
SslWrapper(SSL_CTX *ctx) : _ssl(SSL_new(ctx))
|
||||||
|
{
|
||||||
|
// report error
|
||||||
|
if (_ssl == nullptr) throw std::runtime_error("failed to construct ssl structure");
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Wrapper constructor
|
||||||
|
* @param ssl
|
||||||
|
*/
|
||||||
|
SslWrapper(SSL *ssl) : _ssl(ssl)
|
||||||
|
{
|
||||||
|
// one more reference
|
||||||
|
// @todo fix this
|
||||||
|
//CRYPTO_add(_ssl);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Copy constructor
|
||||||
|
* @param that
|
||||||
|
*/
|
||||||
|
SslWrapper(const SslWrapper &that) : _ssl(that._ssl)
|
||||||
|
{
|
||||||
|
// one more reference
|
||||||
|
// @todo fix this
|
||||||
|
//SSL_up_ref(_ssl);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Destructor
|
||||||
|
*/
|
||||||
|
virtual ~SslWrapper()
|
||||||
|
{
|
||||||
|
// destruct object
|
||||||
|
SSL_free(_ssl);
|
||||||
|
}
|
||||||
|
|
||||||
|
/**
|
||||||
|
* Cast to the SSL*
|
||||||
|
* @return SSL *
|
||||||
|
*/
|
||||||
|
operator SSL * () const { return _ssl; }
|
||||||
|
};
|
||||||
|
|
||||||
|
/**
|
||||||
|
* End of namespace
|
||||||
|
*/
|
||||||
|
}
|
||||||
|
|
||||||
|
|
@ -222,8 +222,8 @@ public:
|
||||||
*/
|
*/
|
||||||
virtual TcpState *flush() override
|
virtual TcpState *flush() override
|
||||||
{
|
{
|
||||||
// create an object to wait for the filedescriptor to becomes active
|
// create an object to wait for the filedescriptor to becomes active
|
||||||
Wait wait(_socket);
|
Wait wait(_socket);
|
||||||
|
|
||||||
// keep running until the out buffer is empty
|
// keep running until the out buffer is empty
|
||||||
while (_out)
|
while (_out)
|
||||||
|
|
|
||||||
|
|
@ -110,15 +110,15 @@ public:
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Receive data from a socket
|
* Receive data from a socket
|
||||||
* @param ssl ssl wrapped socket to read from
|
* @param ssl ssl wrapped socket to read from
|
||||||
* @param expected number of bytes that the library expects
|
* @param expected number of bytes that the library expects
|
||||||
* @return ssize_t
|
* @return ssize_t
|
||||||
*/
|
*/
|
||||||
ssize_t receivefrom(SSL *ssl, uint32_t expected)
|
ssize_t receivefrom(SSL *ssl, uint32_t expected)
|
||||||
{
|
{
|
||||||
// @todo implementation
|
// @todo implementation
|
||||||
return 0;
|
return 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Shrink the buffer (in practice this is always called with the full buffer size)
|
* Shrink the buffer (in practice this is always called with the full buffer size)
|
||||||
|
|
|
||||||
|
|
@ -198,34 +198,34 @@ public:
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Fill an iovec buffer
|
* Fill an iovec buffer
|
||||||
* @param buffers the buffers to be filled
|
* @param buffers the buffers to be filled
|
||||||
* @param count number of buffers available
|
* @param count number of buffers available
|
||||||
* @return size_t the number of buffers that were filled
|
* @return size_t the number of buffers that were filled
|
||||||
*/
|
*/
|
||||||
size_t fill(struct iovec buffers[], size_t count) const
|
size_t fill(struct iovec buffers[], size_t count) const
|
||||||
{
|
{
|
||||||
// index counter
|
// index counter
|
||||||
size_t index = 0;
|
size_t index = 0;
|
||||||
|
|
||||||
// iterate over the buffers
|
// iterate over the buffers
|
||||||
for (const auto &str : _buffers)
|
for (const auto &str : _buffers)
|
||||||
{
|
{
|
||||||
// fill buffer
|
// fill buffer
|
||||||
buffers[index].iov_base = (void *)(index == 0 ? str.data() + _skip : str.data());
|
buffers[index].iov_base = (void *)(index == 0 ? str.data() + _skip : str.data());
|
||||||
buffers[index].iov_len = index == 0 ? str.size() - _skip : str.size();
|
buffers[index].iov_len = index == 0 ? str.size() - _skip : str.size();
|
||||||
|
|
||||||
// update counter for next iteration
|
// update counter for next iteration
|
||||||
if (++index >= count) return count;
|
if (++index >= count) return count;
|
||||||
}
|
}
|
||||||
|
|
||||||
// done
|
// done
|
||||||
return index;
|
return index;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Send the buffer to a socket
|
* Send the buffer to a socket
|
||||||
* @param socket the socket to send data to
|
* @param socket the socket to send data to
|
||||||
* @return ssize_t number of bytes sent (or the same result as sendmsg() in case of an error)
|
* @return ssize_t number of bytes sent (or the same result as sendmsg() in case of an error)
|
||||||
*/
|
*/
|
||||||
ssize_t sendto(int socket)
|
ssize_t sendto(int socket)
|
||||||
{
|
{
|
||||||
|
|
@ -270,28 +270,28 @@ public:
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Send the buffer to an SSL connection
|
* Send the buffer to an SSL connection
|
||||||
* @param ssl the ssl context to send data to
|
* @param ssl the ssl context to send data to
|
||||||
* @return ssize_t number of bytes sent, or the return value of ssl_write
|
* @return ssize_t number of bytes sent, or the return value of ssl_write
|
||||||
*/
|
*/
|
||||||
ssize_t sendto(SSL *ssl)
|
ssize_t sendto(SSL *ssl)
|
||||||
{
|
{
|
||||||
// we're going to fill a lot of buffers (for ssl only one buffer at a time can be sent)
|
// we're going to fill a lot of buffers (for ssl only one buffer at a time can be sent)
|
||||||
struct iovec buffer[1];
|
struct iovec buffer[1];
|
||||||
|
|
||||||
// fill the buffers, and leap out if there is no data
|
// fill the buffers, and leap out if there is no data
|
||||||
auto buffers = fill(buffer, 1);
|
auto buffers = fill(buffer, 1);
|
||||||
|
|
||||||
// just to be sure we do this check
|
// just to be sure we do this check
|
||||||
if (buffers == 0) return 0;
|
if (buffers == 0) return 0;
|
||||||
|
|
||||||
// send the data
|
// send the data
|
||||||
auto result = SSL_write(ssl, buffer[0].iov_base, buffer[0].iov_len);
|
auto result = SSL_write(ssl, buffer[0].iov_base, buffer[0].iov_len);
|
||||||
|
|
||||||
// on success we shrink the buffer
|
// on success we shrink the buffer
|
||||||
if (result > 0) shrink(result);
|
if (result > 0) shrink(result);
|
||||||
|
|
||||||
// done
|
// done
|
||||||
return result;
|
return result;
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
|
||||||
|
|
|
||||||
|
|
@ -149,7 +149,7 @@ public:
|
||||||
* @param connection Parent connection object
|
* @param connection Parent connection object
|
||||||
* @param hostname The hostname for the lookup
|
* @param hostname The hostname for the lookup
|
||||||
* @param portnumber The portnumber for the lookup
|
* @param portnumber The portnumber for the lookup
|
||||||
* @param secure Do we need a secure tls connection when ready?
|
* @param secure Do we need a secure tls connection when ready?
|
||||||
* @param handler User implemented handler object
|
* @param handler User implemented handler object
|
||||||
*/
|
*/
|
||||||
TcpResolver(TcpConnection *connection, const std::string &hostname, uint16_t port, bool secure, TcpHandler *handler) :
|
TcpResolver(TcpConnection *connection, const std::string &hostname, uint16_t port, bool secure, TcpHandler *handler) :
|
||||||
|
|
@ -189,12 +189,12 @@ public:
|
||||||
// do we have a valid socket?
|
// do we have a valid socket?
|
||||||
if (_socket >= 0)
|
if (_socket >= 0)
|
||||||
{
|
{
|
||||||
// if we need a secure connection, we move to the tls handshake
|
// if we need a secure connection, we move to the tls handshake
|
||||||
//if (_secure) return new SslHandshake(_connection, _socket, _hostname, std::move(_buffer), _handler);
|
//if (_secure) return new SslHandshake(_connection, _socket, _hostname, std::move(_buffer), _handler);
|
||||||
|
|
||||||
// otherwise we have a valid regular tcp connection
|
// otherwise we have a valid regular tcp connection
|
||||||
return new TcpConnected(_connection, _socket, std::move(_buffer), _handler);
|
return new TcpConnected(_connection, _socket, std::move(_buffer), _handler);
|
||||||
}
|
}
|
||||||
else
|
else
|
||||||
{
|
{
|
||||||
// report error
|
// report error
|
||||||
|
|
|
||||||
|
|
@ -1,9 +1,9 @@
|
||||||
/**
|
/**
|
||||||
* Wait.h
|
* Wait.h
|
||||||
*
|
*
|
||||||
* Class to wait for a socket to become readable and/or writable
|
* Class to wait for a socket to become readable and/or writable
|
||||||
*
|
*
|
||||||
* @copyright 2018 Copernica BV
|
* @copyright 2018 Copernica BV
|
||||||
*/
|
*/
|
||||||
|
|
||||||
/**
|
/**
|
||||||
|
|
@ -12,82 +12,82 @@
|
||||||
#pragma once
|
#pragma once
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Begin of namespace
|
* Begin of namespace
|
||||||
*/
|
*/
|
||||||
namespace AMQP {
|
namespace AMQP {
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Class definition
|
* Class definition
|
||||||
*/
|
*/
|
||||||
class Wait
|
class Wait
|
||||||
{
|
{
|
||||||
private:
|
private:
|
||||||
/**
|
/**
|
||||||
* Set with just one filedescriptor
|
* Set with just one filedescriptor
|
||||||
* @var fd_set
|
* @var fd_set
|
||||||
*/
|
*/
|
||||||
fd_set _set;
|
fd_set _set;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* The current socket // @todo what is it exactly?
|
* The current socket // @todo what is it exactly?
|
||||||
* @var int
|
* @var int
|
||||||
*/
|
*/
|
||||||
int _socket;
|
int _socket;
|
||||||
|
|
||||||
public:
|
public:
|
||||||
/**
|
/**
|
||||||
* Constructor
|
* Constructor
|
||||||
* @param fd the filedescriptor that we're waiting on
|
* @param fd the filedescriptor that we're waiting on
|
||||||
*/
|
*/
|
||||||
Wait(int fd)
|
Wait(int fd)
|
||||||
{
|
{
|
||||||
_socket = fd;
|
_socket = fd;
|
||||||
|
|
||||||
// initialize the set
|
// initialize the set
|
||||||
FD_ZERO(&_set);
|
FD_ZERO(&_set);
|
||||||
|
|
||||||
// add the one socket
|
// add the one socket
|
||||||
FD_SET(_socket, &_set);
|
FD_SET(_socket, &_set);
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Destructor
|
* Destructor
|
||||||
*/
|
*/
|
||||||
virtual ~Wait() = default;
|
virtual ~Wait() = default;
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Wait until the filedescriptor becomes readable
|
* Wait until the filedescriptor becomes readable
|
||||||
* @return bool
|
* @return bool
|
||||||
*/
|
*/
|
||||||
bool readable()
|
bool readable()
|
||||||
{
|
{
|
||||||
// wait for the socket
|
// wait for the socket
|
||||||
return select(_socket + 1, &_set, nullptr, nullptr, nullptr) > 0;
|
return select(_socket + 1, &_set, nullptr, nullptr, nullptr) > 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Wait until the filedescriptor becomes writable
|
* Wait until the filedescriptor becomes writable
|
||||||
* @return bool
|
* @return bool
|
||||||
*/
|
*/
|
||||||
bool writable()
|
bool writable()
|
||||||
{
|
{
|
||||||
// wait for the socket
|
// wait for the socket
|
||||||
return select(_socket + 1, nullptr, &_set, nullptr, nullptr) > 0;
|
return select(_socket + 1, nullptr, &_set, nullptr, nullptr) > 0;
|
||||||
}
|
}
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* Wait until a filedescriptor becomes active (readable or writable)
|
* Wait until a filedescriptor becomes active (readable or writable)
|
||||||
* @return bool
|
* @return bool
|
||||||
*/
|
*/
|
||||||
bool active()
|
bool active()
|
||||||
{
|
{
|
||||||
// wait for the socket
|
// wait for the socket
|
||||||
return select(_socket + 1, &_set, &_set, nullptr, nullptr) > 0;
|
return select(_socket + 1, &_set, &_set, nullptr, nullptr) > 0;
|
||||||
}
|
}
|
||||||
};
|
};
|
||||||
|
|
||||||
/**
|
/**
|
||||||
* End of namespace
|
* End of namespace
|
||||||
*/
|
*/
|
||||||
}
|
}
|
||||||
|
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue