123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129 |
- /*
- * Copyright 2016 The WebRTC Project Authors. All rights reserved.
- *
- * Use of this source code is governed by a BSD-style license
- * that can be found in the LICENSE file in the root of the source
- * tree. An additional intellectual property rights grant can be found
- * in the file PATENTS. All contributing project authors may
- * be found in the AUTHORS file in the root of the source tree.
- */
- #ifndef P2P_BASE_DTLS_TRANSPORT_INTERNAL_H_
- #define P2P_BASE_DTLS_TRANSPORT_INTERNAL_H_
- #include <stddef.h>
- #include <stdint.h>
- #include <memory>
- #include <string>
- #include "api/crypto/crypto_options.h"
- #include "api/dtls_transport_interface.h"
- #include "api/scoped_refptr.h"
- #include "p2p/base/ice_transport_internal.h"
- #include "p2p/base/packet_transport_internal.h"
- #include "rtc_base/constructor_magic.h"
- #include "rtc_base/ssl_certificate.h"
- #include "rtc_base/ssl_fingerprint.h"
- #include "rtc_base/ssl_stream_adapter.h"
- #include "rtc_base/third_party/sigslot/sigslot.h"
- namespace cricket {
- enum DtlsTransportState {
- // Haven't started negotiating.
- DTLS_TRANSPORT_NEW = 0,
- // Have started negotiating.
- DTLS_TRANSPORT_CONNECTING,
- // Negotiated, and has a secure connection.
- DTLS_TRANSPORT_CONNECTED,
- // Transport is closed.
- DTLS_TRANSPORT_CLOSED,
- // Failed due to some error in the handshake process.
- DTLS_TRANSPORT_FAILED,
- };
- webrtc::DtlsTransportState ConvertDtlsTransportState(
- cricket::DtlsTransportState cricket_state);
- enum PacketFlags {
- PF_NORMAL = 0x00, // A normal packet.
- PF_SRTP_BYPASS = 0x01, // An encrypted SRTP packet; bypass any additional
- // crypto provided by the transport (e.g. DTLS)
- };
- // DtlsTransportInternal is an internal interface that does DTLS, also
- // negotiating SRTP crypto suites so that it may be used for DTLS-SRTP.
- //
- // Once the public interface is supported,
- // (https://www.w3.org/TR/webrtc/#rtcdtlstransport-interface)
- // the DtlsTransportInterface will be split from this class.
- class DtlsTransportInternal : public rtc::PacketTransportInternal {
- public:
- ~DtlsTransportInternal() override;
- virtual const webrtc::CryptoOptions& crypto_options() const = 0;
- virtual DtlsTransportState dtls_state() const = 0;
- virtual int component() const = 0;
- virtual bool IsDtlsActive() const = 0;
- virtual bool GetDtlsRole(rtc::SSLRole* role) const = 0;
- virtual bool SetDtlsRole(rtc::SSLRole role) = 0;
- // Finds out which TLS/DTLS version is running.
- virtual bool GetSslVersionBytes(int* version) const = 0;
- // Finds out which DTLS-SRTP cipher was negotiated.
- // TODO(zhihuang): Remove this once all dependencies implement this.
- virtual bool GetSrtpCryptoSuite(int* cipher) = 0;
- // Finds out which DTLS cipher was negotiated.
- // TODO(zhihuang): Remove this once all dependencies implement this.
- virtual bool GetSslCipherSuite(int* cipher) = 0;
- // Gets the local RTCCertificate used for DTLS.
- virtual rtc::scoped_refptr<rtc::RTCCertificate> GetLocalCertificate()
- const = 0;
- virtual bool SetLocalCertificate(
- const rtc::scoped_refptr<rtc::RTCCertificate>& certificate) = 0;
- // Gets a copy of the remote side's SSL certificate chain.
- virtual std::unique_ptr<rtc::SSLCertChain> GetRemoteSSLCertChain() const = 0;
- // Allows key material to be extracted for external encryption.
- virtual bool ExportKeyingMaterial(const std::string& label,
- const uint8_t* context,
- size_t context_len,
- bool use_context,
- uint8_t* result,
- size_t result_len) = 0;
- // Set DTLS remote fingerprint. Must be after local identity set.
- virtual bool SetRemoteFingerprint(const std::string& digest_alg,
- const uint8_t* digest,
- size_t digest_len) = 0;
- virtual bool SetSslMaxProtocolVersion(rtc::SSLProtocolVersion version) = 0;
- // Expose the underneath IceTransport.
- virtual IceTransportInternal* ice_transport() = 0;
- sigslot::signal2<DtlsTransportInternal*, DtlsTransportState> SignalDtlsState;
- // Emitted whenever the Dtls handshake failed on some transport channel.
- sigslot::signal1<rtc::SSLHandshakeError> SignalDtlsHandshakeError;
- protected:
- DtlsTransportInternal();
- private:
- RTC_DISALLOW_COPY_AND_ASSIGN(DtlsTransportInternal);
- };
- } // namespace cricket
- #endif // P2P_BASE_DTLS_TRANSPORT_INTERNAL_H_
|