Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(18)

Side by Side Diff: webrtc/base/sslstreamadapter.h

Issue 1380603005: Revert of Change WebRTC SslCipher to be exposed as number only. (Closed) Base URL: https://chromium.googlesource.com/external/webrtc@master
Patch Set: Created 5 years, 2 months ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View unified diff | Download patch
« no previous file with comments | « webrtc/base/opensslstreamadapter.cc ('k') | webrtc/base/sslstreamadapter.cc » ('j') | no next file with comments »
Toggle Intra-line Diffs ('i') | Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
OLDNEW
1 /* 1 /*
2 * Copyright 2004 The WebRTC Project Authors. All rights reserved. 2 * Copyright 2004 The WebRTC Project Authors. All rights reserved.
3 * 3 *
4 * Use of this source code is governed by a BSD-style license 4 * Use of this source code is governed by a BSD-style license
5 * that can be found in the LICENSE file in the root of the source 5 * that can be found in the LICENSE file in the root of the source
6 * tree. An additional intellectual property rights grant can be found 6 * tree. An additional intellectual property rights grant can be found
7 * in the file PATENTS. All contributing project authors may 7 * in the file PATENTS. All contributing project authors may
8 * be found in the AUTHORS file in the root of the source tree. 8 * be found in the AUTHORS file in the root of the source tree.
9 */ 9 */
10 10
11 #ifndef WEBRTC_BASE_SSLSTREAMADAPTER_H_ 11 #ifndef WEBRTC_BASE_SSLSTREAMADAPTER_H_
12 #define WEBRTC_BASE_SSLSTREAMADAPTER_H_ 12 #define WEBRTC_BASE_SSLSTREAMADAPTER_H_
13 13
14 #include <string> 14 #include <string>
15 #include <vector> 15 #include <vector>
16 16
17 #include "webrtc/base/stream.h" 17 #include "webrtc/base/stream.h"
18 #include "webrtc/base/sslidentity.h" 18 #include "webrtc/base/sslidentity.h"
19 19
20 namespace rtc { 20 namespace rtc {
21 21
22 // Constants for SRTP profiles.
23 const uint16_t SRTP_AES128_CM_SHA1_80 = 0x0001;
24 const uint16_t SRTP_AES128_CM_SHA1_32 = 0x0002;
25
26 // Cipher suite to use for SRTP. Typically a 80-bit HMAC will be used, except
27 // in applications (voice) where the additional bandwidth may be significant.
28 // A 80-bit HMAC is always used for SRTCP.
29 // 128-bit AES with 80-bit SHA-1 HMAC.
30 extern const char CS_AES_CM_128_HMAC_SHA1_80[];
31 // 128-bit AES with 32-bit SHA-1 HMAC.
32 extern const char CS_AES_CM_128_HMAC_SHA1_32[];
33
34 // Returns the DTLS-SRTP protection profile ID, as defined in
35 // https://tools.ietf.org/html/rfc5764#section-4.1.2, for the given SRTP
36 // Crypto-suite, as defined in https://tools.ietf.org/html/rfc4568#section-6.2
37 uint16_t GetSrtpCryptoSuiteFromName(const std::string& cipher_rfc_name);
38
39 // SSLStreamAdapter : A StreamInterfaceAdapter that does SSL/TLS. 22 // SSLStreamAdapter : A StreamInterfaceAdapter that does SSL/TLS.
40 // After SSL has been started, the stream will only open on successful 23 // After SSL has been started, the stream will only open on successful
41 // SSL verification of certificates, and the communication is 24 // SSL verification of certificates, and the communication is
42 // encrypted of course. 25 // encrypted of course.
43 // 26 //
44 // This class was written with SSLAdapter as a starting point. It 27 // This class was written with SSLAdapter as a starting point. It
45 // offers a similar interface, with two differences: there is no 28 // offers a similar interface, with two differences: there is no
46 // support for a restartable SSL connection, and this class has a 29 // support for a restartable SSL connection, and this class has a
47 // peer-to-peer mode. 30 // peer-to-peer mode.
48 // 31 //
(...skipping 94 matching lines...) Expand 10 before | Expand all | Expand 10 after
143 // SSLStream makes a copy of the digest value. 126 // SSLStream makes a copy of the digest value.
144 virtual bool SetPeerCertificateDigest(const std::string& digest_alg, 127 virtual bool SetPeerCertificateDigest(const std::string& digest_alg,
145 const unsigned char* digest_val, 128 const unsigned char* digest_val,
146 size_t digest_len) = 0; 129 size_t digest_len) = 0;
147 130
148 // Retrieves the peer's X.509 certificate, if a connection has been 131 // Retrieves the peer's X.509 certificate, if a connection has been
149 // established. It returns the transmitted over SSL, including the entire 132 // established. It returns the transmitted over SSL, including the entire
150 // chain. The returned certificate is owned by the caller. 133 // chain. The returned certificate is owned by the caller.
151 virtual bool GetPeerCertificate(SSLCertificate** cert) const = 0; 134 virtual bool GetPeerCertificate(SSLCertificate** cert) const = 0;
152 135
153 // Retrieves the IANA registration id of the cipher suite used for the 136 // Retrieves the name of the cipher suite used for the connection
154 // connection (e.g. 0x2F for "TLS_RSA_WITH_AES_128_CBC_SHA"). 137 // (e.g. "TLS_RSA_WITH_AES_128_CBC_SHA").
155 virtual bool GetSslCipherSuite(uint16_t* cipher); 138 virtual bool GetSslCipher(std::string* cipher);
156 139
157 // Key Exporter interface from RFC 5705 140 // Key Exporter interface from RFC 5705
158 // Arguments are: 141 // Arguments are:
159 // label -- the exporter label. 142 // label -- the exporter label.
160 // part of the RFC defining each exporter 143 // part of the RFC defining each exporter
161 // usage (IN) 144 // usage (IN)
162 // context/context_len -- a context to bind to for this connection; 145 // context/context_len -- a context to bind to for this connection;
163 // optional, can be NULL, 0 (IN) 146 // optional, can be NULL, 0 (IN)
164 // use_context -- whether to use the context value 147 // use_context -- whether to use the context value
165 // (needed to distinguish no context from 148 // (needed to distinguish no context from
(...skipping 11 matching lines...) Expand all
177 virtual bool SetDtlsSrtpCiphers(const std::vector<std::string>& ciphers); 160 virtual bool SetDtlsSrtpCiphers(const std::vector<std::string>& ciphers);
178 virtual bool GetDtlsSrtpCipher(std::string* cipher); 161 virtual bool GetDtlsSrtpCipher(std::string* cipher);
179 162
180 // Capabilities testing 163 // Capabilities testing
181 static bool HaveDtls(); 164 static bool HaveDtls();
182 static bool HaveDtlsSrtp(); 165 static bool HaveDtlsSrtp();
183 static bool HaveExporter(); 166 static bool HaveExporter();
184 167
185 // Returns the default Ssl cipher used between streams of this class 168 // Returns the default Ssl cipher used between streams of this class
186 // for the given protocol version. This is used by the unit tests. 169 // for the given protocol version. This is used by the unit tests.
187 // TODO(guoweis): Move this away from a static class method. 170 // TODO(torbjorng@webrtc.org): Fix callers to avoid default parameter.
188 static uint16_t GetDefaultSslCipherForTest(SSLProtocolVersion version, 171 static std::string GetDefaultSslCipher(SSLProtocolVersion version,
189 KeyType key_type); 172 KeyType key_type = KT_DEFAULT);
190
191 // TODO(guoweis): Move this away from a static class method. Currently this is
192 // introduced such that any caller could depend on sslstreamadapter.h without
193 // depending on specific SSL implementation.
194 static std::string GetSslCipherSuiteName(uint16_t cipher);
195 173
196 private: 174 private:
197 // If true, the server certificate need not match the configured 175 // If true, the server certificate need not match the configured
198 // server_name, and in fact missing certificate authority and other 176 // server_name, and in fact missing certificate authority and other
199 // verification errors are ignored. 177 // verification errors are ignored.
200 bool ignore_bad_cert_; 178 bool ignore_bad_cert_;
201 179
202 // If true (default), the client is required to provide a certificate during 180 // If true (default), the client is required to provide a certificate during
203 // handshake. If no certificate is given, handshake fails. This applies to 181 // handshake. If no certificate is given, handshake fails. This applies to
204 // server mode only. 182 // server mode only.
205 bool client_auth_enabled_; 183 bool client_auth_enabled_;
206 }; 184 };
207 185
208 } // namespace rtc 186 } // namespace rtc
209 187
210 #endif // WEBRTC_BASE_SSLSTREAMADAPTER_H_ 188 #endif // WEBRTC_BASE_SSLSTREAMADAPTER_H_
OLDNEW
« no previous file with comments | « webrtc/base/opensslstreamadapter.cc ('k') | webrtc/base/sslstreamadapter.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698