OLD | NEW |
1 /* | 1 /* |
2 * Copyright 2004 The WebRTC Project Authors. All rights reserved. | 2 * Copyright 2004 The WebRTC Project Authors. All rights reserved. |
3 * | 3 * |
4 * Use of this source code is governed by a BSD-style license | 4 * Use of this source code is governed by a BSD-style license |
5 * that can be found in the LICENSE file in the root of the source | 5 * that can be found in the LICENSE file in the root of the source |
6 * tree. An additional intellectual property rights grant can be found | 6 * tree. An additional intellectual property rights grant can be found |
7 * in the file PATENTS. All contributing project authors may | 7 * in the file PATENTS. All contributing project authors may |
8 * be found in the AUTHORS file in the root of the source tree. | 8 * be found in the AUTHORS file in the root of the source tree. |
9 */ | 9 */ |
10 | 10 |
11 #ifndef WEBRTC_BASE_SSLSTREAMADAPTER_H_ | 11 #ifndef WEBRTC_BASE_SSLSTREAMADAPTER_H_ |
12 #define WEBRTC_BASE_SSLSTREAMADAPTER_H_ | 12 #define WEBRTC_BASE_SSLSTREAMADAPTER_H_ |
13 | 13 |
14 #include <string> | 14 #include <string> |
15 #include <vector> | 15 #include <vector> |
16 | 16 |
17 #include "webrtc/base/stream.h" | 17 #include "webrtc/base/stream.h" |
18 #include "webrtc/base/sslidentity.h" | 18 #include "webrtc/base/sslidentity.h" |
19 | 19 |
20 namespace rtc { | 20 namespace rtc { |
21 | 21 |
22 // Constants for SRTP profiles. | |
23 const uint16_t SRTP_AES128_CM_SHA1_80 = 0x0001; | |
24 const uint16_t SRTP_AES128_CM_SHA1_32 = 0x0002; | |
25 | |
26 // Cipher suite to use for SRTP. Typically a 80-bit HMAC will be used, except | |
27 // in applications (voice) where the additional bandwidth may be significant. | |
28 // A 80-bit HMAC is always used for SRTCP. | |
29 // 128-bit AES with 80-bit SHA-1 HMAC. | |
30 extern const char CS_AES_CM_128_HMAC_SHA1_80[]; | |
31 // 128-bit AES with 32-bit SHA-1 HMAC. | |
32 extern const char CS_AES_CM_128_HMAC_SHA1_32[]; | |
33 | |
34 // Returns the DTLS-SRTP protection profile ID, as defined in | |
35 // https://tools.ietf.org/html/rfc5764#section-4.1.2, for the given SRTP | |
36 // Crypto-suite, as defined in https://tools.ietf.org/html/rfc4568#section-6.2 | |
37 uint16_t GetSrtpCryptoSuiteFromName(const std::string& cipher_rfc_name); | |
38 | |
39 // SSLStreamAdapter : A StreamInterfaceAdapter that does SSL/TLS. | 22 // SSLStreamAdapter : A StreamInterfaceAdapter that does SSL/TLS. |
40 // After SSL has been started, the stream will only open on successful | 23 // After SSL has been started, the stream will only open on successful |
41 // SSL verification of certificates, and the communication is | 24 // SSL verification of certificates, and the communication is |
42 // encrypted of course. | 25 // encrypted of course. |
43 // | 26 // |
44 // This class was written with SSLAdapter as a starting point. It | 27 // This class was written with SSLAdapter as a starting point. It |
45 // offers a similar interface, with two differences: there is no | 28 // offers a similar interface, with two differences: there is no |
46 // support for a restartable SSL connection, and this class has a | 29 // support for a restartable SSL connection, and this class has a |
47 // peer-to-peer mode. | 30 // peer-to-peer mode. |
48 // | 31 // |
(...skipping 94 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
143 // SSLStream makes a copy of the digest value. | 126 // SSLStream makes a copy of the digest value. |
144 virtual bool SetPeerCertificateDigest(const std::string& digest_alg, | 127 virtual bool SetPeerCertificateDigest(const std::string& digest_alg, |
145 const unsigned char* digest_val, | 128 const unsigned char* digest_val, |
146 size_t digest_len) = 0; | 129 size_t digest_len) = 0; |
147 | 130 |
148 // Retrieves the peer's X.509 certificate, if a connection has been | 131 // Retrieves the peer's X.509 certificate, if a connection has been |
149 // established. It returns the transmitted over SSL, including the entire | 132 // established. It returns the transmitted over SSL, including the entire |
150 // chain. The returned certificate is owned by the caller. | 133 // chain. The returned certificate is owned by the caller. |
151 virtual bool GetPeerCertificate(SSLCertificate** cert) const = 0; | 134 virtual bool GetPeerCertificate(SSLCertificate** cert) const = 0; |
152 | 135 |
153 // Retrieves the IANA registration id of the cipher suite used for the | 136 // Retrieves the name of the cipher suite used for the connection |
154 // connection (e.g. 0x2F for "TLS_RSA_WITH_AES_128_CBC_SHA"). | 137 // (e.g. "TLS_RSA_WITH_AES_128_CBC_SHA"). |
155 virtual bool GetSslCipherSuite(uint16_t* cipher); | 138 virtual bool GetSslCipher(std::string* cipher); |
156 | 139 |
157 // Key Exporter interface from RFC 5705 | 140 // Key Exporter interface from RFC 5705 |
158 // Arguments are: | 141 // Arguments are: |
159 // label -- the exporter label. | 142 // label -- the exporter label. |
160 // part of the RFC defining each exporter | 143 // part of the RFC defining each exporter |
161 // usage (IN) | 144 // usage (IN) |
162 // context/context_len -- a context to bind to for this connection; | 145 // context/context_len -- a context to bind to for this connection; |
163 // optional, can be NULL, 0 (IN) | 146 // optional, can be NULL, 0 (IN) |
164 // use_context -- whether to use the context value | 147 // use_context -- whether to use the context value |
165 // (needed to distinguish no context from | 148 // (needed to distinguish no context from |
(...skipping 11 matching lines...) Expand all Loading... |
177 virtual bool SetDtlsSrtpCiphers(const std::vector<std::string>& ciphers); | 160 virtual bool SetDtlsSrtpCiphers(const std::vector<std::string>& ciphers); |
178 virtual bool GetDtlsSrtpCipher(std::string* cipher); | 161 virtual bool GetDtlsSrtpCipher(std::string* cipher); |
179 | 162 |
180 // Capabilities testing | 163 // Capabilities testing |
181 static bool HaveDtls(); | 164 static bool HaveDtls(); |
182 static bool HaveDtlsSrtp(); | 165 static bool HaveDtlsSrtp(); |
183 static bool HaveExporter(); | 166 static bool HaveExporter(); |
184 | 167 |
185 // Returns the default Ssl cipher used between streams of this class | 168 // Returns the default Ssl cipher used between streams of this class |
186 // for the given protocol version. This is used by the unit tests. | 169 // for the given protocol version. This is used by the unit tests. |
187 // TODO(guoweis): Move this away from a static class method. | 170 // TODO(torbjorng@webrtc.org): Fix callers to avoid default parameter. |
188 static uint16_t GetDefaultSslCipherForTest(SSLProtocolVersion version, | 171 static std::string GetDefaultSslCipher(SSLProtocolVersion version, |
189 KeyType key_type); | 172 KeyType key_type = KT_DEFAULT); |
190 | |
191 // TODO(guoweis): Move this away from a static class method. Currently this is | |
192 // introduced such that any caller could depend on sslstreamadapter.h without | |
193 // depending on specific SSL implementation. | |
194 static std::string GetSslCipherSuiteName(uint16_t cipher); | |
195 | 173 |
196 private: | 174 private: |
197 // If true, the server certificate need not match the configured | 175 // If true, the server certificate need not match the configured |
198 // server_name, and in fact missing certificate authority and other | 176 // server_name, and in fact missing certificate authority and other |
199 // verification errors are ignored. | 177 // verification errors are ignored. |
200 bool ignore_bad_cert_; | 178 bool ignore_bad_cert_; |
201 | 179 |
202 // If true (default), the client is required to provide a certificate during | 180 // If true (default), the client is required to provide a certificate during |
203 // handshake. If no certificate is given, handshake fails. This applies to | 181 // handshake. If no certificate is given, handshake fails. This applies to |
204 // server mode only. | 182 // server mode only. |
205 bool client_auth_enabled_; | 183 bool client_auth_enabled_; |
206 }; | 184 }; |
207 | 185 |
208 } // namespace rtc | 186 } // namespace rtc |
209 | 187 |
210 #endif // WEBRTC_BASE_SSLSTREAMADAPTER_H_ | 188 #endif // WEBRTC_BASE_SSLSTREAMADAPTER_H_ |
OLD | NEW |