Replacing DtlsIdentityStoreInterface with RTCCertificateGeneratorInterface

webrtc/api/webrtcsessiondescriptionfactory.cc

 /*
  *  Copyright 2013 The WebRTC project authors. All Rights Reserved.
  *
  *  Use of this source code is governed by a BSD-style license
  *  that can be found in the LICENSE file in the root of the source
  *  tree. An additional intellectual property rights grant can be found
  *  in the file PATENTS.  All contributing project authors may
  *  be found in the AUTHORS file in the root of the source tree.
  */
 
 #include "webrtc/api/webrtcsessiondescriptionfactory.h"
 
 #include <utility>
 
-#include "webrtc/api/dtlsidentitystore.h"
 #include "webrtc/api/jsep.h"
 #include "webrtc/api/jsepsessiondescription.h"
 #include "webrtc/api/mediaconstraintsinterface.h"
 #include "webrtc/api/webrtcsession.h"
 #include "webrtc/base/sslidentity.h"
 
 using cricket::MediaSessionOptions;
 
 namespace webrtc {
 namespace {
@@ skipping 35 matching lines @@
       webrtc::CreateSessionDescriptionObserver* observer)
       : observer(observer) {
   }
 
   rtc::scoped_refptr<webrtc::CreateSessionDescriptionObserver> observer;
   std::string error;
   std::unique_ptr<webrtc::SessionDescriptionInterface> description;
 };
 }  // namespace
 
-void WebRtcIdentityRequestObserver::OnFailure(int error) {
-  SignalRequestFailed(error);
+void WebRtcCertificateGeneratorCallback::OnFailure() {
+  SignalRequestFailed();
 }
 
-void WebRtcIdentityRequestObserver::OnSuccess(
-    const std::string& der_cert, const std::string& der_private_key) {
-  std::string pem_cert = rtc::SSLIdentity::DerToPem(
-      rtc::kPemTypeCertificate,
-      reinterpret_cast<const unsigned char*>(der_cert.data()),
-      der_cert.length());
-  std::string pem_key = rtc::SSLIdentity::DerToPem(
-      rtc::kPemTypeRsaPrivateKey,
-      reinterpret_cast<const unsigned char*>(der_private_key.data()),
-      der_private_key.length());
-  std::unique_ptr<rtc::SSLIdentity> identity(
-      rtc::SSLIdentity::FromPEMStrings(pem_key, pem_cert));
-  SignalCertificateReady(rtc::RTCCertificate::Create(std::move(identity)));
-}
-
-void WebRtcIdentityRequestObserver::OnSuccess(
-    std::unique_ptr<rtc::SSLIdentity> identity) {
-  SignalCertificateReady(rtc::RTCCertificate::Create(std::move(identity)));
+void WebRtcCertificateGeneratorCallback::OnSuccess(
+    const rtc::scoped_refptr<rtc::RTCCertificate>& certificate) {
+  SignalCertificateReady(certificate);
 }
 
 // static
 void WebRtcSessionDescriptionFactory::CopyCandidatesFromSessionDescription(
     const SessionDescriptionInterface* source_desc,
     const std::string& content_name,
     SessionDescriptionInterface* dest_desc) {
   if (!source_desc) {
     return;
   }
@@ skipping 17 matching lines @@
     if (!dest_candidates->HasCandidate(new_candidate)) {
       dest_desc->AddCandidate(source_candidates->at(n));
     }
   }
 }
 
 // Private constructor called by other constructors.
 WebRtcSessionDescriptionFactory::WebRtcSessionDescriptionFactory(
     rtc::Thread* signaling_thread,
     cricket::ChannelManager* channel_manager,
-    std::unique_ptr<DtlsIdentityStoreInterface> dtls_identity_store,
-    const rtc::scoped_refptr<WebRtcIdentityRequestObserver>&
-        identity_request_observer,
     WebRtcSession* session,
     const std::string& session_id,
-    bool dtls_enabled)
+    std::unique_ptr<rtc::RTCCertificateGeneratorInterface> cert_generator,
+    const rtc::scoped_refptr<rtc::RTCCertificate>& certificate)
     : signaling_thread_(signaling_thread),
       session_desc_factory_(channel_manager, &transport_desc_factory_),
       // RFC 4566 suggested a Network Time Protocol (NTP) format timestamp
       // as the session id and session version. To simplify, it should be fine
       // to just use a random number as session id and start version from
       // |kInitSessionVersion|.
       session_version_(kInitSessionVersion),
-      dtls_identity_store_(std::move(dtls_identity_store)),
-      identity_request_observer_(identity_request_observer),
+      cert_generator_(std::move(cert_generator)),
       session_(session),
       session_id_(session_id),
       certificate_request_state_(CERTIFICATE_NOT_NEEDED) {
+  RTC_DCHECK(signaling_thread_);
   session_desc_factory_.set_add_legacy_streams(false);
+  bool dtls_enabled = cert_generator_ || certificate;
   // SRTP-SDES is disabled if DTLS is on.
   SetSdesPolicy(dtls_enabled ? cricket::SEC_DISABLED : cricket::SEC_REQUIRED);
+  if (!dtls_enabled) {
+    LOG(LS_VERBOSE) << "DTLS-SRTP disabled.";
+    return;
+  }
+
+  if (certificate) {
+    // Use |certificate|.
+    certificate_request_state_ = CERTIFICATE_WAITING;
+
+    LOG(LS_VERBOSE) << "DTLS-SRTP enabled; has certificate parameter.";
+    // We already have a certificate but we wait to do |SetIdentity|; if we do
+    // it in the constructor then the caller has not had a chance to connect to
+    // |SignalCertificateReady|.
+    signaling_thread_->Post(
+        this, MSG_USE_CONSTRUCTOR_CERTIFICATE,
+        new rtc::ScopedRefMessageData<rtc::RTCCertificate>(certificate));
+  } else {
+    // Generate certificate.
+    certificate_request_state_ = CERTIFICATE_WAITING;
+
+    rtc::scoped_refptr<WebRtcCertificateGeneratorCallback> callback(
+        new rtc::RefCountedObject<WebRtcCertificateGeneratorCallback>());
+    callback->SignalRequestFailed.connect(
+        this, &WebRtcSessionDescriptionFactory::OnCertificateRequestFailed);
+    callback->SignalCertificateReady.connect(
+        this, &WebRtcSessionDescriptionFactory::SetCertificate);
+
+    rtc::KeyParams key_params = rtc::KeyParams();
+    LOG(LS_VERBOSE) << "DTLS-SRTP enabled; sending DTLS identity request (key "
+                    << "type: " << key_params.type() << ").";
+
+    // Request certificate. This happens asynchronously, so that the caller gets
+    // a chance to connect to |SignalCertificateReady|.
+    cert_generator_->GenerateCertificateAsync(
+        key_params, rtc::Optional<uint64_t>(), callback);
+  }
 }
 
 WebRtcSessionDescriptionFactory::WebRtcSessionDescriptionFactory(
     rtc::Thread* signaling_thread,
     cricket::ChannelManager* channel_manager,
     WebRtcSession* session,
-    const std::string& session_id)
-    : WebRtcSessionDescriptionFactory(signaling_thread,
-                                      channel_manager,
-                                      nullptr,
-                                      nullptr,
-                                      session,
-                                      session_id,
-                                      false) {
-  LOG(LS_VERBOSE) << "DTLS-SRTP disabled.";
+    const std::string& session_id,
+    std::unique_ptr<rtc::RTCCertificateGeneratorInterface> cert_generator)
+    : WebRtcSessionDescriptionFactory(
+          signaling_thread,
+          channel_manager,
+          session,
+          session_id,
+          std::move(cert_generator),
+          nullptr) {
 }
 
 WebRtcSessionDescriptionFactory::WebRtcSessionDescriptionFactory(
     rtc::Thread* signaling_thread,
     cricket::ChannelManager* channel_manager,
-    std::unique_ptr<DtlsIdentityStoreInterface> dtls_identity_store,
     WebRtcSession* session,
-    const std::string& session_id)
-    : WebRtcSessionDescriptionFactory(
-          signaling_thread,
-          channel_manager,
-          std::move(dtls_identity_store),
-          new rtc::RefCountedObject<WebRtcIdentityRequestObserver>(),
-          session,
-          session_id,
-          true) {
-  RTC_DCHECK(dtls_identity_store_);
-
-  certificate_request_state_ = CERTIFICATE_WAITING;
-
-  identity_request_observer_->SignalRequestFailed.connect(
-      this, &WebRtcSessionDescriptionFactory::OnIdentityRequestFailed);
-  identity_request_observer_->SignalCertificateReady.connect(
-      this, &WebRtcSessionDescriptionFactory::SetCertificate);
-
-  rtc::KeyParams key_params = rtc::KeyParams();
-  LOG(LS_VERBOSE) << "DTLS-SRTP enabled; sending DTLS identity request (key "
-                  << "type: " << key_params.type() << ").";
-
-  // Request identity. This happens asynchronously, so the caller will have a
-  // chance to connect to SignalIdentityReady.
-  dtls_identity_store_->RequestIdentity(key_params,
-                                        rtc::Optional<uint64_t>(),
-                                        identity_request_observer_);
-}
-
-WebRtcSessionDescriptionFactory::WebRtcSessionDescriptionFactory(
-    rtc::Thread* signaling_thread,
-    cricket::ChannelManager* channel_manager,
-    const rtc::scoped_refptr<rtc::RTCCertificate>& certificate,
-    WebRtcSession* session,
-    const std::string& session_id)
+    const std::string& session_id,
+    const rtc::scoped_refptr<rtc::RTCCertificate>& certificate)
     : WebRtcSessionDescriptionFactory(signaling_thread,
                                       channel_manager,
-                                      nullptr,
-                                      nullptr,
                                       session,
                                       session_id,
-                                      true) {
+                                      nullptr,
+                                      certificate) {
   RTC_DCHECK(certificate);
-
-  certificate_request_state_ = CERTIFICATE_WAITING;
-
-  LOG(LS_VERBOSE) << "DTLS-SRTP enabled; has certificate parameter.";
-  // We already have a certificate but we wait to do SetIdentity; if we do
-  // it in the constructor then the caller has not had a chance to connect to
-  // SignalIdentityReady.
-  signaling_thread_->Post(
-      this, MSG_USE_CONSTRUCTOR_CERTIFICATE,
-      new rtc::ScopedRefMessageData<rtc::RTCCertificate>(certificate));
 }
 
 WebRtcSessionDescriptionFactory::~WebRtcSessionDescriptionFactory() {
   ASSERT(signaling_thread_->IsCurrent());
 
   // Fail any requests that were asked for before identity generation completed.
   FailPendingRequests(kFailedDueToSessionShutdown);
 
   // Process all pending notifications in the message queue.  If we don't do
   // this, requests will linger and not know they succeeded or failed.
@@ skipping 245 matching lines @@
 }
 
 void WebRtcSessionDescriptionFactory::PostCreateSessionDescriptionSucceeded(
     CreateSessionDescriptionObserver* observer,
     SessionDescriptionInterface* description) {
   CreateSessionDescriptionMsg* msg = new CreateSessionDescriptionMsg(observer);
   msg->description.reset(description);
   signaling_thread_->Post(this, MSG_CREATE_SESSIONDESCRIPTION_SUCCESS, msg);
 }
 
-void WebRtcSessionDescriptionFactory::OnIdentityRequestFailed(int error) {
+void WebRtcSessionDescriptionFactory::OnCertificateRequestFailed() {
   ASSERT(signaling_thread_->IsCurrent());
 
-  LOG(LS_ERROR) << "Async identity request failed: error = " << error;
+  LOG(LS_ERROR) << "Asynchronous certificate generation request failed.";
   certificate_request_state_ = CERTIFICATE_FAILED;
 
   FailPendingRequests(kFailedDueToIdentityFailed);
 }
 
 void WebRtcSessionDescriptionFactory::SetCertificate(
     const rtc::scoped_refptr<rtc::RTCCertificate>& certificate) {
   RTC_DCHECK(certificate);
-  LOG(LS_VERBOSE) << "Setting new certificate";
+  LOG(LS_VERBOSE) << "Setting new certificate.";
 
   certificate_request_state_ = CERTIFICATE_SUCCEEDED;
   SignalCertificateReady(certificate);
 
   transport_desc_factory_.set_certificate(certificate);
   transport_desc_factory_.set_secure(cricket::SEC_ENABLED);
 
   while (!create_session_description_requests_.empty()) {
     if (create_session_description_requests_.front().type ==
         CreateSessionDescriptionRequest::kOffer) {
       InternalCreateOffer(create_session_description_requests_.front());
     } else {
       InternalCreateAnswer(create_session_description_requests_.front());
     }
     create_session_description_requests_.pop();
   }
 }
 }  // namespace webrtc