Chromium Code Reviews
chromiumcodereview-hr@appspot.gserviceaccount.com (chromiumcodereview-hr) | Please choose your nickname with Settings | Help | Chromium Project | Gerrit Changes | Sign out
(885)

Unified Diff: webrtc/p2p/base/jseptransport.cc

Issue 2553043004: Revert of Refactoring that removes P2PTransport and DtlsTransport classes. (Closed)
Patch Set: Created 4 years ago
Use n/p to move between diff chunks; N/P to move between comments. Draft comments are only viewable by you.
Jump to:
View side-by-side diff with in-line comments
Download patch
« no previous file with comments | « webrtc/p2p/base/jseptransport.h ('k') | webrtc/p2p/base/jseptransport_unittest.cc » ('j') | no next file with comments »
Expand Comments ('e') | Collapse Comments ('c') | Show Comments Hide Comments ('s')
Index: webrtc/p2p/base/jseptransport.cc
diff --git a/webrtc/p2p/base/jseptransport.cc b/webrtc/p2p/base/jseptransport.cc
deleted file mode 100644
index abfe0449a48f93e9d5a15806133f7d17e01e43be..0000000000000000000000000000000000000000
--- a/webrtc/p2p/base/jseptransport.cc
+++ /dev/null
@@ -1,439 +0,0 @@
-/*
- * Copyright 2004 The WebRTC Project Authors. All rights reserved.
- *
- * Use of this source code is governed by a BSD-style license
- * that can be found in the LICENSE file in the root of the source
- * tree. An additional intellectual property rights grant can be found
- * in the file PATENTS. All contributing project authors may
- * be found in the AUTHORS file in the root of the source tree.
- */
-
-#include <memory>
-#include <utility> // for std::pair
-
-#include "webrtc/p2p/base/jseptransport.h"
-
-#include "webrtc/p2p/base/candidate.h"
-#include "webrtc/p2p/base/dtlstransportchannel.h"
-#include "webrtc/p2p/base/p2pconstants.h"
-#include "webrtc/p2p/base/p2ptransportchannel.h"
-#include "webrtc/p2p/base/port.h"
-#include "webrtc/p2p/base/transportchannelimpl.h"
-#include "webrtc/base/bind.h"
-#include "webrtc/base/checks.h"
-#include "webrtc/base/logging.h"
-
-namespace cricket {
-
-static bool VerifyIceParams(const TransportDescription& desc) {
- // For legacy protocols.
- if (desc.ice_ufrag.empty() && desc.ice_pwd.empty())
- return true;
-
- if (desc.ice_ufrag.length() < ICE_UFRAG_MIN_LENGTH ||
- desc.ice_ufrag.length() > ICE_UFRAG_MAX_LENGTH) {
- return false;
- }
- if (desc.ice_pwd.length() < ICE_PWD_MIN_LENGTH ||
- desc.ice_pwd.length() > ICE_PWD_MAX_LENGTH) {
- return false;
- }
- return true;
-}
-
-bool BadTransportDescription(const std::string& desc, std::string* err_desc) {
- if (err_desc) {
- *err_desc = desc;
- }
- LOG(LS_ERROR) << desc;
- return false;
-}
-
-bool IceCredentialsChanged(const std::string& old_ufrag,
- const std::string& old_pwd,
- const std::string& new_ufrag,
- const std::string& new_pwd) {
- // The standard (RFC 5245 Section 9.1.1.1) says that ICE restarts MUST change
- // both the ufrag and password. However, section 9.2.1.1 says changing the
- // ufrag OR password indicates an ICE restart. So, to keep compatibility with
- // endpoints that only change one, we'll treat this as an ICE restart.
- return (old_ufrag != new_ufrag) || (old_pwd != new_pwd);
-}
-
-bool VerifyCandidate(const Candidate& cand, std::string* error) {
- // No address zero.
- if (cand.address().IsNil() || cand.address().IsAnyIP()) {
- *error = "candidate has address of zero";
- return false;
- }
-
- // Disallow all ports below 1024, except for 80 and 443 on public addresses.
- int port = cand.address().port();
- if (cand.protocol() == TCP_PROTOCOL_NAME &&
- (cand.tcptype() == TCPTYPE_ACTIVE_STR || port == 0)) {
- // Expected for active-only candidates per
- // http://tools.ietf.org/html/rfc6544#section-4.5 so no error.
- // Libjingle clients emit port 0, in "active" mode.
- return true;
- }
- if (port < 1024) {
- if ((port != 80) && (port != 443)) {
- *error = "candidate has port below 1024, but not 80 or 443";
- return false;
- }
-
- if (cand.address().IsPrivateIP()) {
- *error = "candidate has port of 80 or 443 with private IP address";
- return false;
- }
- }
-
- return true;
-}
-
-bool VerifyCandidates(const Candidates& candidates, std::string* error) {
- for (const Candidate& candidate : candidates) {
- if (!VerifyCandidate(candidate, error)) {
- return false;
- }
- }
- return true;
-}
-
-JsepTransport::JsepTransport(
- const std::string& mid,
- const rtc::scoped_refptr<rtc::RTCCertificate>& certificate)
- : mid_(mid), certificate_(certificate) {}
-
-bool JsepTransport::AddChannel(TransportChannelImpl* dtls, int component) {
- if (channels_.find(component) != channels_.end()) {
- LOG(LS_ERROR) << "Adding channel for component " << component << " twice.";
- return false;
- }
- channels_[component] = dtls;
- // Something's wrong if a channel is being added after a description is set.
- // This may currently occur if rtcp-mux is negotiated, then a new m= section
- // is added in a later offer/answer. But this is suboptimal and should be
- // changed; we shouldn't support going from muxed to non-muxed.
- // TODO(deadbeef): Once this is fixed, make the warning an error, and remove
- // the calls to "ApplyXTransportDescription" below.
- if (local_description_set_ || remote_description_set_) {
- LOG(LS_WARNING) << "Adding new transport channel after "
- "transport description already applied.";
- }
- bool ret = true;
- std::string err;
- if (local_description_set_) {
- ret &= ApplyLocalTransportDescription(channels_[component], &err);
- }
- if (remote_description_set_) {
- ret &= ApplyRemoteTransportDescription(channels_[component], &err);
- }
- if (local_description_set_ && remote_description_set_) {
- ret &= ApplyNegotiatedTransportDescription(channels_[component], &err);
- }
- return ret;
-}
-
-bool JsepTransport::RemoveChannel(int component) {
- auto it = channels_.find(component);
- if (it == channels_.end()) {
- LOG(LS_ERROR) << "Trying to remove channel for component " << component
- << ", which doesn't exist.";
- return false;
- }
- channels_.erase(component);
- return true;
-}
-
-bool JsepTransport::HasChannels() const {
- return !channels_.empty();
-}
-
-void JsepTransport::SetLocalCertificate(
- const rtc::scoped_refptr<rtc::RTCCertificate>& certificate) {
- certificate_ = certificate;
-}
-
-bool JsepTransport::GetLocalCertificate(
- rtc::scoped_refptr<rtc::RTCCertificate>* certificate) const {
- if (!certificate_) {
- return false;
- }
-
- *certificate = certificate_;
- return true;
-}
-
-bool JsepTransport::SetLocalTransportDescription(
- const TransportDescription& description,
- ContentAction action,
- std::string* error_desc) {
- bool ret = true;
-
- if (!VerifyIceParams(description)) {
- return BadTransportDescription("Invalid ice-ufrag or ice-pwd length",
- error_desc);
- }
-
- local_description_.reset(new TransportDescription(description));
-
- rtc::SSLFingerprint* local_fp =
- local_description_->identity_fingerprint.get();
-
- if (!local_fp) {
- certificate_ = nullptr;
- } else if (!VerifyCertificateFingerprint(certificate_.get(), local_fp,
- error_desc)) {
- return false;
- }
-
- for (const auto& kv : channels_) {
- ret &= ApplyLocalTransportDescription(kv.second, error_desc);
- }
- if (!ret) {
- return false;
- }
-
- // If PRANSWER/ANSWER is set, we should decide transport protocol type.
- if (action == CA_PRANSWER || action == CA_ANSWER) {
- ret &= NegotiateTransportDescription(action, error_desc);
- }
- if (ret) {
- local_description_set_ = true;
- }
-
- return ret;
-}
-
-bool JsepTransport::SetRemoteTransportDescription(
- const TransportDescription& description,
- ContentAction action,
- std::string* error_desc) {
- bool ret = true;
-
- if (!VerifyIceParams(description)) {
- return BadTransportDescription("Invalid ice-ufrag or ice-pwd length",
- error_desc);
- }
-
- remote_description_.reset(new TransportDescription(description));
- for (const auto& kv : channels_) {
- ret &= ApplyRemoteTransportDescription(kv.second, error_desc);
- }
-
- // If PRANSWER/ANSWER is set, we should decide transport protocol type.
- if (action == CA_PRANSWER || action == CA_ANSWER) {
- ret = NegotiateTransportDescription(CA_OFFER, error_desc);
- }
- if (ret) {
- remote_description_set_ = true;
- }
-
- return ret;
-}
-
-void JsepTransport::GetSslRole(rtc::SSLRole* ssl_role) const {
- RTC_DCHECK(ssl_role);
- *ssl_role = secure_role_;
-}
-
-bool JsepTransport::GetStats(TransportStats* stats) {
- stats->transport_name = mid();
- stats->channel_stats.clear();
- for (auto& kv : channels_) {
- TransportChannelImpl* channel = kv.second;
- TransportChannelStats substats;
- substats.component = kv.first;
- channel->GetSrtpCryptoSuite(&substats.srtp_crypto_suite);
- channel->GetSslCipherSuite(&substats.ssl_cipher_suite);
- if (!channel->GetStats(&substats.connection_infos)) {
- return false;
- }
- stats->channel_stats.push_back(substats);
- }
- return true;
-}
-
-bool JsepTransport::VerifyCertificateFingerprint(
- const rtc::RTCCertificate* certificate,
- const rtc::SSLFingerprint* fingerprint,
- std::string* error_desc) const {
- if (!fingerprint) {
- return BadTransportDescription("No fingerprint.", error_desc);
- }
- if (!certificate) {
- return BadTransportDescription(
- "Fingerprint provided but no identity available.", error_desc);
- }
- std::unique_ptr<rtc::SSLFingerprint> fp_tmp(rtc::SSLFingerprint::Create(
- fingerprint->algorithm, certificate->identity()));
- ASSERT(fp_tmp.get() != NULL);
- if (*fp_tmp == *fingerprint) {
- return true;
- }
- std::ostringstream desc;
- desc << "Local fingerprint does not match identity. Expected: ";
- desc << fp_tmp->ToString();
- desc << " Got: " << fingerprint->ToString();
- return BadTransportDescription(desc.str(), error_desc);
-}
-
-bool JsepTransport::ApplyLocalTransportDescription(
- TransportChannelImpl* channel,
- std::string* error_desc) {
- channel->SetIceParameters(local_description_->GetIceParameters());
- return true;
-}
-
-bool JsepTransport::ApplyRemoteTransportDescription(
- TransportChannelImpl* channel,
- std::string* error_desc) {
- // Currently, all ICE-related calls still go through this DTLS channel. But
- // that will change once we get rid of TransportChannelImpl, and the DTLS
- // channel interface no longer includes ICE-specific methods. Then this class
- // will need to call dtls->ice()->SetIceRole(), for example, assuming the Dtls
- // interface will expose its inner ICE channel.
- channel->SetRemoteIceParameters(remote_description_->GetIceParameters());
- channel->SetRemoteIceMode(remote_description_->ice_mode);
- return true;
-}
-
-bool JsepTransport::ApplyNegotiatedTransportDescription(
- TransportChannelImpl* channel,
- std::string* error_desc) {
- // Set SSL role. Role must be set before fingerprint is applied, which
- // initiates DTLS setup.
- if (!channel->SetSslRole(secure_role_)) {
- return BadTransportDescription("Failed to set SSL role for the channel.",
- error_desc);
- }
- // Apply remote fingerprint.
- if (!channel->SetRemoteFingerprint(
- remote_fingerprint_->algorithm,
- reinterpret_cast<const uint8_t*>(remote_fingerprint_->digest.data()),
- remote_fingerprint_->digest.size())) {
- return BadTransportDescription("Failed to apply remote fingerprint.",
- error_desc);
- }
- return true;
-}
-
-bool JsepTransport::NegotiateTransportDescription(ContentAction local_role,
- std::string* error_desc) {
- if (!local_description_ || !remote_description_) {
- const std::string msg =
- "Applying an answer transport description "
- "without applying any offer.";
- return BadTransportDescription(msg, error_desc);
- }
- rtc::SSLFingerprint* local_fp =
- local_description_->identity_fingerprint.get();
- rtc::SSLFingerprint* remote_fp =
- remote_description_->identity_fingerprint.get();
- if (remote_fp && local_fp) {
- remote_fingerprint_.reset(new rtc::SSLFingerprint(*remote_fp));
- if (!NegotiateRole(local_role, &secure_role_, error_desc)) {
- return false;
- }
- } else if (local_fp && (local_role == CA_ANSWER)) {
- return BadTransportDescription(
- "Local fingerprint supplied when caller didn't offer DTLS.",
- error_desc);
- } else {
- // We are not doing DTLS
- remote_fingerprint_.reset(new rtc::SSLFingerprint("", nullptr, 0));
- }
- // Now that we have negotiated everything, push it downward.
- // Note that we cache the result so that if we have race conditions
- // between future SetRemote/SetLocal invocations and new channel
- // creation, we have the negotiation state saved until a new
- // negotiation happens.
- for (const auto& kv : channels_) {
- if (!ApplyNegotiatedTransportDescription(kv.second, error_desc)) {
- return false;
- }
- }
- return true;
-}
-
-bool JsepTransport::NegotiateRole(ContentAction local_role,
- rtc::SSLRole* ssl_role,
- std::string* error_desc) const {
- RTC_DCHECK(ssl_role);
- if (!local_description_ || !remote_description_) {
- const std::string msg =
- "Local and Remote description must be set before "
- "transport descriptions are negotiated";
- return BadTransportDescription(msg, error_desc);
- }
-
- // From RFC 4145, section-4.1, The following are the values that the
- // 'setup' attribute can take in an offer/answer exchange:
- // Offer Answer
- // ________________
- // active passive / holdconn
- // passive active / holdconn
- // actpass active / passive / holdconn
- // holdconn holdconn
- //
- // Set the role that is most conformant with RFC 5763, Section 5, bullet 1
- // The endpoint MUST use the setup attribute defined in [RFC4145].
- // The endpoint that is the offerer MUST use the setup attribute
- // value of setup:actpass and be prepared to receive a client_hello
- // before it receives the answer. The answerer MUST use either a
- // setup attribute value of setup:active or setup:passive. Note that
- // if the answerer uses setup:passive, then the DTLS handshake will
- // not begin until the answerer is received, which adds additional
- // latency. setup:active allows the answer and the DTLS handshake to
- // occur in parallel. Thus, setup:active is RECOMMENDED. Whichever
- // party is active MUST initiate a DTLS handshake by sending a
- // ClientHello over each flow (host/port quartet).
- // IOW - actpass and passive modes should be treated as server and
- // active as client.
- ConnectionRole local_connection_role = local_description_->connection_role;
- ConnectionRole remote_connection_role = remote_description_->connection_role;
-
- bool is_remote_server = false;
- if (local_role == CA_OFFER) {
- if (local_connection_role != CONNECTIONROLE_ACTPASS) {
- return BadTransportDescription(
- "Offerer must use actpass value for setup attribute.", error_desc);
- }
-
- if (remote_connection_role == CONNECTIONROLE_ACTIVE ||
- remote_connection_role == CONNECTIONROLE_PASSIVE ||
- remote_connection_role == CONNECTIONROLE_NONE) {
- is_remote_server = (remote_connection_role == CONNECTIONROLE_PASSIVE);
- } else {
- const std::string msg =
- "Answerer must use either active or passive value "
- "for setup attribute.";
- return BadTransportDescription(msg, error_desc);
- }
- // If remote is NONE or ACTIVE it will act as client.
- } else {
- if (remote_connection_role != CONNECTIONROLE_ACTPASS &&
- remote_connection_role != CONNECTIONROLE_NONE) {
- return BadTransportDescription(
- "Offerer must use actpass value for setup attribute.", error_desc);
- }
-
- if (local_connection_role == CONNECTIONROLE_ACTIVE ||
- local_connection_role == CONNECTIONROLE_PASSIVE) {
- is_remote_server = (local_connection_role == CONNECTIONROLE_ACTIVE);
- } else {
- const std::string msg =
- "Answerer must use either active or passive value "
- "for setup attribute.";
- return BadTransportDescription(msg, error_desc);
- }
-
- // If local is passive, local will act as server.
- }
-
- *ssl_role = is_remote_server ? rtc::SSL_CLIENT : rtc::SSL_SERVER;
- return true;
-}
-
-} // namespace cricket
« no previous file with comments | « webrtc/p2p/base/jseptransport.h ('k') | webrtc/p2p/base/jseptransport_unittest.cc » ('j') | no next file with comments »

Powered by Google App Engine
This is Rietveld 408576698