Kyle Delong
a8e3321fbd
We'd like to start using ##mixed## instead of ##var## for attribute types to be consistent with Hack. As a followup to this (once released), we would codemod all ##var## to ##mixed##.
126 linhas
3.7 KiB
C++
126 linhas
3.7 KiB
C++
/*
|
|
+----------------------------------------------------------------------+
|
|
| HipHop for PHP |
|
|
+----------------------------------------------------------------------+
|
|
| Copyright (c) 2010-2013 Facebook, Inc. (http://www.facebook.com) |
|
|
| Copyright (c) 1998-2010 Zend Technologies Ltd. (http://www.zend.com) |
|
|
+----------------------------------------------------------------------+
|
|
| This source file is subject to version 2.00 of the Zend license, |
|
|
| that is bundled with this package in the file LICENSE, and is |
|
|
| available through the world-wide-web at the following url: |
|
|
| http://www.zend.com/license/2_00.txt. |
|
|
| If you did not receive a copy of the Zend license and are unable to |
|
|
| obtain it through the world-wide-web, please send a note to |
|
|
| license@zend.com so we can mail you a copy immediately. |
|
|
+----------------------------------------------------------------------+
|
|
*/
|
|
|
|
#ifndef incl_HPHP_SSL_SOCKET_H_
|
|
#define incl_HPHP_SSL_SOCKET_H_
|
|
|
|
#include "hphp/runtime/base/socket.h"
|
|
#include "hphp/util/lock.h"
|
|
#include "openssl/ssl.h"
|
|
#include "openssl/x509.h"
|
|
#include "openssl/err.h"
|
|
|
|
namespace HPHP {
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
|
|
/**
|
|
* TCP sockets running SSL protocol.
|
|
*/
|
|
class SSLSocket : public Socket {
|
|
public:
|
|
enum class CryptoMethod {
|
|
ClientSSLv2,
|
|
ClientSSLv3,
|
|
ClientSSLv23,
|
|
ClientTLS,
|
|
|
|
ServerSSLv2,
|
|
ServerSSLv3,
|
|
ServerSSLv23,
|
|
ServerTLS,
|
|
};
|
|
|
|
static int GetSSLExDataIndex();
|
|
static SSLSocket *Create(const char *&name, int port, double timeout);
|
|
|
|
public:
|
|
SSLSocket();
|
|
SSLSocket(int sockfd, int type, const char *address = nullptr, int port = 0);
|
|
virtual ~SSLSocket();
|
|
|
|
// will setup and enable crypto
|
|
bool onConnect();
|
|
bool onAccept();
|
|
|
|
static StaticString s_class_name;
|
|
// overriding ResourceData
|
|
CStrRef o_getClassNameHook() const { return s_class_name; }
|
|
|
|
// overriding Socket
|
|
virtual bool close();
|
|
virtual int64_t readImpl(char *buffer, int64_t length);
|
|
virtual int64_t writeImpl(const char *buffer, int64_t length);
|
|
virtual bool checkLiveness();
|
|
|
|
Array &getContext() { return m_context;}
|
|
|
|
private:
|
|
Array m_context;
|
|
|
|
SSL *m_handle;
|
|
bool m_ssl_active;
|
|
CryptoMethod m_method;
|
|
bool m_client;
|
|
|
|
double m_connect_timeout;
|
|
bool m_enable_on_connect;
|
|
bool m_state_set;
|
|
bool m_is_blocked;
|
|
|
|
bool closeImpl();
|
|
bool handleError(int64_t nr_bytes, bool is_init);
|
|
|
|
bool setupCrypto(SSLSocket *session = nullptr);
|
|
bool enableCrypto(bool activate = true);
|
|
|
|
SSL *createSSL(SSL_CTX *ctx);
|
|
bool applyVerificationPolicy(X509 *peer);
|
|
|
|
static Mutex s_mutex;
|
|
static int s_ex_data_index;
|
|
};
|
|
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
// helper class
|
|
|
|
class Certificate : public SweepableResourceData {
|
|
public:
|
|
X509 *m_cert;
|
|
explicit Certificate(X509 *cert) : m_cert(cert) { assert(m_cert);}
|
|
~Certificate() { if (m_cert) X509_free(m_cert);}
|
|
|
|
static StaticString s_class_name;
|
|
// overriding ResourceData
|
|
CStrRef o_getClassNameHook() const { return s_class_name; }
|
|
|
|
/**
|
|
* Given a variant, coerce it into an X509 object. It can be:
|
|
*
|
|
* . X509 resource created using openssl_read_x509()
|
|
* . if it starts with file:// then it will be interpreted as the path
|
|
* to that cert
|
|
* . it will be interpreted as the cert data
|
|
*/
|
|
static Resource Get(CVarRef var);
|
|
static BIO *ReadData(CVarRef var, bool *file = nullptr);
|
|
};
|
|
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
}
|
|
|
|
#endif // incl_HPHP_SSL_SOCKET_H_
|