| [5641] | 1 | /// ----------------------------------------*- mode: C++; -*--
 | 
|---|
 | 2 | /// @file tp_over_tls_tcp.h
 | 
|---|
 | 3 | /// Transport over TLS/TCP
 | 
|---|
 | 4 | /// ----------------------------------------------------------
 | 
|---|
 | 5 | /// $Id: tp_over_tls_tcp.h 2872 2008-02-18 10:58:03Z bless $
 | 
|---|
 | 6 | /// $HeadURL: https://svn.ipv6.tm.uka.de/nsis/protlib/trunk/include/tp_over_tls_tcp.h $
 | 
|---|
 | 7 | // ===========================================================
 | 
|---|
 | 8 | //                      
 | 
|---|
 | 9 | // Copyright (C) 2005-2007, all rights reserved by
 | 
|---|
 | 10 | // - Institute of Telematics, Universitaet Karlsruhe (TH)
 | 
|---|
 | 11 | //
 | 
|---|
 | 12 | // More information and contact:
 | 
|---|
 | 13 | // https://projekte.tm.uka.de/trac/NSIS
 | 
|---|
 | 14 | //                      
 | 
|---|
 | 15 | // This program is free software; you can redistribute it and/or modify
 | 
|---|
 | 16 | // it under the terms of the GNU General Public License as published by
 | 
|---|
 | 17 | // the Free Software Foundation; version 2 of the License
 | 
|---|
 | 18 | //
 | 
|---|
 | 19 | // This program is distributed in the hope that it will be useful,
 | 
|---|
 | 20 | // but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
|---|
 | 21 | // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
|---|
 | 22 | // GNU General Public License for more details.
 | 
|---|
 | 23 | //
 | 
|---|
 | 24 | // You should have received a copy of the GNU General Public License along
 | 
|---|
 | 25 | // with this program; if not, write to the Free Software Foundation, Inc.,
 | 
|---|
 | 26 | // 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
 | 
|---|
 | 27 | //
 | 
|---|
 | 28 | // ===========================================================
 | 
|---|
 | 29 | /** @ingroup transport
 | 
|---|
 | 30 |  * @file tp_over_tls_tcp.h
 | 
|---|
 | 31 |  * TP over TLS/TCP
 | 
|---|
 | 32 |  */
 | 
|---|
 | 33 | 
 | 
|---|
 | 34 | #ifndef TP_OVER_TLS_H
 | 
|---|
 | 35 | #define TP_OVER_TLS_H
 | 
|---|
 | 36 | 
 | 
|---|
 | 37 | #include <ext/hash_map>
 | 
|---|
 | 38 | 
 | 
|---|
 | 39 | #include "tp.h"
 | 
|---|
 | 40 | #include "threads.h"
 | 
|---|
 | 41 | #include "threadsafe_db.h"
 | 
|---|
 | 42 | #include "connectionmap.h"
 | 
|---|
 | 43 | #include "assocdata.h"
 | 
|---|
 | 44 | 
 | 
|---|
 | 45 | #include <openssl/ssl.h>
 | 
|---|
 | 46 | #include <openssl/err.h>
 | 
|---|
 | 47 | #include <openssl/evp.h>
 | 
|---|
 | 48 | 
 | 
|---|
 | 49 | 
 | 
|---|
 | 50 | namespace protlib 
 | 
|---|
 | 51 | {
 | 
|---|
 | 52 | 
 | 
|---|
 | 53 | /** this struct contains parameters that determine 
 | 
|---|
 | 54 |   * the behavior of listener and receiver threads in TPoverTLS_TCP
 | 
|---|
 | 55 |   * @param port - port number for master listener thread (server port)
 | 
|---|
 | 56 |   * @param sleep - time (in ms) that listener and receiver wait at a poll() call
 | 
|---|
 | 57 |   * @param d - destination module, where internal message are sent
 | 
|---|
 | 58 |   */
 | 
|---|
 | 59 | struct TPoverTLS_TCPParam : public ThreadParam 
 | 
|---|
 | 60 | {
 | 
|---|
 | 61 |   /// constructor
 | 
|---|
 | 62 |   TPoverTLS_TCPParam(
 | 
|---|
 | 63 |         const char* client_cert_filename,
 | 
|---|
 | 64 |         const char* client_privkey_filename,
 | 
|---|
 | 65 |         const char* root_cert_filename,
 | 
|---|
 | 66 |         unsigned short common_header_length,
 | 
|---|
 | 67 |         bool (*const getmsglength) (NetMsg& m, uint32& clen_bytes),
 | 
|---|
 | 68 |         port_t p,
 | 
|---|
 | 69 |         const char* threadname= "TPoverTLS_TCP",
 | 
|---|
 | 70 |         uint32 sleep = ThreadParam::default_sleep_time,
 | 
|---|
 | 71 |         bool debug_pdu = false,
 | 
|---|
 | 72 |         message::qaddr_t source = message::qaddr_tp_over_tls_tcp,
 | 
|---|
 | 73 |         message::qaddr_t dest = message::qaddr_signaling,
 | 
|---|
 | 74 |         bool sendaborts = false,
 | 
|---|
 | 75 |         uint8 tos = 0x10) :
 | 
|---|
 | 76 |         ThreadParam(sleep,threadname,1,1),
 | 
|---|
 | 77 |         port(p),
 | 
|---|
 | 78 |         debug_pdu(debug_pdu),
 | 
|---|
 | 79 |         source(source),
 | 
|---|
 | 80 |         dest(dest),
 | 
|---|
 | 81 |         common_header_length(common_header_length),
 | 
|---|
 | 82 |         client_cert_filename(client_cert_filename),
 | 
|---|
 | 83 |         client_privkey_filename(client_privkey_filename),
 | 
|---|
 | 84 |         root_cert_filename(root_cert_filename),
 | 
|---|
 | 85 |         getmsglength(getmsglength),
 | 
|---|
 | 86 |         terminate(false),
 | 
|---|
 | 87 |         ip_tos(tos)
 | 
|---|
 | 88 |   {
 | 
|---|
 | 89 |     
 | 
|---|
 | 90 |     //set up SSL
 | 
|---|
 | 91 |     ssl_ctx_client = SSL_CTX_new(TLSv1_client_method());
 | 
|---|
 | 92 |     ssl_ctx_server = SSL_CTX_new(TLSv1_server_method());
 | 
|---|
 | 93 |     
 | 
|---|
 | 94 |   };
 | 
|---|
 | 95 | 
 | 
|---|
 | 96 |   /// to bind master listener thread to
 | 
|---|
 | 97 |   const port_t port;
 | 
|---|
 | 98 |   bool debug_pdu;
 | 
|---|
 | 99 | 
 | 
|---|
 | 100 |   /// message source
 | 
|---|
 | 101 |   const message::qaddr_t source;
 | 
|---|
 | 102 |   const message::qaddr_t dest;
 | 
|---|
 | 103 | 
 | 
|---|
 | 104 |   /// what is the length of the common header
 | 
|---|
 | 105 |   const unsigned short common_header_length;
 | 
|---|
 | 106 |     
 | 
|---|
 | 107 |   /// holds SSL context
 | 
|---|
 | 108 |   SSL_CTX *ssl_ctx_client;
 | 
|---|
 | 109 |   SSL_CTX *ssl_ctx_server;
 | 
|---|
 | 110 | 
 | 
|---|
 | 111 |   const char* client_cert_filename;
 | 
|---|
 | 112 |   const char* client_privkey_filename;
 | 
|---|
 | 113 |   const char* root_cert_filename;
 | 
|---|
 | 114 |   
 | 
|---|
 | 115 |   /// function pointer to a function that figures out the msg length in number of 4 byte words
 | 
|---|
 | 116 |   /// it returns false if error occured (e.g., malformed header), result is returned in variable clen_words
 | 
|---|
 | 117 |   bool (*const getmsglength) (NetMsg& m, uint32& clen_words);
 | 
|---|
 | 118 |   
 | 
|---|
 | 119 |   /// should master thread terminate?
 | 
|---|
 | 120 |   const bool terminate;
 | 
|---|
 | 121 |   const uint8 ip_tos;
 | 
|---|
 | 122 | }; // end TPoverTLS_TCPParam
 | 
|---|
 | 123 | 
 | 
|---|
 | 124 | 
 | 
|---|
 | 125 | typedef hash_map<uint32, SSL*> sslmap_t;
 | 
|---|
 | 126 | 
 | 
|---|
 | 127 | /// TP over TCP
 | 
|---|
 | 128 | /** This class implements the TP interface using TCP. */
 | 
|---|
 | 129 | class TPoverTLS_TCP : public TP, public Thread 
 | 
|---|
 | 130 | {
 | 
|---|
 | 131 | /***** inherited from TP *****/
 | 
|---|
 | 132 | public:
 | 
|---|
 | 133 |   /// sends a network message, spawns receiver thread if necessary
 | 
|---|
 | 134 |   virtual void send(NetMsg* msg,const address& addr, bool use_existing_connection);
 | 
|---|
 | 135 |   virtual void terminate(const address& addr);
 | 
|---|
 | 136 |   
 | 
|---|
 | 137 |   /***** inherited from Thread *****/
 | 
|---|
 | 138 | public:
 | 
|---|
 | 139 |   /// main loop
 | 
|---|
 | 140 |   virtual void main_loop(uint32 nr);
 | 
|---|
 | 141 |   
 | 
|---|
 | 142 | /***** other members *****/
 | 
|---|
 | 143 | public:
 | 
|---|
 | 144 |   /// constructor
 | 
|---|
 | 145 |   TPoverTLS_TCP(const TPoverTLS_TCPParam& p) :
 | 
|---|
 | 146 |     TP(prot_tls_tcp,"TLS",p.name,p.common_header_length,p.getmsglength),
 | 
|---|
 | 147 |     Thread(p), tpparam(p), already_aborted(false), msgqueue(NULL), debug_pdu(p.debug_pdu)
 | 
|---|
 | 148 |   { 
 | 
|---|
 | 149 |     // perform some initializing actions
 | 
|---|
 | 150 |     // currently not required (SCTP had to init its library)
 | 
|---|
 | 151 |     init= true; ///< init done;
 | 
|---|
 | 152 |     
 | 
|---|
 | 153 |     
 | 
|---|
 | 154 |     sslmap.resize(128);
 | 
|---|
 | 155 | 
 | 
|---|
 | 156 |   }
 | 
|---|
 | 157 |   /// virtual destructor
 | 
|---|
 | 158 |   virtual ~TPoverTLS_TCP();
 | 
|---|
 | 159 |   
 | 
|---|
 | 160 |   typedef
 | 
|---|
 | 161 |   struct receiver_thread_arg
 | 
|---|
 | 162 |   {
 | 
|---|
 | 163 |     const AssocData* peer_assoc;
 | 
|---|
 | 164 |     bool sig_terminate;
 | 
|---|
 | 165 |     bool terminated;
 | 
|---|
 | 166 |   public:
 | 
|---|
 | 167 |     receiver_thread_arg(const AssocData* peer_assoc) : 
 | 
|---|
 | 168 |       peer_assoc(peer_assoc), sig_terminate(false), terminated(true) {};
 | 
|---|
 | 169 |   } receiver_thread_arg_t;
 | 
|---|
 | 170 |   
 | 
|---|
 | 171 |   class receiver_thread_start_arg_t
 | 
|---|
 | 172 |   {
 | 
|---|
 | 173 |   public:
 | 
|---|
 | 174 |     TPoverTLS_TCP* instance;
 | 
|---|
 | 175 |     receiver_thread_arg_t* rtargp;
 | 
|---|
 | 176 |     
 | 
|---|
 | 177 |     receiver_thread_start_arg_t(TPoverTLS_TCP* instance, receiver_thread_arg_t* rtargp) :
 | 
|---|
 | 178 |       instance(instance), rtargp(rtargp) {};
 | 
|---|
 | 179 |   };
 | 
|---|
 | 180 | 
 | 
|---|
 | 181 |   class sender_thread_start_arg_t
 | 
|---|
 | 182 |   {
 | 
|---|
 | 183 |   public:
 | 
|---|
 | 184 |     TPoverTLS_TCP* instance;
 | 
|---|
 | 185 |     FastQueue* sender_thread_queue;
 | 
|---|
 | 186 |     
 | 
|---|
 | 187 |     sender_thread_start_arg_t(TPoverTLS_TCP* instance, FastQueue* sq) :
 | 
|---|
 | 188 |       instance(instance), sender_thread_queue(sq) {};
 | 
|---|
 | 189 |   };
 | 
|---|
 | 190 |   
 | 
|---|
 | 191 | private:
 | 
|---|
 | 192 |   /// returns already existing connection or establishes a new one
 | 
|---|
 | 193 |   AssocData* get_connection_to(const appladdress& addr);
 | 
|---|
 | 194 |     
 | 
|---|
 | 195 |   static const char *SSLerrmessage(void);
 | 
|---|
 | 196 | 
 | 
|---|
 | 197 |   /// receiver thread for a specific socket
 | 
|---|
 | 198 |   void sender_thread(void *argp);
 | 
|---|
 | 199 |     
 | 
|---|
 | 200 |   /// receiver thread for a specific socket
 | 
|---|
 | 201 |   void receiver_thread(void *argp);
 | 
|---|
 | 202 |     
 | 
|---|
 | 203 |   /// send a message to the network via TCP+TLS
 | 
|---|
 | 204 |   void tcptlssend(NetMsg* msg, appladdress* addr);
 | 
|---|
 | 205 |     
 | 
|---|
 | 206 |   /// sender thread starter for a specific socket
 | 
|---|
 | 207 |   static void* sender_thread_starter(void *argp);
 | 
|---|
 | 208 |     
 | 
|---|
 | 209 |   /// receiver thread starter for a specific socket
 | 
|---|
 | 210 |   static void* receiver_thread_starter(void *argp);
 | 
|---|
 | 211 |     
 | 
|---|
 | 212 |   /// a static starter method to invoke the actual main listener
 | 
|---|
 | 213 |   static void* master_listener_thread_starter(void *argp);
 | 
|---|
 | 214 |     
 | 
|---|
 | 215 |   /// main listener thread procedure
 | 
|---|
 | 216 |   void master_listener_thread();
 | 
|---|
 | 217 |     
 | 
|---|
 | 218 |   // create and start new sender thread
 | 
|---|
 | 219 |   void create_new_sender_thread(FastQueue* senderqueue);
 | 
|---|
 | 220 |     
 | 
|---|
 | 221 |   // create and start new receiver thread
 | 
|---|
 | 222 |   void create_new_receiver_thread(AssocData* peer_assoc);
 | 
|---|
 | 223 |     
 | 
|---|
 | 224 |   /// terminates particular thread
 | 
|---|
 | 225 |   void stop_receiver_thread(AssocData* peer_assoc);
 | 
|---|
 | 226 |     
 | 
|---|
 | 227 |   /// cleans up thread management structures
 | 
|---|
 | 228 |   void cleanup_receiver_thread(AssocData* peer_assoc);
 | 
|---|
 | 229 |     
 | 
|---|
 | 230 |   /// terminates a sender thread
 | 
|---|
 | 231 |   void terminate_sender_thread(const AssocData* assoc);
 | 
|---|
 | 232 |     
 | 
|---|
 | 233 |   /// terminates all active receiver or sender threads
 | 
|---|
 | 234 |   void terminate_all_threads();
 | 
|---|
 | 235 |     
 | 
|---|
 | 236 |   /// ConnectionMap instance for keeping track of all existing connections
 | 
|---|
 | 237 |   ConnectionMap connmap;
 | 
|---|
 | 238 |     
 | 
|---|
 | 239 |     
 | 
|---|
 | 240 |   /// SSL Context
 | 
|---|
 | 241 |   SSL_CTX *ssl_ctx;
 | 
|---|
 | 242 |    
 | 
|---|
 | 243 |   /// store per receiver thread arguments, e.g. for signaling termination
 | 
|---|
 | 244 |   typedef hash_map<pthread_t, receiver_thread_arg_t*> recv_thread_argmap_t;
 | 
|---|
 | 245 |   recv_thread_argmap_t  recv_thread_argmap;
 | 
|---|
 | 246 | 
 | 
|---|
 | 247 |   /// store sender thread related information
 | 
|---|
 | 248 |   typedef hash_map<appladdress, FastQueue*> sender_thread_queuemap_t;
 | 
|---|
 | 249 |   sender_thread_queuemap_t  senderthread_queuemap;
 | 
|---|
 | 250 |     
 | 
|---|
 | 251 |   /// parameters for main TPoverTLS_TCP thread
 | 
|---|
 | 252 |   const TPoverTLS_TCPParam tpparam;
 | 
|---|
 | 253 |     
 | 
|---|
 | 254 |   /// did we already abort at thread shutdown
 | 
|---|
 | 255 |   bool already_aborted;
 | 
|---|
 | 256 |   /// message queue
 | 
|---|
 | 257 |   FastQueue* msgqueue;
 | 
|---|
 | 258 |     
 | 
|---|
 | 259 |   bool debug_pdu;
 | 
|---|
 | 260 | 
 | 
|---|
 | 261 |   /// holds socket<->SSL pointer assignment
 | 
|---|
 | 262 |   sslmap_t sslmap;
 | 
|---|
 | 263 |     
 | 
|---|
 | 264 | }; // end class TPoverTLS_TCP
 | 
|---|
 | 265 | 
 | 
|---|
 | 266 | /** A simple internal message for selfmessages
 | 
|---|
 | 267 |  * please note that carried items may get deleted after use of this message 
 | 
|---|
 | 268 |  * the message destructor does not delete any item automatically
 | 
|---|
 | 269 |  */
 | 
|---|
 | 270 | class TPoverTLS_TCPMsg : public message 
 | 
|---|
 | 271 | {
 | 
|---|
 | 272 |  public:
 | 
|---|
 | 273 |   // message type start/stop thread, send data
 | 
|---|
 | 274 |   enum msg_t { start, 
 | 
|---|
 | 275 |                stop,
 | 
|---|
 | 276 |                send_data
 | 
|---|
 | 277 |   };
 | 
|---|
 | 278 | 
 | 
|---|
 | 279 |  private:
 | 
|---|
 | 280 |   const AssocData* peer_assoc;
 | 
|---|
 | 281 |   const TPoverTLS_TCPMsg::msg_t type;
 | 
|---|
 | 282 |   NetMsg* netmsg;
 | 
|---|
 | 283 |   appladdress* addr;
 | 
|---|
 | 284 | 
 | 
|---|
 | 285 | public:
 | 
|---|
 | 286 |   TPoverTLS_TCPMsg(const AssocData* peer_assoc, message::qaddr_t source= qaddr_unknown, TPoverTLS_TCPMsg::msg_t type= stop) : 
 | 
|---|
 | 287 |     message(type_transport, source), peer_assoc(peer_assoc), type(type), netmsg(0), addr(0)  {}
 | 
|---|
 | 288 | 
 | 
|---|
 | 289 |   TPoverTLS_TCPMsg(NetMsg* netmsg, appladdress* addr, message::qaddr_t source= qaddr_unknown) : 
 | 
|---|
 | 290 |     message(type_transport, source), peer_assoc(0), type(send_data), netmsg(netmsg), addr(addr) {}
 | 
|---|
 | 291 | 
 | 
|---|
 | 292 |   const AssocData* get_peer_assoc() const { return peer_assoc; }
 | 
|---|
 | 293 |   TPoverTLS_TCPMsg::msg_t get_msgtype() const { return type; }
 | 
|---|
 | 294 |   NetMsg* get_netmsg() const { return netmsg; }
 | 
|---|
 | 295 |   appladdress* get_appladdr() const { return addr; } 
 | 
|---|
 | 296 | };
 | 
|---|
 | 297 | 
 | 
|---|
 | 298 | } // end namespace protlib
 | 
|---|
 | 299 | 
 | 
|---|
 | 300 | #endif
 | 
|---|