summaryrefslogtreecommitdiff
path: root/src/mongo/util/net/ssl/stream.hpp
blob: f7f2a0f31a2d657c99b0b858e8176700a28cb9cd (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
//
// ssl/stream.hpp
// ~~~~~~~~~~~~~~
//
// Copyright (c) 2003-2017 Christopher M. Kohlhoff (chris at kohlhoff dot com)
//
// Distributed under the Boost Software License, Version 1.0. (See accompanying
// file LICENSE_1_0.txt or copy at http://www.boost.org/LICENSE_1_0.txt)
//

#ifndef ASIO_SSL_STREAM_HPP
#define ASIO_SSL_STREAM_HPP

#if defined(_MSC_VER) && (_MSC_VER >= 1200)
#pragma once
#endif  // defined(_MSC_VER) && (_MSC_VER >= 1200)

#include "asio/detail/config.hpp"

#include "asio/async_result.hpp"
#include "asio/detail/buffer_sequence_adapter.hpp"
#include "asio/detail/handler_type_requirements.hpp"
#include "asio/detail/noncopyable.hpp"
#include "asio/detail/type_traits.hpp"
#include "mongo/util/net/ssl/apple.hpp"
#include "mongo/util/net/ssl/context.hpp"
#include "mongo/util/net/ssl/detail/buffered_handshake_op.hpp"
#include "mongo/util/net/ssl/detail/handshake_op.hpp"
#include "mongo/util/net/ssl/detail/io.hpp"
#include "mongo/util/net/ssl/detail/read_op.hpp"
#include "mongo/util/net/ssl/detail/shutdown_op.hpp"
#include "mongo/util/net/ssl/detail/stream_core.hpp"
#include "mongo/util/net/ssl/detail/write_op.hpp"
#include "mongo/util/net/ssl/stream_base.hpp"

#include "asio/detail/push_options.hpp"

namespace asio {
namespace ssl {

/// Provides stream-oriented functionality using SSL.
/**
 * The stream class template provides asynchronous and blocking stream-oriented
 * functionality using SSL.
 *
 * @par Thread Safety
 * @e Distinct @e objects: Safe.@n
 * @e Shared @e objects: Unsafe. The application must also ensure that all
 * asynchronous operations are performed within the same implicit or explicit
 * strand.
 *
 * @par Example
 * To use the SSL stream template with an ip::tcp::socket, you would write:
 * @code
 * asio::io_context io_context;
 * asio::ssl::context ctx(asio::ssl::context::sslv23);
 * asio::ssl::stream<asio:ip::tcp::socket> sock(io_context, ctx);
 * @endcode
 *
 * @par Concepts:
 * AsyncReadStream, AsyncWriteStream, Stream, SyncReadStream, SyncWriteStream.
 */
template <typename Stream>
class stream : public stream_base, private noncopyable {
public:
/// The native handle type of the SSL stream.
#if MONGO_CONFIG_SSL_PROVIDER == SSL_PROVIDER_WINDOWS
    typedef PCtxtHandle native_handle_type;
#elif MONGO_CONFIG_SSL_PROVIDER == SSL_PROVIDER_OPENSSL
    typedef SSL* native_handle_type;
#elif MONGO_CONFIG_SSL_PROVIDER == SSL_PROVIDER_APPLE
    typedef ::SSLContextRef native_handle_type;
#else
#error "Unknown SSL Provider"
#endif

    /// The type of the next layer.
    typedef typename remove_reference<Stream>::type next_layer_type;

    /// The type of the lowest layer.
    typedef typename next_layer_type::lowest_layer_type lowest_layer_type;

    /// The type of the executor associated with the object.
    typedef typename lowest_layer_type::executor_type executor_type;

#if defined(ASIO_HAS_MOVE) || defined(GENERATING_DOCUMENTATION)
    /// Construct a stream.
    /**
     * This constructor creates a stream and initialises the underlying stream
     * object.
     *
     * @param arg The argument to be passed to initialise the underlying stream.
     *
     * @param ctx The SSL context to be used for the stream.
     */
    template <typename Arg>
    stream(Arg&& arg, context& ctx, const std::string& remoteHostName)
        : next_layer_(ASIO_MOVE_CAST(Arg)(arg)),
          core_(ctx.native_handle(),
                remoteHostName,
                next_layer_.lowest_layer().get_executor().context()) {}
#else   // defined(ASIO_HAS_MOVE) || defined(GENERATING_DOCUMENTATION)
    template <typename Arg>
    stream(Arg& arg, context& ctx)
        : next_layer_(arg),
          core_(ctx.native_handle(), next_layer_.lowest_layer().get_executor().context()) {}
#endif  // defined(ASIO_HAS_MOVE) || defined(GENERATING_DOCUMENTATION)

    /// Destructor.
    /**
     * @note A @c stream object must not be destroyed while there are pending
     * asynchronous operations associated with it.
     */
    ~stream() {}

    /// Get the executor associated with the object.
    /**
     * This function may be used to obtain the executor object that the stream
     * uses to dispatch handlers for asynchronous operations.
     *
     * @return A copy of the executor that stream will use to dispatch handlers.
     */
    executor_type get_executor() ASIO_NOEXCEPT {
        return next_layer_.lowest_layer().get_executor();
    }

#if !defined(ASIO_NO_DEPRECATED)
    /// (Deprecated: Use get_executor().) Get the io_context associated with the
    /// object.
    asio::io_context& get_io_context() {
        return next_layer_.lowest_layer().get_io_context();
    }

    /// (Deprecated: Use get_executor().) Get the io_context associated with the
    /// object.
    asio::io_context& get_io_service() {
        return next_layer_.lowest_layer().get_io_service();
    }
#endif  // !defined(ASIO_NO_DEPRECATED)

    /// Get the underlying implementation in the native type.
    /**
     * This function may be used to obtain the underlying implementation of the
     * context. This is intended to allow access to context functionality that is
     * not otherwise provided.
     *
     * @par Example
     * The native_handle() function returns a pointer of type @c SSL* that is
     * suitable for passing to functions such as @c SSL_get_verify_result and
     * @c SSL_get_peer_certificate:
     * @code
     * asio::ssl::stream<asio:ip::tcp::socket> sock(io_context, ctx);
     *
     * // ... establish connection and perform handshake ...
     *
     * if (X509* cert = SSL_get_peer_certificate(sock.native_handle()))
     * {
     *   if (SSL_get_verify_result(sock.native_handle()) == X509_V_OK)
     *   {
     *     // ...
     *   }
     * }
     * @endcode
     */
    native_handle_type native_handle() {
        return core_.engine_.native_handle();
    }

    /// Get a reference to the next layer.
    /**
     * This function returns a reference to the next layer in a stack of stream
     * layers.
     *
     * @return A reference to the next layer in the stack of stream layers.
     * Ownership is not transferred to the caller.
     */
    const next_layer_type& next_layer() const {
        return next_layer_;
    }

    /// Get a reference to the next layer.
    /**
     * This function returns a reference to the next layer in a stack of stream
     * layers.
     *
     * @return A reference to the next layer in the stack of stream layers.
     * Ownership is not transferred to the caller.
     */
    next_layer_type& next_layer() {
        return next_layer_;
    }

    /// Get a reference to the lowest layer.
    /**
     * This function returns a reference to the lowest layer in a stack of
     * stream layers.
     *
     * @return A reference to the lowest layer in the stack of stream layers.
     * Ownership is not transferred to the caller.
     */
    lowest_layer_type& lowest_layer() {
        return next_layer_.lowest_layer();
    }

    /// Get a reference to the lowest layer.
    /**
     * This function returns a reference to the lowest layer in a stack of
     * stream layers.
     *
     * @return A reference to the lowest layer in the stack of stream layers.
     * Ownership is not transferred to the caller.
     */
    const lowest_layer_type& lowest_layer() const {
        return next_layer_.lowest_layer();
    }

    /// Perform SSL handshaking.
    /**
     * This function is used to perform SSL handshaking on the stream. The
     * function call will block until handshaking is complete or an error occurs.
     *
     * @param type The type of handshaking to be performed, i.e. as a client or as
     * a server.
     *
     * @throws asio::system_error Thrown on failure.
     */
    void handshake(handshake_type type) {
        asio::error_code ec;
        handshake(type, ec);
        asio::detail::throw_error(ec, "handshake");
    }

    /// Perform SSL handshaking.
    /**
     * This function is used to perform SSL handshaking on the stream. The
     * function call will block until handshaking is complete or an error occurs.
     *
     * @param type The type of handshaking to be performed, i.e. as a client or as
     * a server.
     *
     * @param ec Set to indicate what error occurred, if any.
     */
    ASIO_SYNC_OP_VOID handshake(handshake_type type, asio::error_code& ec) {
        detail::io(next_layer_, core_, detail::handshake_op(type), ec);
        ASIO_SYNC_OP_VOID_RETURN(ec);
    }

    /// Perform SSL handshaking.
    /**
     * This function is used to perform SSL handshaking on the stream. The
     * function call will block until handshaking is complete or an error occurs.
     *
     * @param type The type of handshaking to be performed, i.e. as a client or as
     * a server.
     *
     * @param buffers The buffered data to be reused for the handshake.
     *
     * @throws asio::system_error Thrown on failure.
     */
    template <typename ConstBufferSequence>
    void handshake(handshake_type type, const ConstBufferSequence& buffers) {
        asio::error_code ec;
        handshake(type, buffers, ec);
        asio::detail::throw_error(ec, "handshake");
    }

    /// Perform SSL handshaking.
    /**
     * This function is used to perform SSL handshaking on the stream. The
     * function call will block until handshaking is complete or an error occurs.
     *
     * @param type The type of handshaking to be performed, i.e. as a client or as
     * a server.
     *
     * @param buffers The buffered data to be reused for the handshake.
     *
     * @param ec Set to indicate what error occurred, if any.
     */
    template <typename ConstBufferSequence>
    ASIO_SYNC_OP_VOID handshake(handshake_type type,
                                const ConstBufferSequence& buffers,
                                asio::error_code& ec) {
        detail::io(next_layer_,
                   core_,
                   detail::buffered_handshake_op<ConstBufferSequence>(type, buffers),
                   ec);
        ASIO_SYNC_OP_VOID_RETURN(ec);
    }

    /// Start an asynchronous SSL handshake.
    /**
     * This function is used to asynchronously perform an SSL handshake on the
     * stream. This function call always returns immediately.
     *
     * @param type The type of handshaking to be performed, i.e. as a client or as
     * a server.
     *
     * @param handler The handler to be called when the handshake operation
     * completes. Copies will be made of the handler as required. The equivalent
     * function signature of the handler must be:
     * @code void handler(
     *   const asio::error_code& error // Result of operation.
     * ); @endcode
     */
    template <typename HandshakeHandler>
    ASIO_INITFN_RESULT_TYPE(HandshakeHandler, void(asio::error_code))
    async_handshake(handshake_type type, ASIO_MOVE_ARG(HandshakeHandler) handler) {
        // If you get an error on the following line it means that your handler does
        // not meet the documented type requirements for a HandshakeHandler.
        ASIO_HANDSHAKE_HANDLER_CHECK(HandshakeHandler, handler) type_check;

        asio::async_completion<HandshakeHandler, void(asio::error_code)> init(handler);

        detail::async_io(next_layer_, core_, detail::handshake_op(type), init.completion_handler);

        return init.result.get();
    }

    /// Start an asynchronous SSL handshake.
    /**
     * This function is used to asynchronously perform an SSL handshake on the
     * stream. This function call always returns immediately.
     *
     * @param type The type of handshaking to be performed, i.e. as a client or as
     * a server.
     *
     * @param buffers The buffered data to be reused for the handshake. Although
     * the buffers object may be copied as necessary, ownership of the underlying
     * buffers is retained by the caller, which must guarantee that they remain
     * valid until the handler is called.
     *
     * @param handler The handler to be called when the handshake operation
     * completes. Copies will be made of the handler as required. The equivalent
     * function signature of the handler must be:
     * @code void handler(
     *   const asio::error_code& error, // Result of operation.
     *   std::size_t bytes_transferred // Amount of buffers used in handshake.
     * ); @endcode
     */
    template <typename ConstBufferSequence, typename BufferedHandshakeHandler>
    ASIO_INITFN_RESULT_TYPE(BufferedHandshakeHandler, void(asio::error_code, std::size_t))
    async_handshake(handshake_type type,
                    const ConstBufferSequence& buffers,
                    ASIO_MOVE_ARG(BufferedHandshakeHandler) handler) {
        // If you get an error on the following line it means that your handler does
        // not meet the documented type requirements for a BufferedHandshakeHandler.
        ASIO_BUFFERED_HANDSHAKE_HANDLER_CHECK(BufferedHandshakeHandler, handler) type_check;

        asio::async_completion<BufferedHandshakeHandler, void(asio::error_code, std::size_t)> init(
            handler);

        detail::async_io(next_layer_,
                         core_,
                         detail::buffered_handshake_op<ConstBufferSequence>(type, buffers),
                         init.completion_handler);

        return init.result.get();
    }

    /// Shut down SSL on the stream.
    /**
     * This function is used to shut down SSL on the stream. The function call
     * will block until SSL has been shut down or an error occurs.
     *
     * @throws asio::system_error Thrown on failure.
     */
    void shutdown() {
        asio::error_code ec;
        shutdown(ec);
        asio::detail::throw_error(ec, "shutdown");
    }

    /// Shut down SSL on the stream.
    /**
     * This function is used to shut down SSL on the stream. The function call
     * will block until SSL has been shut down or an error occurs.
     *
     * @param ec Set to indicate what error occurred, if any.
     */
    ASIO_SYNC_OP_VOID shutdown(asio::error_code& ec) {
        detail::io(next_layer_, core_, detail::shutdown_op(), ec);
        ASIO_SYNC_OP_VOID_RETURN(ec);
    }

    /// Asynchronously shut down SSL on the stream.
    /**
     * This function is used to asynchronously shut down SSL on the stream. This
     * function call always returns immediately.
     *
     * @param handler The handler to be called when the handshake operation
     * completes. Copies will be made of the handler as required. The equivalent
     * function signature of the handler must be:
     * @code void handler(
     *   const asio::error_code& error // Result of operation.
     * ); @endcode
     */
    template <typename ShutdownHandler>
    ASIO_INITFN_RESULT_TYPE(ShutdownHandler, void(asio::error_code))
    async_shutdown(ASIO_MOVE_ARG(ShutdownHandler) handler) {
        // If you get an error on the following line it means that your handler does
        // not meet the documented type requirements for a ShutdownHandler.
        ASIO_SHUTDOWN_HANDLER_CHECK(ShutdownHandler, handler) type_check;

        asio::async_completion<ShutdownHandler, void(asio::error_code)> init(handler);

        detail::async_io(next_layer_, core_, detail::shutdown_op(), init.completion_handler);

        return init.result.get();
    }

    /// Write some data to the stream.
    /**
     * This function is used to write data on the stream. The function call will
     * block until one or more bytes of data has been written successfully, or
     * until an error occurs.
     *
     * @param buffers The data to be written.
     *
     * @returns The number of bytes written.
     *
     * @throws asio::system_error Thrown on failure.
     *
     * @note The write_some operation may not transmit all of the data to the
     * peer. Consider using the @ref write function if you need to ensure that all
     * data is written before the blocking operation completes.
     */
    template <typename ConstBufferSequence>
    std::size_t write_some(const ConstBufferSequence& buffers) {
        asio::error_code ec;
        std::size_t n = write_some(buffers, ec);
        asio::detail::throw_error(ec, "write_some");
        return n;
    }

    /// Write some data to the stream.
    /**
     * This function is used to write data on the stream. The function call will
     * block until one or more bytes of data has been written successfully, or
     * until an error occurs.
     *
     * @param buffers The data to be written to the stream.
     *
     * @param ec Set to indicate what error occurred, if any.
     *
     * @returns The number of bytes written. Returns 0 if an error occurred.
     *
     * @note The write_some operation may not transmit all of the data to the
     * peer. Consider using the @ref write function if you need to ensure that all
     * data is written before the blocking operation completes.
     */
    template <typename ConstBufferSequence>
    std::size_t write_some(const ConstBufferSequence& buffers, asio::error_code& ec) {
        return detail::io(next_layer_, core_, detail::write_op<ConstBufferSequence>(buffers), ec);
    }

    /// Start an asynchronous write.
    /**
     * This function is used to asynchronously write one or more bytes of data to
     * the stream. The function call always returns immediately.
     *
     * @param buffers The data to be written to the stream. Although the buffers
     * object may be copied as necessary, ownership of the underlying buffers is
     * retained by the caller, which must guarantee that they remain valid until
     * the handler is called.
     *
     * @param handler The handler to be called when the write operation completes.
     * Copies will be made of the handler as required. The equivalent function
     * signature of the handler must be:
     * @code void handler(
     *   const asio::error_code& error, // Result of operation.
     *   std::size_t bytes_transferred           // Number of bytes written.
     * ); @endcode
     *
     * @note The async_write_some operation may not transmit all of the data to
     * the peer. Consider using the @ref async_write function if you need to
     * ensure that all data is written before the blocking operation completes.
     */
    template <typename ConstBufferSequence, typename WriteHandler>
    ASIO_INITFN_RESULT_TYPE(WriteHandler, void(asio::error_code, std::size_t))
    async_write_some(const ConstBufferSequence& buffers, ASIO_MOVE_ARG(WriteHandler) handler) {
        // If you get an error on the following line it means that your handler does
        // not meet the documented type requirements for a WriteHandler.
        ASIO_WRITE_HANDLER_CHECK(WriteHandler, handler) type_check;

        asio::async_completion<WriteHandler, void(asio::error_code, std::size_t)> init(handler);

        detail::async_io(next_layer_,
                         core_,
                         detail::write_op<ConstBufferSequence>(buffers),
                         init.completion_handler);

        return init.result.get();
    }

    /// Read some data from the stream.
    /**
     * This function is used to read data from the stream. The function call will
     * block until one or more bytes of data has been read successfully, or until
     * an error occurs.
     *
     * @param buffers The buffers into which the data will be read.
     *
     * @returns The number of bytes read.
     *
     * @throws asio::system_error Thrown on failure.
     *
     * @note The read_some operation may not read all of the requested number of
     * bytes. Consider using the @ref read function if you need to ensure that the
     * requested amount of data is read before the blocking operation completes.
     */
    template <typename MutableBufferSequence>
    std::size_t read_some(const MutableBufferSequence& buffers) {
        asio::error_code ec;
        std::size_t n = read_some(buffers, ec);
        asio::detail::throw_error(ec, "read_some");
        return n;
    }

    /// Read some data from the stream.
    /**
     * This function is used to read data from the stream. The function call will
     * block until one or more bytes of data has been read successfully, or until
     * an error occurs.
     *
     * @param buffers The buffers into which the data will be read.
     *
     * @param ec Set to indicate what error occurred, if any.
     *
     * @returns The number of bytes read. Returns 0 if an error occurred.
     *
     * @note The read_some operation may not read all of the requested number of
     * bytes. Consider using the @ref read function if you need to ensure that the
     * requested amount of data is read before the blocking operation completes.
     */
    template <typename MutableBufferSequence>
    std::size_t read_some(const MutableBufferSequence& buffers, asio::error_code& ec) {
        return detail::io(next_layer_, core_, detail::read_op<MutableBufferSequence>(buffers), ec);
    }

    /// Start an asynchronous read.
    /**
     * This function is used to asynchronously read one or more bytes of data from
     * the stream. The function call always returns immediately.
     *
     * @param buffers The buffers into which the data will be read. Although the
     * buffers object may be copied as necessary, ownership of the underlying
     * buffers is retained by the caller, which must guarantee that they remain
     * valid until the handler is called.
     *
     * @param handler The handler to be called when the read operation completes.
     * Copies will be made of the handler as required. The equivalent function
     * signature of the handler must be:
     * @code void handler(
     *   const asio::error_code& error, // Result of operation.
     *   std::size_t bytes_transferred           // Number of bytes read.
     * ); @endcode
     *
     * @note The async_read_some operation may not read all of the requested
     * number of bytes. Consider using the @ref async_read function if you need to
     * ensure that the requested amount of data is read before the asynchronous
     * operation completes.
     */
    template <typename MutableBufferSequence, typename ReadHandler>
    ASIO_INITFN_RESULT_TYPE(ReadHandler, void(asio::error_code, std::size_t))
    async_read_some(const MutableBufferSequence& buffers, ASIO_MOVE_ARG(ReadHandler) handler) {
        // If you get an error on the following line it means that your handler does
        // not meet the documented type requirements for a ReadHandler.
        ASIO_READ_HANDLER_CHECK(ReadHandler, handler) type_check;

        asio::async_completion<ReadHandler, void(asio::error_code, std::size_t)> init(handler);

        detail::async_io(next_layer_,
                         core_,
                         detail::read_op<MutableBufferSequence>(buffers),
                         init.completion_handler);

        return init.result.get();
    }

private:
    Stream next_layer_;
    detail::stream_core core_;
};

}  // namespace ssl
}  // namespace asio

#include "asio/detail/pop_options.hpp"

#endif  // ASIO_SSL_STREAM_HPP