6c96314b42
This CL adds these classes but does not change any functonality or interface yet. This is in preparation for future CLs. To be used for this: https://codereview.webrtc.org/2000163002/ RTCCertificateGenerator is meant to replace DtlsIdentityStoreInterface and implementations. In order to continue to support mocking and to help with the transition, RTCCertificateGenerator gets an interface that it implements (just like the store has both interface and impl). PeerConnectionFactoryInterface::CreatePeerConnection will take an RTCCertificateGeneratorInterface instead of DtlsIdentityStoreInterface. As to not break Chromium, both versions of CreatePeerConnection need to exist for a transition period. This will be done by wrapping a store into a generator wrapper - RTCCertificateGeneratorStoreWrapper. BUG=webrtc:5707, webrtc:5708 R=hta@webrtc.org, tommi@chromium.org, tommi@webrtc.org Review URL: https://codereview.webrtc.org/2001103002 . Cr-Commit-Position: refs/heads/master@{#12879}
87 lines
3.4 KiB
C++
87 lines
3.4 KiB
C++
/*
|
|
* Copyright 2016 The WebRTC project authors. All Rights Reserved.
|
|
*
|
|
* Use of this source code is governed by a BSD-style license
|
|
* that can be found in the LICENSE file in the root of the source
|
|
* tree. An additional intellectual property rights grant can be found
|
|
* in the file PATENTS. All contributing project authors may
|
|
* be found in the AUTHORS file in the root of the source tree.
|
|
*/
|
|
|
|
#ifndef WEBRTC_BASE_RTCCERTIFICATEGENERATOR_H_
|
|
#define WEBRTC_BASE_RTCCERTIFICATEGENERATOR_H_
|
|
|
|
#include "webrtc/base/optional.h"
|
|
#include "webrtc/base/refcount.h"
|
|
#include "webrtc/base/rtccertificate.h"
|
|
#include "webrtc/base/scoped_ref_ptr.h"
|
|
#include "webrtc/base/sslidentity.h"
|
|
#include "webrtc/base/thread.h"
|
|
|
|
namespace rtc {
|
|
|
|
// See |RTCCertificateGeneratorInterface::GenerateCertificateAsync|.
|
|
class RTCCertificateGeneratorCallback : public RefCountInterface {
|
|
public:
|
|
virtual void OnSuccess(
|
|
const scoped_refptr<RTCCertificate>& certificate) = 0;
|
|
virtual void OnFailure() = 0;
|
|
|
|
protected:
|
|
~RTCCertificateGeneratorCallback() override {}
|
|
};
|
|
|
|
// Generates |RTCCertificate|s.
|
|
// See |RTCCertificateGenerator| for the WebRTC repo's implementation.
|
|
class RTCCertificateGeneratorInterface {
|
|
public:
|
|
virtual ~RTCCertificateGeneratorInterface() {}
|
|
|
|
// Generates a certificate asynchronously on the worker thread.
|
|
// Must be called on the signaling thread. The |callback| is invoked with the
|
|
// result on the signaling thread. |exipres_ms| optionally specifies for how
|
|
// long we want the certificate to be valid, but the implementation may choose
|
|
// its own restrictions on the expiration time.
|
|
virtual void GenerateCertificateAsync(
|
|
const KeyParams& key_params,
|
|
const Optional<uint64_t>& expires_ms,
|
|
const scoped_refptr<RTCCertificateGeneratorCallback>& callback) = 0;
|
|
};
|
|
|
|
// Standard implementation of |RTCCertificateGeneratorInterface|.
|
|
// The static function |GenerateCertificate| generates a certificate on the
|
|
// current thread. The |RTCCertificateGenerator| instance generates certificates
|
|
// asynchronously on the worker thread with |GenerateCertificateAsync|.
|
|
class RTCCertificateGenerator : public RTCCertificateGeneratorInterface {
|
|
public:
|
|
// Generates a certificate on the current thread. Returns null on failure.
|
|
// If |expires_ms| is specified, the certificate will expire in approximately
|
|
// that many milliseconds from now. |expires_ms| is limited to a year, a
|
|
// larger value than that is clamped down to a year. If |expires_ms| is not
|
|
// specified, a default expiration time is used.
|
|
static scoped_refptr<RTCCertificate> GenerateCertificate(
|
|
const KeyParams& key_params,
|
|
const Optional<uint64_t>& expires_ms);
|
|
|
|
RTCCertificateGenerator(Thread* signaling_thread, Thread* worker_thread);
|
|
~RTCCertificateGenerator() override {}
|
|
|
|
// |RTCCertificateGeneratorInterface| overrides.
|
|
// If |expires_ms| is specified, the certificate will expire in approximately
|
|
// that many milliseconds from now. |expires_ms| is limited to a year, a
|
|
// larger value than that is clamped down to a year. If |expires_ms| is not
|
|
// specified, a default expiration time is used.
|
|
void GenerateCertificateAsync(
|
|
const KeyParams& key_params,
|
|
const Optional<uint64_t>& expires_ms,
|
|
const scoped_refptr<RTCCertificateGeneratorCallback>& callback) override;
|
|
|
|
private:
|
|
Thread* const signaling_thread_;
|
|
Thread* const worker_thread_;
|
|
};
|
|
|
|
} // namespace rtc
|
|
|
|
#endif // WEBRTC_BASE_RTCCERTIFICATEGENERATOR_H_
|