
This is a rollforward of https://webrtc-review.googlesource.com/c/src/+/96020, with the addition of setting the old tlsCertPolicy, tlsAlpnProtocols and tlsEllipticCurves in the RTCIceServer initializer, for backwards compatibility. Bug: webrtc:9662 Change-Id: I28706ed4ff5abe3f7f913f105779f0e5412aeac5 Reviewed-on: https://webrtc-review.googlesource.com/98762 Commit-Queue: Diogo Real <diogor@google.com> Reviewed-by: Sami Kalliomäki <sakal@webrtc.org> Reviewed-by: Kári Helgason <kthelgason@webrtc.org> Reviewed-by: Steve Anton <steveanton@webrtc.org> Reviewed-by: Qingsi Wang <qingsi@webrtc.org> Cr-Commit-Position: refs/heads/master@{#24696}
97 lines
3.1 KiB
C++
97 lines
3.1 KiB
C++
/*
|
|
* Copyright 2011 The WebRTC Project Authors. All rights reserved.
|
|
*
|
|
* Use of this source code is governed by a BSD-style license
|
|
* that can be found in the LICENSE file in the root of the source
|
|
* tree. An additional intellectual property rights grant can be found
|
|
* in the file PATENTS. All contributing project authors may
|
|
* be found in the AUTHORS file in the root of the source tree.
|
|
*/
|
|
|
|
#ifndef P2P_BASE_PACKETSOCKETFACTORY_H_
|
|
#define P2P_BASE_PACKETSOCKETFACTORY_H_
|
|
|
|
#include <string>
|
|
#include <vector>
|
|
|
|
#include "absl/types/optional.h"
|
|
#include "rtc_base/constructormagic.h"
|
|
#include "rtc_base/proxyinfo.h"
|
|
#include "rtc_base/ssladapter.h"
|
|
#include "rtc_base/sslcertificate.h"
|
|
|
|
namespace rtc {
|
|
|
|
// This structure contains options required to create TCP packet sockets.
|
|
struct PacketSocketTcpOptions {
|
|
PacketSocketTcpOptions();
|
|
~PacketSocketTcpOptions();
|
|
|
|
int opts = 0;
|
|
// An optional custom SSL certificate verifier that an API user can provide to
|
|
// inject their own certificate verification logic.
|
|
SSLCertificateVerifier* tls_cert_verifier = nullptr;
|
|
|
|
// SSL configuration options.
|
|
rtc::SSLConfig ssl_config;
|
|
};
|
|
|
|
class AsyncPacketSocket;
|
|
class AsyncResolverInterface;
|
|
|
|
class PacketSocketFactory {
|
|
public:
|
|
enum Options {
|
|
OPT_STUN = 0x04,
|
|
|
|
// The TLS options below are mutually exclusive.
|
|
OPT_TLS = 0x02, // Real and secure TLS.
|
|
OPT_TLS_FAKE = 0x01, // Fake TLS with a dummy SSL handshake.
|
|
OPT_TLS_INSECURE = 0x08, // Insecure TLS without certificate validation.
|
|
|
|
// Deprecated, use OPT_TLS_FAKE.
|
|
OPT_SSLTCP = OPT_TLS_FAKE,
|
|
};
|
|
|
|
PacketSocketFactory() {}
|
|
virtual ~PacketSocketFactory() = default;
|
|
|
|
virtual AsyncPacketSocket* CreateUdpSocket(const SocketAddress& address,
|
|
uint16_t min_port,
|
|
uint16_t max_port) = 0;
|
|
virtual AsyncPacketSocket* CreateServerTcpSocket(
|
|
const SocketAddress& local_address,
|
|
uint16_t min_port,
|
|
uint16_t max_port,
|
|
int opts) = 0;
|
|
|
|
// TODO(deadbeef): |proxy_info| and |user_agent| should be set
|
|
// per-factory and not when socket is created.
|
|
virtual AsyncPacketSocket* CreateClientTcpSocket(
|
|
const SocketAddress& local_address,
|
|
const SocketAddress& remote_address,
|
|
const ProxyInfo& proxy_info,
|
|
const std::string& user_agent,
|
|
int opts) = 0;
|
|
|
|
// TODO(deadbeef): |proxy_info|, |user_agent| and |tcp_options| should
|
|
// be set per-factory and not when socket is created.
|
|
// TODO(deadbeef): Implement this method in all subclasses (namely those in
|
|
// Chromium), make pure virtual, and remove the old CreateClientTcpSocket.
|
|
virtual AsyncPacketSocket* CreateClientTcpSocket(
|
|
const SocketAddress& local_address,
|
|
const SocketAddress& remote_address,
|
|
const ProxyInfo& proxy_info,
|
|
const std::string& user_agent,
|
|
const PacketSocketTcpOptions& tcp_options);
|
|
|
|
virtual AsyncResolverInterface* CreateAsyncResolver() = 0;
|
|
|
|
private:
|
|
RTC_DISALLOW_COPY_AND_ASSIGN(PacketSocketFactory);
|
|
};
|
|
|
|
} // namespace rtc
|
|
|
|
#endif // P2P_BASE_PACKETSOCKETFACTORY_H_
|