forked from quic-go/quic-go
105 lines
2.5 KiB
Go
105 lines
2.5 KiB
Go
package handshake
|
|
|
|
import (
|
|
"bytes"
|
|
"encoding/binary"
|
|
"io"
|
|
|
|
"github.com/lucas-clemente/quic-go/crypto"
|
|
"github.com/lucas-clemente/quic-go/protocol"
|
|
"github.com/lucas-clemente/quic-go/qerr"
|
|
"github.com/lucas-clemente/quic-go/utils"
|
|
)
|
|
|
|
type cryptoSetupClient struct {
|
|
connID protocol.ConnectionID
|
|
version protocol.VersionNumber
|
|
|
|
cryptoStream utils.Stream
|
|
|
|
hasServerConfig bool
|
|
}
|
|
|
|
var _ crypto.AEAD = &cryptoSetupClient{}
|
|
var _ CryptoSetup = &cryptoSetupClient{}
|
|
|
|
// NewCryptoSetupClient creates a new CryptoSetup instance for a client
|
|
func NewCryptoSetupClient(
|
|
connID protocol.ConnectionID,
|
|
version protocol.VersionNumber,
|
|
cryptoStream utils.Stream,
|
|
) (CryptoSetup, error) {
|
|
return &cryptoSetupClient{
|
|
connID: connID,
|
|
version: version,
|
|
cryptoStream: cryptoStream,
|
|
}, nil
|
|
}
|
|
|
|
func (h *cryptoSetupClient) HandleCryptoStream() error {
|
|
err := h.sendInchoateCHLO()
|
|
if err != nil {
|
|
return err
|
|
}
|
|
|
|
for {
|
|
var chloData bytes.Buffer
|
|
messageTag, cryptoData, err := ParseHandshakeMessage(io.TeeReader(h.cryptoStream, &chloData))
|
|
_ = cryptoData
|
|
utils.Debugf("Received message on Crypto Stream. MessageTag: %#v", messageTag)
|
|
if err != nil {
|
|
return qerr.HandshakeFailed
|
|
}
|
|
}
|
|
}
|
|
|
|
func (h *cryptoSetupClient) Open(dst, src []byte, packetNumber protocol.PacketNumber, associatedData []byte) ([]byte, error) {
|
|
return (&crypto.NullAEAD{}).Open(dst, src, packetNumber, associatedData)
|
|
}
|
|
|
|
func (h *cryptoSetupClient) Seal(dst, src []byte, packetNumber protocol.PacketNumber, associatedData []byte) []byte {
|
|
return (&crypto.NullAEAD{}).Seal(dst, src, packetNumber, associatedData)
|
|
}
|
|
|
|
func (h *cryptoSetupClient) DiversificationNonce() []byte {
|
|
return nil
|
|
}
|
|
|
|
func (h *cryptoSetupClient) LockForSealing() {
|
|
|
|
}
|
|
|
|
func (h *cryptoSetupClient) UnlockForSealing() {
|
|
|
|
}
|
|
|
|
func (h *cryptoSetupClient) HandshakeComplete() bool {
|
|
return false
|
|
}
|
|
|
|
func (h *cryptoSetupClient) getInchoateCHLOValues() map[Tag][]byte {
|
|
tags := make(map[Tag][]byte)
|
|
tags[TagSNI] = []byte("quic.clemente.io") // TODO: use real SNI here
|
|
tags[TagPDMD] = []byte("X509")
|
|
tags[TagPAD] = bytes.Repeat([]byte("0"), protocol.ClientHelloMinimumSize)
|
|
|
|
versionTag := make([]byte, 4, 4)
|
|
binary.LittleEndian.PutUint32(versionTag, protocol.VersionNumberToTag(h.version))
|
|
tags[TagVER] = versionTag
|
|
|
|
return tags
|
|
}
|
|
|
|
func (h *cryptoSetupClient) sendInchoateCHLO() error {
|
|
b := &bytes.Buffer{}
|
|
|
|
tags := h.getInchoateCHLOValues()
|
|
WriteHandshakeMessage(b, TagCHLO, tags)
|
|
|
|
_, err := h.cryptoStream.Write(b.Bytes())
|
|
if err != nil {
|
|
return err
|
|
}
|
|
return nil
|
|
}
|