mirror of
https://github.com/Icinga/icinga2.git
synced 2025-11-04 13:45:04 +01:00
56d5811283
Calling `AsioTlsStream::async_shutdown()` performs a TLS shutdown which exchanges messages (that's why it takes a `yield_context`) and thus has the potential to block the coroutine. Therefore, it should be protected with a timeout. As `async_shutdown()` doesn't simply take a timeout, this has to be implemented using a timer. So far, these timers are scattered throughout the codebase with some places missing them entirely. This commit adds helper functions to properly shutdown a TLS connection with a single function call.
131 lines
3.1 KiB
C++
131 lines
3.1 KiB
C++
/* Icinga 2 | (c) 2012 Icinga GmbH | GPLv2+ */
|
|
|
|
#ifndef TLSSTREAM_H
|
|
#define TLSSTREAM_H
|
|
|
|
#include "base/i2-base.hpp"
|
|
#include "base/shared.hpp"
|
|
#include "base/socket.hpp"
|
|
#include "base/stream.hpp"
|
|
#include "base/tlsutility.hpp"
|
|
#include "base/fifo.hpp"
|
|
#include "base/utility.hpp"
|
|
#include <atomic>
|
|
#include <memory>
|
|
#include <utility>
|
|
#include <boost/asio/buffered_stream.hpp>
|
|
#include <boost/asio/io_context.hpp>
|
|
#include <boost/asio/ip/tcp.hpp>
|
|
#include <boost/asio/spawn.hpp>
|
|
#include <boost/asio/ssl/context.hpp>
|
|
#include <boost/asio/ssl/stream.hpp>
|
|
|
|
namespace icinga
|
|
{
|
|
|
|
template<class ARS>
|
|
class SeenStream : public ARS
|
|
{
|
|
public:
|
|
template<class... Args>
|
|
SeenStream(Args&&... args) : ARS(std::forward<Args>(args)...)
|
|
{
|
|
m_Seen.store(nullptr);
|
|
}
|
|
|
|
template<class... Args>
|
|
auto async_read_some(Args&&... args) -> decltype(((ARS*)nullptr)->async_read_some(std::forward<Args>(args)...))
|
|
{
|
|
{
|
|
auto seen (m_Seen.load());
|
|
|
|
if (seen) {
|
|
*seen = Utility::GetTime();
|
|
}
|
|
}
|
|
|
|
return ((ARS*)this)->async_read_some(std::forward<Args>(args)...);
|
|
}
|
|
|
|
inline void SetSeen(double* seen)
|
|
{
|
|
m_Seen.store(seen);
|
|
}
|
|
|
|
private:
|
|
std::atomic<double*> m_Seen;
|
|
};
|
|
|
|
struct UnbufferedAsioTlsStreamParams
|
|
{
|
|
boost::asio::io_context& IoContext;
|
|
boost::asio::ssl::context& SslContext;
|
|
const String& Hostname;
|
|
};
|
|
|
|
typedef SeenStream<boost::asio::ssl::stream<boost::asio::ip::tcp::socket>> AsioTcpTlsStream;
|
|
|
|
class UnbufferedAsioTlsStream : public AsioTcpTlsStream
|
|
{
|
|
public:
|
|
inline
|
|
UnbufferedAsioTlsStream(UnbufferedAsioTlsStreamParams& init)
|
|
: AsioTcpTlsStream(init.IoContext, init.SslContext), m_Hostname(init.Hostname)
|
|
{
|
|
}
|
|
|
|
bool IsVerifyOK();
|
|
String GetVerifyError();
|
|
std::shared_ptr<X509> GetPeerCertificate();
|
|
|
|
template<class... Args>
|
|
inline
|
|
auto async_handshake(handshake_type type, Args&&... args) -> decltype(((AsioTcpTlsStream*)nullptr)->async_handshake(type, std::forward<Args>(args)...))
|
|
{
|
|
BeforeHandshake(type);
|
|
|
|
return AsioTcpTlsStream::async_handshake(type, std::forward<Args>(args)...);
|
|
}
|
|
|
|
template<class... Args>
|
|
inline
|
|
auto handshake(handshake_type type, Args&&... args) -> decltype(((AsioTcpTlsStream*)nullptr)->handshake(type, std::forward<Args>(args)...))
|
|
{
|
|
BeforeHandshake(type);
|
|
|
|
return AsioTcpTlsStream::handshake(type, std::forward<Args>(args)...);
|
|
}
|
|
|
|
private:
|
|
String m_Hostname;
|
|
|
|
void BeforeHandshake(handshake_type type);
|
|
};
|
|
|
|
class AsioTlsStream : public boost::asio::buffered_stream<UnbufferedAsioTlsStream>
|
|
{
|
|
public:
|
|
inline
|
|
AsioTlsStream(boost::asio::io_context& ioContext, boost::asio::ssl::context& sslContext, const String& hostname = String())
|
|
: AsioTlsStream(UnbufferedAsioTlsStreamParams{ioContext, sslContext, hostname})
|
|
{
|
|
}
|
|
|
|
void ForceDisconnect();
|
|
void GracefulDisconnect(boost::asio::io_context::strand& strand, boost::asio::yield_context& yc);
|
|
|
|
private:
|
|
inline
|
|
AsioTlsStream(UnbufferedAsioTlsStreamParams init)
|
|
: buffered_stream(init)
|
|
{
|
|
}
|
|
};
|
|
|
|
typedef boost::asio::buffered_stream<boost::asio::ip::tcp::socket> AsioTcpStream;
|
|
typedef std::pair<Shared<AsioTlsStream>::Ptr, Shared<AsioTcpStream>::Ptr> OptionalTlsStream;
|
|
|
|
}
|
|
|
|
#endif /* TLSSTREAM_H */
|