2 * QEMU I/O channels TLS driver
4 * Copyright (c) 2015 Red Hat, Inc.
6 * This library is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU Lesser General Public
8 * License as published by the Free Software Foundation; either
9 * version 2 of the License, or (at your option) any later version.
11 * This library is distributed in the hope that it will be useful,
12 * but WITHOUT ANY WARRANTY; without even the implied warranty of
13 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
14 * Lesser General Public License for more details.
16 * You should have received a copy of the GNU Lesser General Public
17 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
21 #include "qemu/osdep.h"
22 #include "qapi/error.h"
23 #include "io/channel-tls.h"
27 static ssize_t
qio_channel_tls_write_handler(const char *buf
,
31 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(opaque
);
34 ret
= qio_channel_write(tioc
->master
, buf
, len
, NULL
);
35 if (ret
== QIO_CHANNEL_ERR_BLOCK
) {
45 static ssize_t
qio_channel_tls_read_handler(char *buf
,
49 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(opaque
);
52 ret
= qio_channel_read(tioc
->master
, buf
, len
, NULL
);
53 if (ret
== QIO_CHANNEL_ERR_BLOCK
) {
65 qio_channel_tls_new_server(QIOChannel
*master
,
66 QCryptoTLSCreds
*creds
,
72 ioc
= QIO_CHANNEL_TLS(object_new(TYPE_QIO_CHANNEL_TLS
));
75 object_ref(OBJECT(master
));
77 ioc
->session
= qcrypto_tls_session_new(
81 QCRYPTO_TLS_CREDS_ENDPOINT_SERVER
,
87 qcrypto_tls_session_set_callbacks(
89 qio_channel_tls_write_handler
,
90 qio_channel_tls_read_handler
,
93 trace_qio_channel_tls_new_server(ioc
, master
, creds
, aclname
);
97 object_unref(OBJECT(ioc
));
102 qio_channel_tls_new_client(QIOChannel
*master
,
103 QCryptoTLSCreds
*creds
,
104 const char *hostname
,
110 tioc
= QIO_CHANNEL_TLS(object_new(TYPE_QIO_CHANNEL_TLS
));
111 ioc
= QIO_CHANNEL(tioc
);
113 tioc
->master
= master
;
114 if (qio_channel_has_feature(master
, QIO_CHANNEL_FEATURE_SHUTDOWN
)) {
115 qio_channel_set_feature(ioc
, QIO_CHANNEL_FEATURE_SHUTDOWN
);
117 object_ref(OBJECT(master
));
119 tioc
->session
= qcrypto_tls_session_new(
123 QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT
,
125 if (!tioc
->session
) {
129 qcrypto_tls_session_set_callbacks(
131 qio_channel_tls_write_handler
,
132 qio_channel_tls_read_handler
,
135 trace_qio_channel_tls_new_client(tioc
, master
, creds
, hostname
);
139 object_unref(OBJECT(tioc
));
144 static gboolean
qio_channel_tls_handshake_io(QIOChannel
*ioc
,
145 GIOCondition condition
,
148 static void qio_channel_tls_handshake_task(QIOChannelTLS
*ioc
,
152 QCryptoTLSSessionHandshakeStatus status
;
154 if (qcrypto_tls_session_handshake(ioc
->session
, &err
) < 0) {
155 trace_qio_channel_tls_handshake_fail(ioc
);
156 qio_task_abort(task
, err
);
160 status
= qcrypto_tls_session_get_handshake_status(ioc
->session
);
161 if (status
== QCRYPTO_TLS_HANDSHAKE_COMPLETE
) {
162 trace_qio_channel_tls_handshake_complete(ioc
);
163 if (qcrypto_tls_session_check_credentials(ioc
->session
,
165 trace_qio_channel_tls_credentials_deny(ioc
);
166 qio_task_abort(task
, err
);
169 trace_qio_channel_tls_credentials_allow(ioc
);
170 qio_task_complete(task
);
172 GIOCondition condition
;
173 if (status
== QCRYPTO_TLS_HANDSHAKE_SENDING
) {
174 condition
= G_IO_OUT
;
179 trace_qio_channel_tls_handshake_pending(ioc
, status
);
180 qio_channel_add_watch(ioc
->master
,
182 qio_channel_tls_handshake_io
,
192 static gboolean
qio_channel_tls_handshake_io(QIOChannel
*ioc
,
193 GIOCondition condition
,
196 QIOTask
*task
= user_data
;
197 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(
198 qio_task_get_source(task
));
200 qio_channel_tls_handshake_task(
206 void qio_channel_tls_handshake(QIOChannelTLS
*ioc
,
209 GDestroyNotify destroy
)
213 task
= qio_task_new(OBJECT(ioc
),
214 func
, opaque
, destroy
);
216 trace_qio_channel_tls_handshake_start(ioc
);
217 qio_channel_tls_handshake_task(ioc
, task
);
221 static void qio_channel_tls_init(Object
*obj G_GNUC_UNUSED
)
226 static void qio_channel_tls_finalize(Object
*obj
)
228 QIOChannelTLS
*ioc
= QIO_CHANNEL_TLS(obj
);
230 object_unref(OBJECT(ioc
->master
));
231 qcrypto_tls_session_free(ioc
->session
);
235 static ssize_t
qio_channel_tls_readv(QIOChannel
*ioc
,
236 const struct iovec
*iov
,
242 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
246 for (i
= 0 ; i
< niov
; i
++) {
247 ssize_t ret
= qcrypto_tls_session_read(tioc
->session
,
251 if (errno
== EAGAIN
) {
255 return QIO_CHANNEL_ERR_BLOCK
;
259 error_setg_errno(errp
, errno
,
260 "Cannot read from TLS channel");
264 if (ret
< iov
[i
].iov_len
) {
272 static ssize_t
qio_channel_tls_writev(QIOChannel
*ioc
,
273 const struct iovec
*iov
,
279 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
283 for (i
= 0 ; i
< niov
; i
++) {
284 ssize_t ret
= qcrypto_tls_session_write(tioc
->session
,
288 if (errno
== EAGAIN
) {
292 return QIO_CHANNEL_ERR_BLOCK
;
296 error_setg_errno(errp
, errno
,
297 "Cannot write to TLS channel");
301 if (ret
< iov
[i
].iov_len
) {
308 static int qio_channel_tls_set_blocking(QIOChannel
*ioc
,
312 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
314 return qio_channel_set_blocking(tioc
->master
, enabled
, errp
);
317 static void qio_channel_tls_set_delay(QIOChannel
*ioc
,
320 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
322 qio_channel_set_delay(tioc
->master
, enabled
);
325 static void qio_channel_tls_set_cork(QIOChannel
*ioc
,
328 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
330 qio_channel_set_cork(tioc
->master
, enabled
);
333 static int qio_channel_tls_shutdown(QIOChannel
*ioc
,
334 QIOChannelShutdown how
,
337 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
339 return qio_channel_shutdown(tioc
->master
, how
, errp
);
342 static int qio_channel_tls_close(QIOChannel
*ioc
,
345 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
347 return qio_channel_close(tioc
->master
, errp
);
350 static GSource
*qio_channel_tls_create_watch(QIOChannel
*ioc
,
351 GIOCondition condition
)
353 QIOChannelTLS
*tioc
= QIO_CHANNEL_TLS(ioc
);
355 return qio_channel_create_watch(tioc
->master
, condition
);
359 qio_channel_tls_get_session(QIOChannelTLS
*ioc
)
364 static void qio_channel_tls_class_init(ObjectClass
*klass
,
365 void *class_data G_GNUC_UNUSED
)
367 QIOChannelClass
*ioc_klass
= QIO_CHANNEL_CLASS(klass
);
369 ioc_klass
->io_writev
= qio_channel_tls_writev
;
370 ioc_klass
->io_readv
= qio_channel_tls_readv
;
371 ioc_klass
->io_set_blocking
= qio_channel_tls_set_blocking
;
372 ioc_klass
->io_set_delay
= qio_channel_tls_set_delay
;
373 ioc_klass
->io_set_cork
= qio_channel_tls_set_cork
;
374 ioc_klass
->io_close
= qio_channel_tls_close
;
375 ioc_klass
->io_shutdown
= qio_channel_tls_shutdown
;
376 ioc_klass
->io_create_watch
= qio_channel_tls_create_watch
;
379 static const TypeInfo qio_channel_tls_info
= {
380 .parent
= TYPE_QIO_CHANNEL
,
381 .name
= TYPE_QIO_CHANNEL_TLS
,
382 .instance_size
= sizeof(QIOChannelTLS
),
383 .instance_init
= qio_channel_tls_init
,
384 .instance_finalize
= qio_channel_tls_finalize
,
385 .class_init
= qio_channel_tls_class_init
,
388 static void qio_channel_tls_register_types(void)
390 type_register_static(&qio_channel_tls_info
);
393 type_init(qio_channel_tls_register_types
);