Rename method_tls_tunnel to method_tls and move upstream

CRL checking was also moved upstream as method_tls triggers it. Signed-off-by: Simon Rozman <simon@rozman.si>
2020-02-04 14:00:28 +01:00
parent 5c0299197b
commit 1d558c939e
13 changed files with 1078 additions and 954 deletions
--- a/lib/TLS/include/Module.h
+++ b/lib/TLS/include/Module.h
@@ -0,0 +1,110 @@
+/*
+    Copyright 2015-2020 Amebis
+    Copyright 2016 GÉANT
+
+    This file is part of GÉANTLink.
+
+    GÉANTLink is free software: you can redistribute it and/or modify it
+    under the terms of the GNU General Public License as published by
+    the Free Software Foundation, either version 3 of the License, or
+    (at your option) any later version.
+
+    GÉANTLink is distributed in the hope that it will be useful, but
+    WITHOUT ANY WARRANTY; without even the implied warranty of
+    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+    GNU General Public License for more details.
+
+    You should have received a copy of the GNU General Public License
+    along with GÉANTLink. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+namespace eap
+{
+    class peer_tls;
+}
+
+#pragma once
+
+#include "Config.h"
+#include "Credentials.h"
+#include "Method.h"
+
+
+namespace eap
+{
+    /// \addtogroup EAPBaseModule
+    /// @{
+
+    ///
+    /// TLS tunnel peer
+    ///
+    class peer_tls : public peer
+    {
+    public:
+        ///
+        /// Constructs a TLS tunnel peer module
+        ///
+        /// \param[in] eap_method  EAP method type ID
+        ///
+        peer_tls(_In_ winstd::eap_type_t eap_method = winstd::eap_type_t::tls);
+
+        virtual void shutdown();
+
+        ///
+        /// Spawns a new certificate revocation check thread
+        ///
+        /// \param[inout] cert  Certificate context to check for revocation. `hCertStore` member should contain all certificates in chain up to and including root CA to test them for revocation too.
+        ///
+        void spawn_crl_check(_Inout_ winstd::cert_context &&cert);
+
+    protected:
+        ///
+        ///< Post-festum server certificate revocation verify thread
+        ///
+        class crl_checker {
+        public:
+            ///
+            /// Constructs a thread
+            ///
+            /// \param[in   ] mod   EAP module to use for global services
+            /// \param[inout] cert  Certificate context to check for revocation. `hCertStore` member should contain all certificates in chain up to and including root CA to test them for revocation too.
+            ///
+            crl_checker(_In_ module &mod, _Inout_ winstd::cert_context &&cert);
+
+            ///
+            /// Moves a thread
+            ///
+            /// \param[in] other  Thread to move from
+            ///
+            crl_checker(_Inout_ crl_checker &&other) noexcept;
+
+            ///
+            /// Moves a thread
+            ///
+            /// \param[in] other  Thread to move from
+            ///
+            /// \returns Reference to this object
+            ///
+            crl_checker& operator=(_Inout_ crl_checker &&other) noexcept;
+
+            ///
+            /// Verifies server's certificate if it has been revoked
+            ///
+            /// \param[in] obj  Pointer to the instance of this object
+            ///
+            /// \returns Thread exit code
+            ///
+            static DWORD WINAPI verify(_In_ crl_checker *obj);
+
+        public:
+            module &m_module;                  ///< Module
+            winstd::win_handle<NULL> m_thread; ///< Thread
+            winstd::win_handle<NULL> m_abort;  ///< Thread abort event
+            winstd::cert_context m_cert;       ///< Server certificate
+        };
+
+        std::list<crl_checker> m_crl_checkers;  ///< List of certificate revocation check threads
+    };
+
+    /// @}
+}