1 // Copyright (c) 2013 The Chromium Authors. All rights reserved. 2 // Use of this source code is governed by a BSD-style license that can be 3 // found in the LICENSE file. 4 5 #ifndef NET_QUIC_CRYPTO_CRYPTO_SERVER_CONFIG_PROTOBUF_H_ 6 #define NET_QUIC_CRYPTO_CRYPTO_SERVER_CONFIG_PROTOBUF_H_ 7 8 #include <string> 9 #include <vector> 10 11 #include "base/logging.h" 12 #include "base/stl_util.h" 13 #include "base/strings/string_piece.h" 14 #include "net/base/net_export.h" 15 #include "net/quic/crypto/crypto_protocol.h" 16 17 namespace net { 18 19 // QuicServerConfigProtobuf contains QUIC server config block and the private 20 // keys needed to prove ownership. 21 // TODO(rch): sync with server more rationally. 22 class NET_EXPORT_PRIVATE QuicServerConfigProtobuf { 23 public: 24 // PrivateKey contains a QUIC tag of a key exchange algorithm and a 25 // serialised private key for that algorithm. The format of the serialised 26 // private key is specific to the algorithm in question. 27 class NET_EXPORT_PRIVATE PrivateKey { 28 public: tag()29 QuicTag tag() const { 30 return tag_; 31 } set_tag(QuicTag tag)32 void set_tag(QuicTag tag) { 33 tag_ = tag; 34 } private_key()35 std::string private_key() const { 36 return private_key_; 37 } set_private_key(std::string key)38 void set_private_key(std::string key) { 39 private_key_ = key; 40 } 41 42 private: 43 QuicTag tag_; 44 std::string private_key_; 45 }; 46 47 QuicServerConfigProtobuf(); 48 ~QuicServerConfigProtobuf(); 49 key_size()50 size_t key_size() const { 51 return keys_.size(); 52 } 53 key(size_t i)54 const PrivateKey& key(size_t i) const { 55 DCHECK_GT(keys_.size(), i); 56 return *keys_[i]; 57 } 58 config()59 std::string config() const { 60 return config_; 61 } 62 set_config(base::StringPiece config)63 void set_config(base::StringPiece config) { 64 config.CopyToString(&config_); 65 } 66 add_key()67 QuicServerConfigProtobuf::PrivateKey* add_key() { 68 keys_.push_back(new PrivateKey); 69 return keys_.back(); 70 } 71 clear_key()72 void clear_key() { 73 STLDeleteElements(&keys_); 74 } 75 has_primary_time()76 bool has_primary_time() const { 77 return primary_time_ > 0; 78 } 79 primary_time()80 int64 primary_time() const { 81 return primary_time_; 82 } 83 set_primary_time(int64 primary_time)84 void set_primary_time(int64 primary_time) { 85 primary_time_ = primary_time; 86 } 87 has_priority()88 bool has_priority() const { 89 return priority_ > 0; 90 } 91 priority()92 uint64 priority() const { 93 return priority_; 94 } 95 set_priority(int64 priority)96 void set_priority(int64 priority) { 97 priority_ = priority; 98 } 99 has_source_address_token_secret_override()100 bool has_source_address_token_secret_override() const { 101 return !source_address_token_secret_override_.empty(); 102 } 103 source_address_token_secret_override()104 std::string source_address_token_secret_override() const { 105 return source_address_token_secret_override_; 106 } 107 set_source_address_token_secret_override(base::StringPiece source_address_token_secret_override)108 void set_source_address_token_secret_override( 109 base::StringPiece source_address_token_secret_override) { 110 source_address_token_secret_override.CopyToString( 111 &source_address_token_secret_override_); 112 } 113 114 private: 115 std::vector<PrivateKey*> keys_; 116 117 // config_ is a serialised config in QUIC wire format. 118 std::string config_; 119 120 // primary_time_ contains a UNIX epoch seconds value that indicates when this 121 // config should become primary. 122 int64 primary_time_; 123 124 // Relative priority of this config vs other configs with the same 125 // primary time. For use as a secondary sort key when selecting the 126 // primary config. 127 uint64 priority_; 128 129 // Optional override to the secret used to box/unbox source address 130 // tokens when talking to clients that select this server config. 131 // It can be of any length as it is fed into a KDF before use. 132 std::string source_address_token_secret_override_; 133 134 DISALLOW_COPY_AND_ASSIGN(QuicServerConfigProtobuf); 135 }; 136 137 } // namespace net 138 139 #endif // NET_QUIC_CRYPTO_CRYPTO_SERVER_CONFIG_PROTOBUF_H_ 140