1
0
mirror of https://github.com/codership/wsrep-lib.git synced 2025-04-19 21:02:17 +03:00
wsrep-lib/src/tls_service_v1.cpp
Teemu Ollakka 9318a50d18 Wsrep TLS service
This commit defines a TLS service interface. If the implementation is
provided by the application when the provider is loaded, appropriate
hooks are probed from the provider and the provider side hooks are
initialized after the provider is loaded.

A sample implementation to demostrate the use of TLS interface
is provided in dbsim/db_tls.cpp.

Also contains a change to thread service interface: The
thread exit virtual method was changed to function pointer
to allow thread exit path which does not involve C++.
2021-02-24 11:14:21 +02:00

233 lines
7.0 KiB
C++

/*
* Copyright (C) 2020 Codership Oy <info@codership.com>
*
* This file is part of wsrep-lib.
*
* Wsrep-lib is free software: you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation, either version 2 of the License, or
* (at your option) any later version.
*
* Wsrep-lib is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with wsrep-lib. If not, see <https://www.gnu.org/licenses/>.
*/
#include "tls_service_v1.hpp"
#include "wsrep/tls_service.hpp"
#include "wsrep/logger.hpp"
#include "v26/wsrep_tls_service.h"
#include "service_helpers.hpp"
#include <cassert>
namespace wsrep_tls_service_v1
{
static wsrep::tls_service* tls_service_impl{0};
static std::atomic<size_t> use_count;
static int tls_stream_init_cb(
wsrep_tls_context_t*,
wsrep_tls_stream_t* stream)
{
assert(tls_service_impl);
stream->opaque =
tls_service_impl->create_tls_stream(stream->fd);
if (not stream->opaque)
{
return ENOMEM;
}
return 0;
}
static void tls_stream_deinit_cb(
wsrep_tls_context_t*,
wsrep_tls_stream_t* stream)
{
assert(tls_service_impl);
tls_service_impl->destroy(
reinterpret_cast<wsrep::tls_stream*>(stream->opaque));
}
static int tls_stream_get_error_number_cb(
wsrep_tls_context_t*,
const wsrep_tls_stream_t* stream)
{
assert(tls_service_impl);
return tls_service_impl->get_error_number(
reinterpret_cast<const wsrep::tls_stream*>(stream->opaque));
}
static const void* tls_stream_get_error_category_cb(
wsrep_tls_context_t*,
const wsrep_tls_stream_t* stream)
{
assert(tls_service_impl);
return tls_service_impl->get_error_category(
reinterpret_cast<const wsrep::tls_stream*>(stream->opaque));
}
static const char* tls_error_message_get_cb(
wsrep_tls_context_t*,
const wsrep_tls_stream_t* stream,
int value, const void* category)
{
assert(tls_service_impl);
return tls_service_impl->get_error_message(
reinterpret_cast<const wsrep::tls_stream*>(stream->opaque), value, category);
}
static enum wsrep_tls_result map_return_value(ssize_t status)
{
switch (status)
{
case wsrep::tls_service::success:
return wsrep_tls_result_success;
case wsrep::tls_service::want_read:
return wsrep_tls_result_want_read;
case wsrep::tls_service::want_write:
return wsrep_tls_result_want_write;
case wsrep::tls_service::eof:
return wsrep_tls_result_eof;
case wsrep::tls_service::error:
return wsrep_tls_result_error;
default:
assert(status < 0);
return wsrep_tls_result_error;
}
}
static enum wsrep_tls_result
tls_stream_client_handshake_cb(
wsrep_tls_context_t*,
wsrep_tls_stream_t* stream)
{
assert(tls_service_impl);
return map_return_value(
tls_service_impl->client_handshake(
reinterpret_cast<wsrep::tls_stream*>(stream->opaque)));
}
static enum wsrep_tls_result
tls_stream_server_handshake_cb(
wsrep_tls_context_t*,
wsrep_tls_stream_t* stream)
{
assert(tls_service_impl);
return map_return_value(
tls_service_impl->server_handshake(
reinterpret_cast<wsrep::tls_stream*>(stream->opaque)));
}
static enum wsrep_tls_result tls_stream_read_cb(
wsrep_tls_context_t*,
wsrep_tls_stream_t* stream,
void* buf,
size_t max_count,
size_t* bytes_transferred)
{
assert(tls_service_impl);
auto result(tls_service_impl->read(
reinterpret_cast<wsrep::tls_stream*>(stream->opaque),
buf, max_count));
*bytes_transferred = result.bytes_transferred;
return map_return_value(result.status);
}
static enum wsrep_tls_result tls_stream_write_cb(
wsrep_tls_context_t*,
wsrep_tls_stream_t* stream,
const void* buf,
size_t count,
size_t* bytes_transferred)
{
assert(tls_service_impl);
auto result(tls_service_impl->write(
reinterpret_cast<wsrep::tls_stream*>(stream->opaque),
buf, count));
*bytes_transferred = result.bytes_transferred;
return map_return_value(result.status);
}
static enum wsrep_tls_result
tls_stream_shutdown_cb(wsrep_tls_context_t*,
wsrep_tls_stream_t* stream)
{
assert(tls_service_impl);
// @todo Handle other values than success.
return map_return_value(
tls_service_impl->shutdown(
reinterpret_cast<wsrep::tls_stream*>(stream->opaque)));
}
static wsrep_tls_service_v1_t tls_service_callbacks =
{
tls_stream_init_cb,
tls_stream_deinit_cb,
tls_stream_get_error_number_cb,
tls_stream_get_error_category_cb,
tls_stream_client_handshake_cb,
tls_stream_server_handshake_cb,
tls_stream_read_cb,
tls_stream_write_cb,
tls_stream_shutdown_cb,
tls_error_message_get_cb,
0 // we pass NULL context for now.
};
}
int wsrep::tls_service_v1_probe(void* dlh)
{
typedef int (*init_fn)(wsrep_tls_service_v1_t*);
typedef void (*deinit_fn)();
if (wsrep_impl::service_probe<init_fn>(
dlh, WSREP_TLS_SERVICE_INIT_FUNC_V1, "tls service v1") ||
wsrep_impl::service_probe<deinit_fn>(
dlh, WSREP_TLS_SERVICE_DEINIT_FUNC_V1, "tls service v1"))
{
wsrep::log_warning() << "Provider does not support tls service v1";
return 1;
}
return 0;
}
int wsrep::tls_service_v1_init(void* dlh,
wsrep::tls_service* tls_service)
{
if (not (dlh && tls_service)) return EINVAL;
typedef int (*init_fn)(wsrep_tls_service_v1_t*);
wsrep_tls_service_v1::tls_service_impl = tls_service;
int ret(0);
if ((ret = wsrep_impl::service_init<init_fn>(
dlh, WSREP_TLS_SERVICE_INIT_FUNC_V1,
&wsrep_tls_service_v1::tls_service_callbacks,
"tls service v1")))
{
wsrep_tls_service_v1::tls_service_impl = 0;
}
else
{
++wsrep_tls_service_v1::use_count;
}
return ret;
}
void wsrep::tls_service_v1_deinit(void* dlh)
{
typedef int (*deinit_fn)();
wsrep_impl::service_deinit<deinit_fn>(
dlh, WSREP_TLS_SERVICE_DEINIT_FUNC_V1, "tls service v1");
--wsrep_tls_service_v1::use_count;
if (wsrep_tls_service_v1::use_count == 0)
{
wsrep_tls_service_v1::tls_service_impl = 0;
}
}