frp/pkg/util/net/tls.go

58 lines
1.4 KiB
Go
Raw Normal View History

2019-03-11 07:14:31 +01:00
// Copyright 2019 fatedier, fatedier@gmail.com
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package net
import (
"crypto/tls"
"fmt"
2019-03-11 07:14:31 +01:00
"net"
"time"
2019-03-11 07:14:31 +01:00
gnet "github.com/fatedier/golib/net"
)
var (
2020-05-24 11:48:37 +02:00
FRPTLSHeadByte = 0x17
2019-03-11 07:14:31 +01:00
)
2019-10-12 14:13:12 +02:00
func WrapTLSClientConn(c net.Conn, tlsConfig *tls.Config) (out net.Conn) {
2020-05-24 11:48:37 +02:00
c.Write([]byte{byte(FRPTLSHeadByte)})
2019-10-12 14:13:12 +02:00
out = tls.Client(c, tlsConfig)
2019-03-11 07:14:31 +01:00
return
}
func CheckAndEnableTLSServerConnWithTimeout(c net.Conn, tlsConfig *tls.Config, tlsOnly bool, timeout time.Duration) (out net.Conn, err error) {
sc, r := gnet.NewSharedConnSize(c, 2)
2019-03-11 07:14:31 +01:00
buf := make([]byte, 1)
var n int
c.SetReadDeadline(time.Now().Add(timeout))
n, err = r.Read(buf)
c.SetReadDeadline(time.Time{})
if err != nil {
return
}
2020-05-24 11:48:37 +02:00
if n == 1 && int(buf[0]) == FRPTLSHeadByte {
2019-10-12 14:13:12 +02:00
out = tls.Server(c, tlsConfig)
2019-03-11 07:14:31 +01:00
} else {
if tlsOnly {
err = fmt.Errorf("non-TLS connection received on a TlsOnly server")
return
}
2019-10-12 14:13:12 +02:00
out = sc
2019-03-11 07:14:31 +01:00
}
return
}