Mercurial > hg > nginx
annotate src/event/ngx_event_quic.c @ 8232:253cf267f95a quic
Moved setting QUIC methods to runtime.
This allows listening to both https and http3 in the same server.
Also, the change eliminates the ssl_quic directive.
| author | Roman Arutyunyan <arut@nginx.com> |
|---|---|
| date | Wed, 18 Mar 2020 16:37:16 +0300 |
| parents | 78540e2160d0 |
| children | 19bb9edcd8bd |
| rev | line source |
|---|---|
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
1 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
2 /* |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
3 * Copyright (C) Nginx, Inc. |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
4 */ |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
5 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
6 |
| 8171 | 7 #include <ngx_config.h> |
| 8 #include <ngx_core.h> | |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
9 #include <ngx_event.h> |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
10 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
11 |
| 8225 | 12 typedef struct { |
| 13 ngx_rbtree_node_t node; | |
| 14 ngx_buf_t *b; | |
| 15 ngx_connection_t *c; | |
| 16 ngx_quic_stream_t s; | |
| 17 } ngx_quic_stream_node_t; | |
| 18 | |
| 19 | |
| 20 typedef struct { | |
| 21 ngx_rbtree_t tree; | |
| 22 ngx_rbtree_node_t sentinel; | |
| 23 ngx_msec_t timeout; | |
| 24 ngx_connection_handler_pt handler; | |
|
8229
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
25 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
26 ngx_uint_t id_counter; |
| 8225 | 27 } ngx_quic_streams_t; |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
28 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
29 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
30 struct ngx_quic_connection_s { |
| 8225 | 31 ngx_str_t scid; |
| 32 ngx_str_t dcid; | |
| 33 ngx_str_t token; | |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
34 |
| 8225 | 35 /* current packet numbers for each namespace */ |
| 36 ngx_uint_t initial_pn; | |
| 37 ngx_uint_t handshake_pn; | |
| 38 ngx_uint_t appdata_pn; | |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
39 |
| 8225 | 40 ngx_quic_secrets_t secrets; |
| 41 ngx_ssl_t *ssl; | |
| 42 ngx_quic_frame_t *frames; | |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
43 |
| 8225 | 44 ngx_quic_streams_t streams; |
| 45 }; | |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
46 |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
47 |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
48 #if BORINGSSL_API_VERSION >= 10 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
49 static int ngx_quic_set_read_secret(ngx_ssl_conn_t *ssl_conn, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
50 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
51 const uint8_t *secret, size_t secret_len); |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
52 static int ngx_quic_set_write_secret(ngx_ssl_conn_t *ssl_conn, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
53 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
54 const uint8_t *secret, size_t secret_len); |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
55 #else |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
56 static int ngx_quic_set_encryption_secrets(ngx_ssl_conn_t *ssl_conn, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
57 enum ssl_encryption_level_t level, const uint8_t *read_secret, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
58 const uint8_t *write_secret, size_t secret_len); |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
59 #endif |
| 8225 | 60 |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
61 static int ngx_quic_add_handshake_data(ngx_ssl_conn_t *ssl_conn, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
62 enum ssl_encryption_level_t level, const uint8_t *data, size_t len); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
63 static int ngx_quic_flush_flight(ngx_ssl_conn_t *ssl_conn); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
64 static int ngx_quic_send_alert(ngx_ssl_conn_t *ssl_conn, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
65 enum ssl_encryption_level_t level, uint8_t alert); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
66 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
67 |
| 8225 | 68 static ngx_int_t ngx_quic_new_connection(ngx_connection_t *c, ngx_ssl_t *ssl, |
| 69 ngx_quic_header_t *pkt); | |
| 70 static ngx_int_t ngx_quic_init_connection(ngx_connection_t *c); | |
| 71 static void ngx_quic_handshake_handler(ngx_event_t *rev); | |
| 72 static void ngx_quic_close_connection(ngx_connection_t *c); | |
| 73 | |
| 74 static ngx_int_t ngx_quic_input(ngx_connection_t *c, ngx_buf_t *b); | |
| 75 static ngx_int_t ngx_quic_initial_input(ngx_connection_t *c, | |
| 76 ngx_quic_header_t *pkt); | |
| 77 static ngx_int_t ngx_quic_handshake_input(ngx_connection_t *c, | |
| 78 ngx_quic_header_t *pkt); | |
| 79 static ngx_int_t ngx_quic_app_input(ngx_connection_t *c, | |
| 80 ngx_quic_header_t *pkt); | |
| 81 static ngx_int_t ngx_quic_payload_handler(ngx_connection_t *c, | |
| 82 ngx_quic_header_t *pkt); | |
| 83 | |
| 84 static ngx_int_t ngx_quic_handle_ack_frame(ngx_connection_t *c, | |
| 85 ngx_quic_header_t *pkt, ngx_quic_ack_frame_t *f); | |
| 86 static ngx_int_t ngx_quic_handle_crypto_frame(ngx_connection_t *c, | |
| 87 ngx_quic_header_t *pkt, ngx_quic_crypto_frame_t *frame); | |
| 88 static ngx_int_t ngx_quic_handle_stream_frame(ngx_connection_t *c, | |
| 89 ngx_quic_header_t *pkt, ngx_quic_stream_frame_t *frame); | |
| 90 | |
| 91 static void ngx_quic_queue_frame(ngx_quic_connection_t *qc, | |
| 92 ngx_quic_frame_t *frame); | |
| 93 | |
| 94 static ngx_int_t ngx_quic_output(ngx_connection_t *c); | |
| 95 ngx_int_t ngx_quic_frames_send(ngx_connection_t *c, ngx_quic_frame_t *start, | |
| 96 ngx_quic_frame_t *end, size_t total); | |
| 97 static ngx_int_t ngx_quic_send_packet(ngx_connection_t *c, | |
| 98 ngx_quic_connection_t *qc, enum ssl_encryption_level_t level, | |
| 99 ngx_str_t *payload); | |
| 100 | |
| 101 | |
| 102 static void ngx_quic_rbtree_insert_stream(ngx_rbtree_node_t *temp, | |
| 103 ngx_rbtree_node_t *node, ngx_rbtree_node_t *sentinel); | |
| 104 static ngx_quic_stream_node_t *ngx_quic_find_stream(ngx_rbtree_t *rbtree, | |
| 105 ngx_uint_t key); | |
|
8229
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
106 static ngx_quic_stream_node_t *ngx_quic_create_stream(ngx_connection_t *c, |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
107 ngx_uint_t id); |
|
8211
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
108 static ssize_t ngx_quic_stream_recv(ngx_connection_t *c, u_char *buf, |
|
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
109 size_t size); |
|
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
110 static ssize_t ngx_quic_stream_send(ngx_connection_t *c, u_char *buf, |
|
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
111 size_t size); |
|
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
112 static ngx_chain_t *ngx_quic_stream_send_chain(ngx_connection_t *c, |
|
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
113 ngx_chain_t *in, off_t limit); |
|
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
114 |
| 8225 | 115 |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
116 static SSL_QUIC_METHOD quic_method = { |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
117 #if BORINGSSL_API_VERSION >= 10 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
118 ngx_quic_set_read_secret, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
119 ngx_quic_set_write_secret, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
120 #else |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
121 ngx_quic_set_encryption_secrets, |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
122 #endif |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
123 ngx_quic_add_handshake_data, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
124 ngx_quic_flush_flight, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
125 ngx_quic_send_alert, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
126 }; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
127 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
128 |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
129 #if BORINGSSL_API_VERSION >= 10 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
130 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
131 static int |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
132 ngx_quic_set_read_secret(ngx_ssl_conn_t *ssl_conn, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
133 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher, |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
134 const uint8_t *rsecret, size_t secret_len) |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
135 { |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
136 ngx_connection_t *c; |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
137 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
138 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn); |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
139 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
140 ngx_quic_hexdump(c->log, "level:%d read secret", |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
141 rsecret, secret_len, level); |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
142 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
143 return ngx_quic_set_encryption_secret(c->pool, ssl_conn, level, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
144 rsecret, secret_len, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
145 &c->quic->secrets.client); |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
146 } |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
147 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
148 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
149 static int |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
150 ngx_quic_set_write_secret(ngx_ssl_conn_t *ssl_conn, |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
151 enum ssl_encryption_level_t level, const SSL_CIPHER *cipher, |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
152 const uint8_t *wsecret, size_t secret_len) |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
153 { |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
154 ngx_connection_t *c; |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
155 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
156 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn); |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
157 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
158 ngx_quic_hexdump(c->log, "level:%d write secret", |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
159 wsecret, secret_len, level); |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
160 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
161 return ngx_quic_set_encryption_secret(c->pool, ssl_conn, level, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
162 wsecret, secret_len, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
163 &c->quic->secrets.server); |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
164 } |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
165 |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
166 #else |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
167 |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
168 static int |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
169 ngx_quic_set_encryption_secrets(ngx_ssl_conn_t *ssl_conn, |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
170 enum ssl_encryption_level_t level, const uint8_t *rsecret, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
171 const uint8_t *wsecret, size_t secret_len) |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
172 { |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
173 ngx_int_t rc; |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
174 ngx_connection_t *c; |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
175 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
176 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
177 |
|
8222
bec4cd55361e
Fixed a typo with OpenSSL.
Vladimir Homutov <vl@nginx.com>
parents:
8221
diff
changeset
|
178 ngx_quic_hexdump(c->log, "level:%d read", rsecret, secret_len, level); |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
179 ngx_quic_hexdump(c->log, "level:%d write", wsecret, secret_len, level); |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
180 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
181 rc = ngx_quic_set_encryption_secret(c->pool, ssl_conn, level, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
182 rsecret, secret_len, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
183 &c->quic->secrets.client); |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
184 if (rc != 1) { |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
185 return rc; |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
186 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
187 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
188 return ngx_quic_set_encryption_secret(c->pool, ssl_conn, level, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
189 wsecret, secret_len, |
|
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
190 &c->quic->secrets.server); |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
191 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
192 |
|
8204
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
193 #endif |
|
9e0c30e1f7fb
Compatibility with BoringSSL revised QUIC encryption secret APIs.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8203
diff
changeset
|
194 |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
195 |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
196 static int |
|
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
197 ngx_quic_add_handshake_data(ngx_ssl_conn_t *ssl_conn, |
|
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
198 enum ssl_encryption_level_t level, const uint8_t *data, size_t len) |
|
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
199 { |
| 8225 | 200 u_char *p; |
| 201 ngx_quic_frame_t *frame; | |
| 202 ngx_connection_t *c; | |
| 203 ngx_quic_connection_t *qc; | |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
204 |
|
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
205 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn); |
|
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
206 qc = c->quic; |
|
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
207 |
|
8186
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
208 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
209 "ngx_quic_add_handshake_data"); |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
210 |
|
8186
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
211 frame = ngx_pcalloc(c->pool, sizeof(ngx_quic_frame_t)); |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
212 if (frame == NULL) { |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
213 return 0; |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
214 } |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
215 |
|
8186
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
216 p = ngx_pnalloc(c->pool, len); |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
217 if (p == NULL) { |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
218 return 0; |
|
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
219 } |
|
8186
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
220 |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
221 ngx_memcpy(p, data, len); |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
222 |
|
8186
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
223 frame->level = level; |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
224 frame->type = NGX_QUIC_FT_CRYPTO; |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
225 frame->u.crypto.len = len; |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
226 frame->u.crypto.data = p; |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
227 |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
228 ngx_sprintf(frame->info, "crypto, generated by SSL len=%ui level=%d", len, level); |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
229 |
|
0a2683df5f11
Implemented improved version of quic_output().
Vladimir Homutov <vl@nginx.com>
parents:
8185
diff
changeset
|
230 ngx_quic_queue_frame(qc, frame); |
|
8184
ec1f84996990
Split frame and packet generation into separate steps.
Vladimir Homutov <vl@nginx.com>
parents:
8183
diff
changeset
|
231 |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
232 return 1; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
233 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
234 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
235 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
236 static int |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
237 ngx_quic_flush_flight(ngx_ssl_conn_t *ssl_conn) |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
238 { |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
239 ngx_connection_t *c; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
240 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
241 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
242 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
243 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, "ngx_quic_flush_flight()"); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
244 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
245 return 1; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
246 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
247 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
248 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
249 static int |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
250 ngx_quic_send_alert(ngx_ssl_conn_t *ssl_conn, enum ssl_encryption_level_t level, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
251 uint8_t alert) |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
252 { |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
253 ngx_connection_t *c; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
254 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
255 c = ngx_ssl_get_connection((ngx_ssl_conn_t *) ssl_conn); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
256 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
257 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
258 "ngx_quic_send_alert(), lvl=%d, alert=%d", |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
259 (int) level, (int) alert); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
260 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
261 return 1; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
262 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
263 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
264 |
| 8225 | 265 void |
| 266 ngx_quic_run(ngx_connection_t *c, ngx_ssl_t *ssl, ngx_msec_t timeout, | |
| 267 ngx_connection_handler_pt handler) | |
| 268 { | |
| 269 ngx_buf_t *b; | |
| 270 ngx_quic_header_t pkt; | |
| 271 | |
| 272 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, "quic handshake"); | |
| 273 | |
| 274 c->log->action = "QUIC handshaking"; | |
| 275 | |
| 276 ngx_memzero(&pkt, sizeof(ngx_quic_header_t)); | |
| 277 | |
| 278 b = c->buffer; | |
| 279 | |
| 280 pkt.log = c->log; | |
| 281 pkt.raw = b; | |
| 282 pkt.data = b->start; | |
| 283 pkt.len = b->last - b->start; | |
| 284 | |
| 285 if (ngx_quic_new_connection(c, ssl, &pkt) != NGX_OK) { | |
| 286 ngx_quic_close_connection(c); | |
| 287 return; | |
| 288 } | |
| 289 | |
| 290 // we don't need stream handler for initial packet processing | |
| 291 c->quic->streams.handler = handler; | |
| 292 c->quic->streams.timeout = timeout; | |
| 293 | |
| 294 ngx_add_timer(c->read, timeout); | |
| 295 | |
| 296 c->read->handler = ngx_quic_handshake_handler; | |
| 297 | |
| 298 return; | |
| 299 } | |
| 300 | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
301 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
302 static ngx_int_t |
| 8225 | 303 ngx_quic_new_connection(ngx_connection_t *c, ngx_ssl_t *ssl, |
| 304 ngx_quic_header_t *pkt) | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
305 { |
| 8225 | 306 ngx_quic_connection_t *qc; |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
307 |
| 8225 | 308 if (ngx_buf_size(pkt->raw) < 1200) { |
| 309 ngx_log_error(NGX_LOG_INFO, c->log, 0, "too small UDP datagram"); | |
| 310 return NGX_ERROR; | |
| 311 } | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
312 |
| 8225 | 313 if (ngx_quic_parse_long_header(pkt) != NGX_OK) { |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
314 return NGX_ERROR; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
315 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
316 |
| 8225 | 317 if ((pkt->flags & 0xf0) != NGX_QUIC_PKT_INITIAL) { |
| 318 ngx_log_error(NGX_LOG_INFO, c->log, 0, | |
| 319 "invalid initial packet: 0x%xi", pkt->flags); | |
| 320 return NGX_ERROR; | |
| 321 } | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
322 |
| 8225 | 323 if (ngx_quic_parse_initial_header(pkt) != NGX_OK) { |
| 324 return NGX_ERROR; | |
| 325 } | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
326 |
| 8225 | 327 qc = ngx_pcalloc(c->pool, sizeof(ngx_quic_connection_t)); |
| 328 if (qc == NULL) { | |
| 329 return NGX_ERROR; | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
330 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
331 |
| 8225 | 332 ngx_rbtree_init(&qc->streams.tree, &qc->streams.sentinel, |
| 333 ngx_quic_rbtree_insert_stream); | |
| 334 | |
| 335 c->quic = qc; | |
| 336 qc->ssl = ssl; | |
| 337 | |
| 338 qc->dcid.len = pkt->dcid.len; | |
| 339 qc->dcid.data = ngx_pnalloc(c->pool, pkt->dcid.len); | |
| 340 if (qc->dcid.data == NULL) { | |
| 341 return NGX_ERROR; | |
| 342 } | |
| 343 ngx_memcpy(qc->dcid.data, pkt->dcid.data, qc->dcid.len); | |
| 344 | |
| 345 qc->scid.len = pkt->scid.len; | |
| 346 qc->scid.data = ngx_pnalloc(c->pool, qc->scid.len); | |
| 347 if (qc->scid.data == NULL) { | |
| 348 return NGX_ERROR; | |
| 349 } | |
| 350 ngx_memcpy(qc->scid.data, pkt->scid.data, qc->scid.len); | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
351 |
| 8225 | 352 qc->token.len = pkt->token.len; |
| 353 qc->token.data = ngx_pnalloc(c->pool, qc->token.len); | |
| 354 if (qc->token.data == NULL) { | |
| 355 return NGX_ERROR; | |
| 356 } | |
| 357 ngx_memcpy(qc->token.data, pkt->token.data, qc->token.len); | |
| 358 | |
| 359 | |
| 360 if (ngx_quic_set_initial_secret(c->pool, &qc->secrets, &qc->dcid) | |
| 361 != NGX_OK) | |
| 362 { | |
| 363 return NGX_ERROR; | |
| 364 } | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
365 |
| 8225 | 366 pkt->secret = &qc->secrets.client.in; |
| 367 pkt->level = ssl_encryption_initial; | |
| 368 | |
| 369 if (ngx_quic_decrypt(c->pool, NULL, pkt) != NGX_OK) { | |
| 370 return NGX_ERROR; | |
| 371 } | |
| 372 | |
| 373 if (ngx_quic_init_connection(c) != NGX_OK) { | |
| 374 return NGX_ERROR; | |
| 375 } | |
| 376 | |
| 377 return ngx_quic_payload_handler(c, pkt); | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
378 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
379 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
380 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
381 static ngx_int_t |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
382 ngx_quic_init_connection(ngx_connection_t *c) |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
383 { |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
384 int n, sslerr; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
385 ngx_ssl_conn_t *ssl_conn; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
386 ngx_quic_connection_t *qc; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
387 |
|
8205
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
388 static const uint8_t params[] = |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
389 "\x00\x29" /* parameters length: 41 bytes */ |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
390 "\x00\x0e\x00\x01\x05" /* active connection id limit: 5 */ |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
391 "\x00\x04\x00\x04\x80\x98\x96\x80" /* initial max data = 10000000 */ |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
392 "\x00\x09\x00\x01\x03" /* initial max streams uni: 3 */ |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
393 "\x00\x08\x00\x01\x10" /* initial max streams bidi: 16 */ |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
394 "\x00\x05\x00\x02\x40\xff" /* initial max stream bidi local: 255 */ |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
395 "\x00\x06\x00\x02\x40\xff" /* initial max stream bidi remote: 255 */ |
|
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
396 "\x00\x07\x00\x02\x40\xff"; /* initial max stream data uni: 255 */ |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
397 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
398 qc = c->quic; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
399 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
400 if (ngx_ssl_create_connection(qc->ssl, c, NGX_SSL_BUFFER) != NGX_OK) { |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
401 return NGX_ERROR; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
402 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
403 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
404 ssl_conn = c->ssl->connection; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
405 |
|
8232
253cf267f95a
Moved setting QUIC methods to runtime.
Roman Arutyunyan <arut@nginx.com>
parents:
8231
diff
changeset
|
406 if (SSL_set_quic_method(ssl_conn, &quic_method) == 0) { |
|
253cf267f95a
Moved setting QUIC methods to runtime.
Roman Arutyunyan <arut@nginx.com>
parents:
8231
diff
changeset
|
407 ngx_log_error(NGX_LOG_INFO, c->log, 0, |
|
253cf267f95a
Moved setting QUIC methods to runtime.
Roman Arutyunyan <arut@nginx.com>
parents:
8231
diff
changeset
|
408 "SSL_set_quic_method() failed"); |
|
253cf267f95a
Moved setting QUIC methods to runtime.
Roman Arutyunyan <arut@nginx.com>
parents:
8231
diff
changeset
|
409 return NGX_ERROR; |
|
253cf267f95a
Moved setting QUIC methods to runtime.
Roman Arutyunyan <arut@nginx.com>
parents:
8231
diff
changeset
|
410 } |
|
253cf267f95a
Moved setting QUIC methods to runtime.
Roman Arutyunyan <arut@nginx.com>
parents:
8231
diff
changeset
|
411 |
|
8205
a5423632d67b
Added more transport parameters.
Vladimir Homutov <vl@nginx.com>
parents:
8204
diff
changeset
|
412 if (SSL_set_quic_transport_params(ssl_conn, params, sizeof(params) - 1) == 0) { |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
413 ngx_log_error(NGX_LOG_INFO, c->log, 0, |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
414 "SSL_set_quic_transport_params() failed"); |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
415 return NGX_ERROR; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
416 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
417 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
418 n = SSL_do_handshake(ssl_conn); |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
419 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
420 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL_do_handshake: %d", n); |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
421 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
422 if (n == -1) { |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
423 sslerr = SSL_get_error(ssl_conn, n); |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
424 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
425 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL_get_error: %d", |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
426 sslerr); |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
427 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
428 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
429 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
430 "SSL_quic_read_level: %d, SSL_quic_write_level: %d", |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
431 (int) SSL_quic_read_level(ssl_conn), |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
432 (int) SSL_quic_write_level(ssl_conn)); |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
433 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
434 return NGX_OK; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
435 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
436 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
437 |
| 8225 | 438 static void |
| 439 ngx_quic_handshake_handler(ngx_event_t *rev) | |
|
8211
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
440 { |
| 8225 | 441 ssize_t n; |
| 442 ngx_buf_t b; | |
| 443 ngx_connection_t *c; | |
|
8211
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
444 |
| 8225 | 445 u_char buf[512]; |
|
8211
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
446 |
| 8225 | 447 b.start = buf; |
| 448 b.end = buf + 512; | |
| 449 b.pos = b.last = b.start; | |
|
8211
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
450 |
| 8225 | 451 c = rev->data; |
|
8211
6bc18966b8c1
Stream "connection" read/write methods.
Vladimir Homutov <vl@nginx.com>
parents:
8209
diff
changeset
|
452 |
| 8225 | 453 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, rev->log, 0, "quic handshake handler"); |
|
8212
e3c0b19a3a8a
Implemented ngx_quic_stream_send_chain() method.
Roman Arutyunyan <arut@nginx.com>
parents:
8211
diff
changeset
|
454 |
| 8225 | 455 if (rev->timedout) { |
| 456 ngx_log_error(NGX_LOG_INFO, c->log, NGX_ETIMEDOUT, "client timed out"); | |
| 457 ngx_quic_close_connection(c); | |
| 458 return; | |
|
8212
e3c0b19a3a8a
Implemented ngx_quic_stream_send_chain() method.
Roman Arutyunyan <arut@nginx.com>
parents:
8211
diff
changeset
|
459 } |
|
e3c0b19a3a8a
Implemented ngx_quic_stream_send_chain() method.
Roman Arutyunyan <arut@nginx.com>
parents:
8211
diff
changeset
|
460 |
| 8225 | 461 if (c->close) { |
| 462 ngx_quic_close_connection(c); | |
| 463 return; | |
| 464 } | |
|
8220
7ada2feeac18
Added processing of CONNECTION CLOSE frames.
Vladimir Homutov <vl@nginx.com>
parents:
8218
diff
changeset
|
465 |
| 8225 | 466 n = c->recv(c, b.start, b.end - b.start); |
| 8215 | 467 |
| 8225 | 468 if (n == NGX_AGAIN) { |
| 469 return; | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
470 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
471 |
| 8225 | 472 if (n == NGX_ERROR) { |
| 473 c->read->eof = 1; | |
| 474 ngx_quic_close_connection(c); | |
| 475 return; | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
476 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
477 |
| 8225 | 478 b.last += n; |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
479 |
| 8225 | 480 if (ngx_quic_input(c, &b) != NGX_OK) { |
| 481 ngx_quic_close_connection(c); | |
| 482 return; | |
| 483 } | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
484 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
485 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
486 |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
487 static void |
| 8225 | 488 ngx_quic_close_connection(ngx_connection_t *c) |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
489 { |
| 8225 | 490 ngx_pool_t *pool; |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
491 |
| 8225 | 492 /* XXX wait for all streams to close */ |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
493 |
| 8225 | 494 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, |
| 495 "close quic connection: %d", c->fd); | |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
496 |
| 8225 | 497 if (c->ssl) { |
| 498 (void) ngx_ssl_shutdown(c); | |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
499 } |
|
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
500 |
| 8225 | 501 #if (NGX_STAT_STUB) |
| 502 (void) ngx_atomic_fetch_add(ngx_stat_active, -1); | |
| 503 #endif | |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
504 |
| 8225 | 505 c->destroyed = 1; |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
506 |
| 8225 | 507 pool = c->pool; |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
508 |
| 8225 | 509 ngx_close_connection(c); |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
510 |
| 8225 | 511 ngx_destroy_pool(pool); |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
512 } |
|
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
513 |
|
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
514 |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
515 static ngx_int_t |
| 8225 | 516 ngx_quic_input(ngx_connection_t *c, ngx_buf_t *b) |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
517 { |
| 8225 | 518 u_char *p; |
| 519 ngx_int_t rc; | |
| 520 ngx_quic_header_t pkt; | |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
521 |
| 8225 | 522 if (c->quic == NULL) { |
| 523 // XXX: possible? | |
| 524 ngx_log_error(NGX_LOG_INFO, c->log, 0, "BUG: no QUIC in connection"); | |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
525 return NGX_ERROR; |
|
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
526 } |
|
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
527 |
| 8225 | 528 p = b->start; |
|
8208
4ae9ac69ab93
HTTP/QUIC interface reworked.
Vladimir Homutov <vl@nginx.com>
parents:
8207
diff
changeset
|
529 |
| 8225 | 530 do { |
| 531 ngx_memzero(&pkt, sizeof(ngx_quic_header_t)); | |
| 532 pkt.raw = b; | |
| 533 pkt.data = p; | |
| 534 pkt.len = b->last - p; | |
| 535 pkt.log = c->log; | |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
536 |
| 8225 | 537 if (p[0] == 0) { |
| 538 /* XXX: no idea WTF is this, just ignore */ | |
| 539 ngx_log_error(NGX_LOG_ALERT, c->log, 0, "FIREFOX: ZEROES"); | |
| 540 break; | |
| 541 } | |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
542 |
| 8225 | 543 // TODO: check current state |
| 544 if (p[0] & NGX_QUIC_PKT_LONG) { | |
| 545 | |
| 546 if ((p[0] & 0xf0) == NGX_QUIC_PKT_INITIAL) { | |
| 547 rc = ngx_quic_initial_input(c, &pkt); | |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
548 |
| 8225 | 549 } else if ((p[0] & 0xf0) == NGX_QUIC_PKT_HANDSHAKE) { |
| 550 rc = ngx_quic_handshake_input(c, &pkt); | |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
551 |
| 8225 | 552 } else { |
| 553 ngx_log_error(NGX_LOG_INFO, c->log, 0, | |
| 554 "BUG: unknown quic state"); | |
| 555 return NGX_ERROR; | |
| 556 } | |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
557 |
| 8225 | 558 } else { |
| 559 rc = ngx_quic_app_input(c, &pkt); | |
| 560 } | |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
561 |
| 8225 | 562 if (rc == NGX_ERROR) { |
| 563 return NGX_ERROR; | |
| 564 } | |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
565 |
| 8225 | 566 /* b->pos is at header end, adjust by actual packet length */ |
| 567 p = b->pos + pkt.len; | |
| 568 b->pos = p; /* reset b->pos to the next packet start */ | |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
569 |
| 8225 | 570 } while (p < b->last); |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
571 |
| 8225 | 572 return NGX_OK; |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
573 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
574 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
575 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
576 static ngx_int_t |
| 8223 | 577 ngx_quic_initial_input(ngx_connection_t *c, ngx_quic_header_t *pkt) |
| 578 { | |
| 579 ngx_ssl_conn_t *ssl_conn; | |
| 580 ngx_quic_connection_t *qc; | |
| 581 | |
| 582 qc = c->quic; | |
| 583 ssl_conn = c->ssl->connection; | |
| 584 | |
|
8224
ae35ccba7aa6
Extracted transport part of the code into separate file.
Vladimir Homutov <vl@nginx.com>
parents:
8223
diff
changeset
|
585 if (ngx_quic_parse_long_header(pkt) != NGX_OK) { |
| 8223 | 586 return NGX_ERROR; |
| 587 } | |
| 588 | |
|
8224
ae35ccba7aa6
Extracted transport part of the code into separate file.
Vladimir Homutov <vl@nginx.com>
parents:
8223
diff
changeset
|
589 if (ngx_quic_parse_initial_header(pkt) != NGX_OK) { |
| 8223 | 590 return NGX_ERROR; |
| 591 } | |
| 592 | |
| 593 pkt->secret = &qc->secrets.client.in; | |
| 594 pkt->level = ssl_encryption_initial; | |
| 595 | |
| 596 if (ngx_quic_decrypt(c->pool, ssl_conn, pkt) != NGX_OK) { | |
| 597 return NGX_ERROR; | |
| 598 } | |
| 599 | |
| 600 return ngx_quic_payload_handler(c, pkt); | |
| 601 } | |
| 602 | |
| 603 | |
| 604 static ngx_int_t | |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
605 ngx_quic_handshake_input(ngx_connection_t *c, ngx_quic_header_t *pkt) |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
606 { |
|
8188
bf555b94e387
Using cached ssl_conn in ngx_quic_handshake_input(), NFC.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8187
diff
changeset
|
607 ngx_ssl_conn_t *ssl_conn; |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
608 ngx_quic_connection_t *qc; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
609 |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
610 qc = c->quic; |
|
8188
bf555b94e387
Using cached ssl_conn in ngx_quic_handshake_input(), NFC.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8187
diff
changeset
|
611 ssl_conn = c->ssl->connection; |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
612 |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
613 /* extract cleartext data into pkt */ |
|
8224
ae35ccba7aa6
Extracted transport part of the code into separate file.
Vladimir Homutov <vl@nginx.com>
parents:
8223
diff
changeset
|
614 if (ngx_quic_parse_long_header(pkt) != NGX_OK) { |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
615 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
616 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
617 |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
618 if (pkt->dcid.len != qc->dcid.len) { |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
619 ngx_log_error(NGX_LOG_INFO, c->log, 0, "unexpected quic dcidl"); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
620 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
621 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
622 |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
623 if (ngx_memcmp(pkt->dcid.data, qc->dcid.data, qc->dcid.len) != 0) { |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
624 ngx_log_error(NGX_LOG_INFO, c->log, 0, "unexpected quic dcid"); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
625 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
626 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
627 |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
628 if (pkt->scid.len != qc->scid.len) { |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
629 ngx_log_error(NGX_LOG_INFO, c->log, 0, "unexpected quic scidl"); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
630 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
631 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
632 |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
633 if (ngx_memcmp(pkt->scid.data, qc->scid.data, qc->scid.len) != 0) { |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
634 ngx_log_error(NGX_LOG_INFO, c->log, 0, "unexpected quic scid"); |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
635 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
636 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
637 |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
638 if ((pkt->flags & 0xf0) != NGX_QUIC_PKT_HANDSHAKE) { |
|
8193
4355efde26d8
Added functions to decrypt long packets.
Vladimir Homutov <vl@nginx.com>
parents:
8192
diff
changeset
|
639 ngx_log_error(NGX_LOG_INFO, c->log, 0, |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
640 "invalid packet type: 0x%xi", pkt->flags); |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
641 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
642 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
643 |
|
8224
ae35ccba7aa6
Extracted transport part of the code into separate file.
Vladimir Homutov <vl@nginx.com>
parents:
8223
diff
changeset
|
644 if (ngx_quic_parse_handshake_header(pkt) != NGX_OK) { |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
645 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
646 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
647 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
648 pkt->secret = &qc->secrets.client.hs; |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
649 pkt->level = ssl_encryption_handshake; |
|
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
650 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
651 if (ngx_quic_decrypt(c->pool, c->ssl->connection, pkt) != NGX_OK) { |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
652 return NGX_ERROR; |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
653 } |
|
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
654 |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
655 return ngx_quic_payload_handler(c, pkt); |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
656 } |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
657 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
658 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
659 static ngx_int_t |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
660 ngx_quic_app_input(ngx_connection_t *c, ngx_quic_header_t *pkt) |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
661 { |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
662 ngx_quic_connection_t *qc; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
663 |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
664 qc = c->quic; |
|
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
665 |
| 8223 | 666 if (qc->secrets.client.ad.key.len == 0) { |
| 667 ngx_log_error(NGX_LOG_INFO, c->log, 0, | |
| 668 "no read keys yet, packet ignored"); | |
| 669 return NGX_DECLINED; | |
| 670 } | |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
671 |
|
8224
ae35ccba7aa6
Extracted transport part of the code into separate file.
Vladimir Homutov <vl@nginx.com>
parents:
8223
diff
changeset
|
672 if (ngx_quic_parse_short_header(pkt, &qc->dcid) != NGX_OK) { |
|
8185
6a76d9657772
QUIC handshake final bits.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8184
diff
changeset
|
673 return NGX_ERROR; |
|
6a76d9657772
QUIC handshake final bits.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8184
diff
changeset
|
674 } |
|
6a76d9657772
QUIC handshake final bits.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8184
diff
changeset
|
675 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
676 pkt->secret = &qc->secrets.client.ad; |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
677 pkt->level = ssl_encryption_application; |
|
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
678 |
|
8221
69345a26ba69
Split transport and crypto parts into separate files.
Vladimir Homutov <vl@nginx.com>
parents:
8220
diff
changeset
|
679 if (ngx_quic_decrypt(c->pool, c->ssl->connection, pkt) != NGX_OK) { |
|
8199
1297dc83a6b9
Generic payload handler for quic packets.
Vladimir Homutov <vl@nginx.com>
parents:
8198
diff
changeset
|
680 return NGX_ERROR; |
|
8185
6a76d9657772
QUIC handshake final bits.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8184
diff
changeset
|
681 } |
|
6a76d9657772
QUIC handshake final bits.
Sergey Kandaurov <pluknet@nginx.com>
parents:
8184
diff
changeset
|
682 |
|
8206
8d6ac639feac
Added support of multiple QUIC packets in single datagram.
Vladimir Homutov <vl@nginx.com>
parents:
8205
diff
changeset
|
683 return ngx_quic_payload_handler(c, pkt); |
|
8182
b28ea685a56e
Moved all QUIC code into ngx_event_quic.c
Vladimir Homutov <vl@nginx.com>
parents:
8180
diff
changeset
|
684 } |
| 8171 | 685 |
| 686 | |
| 8225 | 687 static ngx_int_t |
| 688 ngx_quic_payload_handler(ngx_connection_t *c, ngx_quic_header_t *pkt) | |
| 689 { | |
| 690 u_char *end, *p; | |
| 691 ssize_t len; | |
| 692 ngx_uint_t ack_this, do_close; | |
| 693 ngx_quic_frame_t frame, *ack_frame; | |
| 694 ngx_quic_connection_t *qc; | |
| 695 | |
| 696 qc = c->quic; | |
| 697 | |
| 698 p = pkt->payload.data; | |
| 699 end = p + pkt->payload.len; | |
| 700 | |
| 701 ack_this = 0; | |
| 702 do_close = 0; | |
| 703 | |
| 704 while (p < end) { | |
| 705 | |
| 706 len = ngx_quic_parse_frame(p, end, &frame); | |
| 707 if (len < 0) { | |
| 708 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 709 "failed to parse frame type %xi", frame.type); | |
| 710 return NGX_ERROR; | |
| 711 } | |
| 712 | |
| 713 p += len; | |
| 714 | |
| 715 switch (frame.type) { | |
| 716 | |
| 717 case NGX_QUIC_FT_ACK: | |
| 718 | |
| 719 ngx_log_debug4(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 720 "ACK: { largest=%ui delay=%ui first=%ui count=%ui}", | |
| 721 frame.u.ack.largest, | |
| 722 frame.u.ack.delay, | |
| 723 frame.u.ack.first_range, | |
| 724 frame.u.ack.range_count); | |
| 725 | |
| 726 if (ngx_quic_handle_ack_frame(c, pkt, &frame.u.ack) != NGX_OK) { | |
| 727 return NGX_ERROR; | |
| 728 } | |
| 729 | |
| 730 break; | |
| 731 | |
| 732 case NGX_QUIC_FT_CRYPTO: | |
| 733 | |
| 734 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 735 "quic CRYPTO frame length: %uL off:%uL pp:%p", | |
| 736 frame.u.crypto.len, frame.u.crypto.offset, | |
| 737 frame.u.crypto.data); | |
| 738 | |
| 739 ngx_quic_hexdump0(c->log, "CRYPTO frame contents", | |
| 740 frame.u.crypto.data, frame.u.crypto.len); | |
| 741 | |
| 742 | |
| 743 if (ngx_quic_handle_crypto_frame(c, pkt, &frame.u.crypto) | |
| 744 != NGX_OK) | |
| 745 { | |
| 746 return NGX_ERROR; | |
| 747 } | |
| 748 | |
| 749 ack_this = 1; | |
| 750 break; | |
| 751 | |
| 752 case NGX_QUIC_FT_PADDING: | |
| 753 break; | |
| 754 | |
| 755 case NGX_QUIC_FT_PING: | |
| 756 ack_this = 1; | |
| 757 break; | |
| 758 | |
| 759 case NGX_QUIC_FT_NEW_CONNECTION_ID: | |
| 760 ack_this = 1; | |
| 761 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 762 "NCID: { seq=%ui retire=%ui len=%ui}", | |
| 763 frame.u.ncid.seqnum, | |
| 764 frame.u.ncid.retire, | |
| 765 frame.u.ncid.len); | |
| 766 break; | |
| 767 | |
| 768 case NGX_QUIC_FT_CONNECTION_CLOSE: | |
| 769 ngx_log_debug4(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 770 "CONN.CLOSE: { %s (0x%xi) type=0x%xi reason='%V'}", | |
| 771 ngx_quic_error_text(frame.u.close.error_code), | |
| 772 frame.u.close.error_code, | |
| 773 frame.u.close.frame_type, | |
| 774 &frame.u.close.reason); | |
| 775 | |
| 776 do_close = 1; | |
| 777 break; | |
| 778 | |
| 779 case NGX_QUIC_FT_STREAM0: | |
| 780 case NGX_QUIC_FT_STREAM1: | |
| 781 case NGX_QUIC_FT_STREAM2: | |
| 782 case NGX_QUIC_FT_STREAM3: | |
| 783 case NGX_QUIC_FT_STREAM4: | |
| 784 case NGX_QUIC_FT_STREAM5: | |
| 785 case NGX_QUIC_FT_STREAM6: | |
| 786 case NGX_QUIC_FT_STREAM7: | |
| 787 | |
| 788 ngx_log_debug7(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 789 "STREAM frame { 0x%xi id 0x%xi offset 0x%xi len 0x%xi bits:off=%d len=%d fin=%d }", | |
| 790 frame.type, | |
| 791 frame.u.stream.stream_id, | |
| 792 frame.u.stream.offset, | |
| 793 frame.u.stream.length, | |
| 794 frame.u.stream.off, | |
| 795 frame.u.stream.len, | |
| 796 frame.u.stream.fin); | |
| 797 | |
| 798 ngx_quic_hexdump0(c->log, "STREAM frame contents", | |
| 799 frame.u.stream.data, frame.u.stream.length); | |
| 800 | |
| 801 if (ngx_quic_handle_stream_frame(c, pkt, &frame.u.stream) | |
| 802 != NGX_OK) | |
| 803 { | |
| 804 return NGX_ERROR; | |
| 805 } | |
| 806 | |
| 807 ack_this = 1; | |
| 808 break; | |
| 809 | |
|
8231
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
810 case NGX_QUIC_FT_RESET_STREAM: |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
811 ngx_log_debug3(NGX_LOG_DEBUG_EVENT, c->log, 0, |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
812 "RESET STREAM frame" |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
813 " { id 0x%xi error_code 0x%xi final_size 0x%xi }", |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
814 frame.u.reset_stream.id, |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
815 frame.u.reset_stream.error_code, |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
816 frame.u.reset_stream.final_size); |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
817 break; |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
818 |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
819 case NGX_QUIC_FT_STOP_SENDING: |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
820 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
821 "STOP SENDING frame" |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
822 " { id 0x%xi error_code 0x%xi}", |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
823 frame.u.stop_sending.id, |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
824 frame.u.stop_sending.error_code); |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
825 break; |
|
78540e2160d0
Added parsing of RESET_STREAM and STOP_SENDING frames
Vladimir Homutov <vl@nginx.com>
parents:
8229
diff
changeset
|
826 |
| 8225 | 827 default: |
| 828 ngx_log_error(NGX_LOG_INFO, c->log, 0, | |
| 829 "unsupported frame type 0x%xd in packet", frame.type); | |
| 830 return NGX_ERROR; | |
| 831 } | |
| 832 } | |
| 833 | |
| 834 if (p != end) { | |
| 835 ngx_log_error(NGX_LOG_INFO, c->log, 0, | |
| 836 "trailing garbage in payload: %ui bytes", end - p); | |
| 837 return NGX_ERROR; | |
| 838 } | |
| 839 | |
| 840 if (do_close) { | |
| 841 // TODO: handle stream close | |
| 842 } | |
| 843 | |
| 844 if (ack_this == 0) { | |
| 845 /* do not ack packets with ACKs and PADDING */ | |
| 846 return NGX_OK; | |
| 847 } | |
| 848 | |
| 849 // packet processed, ACK it now if required | |
| 850 // TODO: if (ack_required) ... - currently just ack each packet | |
| 851 | |
| 852 ack_frame = ngx_pcalloc(c->pool, sizeof(ngx_quic_frame_t)); | |
| 853 if (ack_frame == NULL) { | |
| 854 return NGX_ERROR; | |
| 855 } | |
| 856 | |
| 857 ack_frame->level = pkt->level; | |
| 858 ack_frame->type = NGX_QUIC_FT_ACK; | |
| 859 ack_frame->u.ack.pn = pkt->pn; | |
| 860 | |
| 861 ngx_sprintf(ack_frame->info, "ACK for PN=%d from frame handler level=%d", pkt->pn, pkt->level); | |
| 862 ngx_quic_queue_frame(qc, ack_frame); | |
| 863 | |
| 864 return ngx_quic_output(c); | |
| 865 } | |
| 866 | |
| 867 | |
| 868 static ngx_int_t | |
| 869 ngx_quic_handle_ack_frame(ngx_connection_t *c, ngx_quic_header_t *pkt, | |
| 870 ngx_quic_ack_frame_t *f) | |
| 871 { | |
| 872 /* TODO: handle ACK here */ | |
| 873 return NGX_OK; | |
| 874 } | |
| 875 | |
| 876 | |
| 877 static ngx_int_t | |
| 878 ngx_quic_handle_crypto_frame(ngx_connection_t *c, ngx_quic_header_t *pkt, | |
| 879 ngx_quic_crypto_frame_t *f) | |
| 880 { | |
| 881 int sslerr; | |
| 882 ssize_t n; | |
| 883 ngx_ssl_conn_t *ssl_conn; | |
| 884 | |
| 885 if (f->offset != 0x0) { | |
| 886 ngx_log_error(NGX_LOG_INFO, c->log, 0, | |
| 887 "crypto frame with non-zero offset"); | |
| 888 // TODO: add support for crypto frames spanning packets | |
| 889 return NGX_ERROR; | |
| 890 } | |
| 891 | |
| 892 ssl_conn = c->ssl->connection; | |
| 893 | |
| 894 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 895 "SSL_quic_read_level: %d, SSL_quic_write_level: %d", | |
| 896 (int) SSL_quic_read_level(ssl_conn), | |
| 897 (int) SSL_quic_write_level(ssl_conn)); | |
| 898 | |
| 899 if (!SSL_provide_quic_data(ssl_conn, SSL_quic_read_level(ssl_conn), | |
| 900 f->data, f->len)) | |
| 901 { | |
| 902 ngx_ssl_error(NGX_LOG_INFO, c->log, 0, | |
| 903 "SSL_provide_quic_data() failed"); | |
| 904 return NGX_ERROR; | |
| 905 } | |
| 906 | |
| 907 n = SSL_do_handshake(ssl_conn); | |
| 908 | |
| 909 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL_do_handshake: %d", n); | |
| 910 | |
| 911 if (n == -1) { | |
| 912 sslerr = SSL_get_error(ssl_conn, n); | |
| 913 | |
| 914 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "SSL_get_error: %d", | |
| 915 sslerr); | |
| 916 | |
| 917 if (sslerr == SSL_ERROR_SSL) { | |
| 918 ngx_ssl_error(NGX_LOG_ERR, c->log, 0, "SSL_do_handshake() failed"); | |
| 919 } | |
| 920 } | |
| 921 | |
| 922 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 923 "quic ssl cipher: %s", SSL_get_cipher(ssl_conn)); | |
| 924 | |
| 925 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 926 "SSL_quic_read_level: %d, SSL_quic_write_level: %d", | |
| 927 (int) SSL_quic_read_level(ssl_conn), | |
| 928 (int) SSL_quic_write_level(ssl_conn)); | |
| 929 | |
| 930 return NGX_OK; | |
| 931 } | |
| 932 | |
| 933 | |
| 934 static ngx_int_t | |
| 935 ngx_quic_handle_stream_frame(ngx_connection_t *c, | |
| 936 ngx_quic_header_t *pkt, ngx_quic_stream_frame_t *f) | |
| 937 { | |
| 938 ngx_buf_t *b; | |
| 939 ngx_quic_connection_t *qc; | |
| 940 ngx_quic_stream_node_t *sn; | |
| 941 | |
| 942 qc = c->quic; | |
| 943 | |
| 944 sn = ngx_quic_find_stream(&qc->streams.tree, f->stream_id); | |
| 945 | |
| 946 if (sn) { | |
| 947 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, "existing stream"); | |
| 948 b = sn->b; | |
| 949 | |
| 950 if ((size_t) (b->end - b->pos) < f->length) { | |
| 951 ngx_log_error(NGX_LOG_INFO, c->log, 0, "no space in stream buffer"); | |
| 952 return NGX_ERROR; | |
| 953 } | |
| 954 | |
| 955 ngx_memcpy(b->pos, f->data, f->length); | |
| 956 b->pos += f->length; | |
| 957 | |
| 958 // TODO: notify | |
| 959 | |
| 960 return NGX_OK; | |
| 961 } | |
| 962 | |
| 963 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, "stream is new"); | |
| 964 | |
|
8229
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
965 sn = ngx_quic_create_stream(c, f->stream_id); |
| 8225 | 966 if (sn == NULL) { |
| 967 return NGX_ERROR; | |
| 968 } | |
| 969 | |
| 970 b = sn->b; | |
| 971 | |
| 972 ngx_memcpy(b->start, f->data, f->length); | |
| 973 b->last = b->start + f->length; | |
| 974 | |
| 975 qc->streams.handler(sn->c); | |
| 976 | |
| 977 return NGX_OK; | |
| 978 } | |
| 979 | |
| 980 | |
| 981 static void | |
| 982 ngx_quic_queue_frame(ngx_quic_connection_t *qc, ngx_quic_frame_t *frame) | |
| 983 { | |
| 984 ngx_quic_frame_t *f; | |
| 985 | |
| 986 if (qc->frames == NULL) { | |
| 987 qc->frames = frame; | |
| 988 return; | |
| 989 } | |
| 990 | |
| 991 for (f = qc->frames; f->next; f = f->next) { | |
| 992 if (f->next->level > frame->level) { | |
| 993 break; | |
| 994 } | |
| 995 } | |
| 996 | |
| 997 frame->next = f->next; | |
| 998 f->next = frame; | |
| 999 } | |
| 1000 | |
| 1001 | |
| 1002 static ngx_int_t | |
| 1003 ngx_quic_output(ngx_connection_t *c) | |
| 1004 { | |
| 1005 size_t len; | |
| 1006 ngx_uint_t lvl; | |
| 1007 ngx_quic_frame_t *f, *start; | |
| 1008 ngx_quic_connection_t *qc; | |
| 1009 | |
| 1010 qc = c->quic; | |
| 1011 | |
| 1012 if (qc->frames == NULL) { | |
| 1013 return NGX_OK; | |
| 1014 } | |
| 1015 | |
| 1016 lvl = qc->frames->level; | |
| 1017 start = qc->frames; | |
| 1018 f = start; | |
| 1019 | |
| 1020 do { | |
| 1021 len = 0; | |
| 1022 | |
| 1023 do { | |
| 1024 /* process same-level group of frames */ | |
| 1025 | |
| 1026 len += ngx_quic_frame_len(f);// TODO: handle overflow, max size | |
| 1027 | |
| 1028 f = f->next; | |
| 1029 } while (f && f->level == lvl); | |
| 1030 | |
| 1031 | |
| 1032 if (ngx_quic_frames_send(c, start, f, len) != NGX_OK) { | |
| 1033 return NGX_ERROR; | |
| 1034 } | |
| 1035 | |
| 1036 if (f == NULL) { | |
| 1037 break; | |
| 1038 } | |
| 1039 | |
| 1040 lvl = f->level; // TODO: must not decrease (ever, also between calls) | |
| 1041 start = f; | |
| 1042 | |
| 1043 } while (1); | |
| 1044 | |
| 1045 qc->frames = NULL; | |
| 1046 | |
| 1047 return NGX_OK; | |
| 1048 } | |
| 1049 | |
| 1050 | |
| 1051 /* pack a group of frames [start; end) into memory p and send as single packet */ | |
| 1052 ngx_int_t | |
| 1053 ngx_quic_frames_send(ngx_connection_t *c, ngx_quic_frame_t *start, | |
| 1054 ngx_quic_frame_t *end, size_t total) | |
| 1055 { | |
| 1056 ssize_t len; | |
| 1057 u_char *p; | |
| 1058 ngx_str_t out; | |
| 1059 ngx_quic_frame_t *f; | |
| 1060 | |
| 1061 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 1062 "sending frames %p...%p", start, end); | |
| 1063 | |
| 1064 p = ngx_pnalloc(c->pool, total); | |
| 1065 if (p == NULL) { | |
| 1066 return NGX_ERROR; | |
| 1067 } | |
| 1068 | |
| 1069 out.data = p; | |
| 1070 | |
| 1071 for (f = start; f != end; f = f->next) { | |
| 1072 | |
| 1073 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "frame: %s", f->info); | |
| 1074 | |
| 1075 len = ngx_quic_create_frame(p, p + total, f); | |
| 1076 if (len == -1) { | |
| 1077 return NGX_ERROR; | |
| 1078 } | |
| 1079 | |
| 1080 p += len; | |
| 1081 } | |
| 1082 | |
| 1083 out.len = p - out.data; | |
| 1084 | |
| 1085 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 1086 "packet ready: %ui bytes at level %d", | |
| 1087 out.len, start->level); | |
| 1088 | |
| 1089 // IOVEC/sendmsg_chain ? | |
| 1090 if (ngx_quic_send_packet(c, c->quic, start->level, &out) != NGX_OK) { | |
| 1091 return NGX_ERROR; | |
| 1092 } | |
| 1093 | |
| 1094 return NGX_OK; | |
| 1095 } | |
| 1096 | |
| 1097 | |
| 1098 static ngx_int_t | |
| 1099 ngx_quic_send_packet(ngx_connection_t *c, ngx_quic_connection_t *qc, | |
| 1100 enum ssl_encryption_level_t level, ngx_str_t *payload) | |
| 1101 { | |
| 1102 ngx_str_t res; | |
| 1103 ngx_quic_header_t pkt; | |
| 1104 | |
| 1105 pkt.log = c->log; | |
| 1106 | |
| 1107 static ngx_str_t initial_token = ngx_null_string; | |
| 1108 | |
| 1109 ngx_memzero(&pkt, sizeof(ngx_quic_header_t)); | |
| 1110 ngx_quic_hexdump0(c->log, "payload", payload->data, payload->len); | |
| 1111 | |
| 1112 pkt.level = level; | |
| 1113 pkt.dcid = qc->dcid; | |
| 1114 pkt.scid = qc->scid; | |
| 1115 | |
| 1116 if (level == ssl_encryption_initial) { | |
| 1117 pkt.number = &qc->initial_pn; | |
| 1118 pkt.flags = NGX_QUIC_PKT_INITIAL; | |
| 1119 pkt.secret = &qc->secrets.server.in; | |
| 1120 pkt.token = initial_token; | |
| 1121 | |
| 1122 } else if (level == ssl_encryption_handshake) { | |
| 1123 pkt.number = &qc->handshake_pn; | |
| 1124 pkt.flags = NGX_QUIC_PKT_HANDSHAKE; | |
| 1125 pkt.secret = &qc->secrets.server.hs; | |
| 1126 | |
| 1127 } else { | |
| 1128 pkt.number = &qc->appdata_pn; | |
| 1129 pkt.secret = &qc->secrets.server.ad; | |
| 1130 } | |
| 1131 | |
| 1132 if (ngx_quic_encrypt(c->pool, c->ssl->connection, &pkt, payload, &res) | |
| 1133 != NGX_OK) | |
| 1134 { | |
| 1135 return NGX_ERROR; | |
| 1136 } | |
| 1137 | |
| 1138 ngx_quic_hexdump0(c->log, "packet to send", res.data, res.len); | |
| 1139 | |
| 1140 c->send(c, res.data, res.len); // TODO: err handling | |
| 1141 | |
| 1142 (*pkt.number)++; | |
| 1143 | |
| 1144 return NGX_OK; | |
| 1145 } | |
| 1146 | |
| 1147 | |
| 1148 ngx_connection_t * | |
| 1149 ngx_quic_create_uni_stream(ngx_connection_t *c) | |
| 1150 { | |
|
8229
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1151 ngx_uint_t id; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1152 ngx_quic_stream_t *qs; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1153 ngx_quic_connection_t *qc; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1154 ngx_quic_stream_node_t *sn; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1155 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1156 qs = c->qs; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1157 qc = qs->parent->quic; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1158 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1159 /* |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1160 * A stream ID is a 62-bit integer that is unique for all streams |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1161 * on a connection. |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1162 * |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1163 * 0x3 | Server-Initiated, Unidirectional |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1164 */ |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1165 id = (qc->streams.id_counter << 2) | 0x3; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1166 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1167 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1168 "creating server uni stream #%ui id %ui", |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1169 qc->streams.id_counter, id); |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1170 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1171 qc->streams.id_counter++; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1172 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1173 sn = ngx_quic_create_stream(qs->parent, id); |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1174 if (sn == NULL) { |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1175 return NULL; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1176 } |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1177 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1178 return sn->c; |
| 8225 | 1179 } |
| 1180 | |
| 1181 | |
| 1182 static void | |
| 1183 ngx_quic_rbtree_insert_stream(ngx_rbtree_node_t *temp, | |
| 1184 ngx_rbtree_node_t *node, ngx_rbtree_node_t *sentinel) | |
| 1185 { | |
| 1186 ngx_rbtree_node_t **p; | |
| 1187 ngx_quic_stream_node_t *qn, *qnt; | |
| 1188 | |
| 1189 for ( ;; ) { | |
| 1190 | |
| 1191 if (node->key < temp->key) { | |
| 1192 | |
| 1193 p = &temp->left; | |
| 1194 | |
| 1195 } else if (node->key > temp->key) { | |
| 1196 | |
| 1197 p = &temp->right; | |
| 1198 | |
| 1199 } else { /* node->key == temp->key */ | |
| 1200 | |
| 1201 qn = (ngx_quic_stream_node_t *) &node->color; | |
| 1202 qnt = (ngx_quic_stream_node_t *) &temp->color; | |
| 1203 | |
| 1204 if (qn->c < qnt->c) { | |
| 1205 p = &temp->left; | |
| 1206 } else { | |
| 1207 p = &temp->right; | |
| 1208 } | |
| 1209 } | |
| 1210 | |
| 1211 if (*p == sentinel) { | |
| 1212 break; | |
| 1213 } | |
| 1214 | |
| 1215 temp = *p; | |
| 1216 } | |
| 1217 | |
| 1218 *p = node; | |
| 1219 node->parent = temp; | |
| 1220 node->left = sentinel; | |
| 1221 node->right = sentinel; | |
| 1222 ngx_rbt_red(node); | |
| 1223 } | |
| 1224 | |
| 1225 | |
| 1226 static ngx_quic_stream_node_t * | |
| 1227 ngx_quic_find_stream(ngx_rbtree_t *rbtree, ngx_uint_t key) | |
| 1228 { | |
| 1229 ngx_rbtree_node_t *node, *sentinel; | |
| 1230 | |
| 1231 node = rbtree->root; | |
| 1232 sentinel = rbtree->sentinel; | |
| 1233 | |
| 1234 while (node != sentinel) { | |
| 1235 | |
| 1236 if (key == node->key) { | |
| 1237 return (ngx_quic_stream_node_t *) node; | |
| 1238 } | |
| 1239 | |
| 1240 node = (key < node->key) ? node->left : node->right; | |
| 1241 } | |
| 1242 | |
| 1243 return NULL; | |
| 1244 } | |
| 1245 | |
| 1246 | |
|
8229
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1247 static ngx_quic_stream_node_t * |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1248 ngx_quic_create_stream(ngx_connection_t *c, ngx_uint_t id) |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1249 { |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1250 ngx_log_t *log; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1251 ngx_pool_t *pool; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1252 ngx_event_t *rev, *wev; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1253 ngx_quic_connection_t *qc; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1254 ngx_quic_stream_node_t *sn; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1255 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1256 qc = c->quic; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1257 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1258 sn = ngx_pcalloc(c->pool, sizeof(ngx_quic_stream_node_t)); |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1259 if (sn == NULL) { |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1260 return NULL; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1261 } |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1262 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1263 sn->c = ngx_get_connection(-1, c->log); // TODO: free on connection termination |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1264 if (sn->c == NULL) { |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1265 return NULL; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1266 } |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1267 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1268 pool = ngx_create_pool(NGX_DEFAULT_POOL_SIZE, c->log); |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1269 if (pool == NULL) { |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1270 /* XXX free connection */ |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1271 // TODO: add pool cleanup handdler |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1272 return NULL; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1273 } |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1274 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1275 log = ngx_palloc(pool, sizeof(ngx_log_t)); |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1276 if (log == NULL) { |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1277 /* XXX free pool and connection */ |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1278 return NULL; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1279 } |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1280 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1281 *log = *c->log; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1282 pool->log = log; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1283 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1284 sn->c->log = log; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1285 sn->c->pool = pool; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1286 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1287 sn->c->listening = c->listening; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1288 sn->c->sockaddr = c->sockaddr; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1289 sn->c->local_sockaddr = c->local_sockaddr; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1290 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1291 rev = sn->c->read; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1292 wev = sn->c->write; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1293 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1294 rev->ready = 1; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1295 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1296 rev->log = c->log; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1297 wev->log = c->log; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1298 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1299 sn->c->number = ngx_atomic_fetch_add(ngx_connection_counter, 1); |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1300 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1301 sn->node.key =id; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1302 sn->b = ngx_create_temp_buf(pool, 16 * 1024); // XXX enough for everyone |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1303 if (sn->b == NULL) { |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1304 return NULL; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1305 } |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1306 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1307 ngx_rbtree_insert(&qc->streams.tree, &sn->node); |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1308 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1309 sn->s.id = id; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1310 sn->s.unidirectional = (sn->s.id & 0x02) ? 1 : 0; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1311 sn->s.parent = c; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1312 sn->c->qs = &sn->s; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1313 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1314 sn->c->recv = ngx_quic_stream_recv; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1315 sn->c->send = ngx_quic_stream_send; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1316 sn->c->send_chain = ngx_quic_stream_send_chain; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1317 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1318 return sn; |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1319 } |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1320 |
|
cfc429911c0d
Implemented creation of server unidirectional streams.
Vladimir Homutov <vl@nginx.com>
parents:
8225
diff
changeset
|
1321 |
| 8225 | 1322 static ssize_t |
| 1323 ngx_quic_stream_recv(ngx_connection_t *c, u_char *buf, size_t size) | |
| 1324 { | |
| 1325 ssize_t len; | |
| 1326 ngx_buf_t *b; | |
| 1327 ngx_quic_stream_t *qs; | |
| 1328 ngx_quic_connection_t *qc; | |
| 1329 ngx_quic_stream_node_t *sn; | |
| 1330 | |
| 1331 qs = c->qs; | |
| 1332 qc = qs->parent->quic; | |
| 1333 | |
| 1334 // XXX: get direct pointer from stream structure? | |
| 1335 sn = ngx_quic_find_stream(&qc->streams.tree, qs->id); | |
| 1336 | |
| 1337 if (sn == NULL) { | |
| 1338 return NGX_ERROR; | |
| 1339 } | |
| 1340 | |
| 1341 // XXX: how to return EOF? | |
| 1342 | |
| 1343 b = sn->b; | |
| 1344 | |
| 1345 if (b->last - b->pos == 0) { | |
| 1346 c->read->ready = 0; | |
| 1347 ngx_log_debug0(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 1348 "quic recv() not ready"); | |
| 1349 return NGX_AGAIN; // ? | |
| 1350 } | |
| 1351 | |
| 1352 len = ngx_min(b->last - b->pos, (ssize_t) size); | |
| 1353 | |
| 1354 ngx_memcpy(buf, b->pos, len); | |
| 1355 | |
| 1356 b->pos += len; | |
| 1357 | |
| 1358 ngx_log_debug2(NGX_LOG_DEBUG_EVENT, c->log, 0, | |
| 1359 "quic recv: %z of %uz", len, size); | |
| 1360 | |
| 1361 return len; | |
| 1362 } | |
| 1363 | |
| 1364 | |
| 1365 static ssize_t | |
| 1366 ngx_quic_stream_send(ngx_connection_t *c, u_char *buf, size_t size) | |
| 1367 { | |
| 1368 u_char *p; | |
| 1369 ngx_connection_t *pc; | |
| 1370 ngx_quic_frame_t *frame; | |
| 1371 ngx_quic_stream_t *qs; | |
| 1372 ngx_quic_connection_t *qc; | |
| 1373 ngx_quic_stream_node_t *sn; | |
| 1374 | |
| 1375 ngx_log_debug1(NGX_LOG_DEBUG_EVENT, c->log, 0, "quic send: %uz", size); | |
| 1376 | |
| 1377 qs = c->qs; | |
| 1378 pc = qs->parent; | |
| 1379 qc = pc->quic; | |
| 1380 | |
| 1381 // XXX: get direct pointer from stream structure? | |
| 1382 sn = ngx_quic_find_stream(&qc->streams.tree, qs->id); | |
| 1383 | |
| 1384 if (sn == NULL) { | |
| 1385 return NGX_ERROR; | |
| 1386 } | |
| 1387 | |
| 1388 frame = ngx_pcalloc(pc->pool, sizeof(ngx_quic_frame_t)); | |
| 1389 if (frame == NULL) { | |
| 1390 return 0; | |
| 1391 } | |
| 1392 | |
| 1393 p = ngx_pnalloc(pc->pool, size); | |
| 1394 if (p == NULL) { | |
| 1395 return 0; | |
| 1396 } | |
| 1397 | |
| 1398 ngx_memcpy(p, buf, size); | |
| 1399 | |
| 1400 frame->level = ssl_encryption_application; | |
| 1401 frame->type = NGX_QUIC_FT_STREAM6; /* OFF=1 LEN=1 FIN=0 */ | |
| 1402 frame->u.stream.off = 1; | |
| 1403 frame->u.stream.len = 1; | |
| 1404 frame->u.stream.fin = 0; | |
| 1405 | |
| 1406 frame->u.stream.type = frame->type; | |
| 1407 frame->u.stream.stream_id = qs->id; | |
| 1408 frame->u.stream.offset = c->sent; | |
| 1409 frame->u.stream.length = size; | |
| 1410 frame->u.stream.data = p; | |
| 1411 | |
| 1412 c->sent += size; | |
| 1413 | |
| 1414 ngx_sprintf(frame->info, "stream %xi len=%ui level=%d", | |
| 1415 qs->id, size, frame->level); | |
| 1416 | |
| 1417 ngx_quic_queue_frame(qc, frame); | |
| 1418 | |
| 1419 return size; | |
| 1420 } | |
| 1421 | |
| 1422 | |
| 1423 static ngx_chain_t * | |
| 1424 ngx_quic_stream_send_chain(ngx_connection_t *c, ngx_chain_t *in, | |
| 1425 off_t limit) | |
| 1426 { | |
| 1427 size_t len; | |
| 1428 ssize_t n; | |
| 1429 ngx_buf_t *b; | |
| 1430 | |
| 1431 for ( /* void */; in; in = in->next) { | |
| 1432 b = in->buf; | |
| 1433 | |
| 1434 if (!ngx_buf_in_memory(b)) { | |
| 1435 continue; | |
| 1436 } | |
| 1437 | |
| 1438 if (ngx_buf_size(b) == 0) { | |
| 1439 continue; | |
| 1440 } | |
| 1441 | |
| 1442 len = b->last - b->pos; | |
| 1443 | |
| 1444 n = ngx_quic_stream_send(c, b->pos, len); | |
| 1445 | |
| 1446 if (n == NGX_ERROR) { | |
| 1447 return NGX_CHAIN_ERROR; | |
| 1448 } | |
| 1449 | |
| 1450 if (n == NGX_AGAIN) { | |
| 1451 return in; | |
| 1452 } | |
| 1453 | |
| 1454 if (n != (ssize_t) len) { | |
| 1455 b->pos += n; | |
| 1456 return in; | |
| 1457 } | |
| 1458 } | |
| 1459 | |
| 1460 return NULL; | |
| 1461 } |