frp/pkg/util/net/tls.go

58 lines
1.4 KiB
Go
Raw Permalink Normal View History

2019-03-11 14:14:31 +08:00
// Copyright 2019 fatedier, fatedier@gmail.com
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package net
import (
"crypto/tls"
"fmt"
2019-03-11 14:14:31 +08:00
"net"
"time"
2019-03-11 14:14:31 +08:00
2023-05-29 14:10:34 +08:00
libnet "github.com/fatedier/golib/net"
2019-03-11 14:14:31 +08:00
)
2022-08-29 01:02:53 +08:00
var FRPTLSHeadByte = 0x17
2019-03-11 14:14:31 +08:00
func CheckAndEnableTLSServerConnWithTimeout(
c net.Conn, tlsConfig *tls.Config, tlsOnly bool, timeout time.Duration,
) (out net.Conn, isTLS bool, custom bool, err error) {
2023-05-29 14:10:34 +08:00
sc, r := libnet.NewSharedConnSize(c, 2)
2019-03-11 14:14:31 +08:00
buf := make([]byte, 1)
var n int
2022-08-29 01:02:53 +08:00
_ = c.SetReadDeadline(time.Now().Add(timeout))
n, err = r.Read(buf)
2022-08-29 01:02:53 +08:00
_ = c.SetReadDeadline(time.Time{})
if err != nil {
return
}
2022-08-29 01:02:53 +08:00
switch {
case n == 1 && int(buf[0]) == FRPTLSHeadByte:
2019-10-12 20:13:12 +08:00
out = tls.Server(c, tlsConfig)
isTLS = true
custom = true
2022-08-29 01:02:53 +08:00
case n == 1 && int(buf[0]) == 0x16:
out = tls.Server(sc, tlsConfig)
isTLS = true
2022-08-29 01:02:53 +08:00
default:
if tlsOnly {
err = fmt.Errorf("non-TLS connection received on a TlsOnly server")
return
}
2019-10-12 20:13:12 +08:00
out = sc
2019-03-11 14:14:31 +08:00
}
return
}