frp/pkg/util/net/tls.go

68 lines
1.6 KiB
Go
Raw Normal View History

2019-03-11 14:14:31 +08:00
// Copyright 2019 fatedier, fatedier@gmail.com
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// http://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.
package net
import (
"crypto/tls"
"fmt"
2019-03-11 14:14:31 +08:00
"net"
"time"
2019-03-11 14:14:31 +08:00
gnet "github.com/fatedier/golib/net"
)
var (
2020-05-24 17:48:37 +08:00
FRPTLSHeadByte = 0x17
2019-03-11 14:14:31 +08:00
)
func WrapTLSClientConn(c net.Conn, tlsConfig *tls.Config, disableCustomTLSHeadByte bool) (out net.Conn) {
if !disableCustomTLSHeadByte {
c.Write([]byte{byte(FRPTLSHeadByte)})
}
2019-10-12 20:13:12 +08:00
out = tls.Client(c, tlsConfig)
2019-03-11 14:14:31 +08:00
return
}
func CheckAndEnableTLSServerConnWithTimeout(
c net.Conn, tlsConfig *tls.Config, tlsOnly bool, timeout time.Duration,
) (out net.Conn, isTLS bool, custom bool, err error) {
sc, r := gnet.NewSharedConnSize(c, 2)
2019-03-11 14:14:31 +08:00
buf := make([]byte, 1)
var n int
c.SetReadDeadline(time.Now().Add(timeout))
n, err = r.Read(buf)
c.SetReadDeadline(time.Time{})
if err != nil {
return
}
2020-05-24 17:48:37 +08:00
if n == 1 && int(buf[0]) == FRPTLSHeadByte {
2019-10-12 20:13:12 +08:00
out = tls.Server(c, tlsConfig)
isTLS = true
custom = true
} else if n == 1 && int(buf[0]) == 0x16 {
out = tls.Server(sc, tlsConfig)
isTLS = true
2019-03-11 14:14:31 +08:00
} else {
if tlsOnly {
err = fmt.Errorf("non-TLS connection received on a TlsOnly server")
return
}
2019-10-12 20:13:12 +08:00
out = sc
2019-03-11 14:14:31 +08:00
}
return
}