PeekingPeerConnector.h

Go to the documentation of this file.

/*
 * Copyright (C) 1996-2023 The Squid Software Foundation and contributors
 *
 * Squid software is distributed under GPLv2+ license and includes
 * contributions from numerous individuals and organizations.
 * Please see the COPYING and CONTRIBUTORS files for details.
 */
 
#ifndef SQUID_SRC_SSL_PEEKINGPEERCONNECTOR_H
#define SQUID_SRC_SSL_PEEKINGPEERCONNECTOR_H
 
#include "security/PeerConnector.h"
 
#if USE_OPENSSL
 
namespace Ssl
{
 
class PeekingPeerConnector: public Security::PeerConnector {
    CBDATA_CHILD(PeekingPeerConnector);
public:
    PeekingPeerConnector(HttpRequestPointer &aRequest,
                         const Comm::ConnectionPointer &aServerConn,
                         const Comm::ConnectionPointer &aClientConn,
                         const AsyncCallback<Security::EncryptorAnswer> &aCallback,
                         const AccessLogEntryPointer &alp,
                         time_t timeout = 0);
 
    /* Security::PeerConnector API */
    bool initialize(Security::SessionPointer &) override;
    Security::ContextPointer getTlsContext() override;
    void noteWantWrite() override;
    void noteNegotiationError(const Security::ErrorDetailPointer &) override;
    void noteNegotiationDone(ErrorState *error) override;
 
    void handleServerCertificate();
 
    void checkForPeekAndSplice();
 
    void checkForPeekAndSpliceDone(Acl::Answer);
 
    void checkForPeekAndSpliceMatched(const Ssl::BumpMode finalMode);
 
    Ssl::BumpMode checkForPeekAndSpliceGuess() const;
 
    void serverCertificateVerified();
 
    void startTunneling();
 
    static void cbCheckForPeekAndSpliceDone(Acl::Answer, void *data);
 
private:
 
    void tunnelInsteadOfNegotiating();
 
    Comm::ConnectionPointer clientConn; 
    AsyncCall::Pointer closeHandler; 
    bool splice; 
    bool serverCertificateHandled; 
};
 
} // namespace Ssl
 
#endif /* USE_OPENSSL */
#endif /* SQUID_SRC_SSL_PEEKINGPEERCONNECTOR_H */