use std::{net::SocketAddr, sync::Arc}; use async_trait::async_trait; use futures_rustls::{pki_types, rustls, TlsAcceptor, TlsConnector, TlsStream}; use smol::{ io::{split, AsyncReadExt, AsyncWriteExt, ReadHalf, WriteHalf}, lock::Mutex, net::{TcpListener, TcpStream}, }; use crate::{ connection::{Connection, ToConn}, endpoint::Endpoint, listener::{ConnListener, ToListener}, Error, Result, }; /// TLS network connection implementation of the [`Connection`] trait. pub struct TlsConn { inner: TcpStream, read: Mutex>>, write: Mutex>>, } impl TlsConn { /// Creates a new TlsConn pub fn new(sock: TcpStream, conn: TlsStream) -> Self { let (read, write) = split(conn); Self { inner: sock, read: Mutex::new(read), write: Mutex::new(write), } } } #[async_trait] impl Connection for TlsConn { fn peer_endpoint(&self) -> Result { Ok(Endpoint::new_tls_addr(&self.inner.peer_addr()?)) } fn local_endpoint(&self) -> Result { Ok(Endpoint::new_tls_addr(&self.inner.local_addr()?)) } async fn read(&self, buf: &mut [u8]) -> Result { self.read.lock().await.read(buf).await.map_err(Error::from) } async fn write(&self, buf: &[u8]) -> Result { self.write .lock() .await .write(buf) .await .map_err(Error::from) } } /// Connects to the given TLS address and port. pub async fn dial( endpoint: &Endpoint, config: rustls::ClientConfig, dns_name: &'static str, ) -> Result { let addr = SocketAddr::try_from(endpoint.clone())?; let connector = TlsConnector::from(Arc::new(config)); let sock = TcpStream::connect(addr).await?; sock.set_nodelay(true)?; let altname = pki_types::ServerName::try_from(dns_name)?; let conn = connector.connect(altname, sock.clone()).await?; Ok(TlsConn::new(sock, TlsStream::Client(conn))) } /// Tls network listener implementation of the `Listener` [`ConnListener`] trait. pub struct TlsListener { inner: TcpListener, acceptor: TlsAcceptor, } #[async_trait] impl ConnListener for TlsListener { fn local_endpoint(&self) -> Result { Ok(Endpoint::new_tls_addr(&self.inner.local_addr()?)) } async fn accept(&self) -> Result> { let (sock, _) = self.inner.accept().await?; sock.set_nodelay(true)?; let conn = self.acceptor.accept(sock.clone()).await?; Ok(Box::new(TlsConn::new(sock, TlsStream::Server(conn)))) } } /// Listens on the given TLS address and port. pub async fn listen(endpoint: &Endpoint, config: rustls::ServerConfig) -> Result { let addr = SocketAddr::try_from(endpoint.clone())?; let acceptor = TlsAcceptor::from(Arc::new(config)); let listener = TcpListener::bind(addr).await?; Ok(TlsListener { acceptor, inner: listener, }) } impl From> for Box { fn from(conn: TlsStream) -> Self { Box::new(TlsConn::new(conn.get_ref().0.clone(), conn)) } } impl From for Box { fn from(listener: TlsListener) -> Self { Box::new(listener) } } impl ToConn for TlsStream { fn to_conn(self) -> Box { self.into() } } impl ToConn for TlsConn { fn to_conn(self) -> Box { Box::new(self) } } impl ToListener for TlsListener { fn to_listener(self) -> Box { self.into() } }