Imported Upstream version 4.3.2.467

Former-commit-id: 9c2cb47f45fa221e661ab616387c9cda183f283d

mcs/class/System/Mono.Net.Security/MonoTlsStream.cs

@@ -0,0 +1,134 @@
+//
+// MonoTlsStream.cs
+//
+// Author:
+//       Martin Baulig <martin.baulig@xamarin.com>
+//
+// Copyright (c) 2015 Xamarin, Inc.
+//
+// Permission is hereby granted, free of charge, to any person obtaining a copy
+// of this software and associated documentation files (the "Software"), to deal
+// in the Software without restriction, including without limitation the rights
+// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+// copies of the Software, and to permit persons to whom the Software is
+// furnished to do so, subject to the following conditions:
+//
+// The above copyright notice and this permission notice shall be included in
+// all copies or substantial portions of the Software.
+//
+// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+// THE SOFTWARE.
+
+#if SECURITY_DEP
+#if MONO_SECURITY_ALIAS
+extern alias MonoSecurity;
+#endif
+#if MONO_X509_ALIAS
+extern alias PrebuiltSystem;
+#endif
+
+#if MONO_SECURITY_ALIAS
+using MonoSecurity::Mono.Security.Interface;
+#else
+using Mono.Security.Interface;
+#endif
+#if MONO_X509_ALIAS
+using XX509CertificateCollection = PrebuiltSystem::System.Security.Cryptography.X509Certificates.X509CertificateCollection;
+#else
+using XX509CertificateCollection = System.Security.Cryptography.X509Certificates.X509CertificateCollection;
+#endif
+#endif
+
+using System;
+using System.IO;
+using System.Net;
+using System.Net.Sockets;
+using System.Net.Security;
+using System.Threading.Tasks;
+using System.Security.Authentication;
+using System.Security.Cryptography.X509Certificates;
+using System.Security.Principal;
+using System.Security.Cryptography;
+
+namespace Mono.Net.Security
+{
+	class MonoTlsStream
+	{
+		readonly IMonoTlsProvider provider;
+		readonly HttpWebRequest request;
+		readonly NetworkStream networkStream;
+
+		IMonoSslStream sslStream;
+		WebExceptionStatus status;
+
+		internal HttpWebRequest Request {
+			get { return request; }
+		}
+
+		internal IMonoSslStream SslStream {
+			get { return sslStream; }
+		}
+
+		internal WebExceptionStatus ExceptionStatus {
+			get { return status; }
+		}
+
+		internal bool CertificateValidationFailed {
+			get; set;
+		}
+
+#if SECURITY_DEP
+		readonly ChainValidationHelper validationHelper;
+		readonly MonoTlsSettings settings;
+
+		public MonoTlsStream (HttpWebRequest request, NetworkStream networkStream)
+		{
+			this.request = request;
+			this.networkStream = networkStream;
+
+			settings = request.TlsSettings;
+			provider = request.TlsProvider ?? MonoTlsProviderFactory.GetProviderInternal ();
+			status = WebExceptionStatus.SecureChannelFailure;
+
+			validationHelper = ChainValidationHelper.Create (provider.Provider, ref settings, this);
+		}
+
+		internal Stream CreateStream (byte[] buffer)
+		{
+			sslStream = provider.CreateSslStream (networkStream, false, settings);
+
+			try {
+				sslStream.AuthenticateAsClient (
+					request.Address.Host, (XX509CertificateCollection)(object)request.ClientCertificates,
+					(SslProtocols)ServicePointManager.SecurityProtocol,
+					ServicePointManager.CheckCertificateRevocationList);
+
+				status = WebExceptionStatus.Success;
+			} finally {
+				if (CertificateValidationFailed)
+					status = WebExceptionStatus.TrustFailure;
+
+				request.ServicePoint.SetClientCertificate (sslStream.InternalLocalCertificate);
+				if (status != WebExceptionStatus.Success)
+					sslStream = null;
+			}
+
+			try {
+				if (buffer != null)
+					sslStream.Write (buffer, 0, buffer.Length);
+			} catch {
+				status = WebExceptionStatus.SendFailure;
+				sslStream = null;
+				throw;
+			}
+
+			return sslStream.AuthenticatedStream;
+		}
+#endif
+	}
+}