277 lines
8.1 KiB
C#
277 lines
8.1 KiB
C#
//
|
|
// MonoTlsProviderFactory.cs
|
|
//
|
|
// Author:
|
|
// Martin Baulig <martin.baulig@xamarin.com>
|
|
//
|
|
// Copyright (c) 2015 Xamarin, Inc.
|
|
//
|
|
// Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
// of this software and associated documentation files (the "Software"), to deal
|
|
// in the Software without restriction, including without limitation the rights
|
|
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
// copies of the Software, and to permit persons to whom the Software is
|
|
// furnished to do so, subject to the following conditions:
|
|
//
|
|
// The above copyright notice and this permission notice shall be included in
|
|
// all copies or substantial portions of the Software.
|
|
//
|
|
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
// THE SOFTWARE.
|
|
|
|
#if SECURITY_DEP
|
|
#if MONO_SECURITY_ALIAS
|
|
extern alias MonoSecurity;
|
|
using MSI = MonoSecurity::Mono.Security.Interface;
|
|
using MX = MonoSecurity::Mono.Security.X509;
|
|
#else
|
|
using MSI = Mono.Security.Interface;
|
|
using MX = Mono.Security.X509;
|
|
#endif
|
|
using System.Security.Cryptography.X509Certificates;
|
|
#endif
|
|
|
|
using System;
|
|
using System.Net;
|
|
using System.Collections.Generic;
|
|
|
|
#if !MOBILE
|
|
using System.Reflection;
|
|
#endif
|
|
|
|
namespace Mono.Net.Security
|
|
{
|
|
/*
|
|
* Keep in sync with Mono.Security/Mono.Security.Interface/MonoTlsProvider.cs.
|
|
*
|
|
*/
|
|
static partial class MonoTlsProviderFactory
|
|
{
|
|
#region Internal API
|
|
|
|
/*
|
|
* APIs in this section are for consumption within System.dll only - do not access via
|
|
* reflection or from friend assemblies.
|
|
*
|
|
* @IMonoTlsProvider is defined as empty interface outside 'SECURITY_DEP', so we don't need
|
|
* this conditional here.
|
|
*/
|
|
|
|
internal static IMonoTlsProvider GetProviderInternal ()
|
|
{
|
|
lock (locker) {
|
|
if (currentProvider != null)
|
|
return currentProvider;
|
|
|
|
try {
|
|
defaultProvider = GetDefaultProviderInternal ();
|
|
} catch (Exception ex) {
|
|
throw new NotSupportedException ("TLS Support not available.", ex);
|
|
}
|
|
|
|
if (defaultProvider == null)
|
|
throw new NotSupportedException ("TLS Support not available.");
|
|
|
|
currentProvider = defaultProvider;
|
|
return currentProvider;
|
|
}
|
|
}
|
|
|
|
internal static IMonoTlsProvider GetDefaultProviderInternal ()
|
|
{
|
|
lock (locker) {
|
|
if (defaultProvider != null)
|
|
return defaultProvider;
|
|
|
|
try {
|
|
defaultProvider = CreateDefaultProvider ();
|
|
} catch (Exception ex) {
|
|
throw new NotSupportedException ("TLS Support not available.", ex);
|
|
}
|
|
|
|
if (defaultProvider == null)
|
|
throw new NotSupportedException ("TLS Support not available.");
|
|
|
|
return defaultProvider;
|
|
}
|
|
}
|
|
|
|
static IMonoTlsProvider CreateDefaultProvider ()
|
|
{
|
|
#if SECURITY_DEP
|
|
MSI.MonoTlsProvider provider = null;
|
|
#if MONO_FEATURE_NEW_SYSTEM_SOURCE
|
|
/*
|
|
* This is a hack, which is used in the Mono.Security.Providers.NewSystemSource
|
|
* assembly, which will provide a "fake" System.dll. Use the public Mono.Security
|
|
* API to get the "real" System.dll's provider via reflection, then wrap it with
|
|
* the "fake" version's perceived view.
|
|
*
|
|
* NewSystemSource needs to compile MonoTlsProviderFactory.cs, IMonoTlsProvider.cs,
|
|
* MonoTlsProviderWrapper.cs and CallbackHelpers.cs from this directory and only these.
|
|
*/
|
|
provider = MSI.MonoTlsProviderFactory.GetProvider ();
|
|
#else
|
|
provider = CreateDefaultProviderImpl ();
|
|
#endif
|
|
if (provider != null)
|
|
return new Private.MonoTlsProviderWrapper (provider);
|
|
#endif
|
|
return null;
|
|
}
|
|
|
|
static object locker = new object ();
|
|
static IMonoTlsProvider defaultProvider;
|
|
static IMonoTlsProvider currentProvider;
|
|
|
|
#endregion
|
|
|
|
#if SECURITY_DEP && !MONO_FEATURE_NEW_SYSTEM_SOURCE
|
|
|
|
static Dictionary<string,string> providerRegistration;
|
|
|
|
static Type LookupProviderType (string name, bool throwOnError)
|
|
{
|
|
lock (locker) {
|
|
InitializeProviderRegistration ();
|
|
string typeName;
|
|
if (!providerRegistration.TryGetValue (name, out typeName)) {
|
|
if (throwOnError)
|
|
throw new NotSupportedException (string.Format ("No such TLS Provider: `{0}'.", name));
|
|
return null;
|
|
}
|
|
var type = Type.GetType (typeName, false);
|
|
if (type == null && throwOnError)
|
|
throw new NotSupportedException (string.Format ("Could not find TLS Provider: `{0}'.", typeName));
|
|
return type;
|
|
}
|
|
}
|
|
|
|
static MSI.MonoTlsProvider LookupProvider (string name, bool throwOnError)
|
|
{
|
|
var type = LookupProviderType (name, throwOnError);
|
|
if (type == null)
|
|
return null;
|
|
|
|
try {
|
|
return (MSI.MonoTlsProvider)Activator.CreateInstance (type, true);
|
|
} catch (Exception ex) {
|
|
throw new NotSupportedException (string.Format ("Unable to instantiate TLS Provider `{0}'.", type), ex);
|
|
}
|
|
}
|
|
|
|
static void InitializeProviderRegistration ()
|
|
{
|
|
lock (locker) {
|
|
if (providerRegistration != null)
|
|
return;
|
|
providerRegistration = new Dictionary<string,string> ();
|
|
providerRegistration.Add ("legacy", "Mono.Net.Security.Private.MonoLegacyTlsProvider");
|
|
providerRegistration.Add ("newtls", "Mono.Security.Providers.NewTls.NewTlsProvider, Mono.Security.Providers.NewTls, Version=4.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756");
|
|
providerRegistration.Add ("oldtls", "Mono.Security.Providers.OldTls.OldTlsProvider, Mono.Security.Providers.OldTls, Version=4.0.0.0, Culture=neutral, PublicKeyToken=0738eb9f132ed756");
|
|
#if HAVE_BTLS
|
|
if (Mono.Btls.MonoBtlsProvider.IsSupported ())
|
|
providerRegistration.Add ("btls", "Mono.Btls.MonoBtlsProvider");
|
|
#endif
|
|
X509Helper2.Initialize ();
|
|
}
|
|
}
|
|
|
|
#if MOBILE_STATIC || !MOBILE
|
|
static MSI.MonoTlsProvider TryDynamicLoad ()
|
|
{
|
|
var variable = Environment.GetEnvironmentVariable ("MONO_TLS_PROVIDER");
|
|
if (variable == null)
|
|
return null;
|
|
|
|
if (string.Equals (variable, "default", StringComparison.OrdinalIgnoreCase))
|
|
return null;
|
|
|
|
return LookupProvider (variable, true);
|
|
}
|
|
|
|
static MSI.MonoTlsProvider CreateDefaultProviderImpl ()
|
|
{
|
|
var provider = TryDynamicLoad ();
|
|
if (provider != null)
|
|
return provider;
|
|
|
|
return new Private.MonoLegacyTlsProvider ();
|
|
}
|
|
#endif
|
|
|
|
#region Mono.Security visible API
|
|
|
|
/*
|
|
* "Public" section, intended to be consumed via reflection.
|
|
*
|
|
* Mono.Security.dll provides a public wrapper around these.
|
|
*/
|
|
|
|
internal static MSI.MonoTlsProvider GetProvider ()
|
|
{
|
|
var provider = GetProviderInternal ();
|
|
if (provider == null)
|
|
throw new NotSupportedException ("No TLS Provider available.");
|
|
|
|
return provider.Provider;
|
|
}
|
|
|
|
internal static MSI.MonoTlsProvider GetDefaultProvider ()
|
|
{
|
|
var provider = GetDefaultProviderInternal ();
|
|
if (provider == null)
|
|
throw new NotSupportedException ("No TLS Provider available.");
|
|
|
|
return provider.Provider;
|
|
}
|
|
|
|
internal static MSI.MonoTlsProvider GetProvider (string name)
|
|
{
|
|
return LookupProvider (name, false);
|
|
}
|
|
|
|
internal static bool HasProvider {
|
|
get {
|
|
lock (locker) {
|
|
return currentProvider != null;
|
|
}
|
|
}
|
|
}
|
|
|
|
internal static void SetDefaultProvider (string name)
|
|
{
|
|
lock (locker) {
|
|
var provider = LookupProvider (name, true);
|
|
currentProvider = new Private.MonoTlsProviderWrapper (provider);
|
|
}
|
|
}
|
|
|
|
internal static HttpWebRequest CreateHttpsRequest (Uri requestUri, MSI.MonoTlsProvider provider, MSI.MonoTlsSettings settings)
|
|
{
|
|
lock (locker) {
|
|
var internalProvider = provider != null ? new Private.MonoTlsProviderWrapper (provider) : null;
|
|
return new HttpWebRequest (requestUri, internalProvider, settings);
|
|
}
|
|
}
|
|
|
|
internal static HttpListener CreateHttpListener (X509Certificate certificate, MSI.MonoTlsProvider provider, MSI.MonoTlsSettings settings)
|
|
{
|
|
lock (locker) {
|
|
var internalProvider = provider != null ? new Private.MonoTlsProviderWrapper (provider) : null;
|
|
return new HttpListener (certificate, internalProvider, settings);
|
|
}
|
|
}
|
|
#endregion
|
|
|
|
#endif
|
|
|
|
}
|
|
}
|
|
|