You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
93 lines
3.0 KiB
93 lines
3.0 KiB
#if !BESTHTTP_DISABLE_ALTERNATE_SSL && (!UNITY_WEBGL || UNITY_EDITOR) |
|
#pragma warning disable |
|
using System; |
|
using System.IO; |
|
|
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Tls.Crypto; |
|
using BestHTTP.SecureProtocol.Org.BouncyCastle.Utilities; |
|
|
|
namespace BestHTTP.SecureProtocol.Org.BouncyCastle.Tls |
|
{ |
|
public class DtlsVerifier |
|
{ |
|
private static TlsMac CreateCookieMac(TlsCrypto crypto) |
|
{ |
|
TlsMac mac = crypto.CreateHmac(MacAlgorithm.hmac_sha256); |
|
|
|
byte[] secret = new byte[mac.MacLength]; |
|
crypto.SecureRandom.NextBytes(secret); |
|
|
|
mac.SetKey(secret, 0, secret.Length); |
|
|
|
return mac; |
|
} |
|
|
|
private readonly TlsMac m_cookieMac; |
|
private readonly TlsMacSink m_cookieMacSink; |
|
|
|
public DtlsVerifier(TlsCrypto crypto) |
|
{ |
|
this.m_cookieMac = CreateCookieMac(crypto); |
|
this.m_cookieMacSink = new TlsMacSink(m_cookieMac); |
|
} |
|
|
|
public virtual DtlsRequest VerifyRequest(byte[] clientID, byte[] data, int dataOff, int dataLen, |
|
DatagramSender sender) |
|
{ |
|
lock (this) |
|
{ |
|
bool resetCookieMac = true; |
|
|
|
try |
|
{ |
|
m_cookieMac.Update(clientID, 0, clientID.Length); |
|
|
|
DtlsRequest request = DtlsReliableHandshake.ReadClientRequest(data, dataOff, dataLen, |
|
m_cookieMacSink); |
|
if (null != request) |
|
{ |
|
byte[] expectedCookie = m_cookieMac.CalculateMac(); |
|
resetCookieMac = false; |
|
|
|
// TODO Consider stricter HelloVerifyRequest protocol |
|
//switch (request.MessageSeq) |
|
//{ |
|
//case 0: |
|
//{ |
|
// DtlsReliableHandshake.SendHelloVerifyRequest(sender, request.RecordSeq, expectedCookie); |
|
// break; |
|
//} |
|
//case 1: |
|
//{ |
|
// if (Arrays.ConstantTimeAreEqual(expectedCookie, request.ClientHello.Cookie)) |
|
// return request; |
|
|
|
// break; |
|
//} |
|
//} |
|
|
|
if (Arrays.ConstantTimeAreEqual(expectedCookie, request.ClientHello.Cookie)) |
|
return request; |
|
|
|
DtlsReliableHandshake.SendHelloVerifyRequest(sender, request.RecordSeq, expectedCookie); |
|
} |
|
} |
|
catch (IOException) |
|
{ |
|
// Ignore |
|
} |
|
finally |
|
{ |
|
if (resetCookieMac) |
|
{ |
|
m_cookieMac.Reset(); |
|
} |
|
} |
|
|
|
return null; |
|
} |
|
} |
|
} |
|
} |
|
#pragma warning restore |
|
#endif
|
|
|