mirror of https://github.com/cbeuw/Cloak
You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
89 lines
1.9 KiB
Go
89 lines
1.9 KiB
Go
package common
|
|
|
|
import (
|
|
"encoding/binary"
|
|
"io"
|
|
"net"
|
|
"time"
|
|
)
|
|
|
|
const (
|
|
VersionTLS11 = 0x0301
|
|
VersionTLS13 = 0x0303
|
|
|
|
recordLayerLength = 5
|
|
|
|
Handshake = 22
|
|
ApplicationData = 23
|
|
)
|
|
|
|
func AddRecordLayer(input []byte, typ byte, ver uint16) []byte {
|
|
msgLen := len(input)
|
|
var ret []byte
|
|
if cap(input) > msgLen+recordLayerLength {
|
|
ret = input[:msgLen+recordLayerLength]
|
|
} else {
|
|
ret = make([]byte, msgLen+recordLayerLength)
|
|
}
|
|
copy(ret[recordLayerLength:], input)
|
|
ret[0] = typ
|
|
ret[1] = byte(ver >> 8)
|
|
ret[2] = byte(ver)
|
|
ret[3] = byte(msgLen >> 8)
|
|
ret[4] = byte(msgLen)
|
|
return ret
|
|
}
|
|
|
|
type TLSConn struct {
|
|
net.Conn
|
|
}
|
|
|
|
func (tls *TLSConn) LocalAddr() net.Addr {
|
|
return tls.Conn.LocalAddr()
|
|
}
|
|
|
|
func (tls *TLSConn) RemoteAddr() net.Addr {
|
|
return tls.Conn.RemoteAddr()
|
|
}
|
|
|
|
func (tls *TLSConn) SetDeadline(t time.Time) error {
|
|
return tls.Conn.SetDeadline(t)
|
|
}
|
|
|
|
func (tls *TLSConn) SetReadDeadline(t time.Time) error {
|
|
return tls.Conn.SetReadDeadline(t)
|
|
}
|
|
|
|
func (tls *TLSConn) SetWriteDeadline(t time.Time) error {
|
|
return tls.Conn.SetWriteDeadline(t)
|
|
}
|
|
|
|
func (tls *TLSConn) Read(buffer []byte) (n int, err error) {
|
|
// TCP is a stream. Multiple TLS messages can arrive at the same time,
|
|
// a single message can also be segmented due to MTU of the IP layer.
|
|
// This function guareentees a single TLS message to be read and everything
|
|
// else is left in the buffer.
|
|
_, err = io.ReadFull(tls.Conn, buffer[:recordLayerLength])
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
dataLength := int(binary.BigEndian.Uint16(buffer[3:5]))
|
|
if dataLength > len(buffer) {
|
|
err = io.ErrShortBuffer
|
|
return
|
|
}
|
|
return io.ReadFull(tls.Conn, buffer[:dataLength])
|
|
}
|
|
|
|
func (tls *TLSConn) Write(in []byte) (n int, err error) {
|
|
// TODO: write record layer directly first?
|
|
toWrite := AddRecordLayer(in, ApplicationData, VersionTLS13)
|
|
n, err = tls.Conn.Write(toWrite)
|
|
return n - recordLayerLength, err
|
|
}
|
|
|
|
func (tls *TLSConn) Close() error {
|
|
return tls.Conn.Close()
|
|
}
|