[mirror_qemu.git] / io / channel-tls.c

/*
 * QEMU I/O channels TLS driver
 *
 * Copyright (c) 2015 Red Hat, Inc.
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2.1 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, see <http://www.gnu.org/licenses/>.
 *
 */

#include "qemu/osdep.h"
#include "qapi/error.h"
#include "qemu/module.h"
#include "io/channel-tls.h"
#include "trace.h"
#include "qemu/atomic.h"


static ssize_t qio_channel_tls_write_handler(const char *buf,
                                             size_t len,
                                             void *opaque)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(opaque);
    ssize_t ret;

    ret = qio_channel_write(tioc->master, buf, len, NULL);
    if (ret == QIO_CHANNEL_ERR_BLOCK) {
        errno = EAGAIN;
        return -1;
    } else if (ret < 0) {
        errno = EIO;
        return -1;
    }
    return ret;
}

static ssize_t qio_channel_tls_read_handler(char *buf,
                                            size_t len,
                                            void *opaque)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(opaque);
    ssize_t ret;

    ret = qio_channel_read(tioc->master, buf, len, NULL);
    if (ret == QIO_CHANNEL_ERR_BLOCK) {
        errno = EAGAIN;
        return -1;
    } else if (ret < 0) {
        errno = EIO;
        return -1;
    }
    return ret;
}


QIOChannelTLS *
qio_channel_tls_new_server(QIOChannel *master,
                           QCryptoTLSCreds *creds,
                           const char *aclname,
                           Error **errp)
{
    QIOChannelTLS *ioc;

    ioc = QIO_CHANNEL_TLS(object_new(TYPE_QIO_CHANNEL_TLS));

    ioc->master = master;
    if (qio_channel_has_feature(master, QIO_CHANNEL_FEATURE_SHUTDOWN)) {
        qio_channel_set_feature(QIO_CHANNEL(ioc), QIO_CHANNEL_FEATURE_SHUTDOWN);
    }
    object_ref(OBJECT(master));

    ioc->session = qcrypto_tls_session_new(
        creds,
        NULL,
        aclname,
        QCRYPTO_TLS_CREDS_ENDPOINT_SERVER,
        errp);
    if (!ioc->session) {
        goto error;
    }

    qcrypto_tls_session_set_callbacks(
        ioc->session,
        qio_channel_tls_write_handler,
        qio_channel_tls_read_handler,
        ioc);

    trace_qio_channel_tls_new_server(ioc, master, creds, aclname);
    return ioc;

 error:
    object_unref(OBJECT(ioc));
    return NULL;
}

QIOChannelTLS *
qio_channel_tls_new_client(QIOChannel *master,
                           QCryptoTLSCreds *creds,
                           const char *hostname,
                           Error **errp)
{
    QIOChannelTLS *tioc;
    QIOChannel *ioc;

    tioc = QIO_CHANNEL_TLS(object_new(TYPE_QIO_CHANNEL_TLS));
    ioc = QIO_CHANNEL(tioc);

    tioc->master = master;
    if (qio_channel_has_feature(master, QIO_CHANNEL_FEATURE_SHUTDOWN)) {
        qio_channel_set_feature(ioc, QIO_CHANNEL_FEATURE_SHUTDOWN);
    }
    object_ref(OBJECT(master));

    tioc->session = qcrypto_tls_session_new(
        creds,
        hostname,
        NULL,
        QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT,
        errp);
    if (!tioc->session) {
        goto error;
    }

    qcrypto_tls_session_set_callbacks(
        tioc->session,
        qio_channel_tls_write_handler,
        qio_channel_tls_read_handler,
        tioc);

    trace_qio_channel_tls_new_client(tioc, master, creds, hostname);
    return tioc;

 error:
    object_unref(OBJECT(tioc));
    return NULL;
}

struct QIOChannelTLSData {
    QIOTask *task;
    GMainContext *context;
};
typedef struct QIOChannelTLSData QIOChannelTLSData;

static gboolean qio_channel_tls_handshake_io(QIOChannel *ioc,
                                             GIOCondition condition,
                                             gpointer user_data);

static void qio_channel_tls_handshake_task(QIOChannelTLS *ioc,
                                           QIOTask *task,
                                           GMainContext *context)
{
    Error *err = NULL;
    QCryptoTLSSessionHandshakeStatus status;

    if (qcrypto_tls_session_handshake(ioc->session, &err) < 0) {
        trace_qio_channel_tls_handshake_fail(ioc);
        qio_task_set_error(task, err);
        qio_task_complete(task);
        return;
    }

    status = qcrypto_tls_session_get_handshake_status(ioc->session);
    if (status == QCRYPTO_TLS_HANDSHAKE_COMPLETE) {
        trace_qio_channel_tls_handshake_complete(ioc);
        if (qcrypto_tls_session_check_credentials(ioc->session,
                                                  &err) < 0) {
            trace_qio_channel_tls_credentials_deny(ioc);
            qio_task_set_error(task, err);
        } else {
            trace_qio_channel_tls_credentials_allow(ioc);
        }
        qio_task_complete(task);
    } else {
        GIOCondition condition;
        QIOChannelTLSData *data = g_new0(typeof(*data), 1);

        data->task = task;
        data->context = context;

        if (context) {
            g_main_context_ref(context);
        }

        if (status == QCRYPTO_TLS_HANDSHAKE_SENDING) {
            condition = G_IO_OUT;
        } else {
            condition = G_IO_IN;
        }

        trace_qio_channel_tls_handshake_pending(ioc, status);
        ioc->hs_ioc_tag =
            qio_channel_add_watch_full(ioc->master,
                                       condition,
                                       qio_channel_tls_handshake_io,
                                       data,
                                       NULL,
                                       context);
    }
}


static gboolean qio_channel_tls_handshake_io(QIOChannel *ioc,
                                             GIOCondition condition,
                                             gpointer user_data)
{
    QIOChannelTLSData *data = user_data;
    QIOTask *task = data->task;
    GMainContext *context = data->context;
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(
        qio_task_get_source(task));

    tioc->hs_ioc_tag = 0;
    g_free(data);
    qio_channel_tls_handshake_task(tioc, task, context);

    if (context) {
        g_main_context_unref(context);
    }

    return FALSE;
}

void qio_channel_tls_handshake(QIOChannelTLS *ioc,
                               QIOTaskFunc func,
                               gpointer opaque,
                               GDestroyNotify destroy,
                               GMainContext *context)
{
    QIOTask *task;

    task = qio_task_new(OBJECT(ioc),
                        func, opaque, destroy);

    trace_qio_channel_tls_handshake_start(ioc);
    qio_channel_tls_handshake_task(ioc, task, context);
}


static void qio_channel_tls_init(Object *obj G_GNUC_UNUSED)
{
}


static void qio_channel_tls_finalize(Object *obj)
{
    QIOChannelTLS *ioc = QIO_CHANNEL_TLS(obj);

    object_unref(OBJECT(ioc->master));
    qcrypto_tls_session_free(ioc->session);
}


static ssize_t qio_channel_tls_readv(QIOChannel *ioc,
                                     const struct iovec *iov,
                                     size_t niov,
                                     int **fds,
                                     size_t *nfds,
                                     int flags,
                                     Error **errp)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
    size_t i;
    ssize_t got = 0;

    for (i = 0 ; i < niov ; i++) {
        ssize_t ret = qcrypto_tls_session_read(tioc->session,
                                               iov[i].iov_base,
                                               iov[i].iov_len);
        if (ret < 0) {
            if (errno == EAGAIN) {
                if (got) {
                    return got;
                } else {
                    return QIO_CHANNEL_ERR_BLOCK;
                }
            } else if (errno == ECONNABORTED &&
                       (qatomic_load_acquire(&tioc->shutdown) &
                        QIO_CHANNEL_SHUTDOWN_READ)) {
                return 0;
            }

            error_setg_errno(errp, errno,
                             "Cannot read from TLS channel");
            return -1;
        }
        got += ret;
        if (ret < iov[i].iov_len) {
            break;
        }
    }
    return got;
}


static ssize_t qio_channel_tls_writev(QIOChannel *ioc,
                                      const struct iovec *iov,
                                      size_t niov,
                                      int *fds,
                                      size_t nfds,
                                      int flags,
                                      Error **errp)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
    size_t i;
    ssize_t done = 0;

    for (i = 0 ; i < niov ; i++) {
        ssize_t ret = qcrypto_tls_session_write(tioc->session,
                                                iov[i].iov_base,
                                                iov[i].iov_len);
        if (ret <= 0) {
            if (errno == EAGAIN) {
                if (done) {
                    return done;
                } else {
                    return QIO_CHANNEL_ERR_BLOCK;
                }
            }

            error_setg_errno(errp, errno,
                             "Cannot write to TLS channel");
            return -1;
        }
        done += ret;
        if (ret < iov[i].iov_len) {
            break;
        }
    }
    return done;
}

static int qio_channel_tls_set_blocking(QIOChannel *ioc,
                                        bool enabled,
                                        Error **errp)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);

    return qio_channel_set_blocking(tioc->master, enabled, errp);
}

static void qio_channel_tls_set_delay(QIOChannel *ioc,
                                      bool enabled)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);

    qio_channel_set_delay(tioc->master, enabled);
}

static void qio_channel_tls_set_cork(QIOChannel *ioc,
                                     bool enabled)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);

    qio_channel_set_cork(tioc->master, enabled);
}

static int qio_channel_tls_shutdown(QIOChannel *ioc,
                                    QIOChannelShutdown how,
                                    Error **errp)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);

    qatomic_or(&tioc->shutdown, how);

    return qio_channel_shutdown(tioc->master, how, errp);
}

static int qio_channel_tls_close(QIOChannel *ioc,
                                 Error **errp)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);

    if (tioc->hs_ioc_tag) {
        g_clear_handle_id(&tioc->hs_ioc_tag, g_source_remove);
    }

    return qio_channel_close(tioc->master, errp);
}

static void qio_channel_tls_set_aio_fd_handler(QIOChannel *ioc,
                                               AioContext *read_ctx,
                                               IOHandler *io_read,
                                               AioContext *write_ctx,
                                               IOHandler *io_write,
                                               void *opaque)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);

    qio_channel_set_aio_fd_handler(tioc->master, read_ctx, io_read,
            write_ctx, io_write, opaque);
}

typedef struct QIOChannelTLSSource QIOChannelTLSSource;
struct QIOChannelTLSSource {
    GSource parent;
    QIOChannelTLS *tioc;
};

static gboolean
qio_channel_tls_source_check(GSource *source)
{
    QIOChannelTLSSource *tsource = (QIOChannelTLSSource *)source;

    return qcrypto_tls_session_check_pending(tsource->tioc->session) > 0;
}

static gboolean
qio_channel_tls_source_prepare(GSource *source, gint *timeout)
{
    *timeout = -1;
    return qio_channel_tls_source_check(source);
}

static gboolean
qio_channel_tls_source_dispatch(GSource *source, GSourceFunc callback,
                                gpointer user_data)
{
    return G_SOURCE_CONTINUE;
}

static void
qio_channel_tls_source_finalize(GSource *source)
{
    QIOChannelTLSSource *tsource = (QIOChannelTLSSource *)source;

    object_unref(OBJECT(tsource->tioc));
}

static GSourceFuncs qio_channel_tls_source_funcs = {
    qio_channel_tls_source_prepare,
    qio_channel_tls_source_check,
    qio_channel_tls_source_dispatch,
    qio_channel_tls_source_finalize
};

static void
qio_channel_tls_read_watch(QIOChannelTLS *tioc, GSource *source)
{
    GSource *child;
    QIOChannelTLSSource *tlssource;

    child = g_source_new(&qio_channel_tls_source_funcs,
                          sizeof(QIOChannelTLSSource));
    tlssource = (QIOChannelTLSSource *)child;

    tlssource->tioc = tioc;
    object_ref(OBJECT(tioc));

    g_source_add_child_source(source, child);
    g_source_unref(child);
}

static GSource *qio_channel_tls_create_watch(QIOChannel *ioc,
                                             GIOCondition condition)
{
    QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
    GSource *source = qio_channel_create_watch(tioc->master, condition);

    if (condition & G_IO_IN) {
        qio_channel_tls_read_watch(tioc, source);
    }

    return source;
}

QCryptoTLSSession *
qio_channel_tls_get_session(QIOChannelTLS *ioc)
{
    return ioc->session;
}

static void qio_channel_tls_class_init(ObjectClass *klass,
                                       void *class_data G_GNUC_UNUSED)
{
    QIOChannelClass *ioc_klass = QIO_CHANNEL_CLASS(klass);

    ioc_klass->io_writev = qio_channel_tls_writev;
    ioc_klass->io_readv = qio_channel_tls_readv;
    ioc_klass->io_set_blocking = qio_channel_tls_set_blocking;
    ioc_klass->io_set_delay = qio_channel_tls_set_delay;
    ioc_klass->io_set_cork = qio_channel_tls_set_cork;
    ioc_klass->io_close = qio_channel_tls_close;
    ioc_klass->io_shutdown = qio_channel_tls_shutdown;
    ioc_klass->io_create_watch = qio_channel_tls_create_watch;
    ioc_klass->io_set_aio_fd_handler = qio_channel_tls_set_aio_fd_handler;
}

static const TypeInfo qio_channel_tls_info = {
    .parent = TYPE_QIO_CHANNEL,
    .name = TYPE_QIO_CHANNEL_TLS,
    .instance_size = sizeof(QIOChannelTLS),
    .instance_init = qio_channel_tls_init,
    .instance_finalize = qio_channel_tls_finalize,
    .class_init = qio_channel_tls_class_init,
};

static void qio_channel_tls_register_types(void)
{
    type_register_static(&qio_channel_tls_info);
}

type_init(qio_channel_tls_register_types);
Commit	Line	Data
ed8ee42c DB	1	/*
	2	* QEMU I/O channels TLS driver
	3	*
	4	* Copyright (c) 2015 Red Hat, Inc.
	5	*
	6	* This library is free software; you can redistribute it and/or
	7	* modify it under the terms of the GNU Lesser General Public
	8	* License as published by the Free Software Foundation; either
c8198bd5	9	* version 2.1 of the License, or (at your option) any later version.
ed8ee42c DB	10	*
	11	* This library is distributed in the hope that it will be useful,
	12	* but WITHOUT ANY WARRANTY; without even the implied warranty of
	13	* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
	14	* Lesser General Public License for more details.
	15	*
	16	* You should have received a copy of the GNU Lesser General Public
	17	* License along with this library; if not, see <http://www.gnu.org/licenses/>.
	18	*
	19	*/
	20
cae9fc56	21	#include "qemu/osdep.h"
da34e65c	22	#include "qapi/error.h"
0b8fa32f	23	#include "qemu/module.h"
ed8ee42c DB	24	#include "io/channel-tls.h"
ed8ee42c DB	25	#include "trace.h"
e4d2bfb1	26	#include "qemu/atomic.h"
ed8ee42c DB	27
	28
	29	static ssize_t qio_channel_tls_write_handler(const char *buf,
	30	size_t len,
	31	void *opaque)
	32	{
	33	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(opaque);
	34	ssize_t ret;
	35
	36	ret = qio_channel_write(tioc->master, buf, len, NULL);
	37	if (ret == QIO_CHANNEL_ERR_BLOCK) {
	38	errno = EAGAIN;
	39	return -1;
	40	} else if (ret < 0) {
	41	errno = EIO;
	42	return -1;
	43	}
	44	return ret;
	45	}
	46
	47	static ssize_t qio_channel_tls_read_handler(char *buf,
	48	size_t len,
	49	void *opaque)
	50	{
	51	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(opaque);
	52	ssize_t ret;
	53
	54	ret = qio_channel_read(tioc->master, buf, len, NULL);
	55	if (ret == QIO_CHANNEL_ERR_BLOCK) {
	56	errno = EAGAIN;
	57	return -1;
	58	} else if (ret < 0) {
	59	errno = EIO;
	60	return -1;
	61	}
	62	return ret;
	63	}
	64
	65
	66	QIOChannelTLS *
	67	qio_channel_tls_new_server(QIOChannel *master,
	68	QCryptoTLSCreds *creds,
	69	const char *aclname,
	70	Error **errp)
	71	{
	72	QIOChannelTLS *ioc;
	73
	74	ioc = QIO_CHANNEL_TLS(object_new(TYPE_QIO_CHANNEL_TLS));
	75
	76	ioc->master = master;
86d063fa PX	77	if (qio_channel_has_feature(master, QIO_CHANNEL_FEATURE_SHUTDOWN)) {
	78	qio_channel_set_feature(QIO_CHANNEL(ioc), QIO_CHANNEL_FEATURE_SHUTDOWN);
	79	}
ed8ee42c DB	80	object_ref(OBJECT(master));
	81
	82	ioc->session = qcrypto_tls_session_new(
	83	creds,
	84	NULL,
	85	aclname,
	86	QCRYPTO_TLS_CREDS_ENDPOINT_SERVER,
	87	errp);
	88	if (!ioc->session) {
	89	goto error;
	90	}
	91
	92	qcrypto_tls_session_set_callbacks(
	93	ioc->session,
	94	qio_channel_tls_write_handler,
	95	qio_channel_tls_read_handler,
	96	ioc);
	97
	98	trace_qio_channel_tls_new_server(ioc, master, creds, aclname);
	99	return ioc;
	100
	101	error:
	102	object_unref(OBJECT(ioc));
	103	return NULL;
	104	}
	105
	106	QIOChannelTLS *
	107	qio_channel_tls_new_client(QIOChannel *master,
	108	QCryptoTLSCreds *creds,
	109	const char *hostname,
	110	Error **errp)
	111	{
	112	QIOChannelTLS *tioc;
	113	QIOChannel *ioc;
	114
	115	tioc = QIO_CHANNEL_TLS(object_new(TYPE_QIO_CHANNEL_TLS));
	116	ioc = QIO_CHANNEL(tioc);
	117
	118	tioc->master = master;
e413ae0c	119	if (qio_channel_has_feature(master, QIO_CHANNEL_FEATURE_SHUTDOWN)) {
d8d3c7cc	120	qio_channel_set_feature(ioc, QIO_CHANNEL_FEATURE_SHUTDOWN);
ed8ee42c DB	121	}
	122	object_ref(OBJECT(master));
	123
	124	tioc->session = qcrypto_tls_session_new(
	125	creds,
	126	hostname,
	127	NULL,
	128	QCRYPTO_TLS_CREDS_ENDPOINT_CLIENT,
	129	errp);
	130	if (!tioc->session) {
	131	goto error;
	132	}
	133
	134	qcrypto_tls_session_set_callbacks(
	135	tioc->session,
	136	qio_channel_tls_write_handler,
	137	qio_channel_tls_read_handler,
	138	tioc);
	139
	140	trace_qio_channel_tls_new_client(tioc, master, creds, hostname);
	141	return tioc;
	142
	143	error:
	144	object_unref(OBJECT(tioc));
	145	return NULL;
	146	}
	147
1939ccda PX	148	struct QIOChannelTLSData {
	149	QIOTask *task;
	150	GMainContext *context;
	151	};
	152	typedef struct QIOChannelTLSData QIOChannelTLSData;
ed8ee42c DB	153
	154	static gboolean qio_channel_tls_handshake_io(QIOChannel *ioc,
	155	GIOCondition condition,
	156	gpointer user_data);
	157
	158	static void qio_channel_tls_handshake_task(QIOChannelTLS *ioc,
1939ccda PX	159	QIOTask *task,
1939ccda PX	160	GMainContext *context)
ed8ee42c DB	161	{
	162	Error *err = NULL;
	163	QCryptoTLSSessionHandshakeStatus status;
	164
	165	if (qcrypto_tls_session_handshake(ioc->session, &err) < 0) {
	166	trace_qio_channel_tls_handshake_fail(ioc);
60e705c5 DB	167	qio_task_set_error(task, err);
	168	qio_task_complete(task);
	169	return;
ed8ee42c DB	170	}
	171
	172	status = qcrypto_tls_session_get_handshake_status(ioc->session);
	173	if (status == QCRYPTO_TLS_HANDSHAKE_COMPLETE) {
	174	trace_qio_channel_tls_handshake_complete(ioc);
	175	if (qcrypto_tls_session_check_credentials(ioc->session,
	176	&err) < 0) {
	177	trace_qio_channel_tls_credentials_deny(ioc);
60e705c5 DB	178	qio_task_set_error(task, err);
	179	} else {
	180	trace_qio_channel_tls_credentials_allow(ioc);
ed8ee42c	181	}
ed8ee42c DB	182	qio_task_complete(task);
	183	} else {
	184	GIOCondition condition;
1939ccda PX	185	QIOChannelTLSData data = g_new0(typeof(data), 1);
	186
	187	data->task = task;
	188	data->context = context;
	189
	190	if (context) {
	191	g_main_context_ref(context);
	192	}
	193
ed8ee42c DB	194	if (status == QCRYPTO_TLS_HANDSHAKE_SENDING) {
	195	condition = G_IO_OUT;
	196	} else {
	197	condition = G_IO_IN;
	198	}
	199
	200	trace_qio_channel_tls_handshake_pending(ioc, status);
10be627d DB	201	ioc->hs_ioc_tag =
	202	qio_channel_add_watch_full(ioc->master,
	203	condition,
	204	qio_channel_tls_handshake_io,
	205	data,
	206	NULL,
	207	context);
ed8ee42c	208	}
ed8ee42c DB	209	}
	210
	211
	212	static gboolean qio_channel_tls_handshake_io(QIOChannel *ioc,
	213	GIOCondition condition,
	214	gpointer user_data)
	215	{
1939ccda PX	216	QIOChannelTLSData *data = user_data;
	217	QIOTask *task = data->task;
	218	GMainContext *context = data->context;
ed8ee42c DB	219	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(
	220	qio_task_get_source(task));
	221
10be627d	222	tioc->hs_ioc_tag = 0;
1939ccda PX	223	g_free(data);
	224	qio_channel_tls_handshake_task(tioc, task, context);
	225
	226	if (context) {
	227	g_main_context_unref(context);
	228	}
ed8ee42c	229
ed8ee42c DB	230	return FALSE;
	231	}
	232
	233	void qio_channel_tls_handshake(QIOChannelTLS *ioc,
	234	QIOTaskFunc func,
	235	gpointer opaque,
1939ccda PX	236	GDestroyNotify destroy,
1939ccda PX	237	GMainContext *context)
ed8ee42c DB	238	{
	239	QIOTask *task;
	240
	241	task = qio_task_new(OBJECT(ioc),
	242	func, opaque, destroy);
	243
	244	trace_qio_channel_tls_handshake_start(ioc);
1939ccda	245	qio_channel_tls_handshake_task(ioc, task, context);
ed8ee42c DB	246	}
	247
	248
	249	static void qio_channel_tls_init(Object *obj G_GNUC_UNUSED)
	250	{
	251	}
	252
	253
	254	static void qio_channel_tls_finalize(Object *obj)
	255	{
	256	QIOChannelTLS *ioc = QIO_CHANNEL_TLS(obj);
	257
	258	object_unref(OBJECT(ioc->master));
	259	qcrypto_tls_session_free(ioc->session);
	260	}
	261
	262
	263	static ssize_t qio_channel_tls_readv(QIOChannel *ioc,
	264	const struct iovec *iov,
	265	size_t niov,
	266	int **fds,
	267	size_t *nfds,
84615a19	268	int flags,
ed8ee42c DB	269	Error **errp)
	270	{
	271	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	272	size_t i;
	273	ssize_t got = 0;
	274
	275	for (i = 0 ; i < niov ; i++) {
	276	ssize_t ret = qcrypto_tls_session_read(tioc->session,
	277	iov[i].iov_base,
	278	iov[i].iov_len);
	279	if (ret < 0) {
	280	if (errno == EAGAIN) {
	281	if (got) {
	282	return got;
	283	} else {
	284	return QIO_CHANNEL_ERR_BLOCK;
	285	}
a2458b6f	286	} else if (errno == ECONNABORTED &&
e4d2bfb1 LS	287	(qatomic_load_acquire(&tioc->shutdown) &
e4d2bfb1 LS	288	QIO_CHANNEL_SHUTDOWN_READ)) {
a2458b6f	289	return 0;
ed8ee42c DB	290	}
	291
	292	error_setg_errno(errp, errno,
	293	"Cannot read from TLS channel");
	294	return -1;
	295	}
	296	got += ret;
	297	if (ret < iov[i].iov_len) {
	298	break;
	299	}
	300	}
	301	return got;
	302	}
	303
	304
	305	static ssize_t qio_channel_tls_writev(QIOChannel *ioc,
	306	const struct iovec *iov,
	307	size_t niov,
	308	int *fds,
	309	size_t nfds,
b88651cb	310	int flags,
ed8ee42c DB	311	Error **errp)
	312	{
	313	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	314	size_t i;
	315	ssize_t done = 0;
	316
	317	for (i = 0 ; i < niov ; i++) {
	318	ssize_t ret = qcrypto_tls_session_write(tioc->session,
	319	iov[i].iov_base,
	320	iov[i].iov_len);
	321	if (ret <= 0) {
	322	if (errno == EAGAIN) {
	323	if (done) {
	324	return done;
	325	} else {
	326	return QIO_CHANNEL_ERR_BLOCK;
	327	}
	328	}
	329
	330	error_setg_errno(errp, errno,
	331	"Cannot write to TLS channel");
	332	return -1;
	333	}
	334	done += ret;
	335	if (ret < iov[i].iov_len) {
	336	break;
	337	}
	338	}
	339	return done;
	340	}
	341
	342	static int qio_channel_tls_set_blocking(QIOChannel *ioc,
	343	bool enabled,
	344	Error **errp)
	345	{
	346	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	347
	348	return qio_channel_set_blocking(tioc->master, enabled, errp);
	349	}
	350
	351	static void qio_channel_tls_set_delay(QIOChannel *ioc,
	352	bool enabled)
	353	{
	354	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	355
	356	qio_channel_set_delay(tioc->master, enabled);
	357	}
	358
	359	static void qio_channel_tls_set_cork(QIOChannel *ioc,
	360	bool enabled)
	361	{
	362	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	363
	364	qio_channel_set_cork(tioc->master, enabled);
	365	}
	366
	367	static int qio_channel_tls_shutdown(QIOChannel *ioc,
	368	QIOChannelShutdown how,
	369	Error **errp)
	370	{
	371	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	372
e4d2bfb1	373	qatomic_or(&tioc->shutdown, how);
a2458b6f	374
ed8ee42c DB	375	return qio_channel_shutdown(tioc->master, how, errp);
	376	}
	377
	378	static int qio_channel_tls_close(QIOChannel *ioc,
	379	Error **errp)
	380	{
	381	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	382
10be627d DB	383	if (tioc->hs_ioc_tag) {
	384	g_clear_handle_id(&tioc->hs_ioc_tag, g_source_remove);
	385	}
	386
ed8ee42c DB	387	return qio_channel_close(tioc->master, errp);
	388	}
	389
bf88c124	390	static void qio_channel_tls_set_aio_fd_handler(QIOChannel *ioc,
06e0f098	391	AioContext *read_ctx,
bf88c124	392	IOHandler *io_read,
06e0f098	393	AioContext *write_ctx,
bf88c124 PB	394	IOHandler *io_write,
	395	void *opaque)
	396	{
	397	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
	398
06e0f098 SH	399	qio_channel_set_aio_fd_handler(tioc->master, read_ctx, io_read,
06e0f098 SH	400	write_ctx, io_write, opaque);
bf88c124 PB	401	}
bf88c124 PB	402
ffda5db6 AD	403	typedef struct QIOChannelTLSSource QIOChannelTLSSource;
	404	struct QIOChannelTLSSource {
	405	GSource parent;
	406	QIOChannelTLS *tioc;
	407	};
	408
	409	static gboolean
	410	qio_channel_tls_source_check(GSource *source)
	411	{
	412	QIOChannelTLSSource tsource = (QIOChannelTLSSource )source;
	413
	414	return qcrypto_tls_session_check_pending(tsource->tioc->session) > 0;
	415	}
	416
	417	static gboolean
	418	qio_channel_tls_source_prepare(GSource source, gint timeout)
	419	{
	420	*timeout = -1;
	421	return qio_channel_tls_source_check(source);
	422	}
	423
	424	static gboolean
	425	qio_channel_tls_source_dispatch(GSource *source, GSourceFunc callback,
	426	gpointer user_data)
	427	{
	428	return G_SOURCE_CONTINUE;
	429	}
	430
	431	static void
	432	qio_channel_tls_source_finalize(GSource *source)
	433	{
	434	QIOChannelTLSSource tsource = (QIOChannelTLSSource )source;
	435
	436	object_unref(OBJECT(tsource->tioc));
	437	}
	438
	439	static GSourceFuncs qio_channel_tls_source_funcs = {
	440	qio_channel_tls_source_prepare,
	441	qio_channel_tls_source_check,
	442	qio_channel_tls_source_dispatch,
	443	qio_channel_tls_source_finalize
	444	};
	445
	446	static void
	447	qio_channel_tls_read_watch(QIOChannelTLS tioc, GSource source)
	448	{
	449	GSource *child;
	450	QIOChannelTLSSource *tlssource;
	451
	452	child = g_source_new(&qio_channel_tls_source_funcs,
	453	sizeof(QIOChannelTLSSource));
	454	tlssource = (QIOChannelTLSSource *)child;
	455
	456	tlssource->tioc = tioc;
	457	object_ref(OBJECT(tioc));
	458
	459	g_source_add_child_source(source, child);
c3a2c84a	460	g_source_unref(child);
ffda5db6 AD	461	}
ffda5db6 AD	462
ed8ee42c DB	463	static GSource qio_channel_tls_create_watch(QIOChannel ioc,
	464	GIOCondition condition)
	465	{
	466	QIOChannelTLS *tioc = QIO_CHANNEL_TLS(ioc);
ffda5db6 AD	467	GSource *source = qio_channel_create_watch(tioc->master, condition);
	468
	469	if (condition & G_IO_IN) {
	470	qio_channel_tls_read_watch(tioc, source);
	471	}
ed8ee42c	472
ffda5db6	473	return source;
ed8ee42c DB	474	}
	475
	476	QCryptoTLSSession *
	477	qio_channel_tls_get_session(QIOChannelTLS *ioc)
	478	{
	479	return ioc->session;
	480	}
	481
	482	static void qio_channel_tls_class_init(ObjectClass *klass,
	483	void *class_data G_GNUC_UNUSED)
	484	{
	485	QIOChannelClass *ioc_klass = QIO_CHANNEL_CLASS(klass);
	486
	487	ioc_klass->io_writev = qio_channel_tls_writev;
	488	ioc_klass->io_readv = qio_channel_tls_readv;
	489	ioc_klass->io_set_blocking = qio_channel_tls_set_blocking;
	490	ioc_klass->io_set_delay = qio_channel_tls_set_delay;
	491	ioc_klass->io_set_cork = qio_channel_tls_set_cork;
	492	ioc_klass->io_close = qio_channel_tls_close;
	493	ioc_klass->io_shutdown = qio_channel_tls_shutdown;
	494	ioc_klass->io_create_watch = qio_channel_tls_create_watch;
bf88c124	495	ioc_klass->io_set_aio_fd_handler = qio_channel_tls_set_aio_fd_handler;
ed8ee42c DB	496	}
	497
	498	static const TypeInfo qio_channel_tls_info = {
	499	.parent = TYPE_QIO_CHANNEL,
	500	.name = TYPE_QIO_CHANNEL_TLS,
	501	.instance_size = sizeof(QIOChannelTLS),
	502	.instance_init = qio_channel_tls_init,
	503	.instance_finalize = qio_channel_tls_finalize,
	504	.class_init = qio_channel_tls_class_init,
	505	};
	506
	507	static void qio_channel_tls_register_types(void)
	508	{
	509	type_register_static(&qio_channel_tls_info);
	510	}
	511
	512	type_init(qio_channel_tls_register_types);