trust_dns_proto/native_tls/
tls_client_stream.rs

1// Copyright 2015-2016 Benjamin Fry <benjaminfry@me.com>
2//
3// Licensed under the Apache License, Version 2.0, <LICENSE-APACHE or
4// http://apache.org/licenses/LICENSE-2.0> or the MIT license <LICENSE-MIT or
5// http://opensource.org/licenses/MIT>, at your option. This file may not be
6// copied, modified, or distributed except according to those terms.
7
8//! TlsClientStream for DNS over TLS
9
10use std::future::Future;
11use std::net::SocketAddr;
12use std::pin::Pin;
13
14use futures_util::TryFutureExt;
15use native_tls::Certificate;
16#[cfg(feature = "mtls")]
17use native_tls::Pkcs12;
18use tokio_native_tls::TlsStream as TokioTlsStream;
19
20use crate::error::ProtoError;
21use crate::iocompat::AsyncIoStdAsTokio;
22use crate::iocompat::AsyncIoTokioAsStd;
23use crate::native_tls::TlsStreamBuilder;
24use crate::tcp::{Connect, DnsTcpStream, TcpClientStream};
25use crate::xfer::BufDnsStreamHandle;
26
27/// TlsClientStream secure DNS over TCP stream
28///
29/// See TlsClientStreamBuilder::new()
30pub type TlsClientStream<S> =
31    TcpClientStream<AsyncIoTokioAsStd<TokioTlsStream<AsyncIoStdAsTokio<S>>>>;
32
33/// Builder for TlsClientStream
34pub struct TlsClientStreamBuilder<S>(TlsStreamBuilder<S>);
35
36impl<S: DnsTcpStream> TlsClientStreamBuilder<S> {
37    /// Creates a builder fo the construction of a TlsClientStream
38    pub fn new() -> Self {
39        Self(TlsStreamBuilder::new())
40    }
41
42    /// Add a custom trusted peer certificate or certificate authority.
43    ///
44    /// If this is the 'client' then the 'server' must have it associated as it's `identity`, or have had the `identity` signed by this certificate.
45    pub fn add_ca(&mut self, ca: Certificate) {
46        self.0.add_ca(ca);
47    }
48
49    /// Client side identity for client auth in TLS (aka mutual TLS auth)
50    #[cfg(feature = "mtls")]
51    pub fn identity(&mut self, pkcs12: Pkcs12) {
52        self.0.identity(pkcs12);
53    }
54
55    /// Sets the address to connect from.
56    pub fn bind_addr(&mut self, bind_addr: SocketAddr) {
57        self.0.bind_addr(bind_addr);
58    }
59
60    /// Creates a new TlsStream to the specified name_server with stream future.
61    ///
62    /// # Arguments
63    ///
64    /// * 'future` - future of TCP stream
65    /// * `name_server` - IP and Port for the remote DNS resolver
66    /// * `dns_name` - The DNS name, Subject Public Key Info (SPKI) name, as associated to a certificate
67    #[allow(clippy::type_complexity)]
68    pub fn build_with_future<F>(
69        self,
70        future: F,
71        name_server: SocketAddr,
72        dns_name: String,
73    ) -> (
74        Pin<Box<dyn Future<Output = Result<TlsClientStream<S>, ProtoError>> + Send>>,
75        BufDnsStreamHandle,
76    )
77    where
78        F: Future<Output = std::io::Result<S>> + Send + Unpin + 'static,
79    {
80        let (stream_future, sender) = self.0.build_with_future(future, name_server, dns_name);
81
82        let new_future = Box::pin(
83            stream_future
84                .map_ok(TcpClientStream::from_stream)
85                .map_err(ProtoError::from),
86        );
87
88        (new_future, sender)
89    }
90}
91
92impl<S: Connect> TlsClientStreamBuilder<S> {
93    /// Creates a new TlsStream to the specified name_server
94    ///
95    /// # Arguments
96    ///
97    /// * `name_server` - IP and Port for the remote DNS resolver
98    /// * `dns_name` - The DNS name, Subject Public Key Info (SPKI) name, as associated to a certificate
99    #[allow(clippy::type_complexity)]
100    pub fn build(
101        self,
102        name_server: SocketAddr,
103        dns_name: String,
104    ) -> (
105        Pin<Box<dyn Future<Output = Result<TlsClientStream<S>, ProtoError>> + Send>>,
106        BufDnsStreamHandle,
107    ) {
108        let (stream_future, sender) = self.0.build(name_server, dns_name);
109
110        let new_future = Box::pin(
111            stream_future
112                .map_ok(TcpClientStream::from_stream)
113                .map_err(ProtoError::from),
114        );
115
116        (new_future, sender)
117    }
118}
119
120impl<S: DnsTcpStream> Default for TlsClientStreamBuilder<S> {
121    fn default() -> Self {
122        Self::new()
123    }
124}
trust_dns_proto/native_tls/tls_client_stream.rs

trust_dns_proto/native_tls/
tls_client_stream.rs
