| | | 1 | | // Licensed to the .NET Foundation under one or more agreements. |
| | | 2 | | // The .NET Foundation licenses this file to you under the MIT license. |
| | | 3 | | |
| | | 4 | | using System; |
| | | 5 | | using System.ComponentModel; |
| | | 6 | | using System.Net.Security; |
| | | 7 | | using System.Security.Authentication; |
| | | 8 | | using System.Security.Authentication.ExtendedProtection; |
| | | 9 | | using CoreWCF.Channels; |
| | | 10 | | using CoreWCF.Security; |
| | | 11 | | |
| | | 12 | | namespace CoreWCF |
| | | 13 | | { |
| | | 14 | | public sealed partial class TcpTransportSecurity |
| | | 15 | | { |
| | | 16 | | internal const TcpClientCredentialType DefaultClientCredentialType = TcpClientCredentialType.Windows; |
| | | 17 | | internal const ProtectionLevel DefaultProtectionLevel = ProtectionLevel.EncryptAndSign; |
| | | 18 | | |
| | | 19 | | private TcpClientCredentialType _clientCredentialType; |
| | | 20 | | private ProtectionLevel _protectionLevel; |
| | | 21 | | private ExtendedProtectionPolicy _extendedProtectionPolicy; |
| | | 22 | | private SslProtocols _sslProtocols; |
| | | 23 | | |
| | 118 | 24 | | public TcpTransportSecurity() |
| | | 25 | | { |
| | 118 | 26 | | _clientCredentialType = DefaultClientCredentialType; |
| | 118 | 27 | | _protectionLevel = DefaultProtectionLevel; |
| | 118 | 28 | | _extendedProtectionPolicy = ChannelBindingUtility.DefaultPolicy; |
| | 118 | 29 | | _sslProtocols = TransportDefaults.SslProtocols; |
| | 118 | 30 | | } |
| | | 31 | | |
| | | 32 | | [DefaultValue(DefaultClientCredentialType)] |
| | | 33 | | public TcpClientCredentialType ClientCredentialType |
| | | 34 | | { |
| | 0 | 35 | | get { return _clientCredentialType; } |
| | | 36 | | set |
| | | 37 | | { |
| | 10 | 38 | | if (!TcpClientCredentialTypeHelper.IsDefined(value)) |
| | | 39 | | { |
| | 0 | 40 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new ArgumentOutOfRangeException(nameof(val |
| | | 41 | | } |
| | 10 | 42 | | _clientCredentialType = value; |
| | 10 | 43 | | } |
| | | 44 | | } |
| | | 45 | | |
| | | 46 | | [DefaultValue(DefaultProtectionLevel)] |
| | | 47 | | public ProtectionLevel ProtectionLevel |
| | | 48 | | { |
| | 0 | 49 | | get { return _protectionLevel; } |
| | | 50 | | set |
| | | 51 | | { |
| | 0 | 52 | | if (!ProtectionLevelHelper.IsDefined(value)) |
| | | 53 | | { |
| | 0 | 54 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new ArgumentOutOfRangeException(nameof(val |
| | | 55 | | } |
| | 0 | 56 | | _protectionLevel = value; |
| | 0 | 57 | | } |
| | | 58 | | } |
| | | 59 | | |
| | | 60 | | public ExtendedProtectionPolicy ExtendedProtectionPolicy |
| | | 61 | | { |
| | | 62 | | get |
| | | 63 | | { |
| | 1122 | 64 | | return _extendedProtectionPolicy; |
| | | 65 | | } |
| | | 66 | | set |
| | | 67 | | { |
| | 0 | 68 | | if (value == null) |
| | | 69 | | { |
| | 0 | 70 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperArgumentNull(nameof(value)); |
| | | 71 | | } |
| | | 72 | | |
| | 0 | 73 | | if (value.PolicyEnforcement == PolicyEnforcement.Always && |
| | 0 | 74 | | !ExtendedProtectionPolicy.OSSupportsExtendedProtection) |
| | | 75 | | { |
| | 0 | 76 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError( |
| | 0 | 77 | | new PlatformNotSupportedException(SR.ExtendedProtectionNotSupported)); |
| | | 78 | | } |
| | 0 | 79 | | _extendedProtectionPolicy = value; |
| | 0 | 80 | | } |
| | | 81 | | } |
| | | 82 | | |
| | | 83 | | [DefaultValue(TransportDefaults.SslProtocols)] |
| | | 84 | | public SslProtocols SslProtocols |
| | | 85 | | { |
| | 0 | 86 | | get { return _sslProtocols; } |
| | | 87 | | set |
| | | 88 | | { |
| | 10 | 89 | | SslProtocolsHelper.Validate(value); |
| | 10 | 90 | | _sslProtocols = value; |
| | 10 | 91 | | } |
| | | 92 | | } |
| | | 93 | | |
| | | 94 | | private SslStreamSecurityBindingElement CreateSslBindingElement(bool requireClientCertificate) |
| | | 95 | | { |
| | 90 | 96 | | if (_protectionLevel != ProtectionLevel.EncryptAndSign) |
| | | 97 | | { |
| | 0 | 98 | | throw DiagnosticUtility.ExceptionUtility.ThrowHelperError(new InvalidOperationException(SR.Format( |
| | 0 | 99 | | SR.UnsupportedSslProtectionLevel, _protectionLevel))); |
| | | 100 | | } |
| | | 101 | | |
| | 90 | 102 | | SslStreamSecurityBindingElement result = new SslStreamSecurityBindingElement |
| | 90 | 103 | | { |
| | 90 | 104 | | RequireClientCertificate = requireClientCertificate, |
| | 90 | 105 | | SslProtocols = _sslProtocols |
| | 90 | 106 | | }; |
| | 90 | 107 | | return result; |
| | | 108 | | } |
| | | 109 | | |
| | | 110 | | internal BindingElement CreateTransportProtectionOnly() |
| | | 111 | | { |
| | 74 | 112 | | return CreateSslBindingElement(false); |
| | | 113 | | } |
| | | 114 | | |
| | | 115 | | internal BindingElement CreateTransportProtectionAndAuthentication() |
| | | 116 | | { |
| | 172 | 117 | | if (_clientCredentialType == TcpClientCredentialType.Certificate || _clientCredentialType == TcpClientCreden |
| | | 118 | | { |
| | 16 | 119 | | return CreateSslBindingElement(_clientCredentialType == TcpClientCredentialType.Certificate); |
| | | 120 | | } |
| | | 121 | | else |
| | | 122 | | { |
| | 156 | 123 | | WindowsStreamSecurityBindingElement result = new WindowsStreamSecurityBindingElement |
| | 156 | 124 | | { |
| | 156 | 125 | | ProtectionLevel = _protectionLevel |
| | 156 | 126 | | }; |
| | 156 | 127 | | return result; |
| | | 128 | | } |
| | | 129 | | } |
| | | 130 | | } |
| | | 131 | | } |