1 /*
2  * Copyright (C) 2017 The Android Open Source Project
3  *
4  * Licensed under the Apache License, Version 2.0 (the "License");
5  * you may not use this file except in compliance with the License.
6  * You may obtain a copy of the License at
7  *
8  *      http://www.apache.org/licenses/LICENSE-2.0
9  *
10  * Unless required by applicable law or agreed to in writing, software
11  * distributed under the License is distributed on an "AS IS" BASIS,
12  * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
13  * See the License for the specific language governing permissions and
14  * limitations under the License.
15  */
16 
17 #pragma once
18 
19 #include <chrono>
20 #include <set>
21 #include <string>
22 #include <vector>
23 
24 #include <netinet/in.h>
25 
26 #include <params.h>
27 
28 namespace android {
29 namespace net {
30 
31 // DnsTlsServer represents a recursive resolver that supports, or may support, a
32 // secure protocol.
33 struct DnsTlsServer {
34     // Default constructor.
DnsTlsServerDnsTlsServer35     DnsTlsServer() {}
36 
37     // Allow sockaddr_storage to be promoted to DnsTlsServer automatically.
DnsTlsServerDnsTlsServer38     DnsTlsServer(const sockaddr_storage& ss) : ss(ss) {}
39 
40     // The server location, including IP and port.
41     sockaddr_storage ss = {};
42 
43     // The server's hostname.  If this string is nonempty, the server must present a
44     // certificate that indicates this name and has a valid chain to a trusted root CA.
45     std::string name;
46 
47     // The certificate of the CA that signed the server's certificate.
48     // It is used to store temporary test CA certificate for internal tests.
49     std::string certificate;
50 
51     // Placeholder.  More protocols might be defined in the future.
52     int protocol = IPPROTO_TCP;
53 
54     // The time to wait for the attempt on connecting to the server.
55     // Set the default value 127 seconds to be consistent with TCP connect timeout.
56     // (presume net.ipv4.tcp_syn_retries = 6)
57     static constexpr std::chrono::milliseconds kDotConnectTimeoutMs =
58             std::chrono::milliseconds(127 * 1000);
59     std::chrono::milliseconds connectTimeout = kDotConnectTimeoutMs;
60 
61     // Exact comparison of DnsTlsServer objects
62     bool operator<(const DnsTlsServer& other) const;
63     bool operator==(const DnsTlsServer& other) const;
64 
65     bool wasExplicitlyConfigured() const;
66 };
67 
68 // This comparison only checks the IP address.  It ignores ports, names, and fingerprints.
69 struct AddressComparator {
70     bool operator()(const DnsTlsServer& x, const DnsTlsServer& y) const;
71 };
72 
73 }  // namespace net
74 }  // namespace android
75