a13bccff29
This patch introduces ipcclientcerts, a PKCS#11 module that the socket process can load to get access to client certificates and keys managed by the parent process. This enables client certificate authentication to work with the socket process (particularly for keys stored outside of NSS, as with osclientcerts or third-party PKCS#11 modules). Differential Revision: https://phabricator.services.mozilla.com/D122392
80 lines
2.3 KiB
C++
80 lines
2.3 KiB
C++
/* -*- Mode: C++; tab-width: 2; indent-tabs-mode: nil; c-basic-offset: 2 -*- */
|
|
/* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "SocketProcessImpl.h"
|
|
|
|
#include "base/command_line.h"
|
|
#include "base/shared_memory.h"
|
|
#include "base/string_util.h"
|
|
#include "mozilla/BackgroundHangMonitor.h"
|
|
#include "mozilla/Preferences.h"
|
|
#include "mozilla/GeckoArgs.h"
|
|
#include "mozilla/ipc/ProcessUtils.h"
|
|
#include "mozilla/ipc/IOThreadChild.h"
|
|
|
|
#if defined(OS_WIN) && defined(MOZ_SANDBOX)
|
|
# include "mozilla/sandboxTarget.h"
|
|
#elif defined(__OpenBSD__) && defined(MOZ_SANDBOX)
|
|
# include "mozilla/SandboxSettings.h"
|
|
# include "prlink.h"
|
|
#endif
|
|
|
|
#ifdef OS_POSIX
|
|
# include <unistd.h> // For sleep().
|
|
#endif
|
|
|
|
using mozilla::ipc::IOThreadChild;
|
|
|
|
namespace mozilla {
|
|
namespace net {
|
|
|
|
LazyLogModule gSocketProcessLog("socketprocess");
|
|
|
|
SocketProcessImpl::SocketProcessImpl(ProcessId aParentPid)
|
|
: ProcessChild(aParentPid) {}
|
|
|
|
SocketProcessImpl::~SocketProcessImpl() = default;
|
|
|
|
bool SocketProcessImpl::Init(int aArgc, char* aArgv[]) {
|
|
#ifdef OS_POSIX
|
|
if (PR_GetEnv("MOZ_DEBUG_SOCKET_PROCESS")) {
|
|
printf_stderr("\n\nSOCKETPROCESSnSOCKETPROCESS\n debug me @ %d\n\n",
|
|
base::GetCurrentProcId());
|
|
sleep(30);
|
|
}
|
|
#endif
|
|
#if defined(MOZ_SANDBOX) && defined(OS_WIN)
|
|
LoadLibraryW(L"nss3.dll");
|
|
LoadLibraryW(L"softokn3.dll");
|
|
LoadLibraryW(L"freebl3.dll");
|
|
LoadLibraryW(L"ipcclientcerts.dll");
|
|
mozilla::SandboxTarget::Instance()->StartSandbox();
|
|
#elif defined(__OpenBSD__) && defined(MOZ_SANDBOX)
|
|
PR_LoadLibrary("libnss3.so");
|
|
PR_LoadLibrary("libsoftokn3.so");
|
|
PR_LoadLibrary("libfreebl3.so");
|
|
PR_LoadLibrary("libipcclientcerts.so");
|
|
StartOpenBSDSandbox(GeckoProcessType_Socket);
|
|
#endif
|
|
|
|
Maybe<const char*> parentBuildID =
|
|
geckoargs::sParentBuildID.Get(aArgc, aArgv);
|
|
if (parentBuildID.isNothing()) {
|
|
return false;
|
|
}
|
|
|
|
if (!ProcessChild::InitPrefs(aArgc, aArgv)) {
|
|
return false;
|
|
}
|
|
|
|
return mSocketProcessChild.Init(ParentPid(), *parentBuildID,
|
|
IOThreadChild::TakeInitialPort());
|
|
}
|
|
|
|
void SocketProcessImpl::CleanUp() { mSocketProcessChild.CleanUp(); }
|
|
|
|
} // namespace net
|
|
} // namespace mozilla
|