mirror of https://github.com/vacp2p/nim-libp2p.git
fix: inconsistent error handling (#56)
* fix: inconsistent error handling * fixing a few more returns * remov reduntant returns * feat: dont sleep in readLoop
This commit is contained in:
parent
e0aae6d8ac
commit
b6b0cdea98
|
@ -65,6 +65,7 @@ method handle*(m: Mplex) {.async, gcsafe.} =
|
||||||
trace "waiting for data"
|
trace "waiting for data"
|
||||||
let msg = await m.connection.readMsg()
|
let msg = await m.connection.readMsg()
|
||||||
if msg.isNone:
|
if msg.isNone:
|
||||||
|
trace "connection EOF"
|
||||||
# TODO: allow poll with timeout to avoid using `sleepAsync`
|
# TODO: allow poll with timeout to avoid using `sleepAsync`
|
||||||
await sleepAsync(1.millis)
|
await sleepAsync(1.millis)
|
||||||
continue
|
continue
|
||||||
|
|
|
@ -68,6 +68,8 @@ type
|
||||||
writerCoder: SecureCipher
|
writerCoder: SecureCipher
|
||||||
readerCoder: SecureCipher
|
readerCoder: SecureCipher
|
||||||
|
|
||||||
|
SecioError* = object of CatchableError
|
||||||
|
|
||||||
proc init(mac: var SecureMac, hash: string, key: openarray[byte]) =
|
proc init(mac: var SecureMac, hash: string, key: openarray[byte]) =
|
||||||
if hash == "SHA256":
|
if hash == "SHA256":
|
||||||
mac = SecureMac(kind: SecureMacType.Sha256)
|
mac = SecureMac(kind: SecureMacType.Sha256)
|
||||||
|
@ -313,16 +315,16 @@ proc handshake*(s: Secio, conn: Connection): Future[SecureConnection] {.async.}
|
||||||
|
|
||||||
if len(answer) == 0:
|
if len(answer) == 0:
|
||||||
trace "Proposal exchange failed", conn = conn
|
trace "Proposal exchange failed", conn = conn
|
||||||
return
|
raise newException(SecioError, "Proposal exchange failed")
|
||||||
|
|
||||||
if not decodeProposal(answer, remoteNonce, remoteBytesPubkey, remoteExchanges,
|
if not decodeProposal(answer, remoteNonce, remoteBytesPubkey, remoteExchanges,
|
||||||
remoteCiphers, remoteHashes):
|
remoteCiphers, remoteHashes):
|
||||||
trace "Remote proposal decoding failed", conn = conn
|
trace "Remote proposal decoding failed", conn = conn
|
||||||
return
|
raise newException(SecioError, "Remote proposal decoding failed")
|
||||||
|
|
||||||
if not remotePubkey.init(remoteBytesPubkey):
|
if not remotePubkey.init(remoteBytesPubkey):
|
||||||
trace "Remote public key incorrect or corrupted", pubkey = remoteBytesPubkey
|
trace "Remote public key incorrect or corrupted", pubkey = remoteBytesPubkey
|
||||||
return
|
raise newException(SecioError, "Remote public key incorrect or corrupted")
|
||||||
|
|
||||||
remotePeerId = PeerID.init(remotePubkey)
|
remotePeerId = PeerID.init(remotePubkey)
|
||||||
|
|
||||||
|
@ -340,7 +342,7 @@ proc handshake*(s: Secio, conn: Connection): Future[SecureConnection] {.async.}
|
||||||
let hash = selectBest(order, SecioHashes, remoteHashes)
|
let hash = selectBest(order, SecioHashes, remoteHashes)
|
||||||
if len(scheme) == 0 or len(cipher) == 0 or len(hash) == 0:
|
if len(scheme) == 0 or len(cipher) == 0 or len(hash) == 0:
|
||||||
trace "No algorithms in common", peer = remotePeerId
|
trace "No algorithms in common", peer = remotePeerId
|
||||||
return
|
raise newException(SecioError, "No algorithms in common")
|
||||||
|
|
||||||
trace "Encryption scheme selected", scheme = scheme, cipher = cipher,
|
trace "Encryption scheme selected", scheme = scheme, cipher = cipher,
|
||||||
hash = hash
|
hash = hash
|
||||||
|
@ -352,41 +354,40 @@ proc handshake*(s: Secio, conn: Connection): Future[SecureConnection] {.async.}
|
||||||
var signature = s.localPrivateKey.sign(localCorpus)
|
var signature = s.localPrivateKey.sign(localCorpus)
|
||||||
|
|
||||||
var localExchange = createExchange(epubkey, signature.getBytes())
|
var localExchange = createExchange(epubkey, signature.getBytes())
|
||||||
|
|
||||||
var remoteExchange = await transactMessage(conn, localExchange)
|
var remoteExchange = await transactMessage(conn, localExchange)
|
||||||
if len(remoteExchange) == 0:
|
if len(remoteExchange) == 0:
|
||||||
trace "Corpus exchange failed", conn = conn
|
trace "Corpus exchange failed", conn = conn
|
||||||
return
|
raise newException(SecioError, "Corpus exchange failed")
|
||||||
|
|
||||||
if not decodeExchange(remoteExchange, remoteEBytesPubkey, remoteEBytesSig):
|
if not decodeExchange(remoteExchange, remoteEBytesPubkey, remoteEBytesSig):
|
||||||
trace "Remote exchange decoding failed", conn = conn
|
trace "Remote exchange decoding failed", conn = conn
|
||||||
return
|
raise newException(SecioError, "Remote exchange decoding failed")
|
||||||
|
|
||||||
if not remoteESignature.init(remoteEBytesSig):
|
if not remoteESignature.init(remoteEBytesSig):
|
||||||
trace "Remote signature incorrect or corrupted",
|
trace "Remote signature incorrect or corrupted",
|
||||||
signature = toHex(remoteEBytesSig)
|
signature = toHex(remoteEBytesSig)
|
||||||
return
|
raise newException(SecioError, "Remote signature incorrect or corrupted")
|
||||||
|
|
||||||
var remoteCorpus = answer & request[4..^1] & remoteEBytesPubkey
|
var remoteCorpus = answer & request[4..^1] & remoteEBytesPubkey
|
||||||
if not remoteESignature.verify(remoteCorpus, remotePubkey):
|
if not remoteESignature.verify(remoteCorpus, remotePubkey):
|
||||||
trace "Signature verification failed", scheme = remotePubkey.scheme,
|
trace "Signature verification failed", scheme = remotePubkey.scheme,
|
||||||
signature = remoteESignature, pubkey = remotePubkey,
|
signature = remoteESignature, pubkey = remotePubkey,
|
||||||
corpus = remoteCorpus
|
corpus = remoteCorpus
|
||||||
return
|
raise newException(SecioError, "Signature verification failed")
|
||||||
|
|
||||||
trace "Signature verified", scheme = remotePubkey.scheme
|
trace "Signature verified", scheme = remotePubkey.scheme
|
||||||
|
|
||||||
if not remoteEPubkey.eckey.initRaw(remoteEBytesPubkey):
|
if not remoteEPubkey.eckey.initRaw(remoteEBytesPubkey):
|
||||||
trace "Remote ephemeral public key incorrect or corrupted",
|
trace "Remote ephemeral public key incorrect or corrupted",
|
||||||
pubkey = toHex(remoteEBytesPubkey)
|
pubkey = toHex(remoteEBytesPubkey)
|
||||||
return
|
raise newException(SecioError, "Remote ephemeral public key incorrect or corrupted")
|
||||||
|
|
||||||
var secret = getSecret(remoteEPubkey, ekeypair.seckey)
|
var secret = getSecret(remoteEPubkey, ekeypair.seckey)
|
||||||
if len(secret) == 0:
|
if len(secret) == 0:
|
||||||
trace "Shared secret could not be created",
|
trace "Shared secret could not be created",
|
||||||
pubkeyScheme = remoteEPubkey.scheme,
|
pubkeyScheme = remoteEPubkey.scheme,
|
||||||
seckeyScheme = ekeypair.seckey.scheme
|
seckeyScheme = ekeypair.seckey.scheme
|
||||||
return
|
raise newException(SecioError, "Shared secret could not be created")
|
||||||
|
|
||||||
trace "Shared secret calculated", secret = toHex(secret)
|
trace "Shared secret calculated", secret = toHex(secret)
|
||||||
|
|
||||||
|
@ -416,15 +417,16 @@ proc readLoop(sconn: SecureConnection, stream: BufferStream) {.async.} =
|
||||||
try:
|
try:
|
||||||
while not sconn.closed:
|
while not sconn.closed:
|
||||||
let msg = await sconn.readMessage()
|
let msg = await sconn.readMessage()
|
||||||
if msg.len > 0:
|
if msg.len == 0:
|
||||||
await stream.pushTo(msg)
|
trace "stream EOF"
|
||||||
|
return
|
||||||
|
|
||||||
# tight loop, give a chance for other
|
await stream.pushTo(msg)
|
||||||
# stuff to run as well
|
|
||||||
await sleepAsync(1.millis)
|
|
||||||
except CatchableError as exc:
|
except CatchableError as exc:
|
||||||
trace "exception occured", exc = exc.msg
|
trace "exception occured", exc = exc.msg
|
||||||
finally:
|
finally:
|
||||||
|
if not sconn.closed:
|
||||||
|
await sconn.close()
|
||||||
trace "ending secio readLoop", isclosed = sconn.closed()
|
trace "ending secio readLoop", isclosed = sconn.closed()
|
||||||
|
|
||||||
proc handleConn(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.} =
|
proc handleConn(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.} =
|
||||||
|
@ -436,26 +438,34 @@ proc handleConn(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.
|
||||||
var stream = newBufferStream(writeHandler)
|
var stream = newBufferStream(writeHandler)
|
||||||
asyncCheck readLoop(sconn, stream)
|
asyncCheck readLoop(sconn, stream)
|
||||||
var secured = newConnection(stream)
|
var secured = newConnection(stream)
|
||||||
|
secured.peerInfo = PeerInfo.init(sconn.peerInfo.publicKey.get())
|
||||||
|
result = secured
|
||||||
|
|
||||||
secured.closeEvent.wait()
|
secured.closeEvent.wait()
|
||||||
.addCallback do (udata: pointer):
|
.addCallback do (udata: pointer):
|
||||||
trace "wrapped connection closed, closing upstream"
|
trace "wrapped connection closed, closing upstream"
|
||||||
if not isNil(sconn) and not sconn.closed:
|
if not isNil(sconn) and not sconn.closed:
|
||||||
asyncCheck sconn.close()
|
asyncCheck sconn.close()
|
||||||
|
|
||||||
secured.peerInfo = PeerInfo.init(sconn.peerInfo.publicKey.get())
|
|
||||||
result = secured
|
|
||||||
|
|
||||||
method init(s: Secio) {.gcsafe.} =
|
method init(s: Secio) {.gcsafe.} =
|
||||||
proc handle(conn: Connection, proto: string) {.async, gcsafe.} =
|
proc handle(conn: Connection, proto: string) {.async, gcsafe.} =
|
||||||
trace "handling connection"
|
trace "handling connection"
|
||||||
|
try:
|
||||||
discard await s.handleConn(conn)
|
discard await s.handleConn(conn)
|
||||||
trace "connection secured"
|
trace "connection secured"
|
||||||
|
except CatchableError as exc:
|
||||||
|
trace "securing connection failed", msg = exc.msg
|
||||||
|
await conn.close()
|
||||||
|
|
||||||
s.codec = SecioCodec
|
s.codec = SecioCodec
|
||||||
s.handler = handle
|
s.handler = handle
|
||||||
|
|
||||||
method secure*(s: Secio, conn: Connection): Future[Connection] {.gcsafe.} =
|
method secure*(s: Secio, conn: Connection): Future[Connection] {.async, gcsafe.} =
|
||||||
result = s.handleConn(conn)
|
try:
|
||||||
|
result = await s.handleConn(conn)
|
||||||
|
except CatchableError as exc:
|
||||||
|
trace "securing connection failed", msg = exc.msg
|
||||||
|
await conn.close()
|
||||||
|
|
||||||
proc newSecio*(localPrivateKey: PrivateKey): Secio =
|
proc newSecio*(localPrivateKey: PrivateKey): Secio =
|
||||||
new result
|
new result
|
||||||
|
|
|
@ -140,6 +140,7 @@ proc cleanupConn(s: Switch, conn: Connection) {.async, gcsafe.} =
|
||||||
s.muxed.del(id)
|
s.muxed.del(id)
|
||||||
|
|
||||||
if id in s.connections:
|
if id in s.connections:
|
||||||
|
if not s.connections[id].closed:
|
||||||
await s.connections[id].close()
|
await s.connections[id].close()
|
||||||
s.connections.del(id)
|
s.connections.del(id)
|
||||||
|
|
||||||
|
@ -166,6 +167,9 @@ proc upgradeOutgoing(s: Switch, conn: Connection): Future[Connection] {.async, g
|
||||||
return
|
return
|
||||||
|
|
||||||
result = await s.secure(result) # secure the connection
|
result = await s.secure(result) # secure the connection
|
||||||
|
if isNil(result):
|
||||||
|
return
|
||||||
|
|
||||||
await s.mux(result) # mux it if possible
|
await s.mux(result) # mux it if possible
|
||||||
s.connections[conn.peerInfo.id] = result
|
s.connections[conn.peerInfo.id] = result
|
||||||
|
|
||||||
|
@ -212,7 +216,11 @@ proc dial*(s: Switch,
|
||||||
# make sure to assign the peer to the connection
|
# make sure to assign the peer to the connection
|
||||||
result.peerInfo = peer
|
result.peerInfo = peer
|
||||||
result = await s.upgradeOutgoing(result)
|
result = await s.upgradeOutgoing(result)
|
||||||
result.closeEvent.wait().addCallback do (udata: pointer):
|
if isNil(result):
|
||||||
|
continue
|
||||||
|
|
||||||
|
result.closeEvent.wait()
|
||||||
|
.addCallback do (udata: pointer):
|
||||||
asyncCheck s.cleanupConn(result)
|
asyncCheck s.cleanupConn(result)
|
||||||
break
|
break
|
||||||
else:
|
else:
|
||||||
|
@ -252,7 +260,9 @@ proc start*(s: Switch): Future[seq[Future[void]]] {.async, gcsafe.} =
|
||||||
except CatchableError as exc:
|
except CatchableError as exc:
|
||||||
trace "exception occured", exc = exc.msg
|
trace "exception occured", exc = exc.msg
|
||||||
finally:
|
finally:
|
||||||
|
if not isNil(conn) and not conn.closed:
|
||||||
await conn.close()
|
await conn.close()
|
||||||
|
|
||||||
await s.cleanupConn(conn)
|
await s.cleanupConn(conn)
|
||||||
|
|
||||||
var startFuts: seq[Future[void]]
|
var startFuts: seq[Future[void]]
|
||||||
|
@ -346,4 +356,3 @@ proc newSwitch*(peerInfo: PeerInfo,
|
||||||
if pubSub.isSome:
|
if pubSub.isSome:
|
||||||
result.pubSub = pubSub
|
result.pubSub = pubSub
|
||||||
result.mount(pubSub.get())
|
result.mount(pubSub.get())
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue