draft new api version

src/client/connection.rs

@@ -0,0 +1,82 @@
+pub mod certificate;
+pub mod error;
+
+pub use certificate::Certificate;
+pub use error::Error;
+
+use gio::{
+    prelude::{IOStreamExt, TlsConnectionExt},
+    IOStream, NetworkAddress, SocketConnection, TlsCertificate, TlsClientConnection,
+};
+use glib::object::{Cast, IsA};
+
+pub struct Connection {
+    pub socket_connection: SocketConnection,
+    pub tls_client_connection: Option<TlsClientConnection>,
+}
+
+impl Connection {
+    // Constructors
+
+    /// Create new `Self`
+    pub fn from(
+        network_address: NetworkAddress, // @TODO struct cert as sni
+        socket_connection: SocketConnection,
+        certificate: Option<TlsCertificate>,
+    ) -> Result<Self, Error> {
+        if socket_connection.is_closed() {
+            return Err(Error::Closed);
+        }
+
+        Ok(Self {
+            socket_connection: socket_connection.clone(),
+            tls_client_connection: match certificate {
+                Some(certificate) => match auth(network_address, socket_connection, certificate) {
+                    Ok(tls_client_connection) => Some(tls_client_connection),
+                    Err(reason) => return Err(reason),
+                },
+                None => None,
+            },
+        })
+    }
+
+    // Getters
+
+    pub fn stream(&self) -> impl IsA<IOStream> {
+        match self.tls_client_connection.clone() {
+            Some(tls_client_connection) => tls_client_connection.upcast::<IOStream>(),
+            None => self.socket_connection.clone().upcast::<IOStream>(),
+        }
+    }
+}
+
+// Tools
+
+pub fn auth(
+    server_identity: NetworkAddress, // @TODO impl IsA<SocketConnectable> ?
+    socket_connection: SocketConnection,
+    certificate: TlsCertificate,
+) -> Result<TlsClientConnection, Error> {
+    if socket_connection.is_closed() {
+        return Err(Error::Closed);
+    }
+
+    // https://geminiprotocol.net/docs/protocol-specification.gmi#the-use-of-tls
+    match TlsClientConnection::new(&socket_connection, Some(&server_identity)) {
+        Ok(tls_client_connection) => {
+            // https://geminiprotocol.net/docs/protocol-specification.gmi#client-certificates
+            tls_client_connection.set_certificate(&certificate);
+
+            // @TODO handle exceptions
+            // https://geminiprotocol.net/docs/protocol-specification.gmi#closing-connections
+            tls_client_connection.set_require_close_notify(true);
+
+            // @TODO host validation
+            // https://geminiprotocol.net/docs/protocol-specification.gmi#tls-server-certificate-validation
+            tls_client_connection.connect_accept_certificate(move |_, _, _| true);
+
+            Ok(tls_client_connection)
+        }
+        Err(reason) => Err(Error::Tls(reason)),
+    }
+}