Yoda 0.12.5

Browser for Gemini Protocol
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116

mod certificate;
mod database;

use anyhow::Result;
use certificate::Certificate;
use database::Database;
use gtk::{
    gio::TlsCertificate,
    glib::{DateTime, GString, Uri},
};
use r2d2::Pool;
use r2d2_sqlite::SqliteConnectionManager;
use sqlite::Transaction;
use std::{cell::RefCell, collections::HashMap};

/// TOFU wrapper for the Gemini protocol
///
/// https://geminiprotocol.net/docs/protocol-specification.gmi#tls-server-certificate-validation
pub struct Tofu {
    database: Database,
    memory: RefCell<HashMap<(GString, i32), Certificate>>,
}

impl Tofu {
    // Constructors

    pub fn init(database_pool: &Pool<SqliteConnectionManager>, profile_id: i64) -> Result<Self> {
        let database = Database::init(database_pool, profile_id);

        let records = database.records()?;
        let memory = RefCell::new(HashMap::with_capacity(records.len()));

        {
            // build in-memory index...
            let mut m = memory.borrow_mut();
            for r in records {
                if m.insert(
                    (r.host.into(), r.port),
                    Certificate::from_db(Some(r.id), &r.pem, DateTime::from_unix_local(r.time)?)?,
                )
                .is_some()
                {
                    panic!() // expect unique address
                }
            }
        }

        Ok(Self { database, memory })
    }

    // Actions

    pub fn add(
        &self,
        uri: &Uri,
        default_port: i32,
        tls_certificate: TlsCertificate,
    ) -> Result<bool> {
        match uri.host() {
            Some(host) => Ok(self
                .memory
                .borrow_mut()
                .insert(
                    (host, port(uri.port(), default_port)),
                    Certificate::from_tls_certificate(tls_certificate)?,
                )
                .is_none()),
            None => Ok(false),
        }
    }

    pub fn server_certificate(&self, uri: &Uri, default_port: i32) -> Option<TlsCertificate> {
        uri.host().and_then(|host| {
            self.memory
                .borrow()
                .get(&(host, port(uri.port(), default_port)))
                .map(|c| c.tls_certificate().clone())
        })
    }

    /// Save in-memory index to the permanent database (on app close)
    pub fn save(&self) -> Result<()> {
        for ((host, port), certificate) in self.memory.borrow_mut().drain() {
            if certificate.id().is_none() {
                self.database.add(
                    host.into(),
                    port,
                    certificate.time().to_unix(),
                    &certificate.pem(),
                )?;
            }
        }
        Ok(())
    }
}

// Tools

pub fn migrate(tx: &Transaction) -> Result<()> {
    // Migrate self components
    database::init(tx)?;

    // Delegate migration to childs
    // nothing yet...

    // Success
    Ok(())
}

fn port(port: i32, default_port: i32) -> i32 {
    if port.is_positive() {
        port
    } else {
        default_port
    }
}