Direct TCP connection between two Jabber entities.
WARNING: This document has been retracted by the author(s). Implementation of the protocol described herein is not recommended. Developers desiring similar functionality should implement the protocol that supersedes this one (if any).
Series: XEP
Number: 0046
Publisher: XMPP Standards Foundation
Status:
Retracted
Type:
Standards Track
Version: 0.8
Last Updated: 2003-04-11
Approving Body: XMPP Council
Dependencies: None
Supersedes: None
Superseded By: None
Short Name: None
Wiki Page: <http://wiki.jabber.org/index.php/DTCP (XEP-0046)>
Email:
justin@affinix.com
JabberID:
justin@andbit.net
The preferred venue for discussion of this document is the Standards discussion list: <http://mail.jabber.org/mailman/listinfo/standards>.
Errata may be sent to <editor@xmpp.org>.
The Extensible Messaging and Presence Protocol (XMPP) is defined in the XMPP Core (RFC 3920) and XMPP IM (RFC 3921) specifications contributed by the XMPP Standards Foundation to the Internet Standards Process, which is managed by the Internet Engineering Task Force in accordance with RFC 2026. Any protocol defined in this document has been developed outside the Internet Standards Process and is to be understood as an extension to XMPP rather than as an evolution, development, or modification of XMPP itself.
The following keywords as used in this document are to be interpreted as described in RFC 2119: "MUST", "SHALL", "REQUIRED"; "MUST NOT", "SHALL NOT"; "SHOULD", "RECOMMENDED"; "SHOULD NOT", "NOT RECOMMENDED"; "MAY", "OPTIONAL".
1. Introduction
2. Requirements
3. Implementation
3.1. Requesting a DTCP connection
3.2. Establishing the TCP connection
3.3. The handshake
3.3.1. SSL/TLS
3.3.2. Authenticating
Notes
Revision History
There are cases where it would be more optimal for clients to exchange data directly with each other rather than through the server. DTCP specifies a method for establishing a direct TCP socket connection between two entities, so that a reliable bytestream can be created out-of-band.
The following design goals are considered:
Say you wish to initiate a DTCP session with Joe:
Example 1. Requesting a DTCP session
<iq type="set" id="dtcp_1" to="joe@blow.com/Home">
<query xmlns="http://jabber.org/protocol/dtcp">
<key>c7b5ea3f</key>
<host>192.168.0.32:8000</host>
<host>63.110.44.12:8000</host>
</query>
</iq>
The 'key' given is a unique key for Joe to use when referencing this session with you. If a 'host' element is present, then you are indicating that you can be reached at the given "host:port". Multiple hosts may be specified, but Joe cannot be expected to act on more than three of them.
<iq type="result" id="dtcp_1" from="joe@blow.com/Home">
<query xmlns="http://jabber.org/protocol/dtcp">
<key>a1b2c3d4</key>
<host>192.168.0.33:8000</host>
</query>
</iq>
The success response is in exactly the same format as the request. As before, Joe cannot expect you to act on more than three hosts. The 'key' is a unique key from Joe that you will use when referring to the session with him.
<iq type="error" id="dtcp_1" from="joe@blow.com/Home"> <error code="501">DTCP not supported</error> </iq>
Or he may send an error.
If you received a success response, then the next step is to form the TCP connection. Each entity should have a list of hosts (between 0-3 inclusive) and key of the other. With this information, they should each try to establish a direct connection with the hosts provided. When these connections take place is implementation dependent. Clients may choose to connect to all provided hosts at once, and both clients may even end up connecting to each other simultaneously. Clients may delay between connections, etc. As such, clients that are listening for connections should be prepared for anything.
The procedure ends when either a successful DTCP connection is formed (and all other TCP connections discarded), or when both entities have given up. An entity gives up when it is no longer trying to connect to any hosts. This is done by sending an additional iq-error packet, with the key of the other entity:
<iq type="error" to="joe@blow.com/Home">
<query xmlns="http://jabber.org/protocol/dtcp">
<key>a1b2c3d4</key>
</query>
<error code="503">Could not connect to any of the hosts.</error>
</iq>
If an entity was not provided any hosts, then it is assumed that he has given up and this packet need not be sent.
For a given host, a TCP socket connection is established. Once connected, the connecting client must send a command across the channel. Each command is a line of text terminated by the ASCII linefeed character (0x0A).
[command]:[argument]<LF>
Some commands may have an argument, which is placed on the same line and separated by a colon character. If there is no argument, then the colon need not be present.
The serving client should keep the connection open after responding to a command, even if it resulted in an error, in case the connecting client wishes to try another command.
If you want an encrypted channel, then it must be requested using the 'starttls' command
starttls<LF>
If successful, the serving client should send back:
ok<LF>
This means that the serving client supports SSL and the connecting client should begin the SSL/TLS negotiation. After this, further data sent/received over the channel should be in encrypted form.
Or the serving client might report an error:
error<LF>
This means SSL is not supported by the serving client.
To complete the DTCP connection, the connecting client must authenticate with the serving client. This is done by exchanging keys. First, the connecting client sends the serving client's key:
key:a1b2c3d4<LF>
If the serving client recognizes the key, then it should respond by sending the connecting client's key:
ok:c7b5ea3f<LF>
Or the serving client might report an error:
error<LF>
On success, there may be one more step necessary. If the connecting client is also the original requestor of the DTCP connection (ie, he did the iq-set), then he must send the following "ack":
ok<LF>
This gives the final say to the requestor, to prevent any sort of race-condition due to the clients contacting each other at the same time. If the serving client is the requestor, then this extra "ack" is NOT needed and must NOT be sent.
At this point, the channel is established. No further commands may be issued, as the TCP connection is now for application data only.
1. DTCP works in situations where at least one client can accept incoming connections.
END