mirror of
https://github.com/RetroShare/RetroShare.git
synced 2024-12-29 09:26:18 -05:00
136 lines
6.4 KiB
C++
136 lines
6.4 KiB
C++
/*******************************************************************************
|
|
* libretroshare/src/pqi: sslfns.h *
|
|
* *
|
|
* libretroshare: retroshare core library *
|
|
* *
|
|
* Copyright 2004-2008 by Robert Fernie <retroshare@lunamutt.com> *
|
|
* *
|
|
* This program is free software: you can redistribute it and/or modify *
|
|
* it under the terms of the GNU Lesser General Public License as *
|
|
* published by the Free Software Foundation, either version 3 of the *
|
|
* License, or (at your option) any later version. *
|
|
* *
|
|
* This program is distributed in the hope that it will be useful, *
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of *
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the *
|
|
* GNU Lesser General Public License for more details. *
|
|
* *
|
|
* You should have received a copy of the GNU Lesser General Public License *
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>. *
|
|
* *
|
|
*******************************************************************************/
|
|
#pragma once
|
|
|
|
/* Functions in this file are SSL only,
|
|
* and have no dependence on SSLRoot() etc.
|
|
* might need SSL_Init() to be called - thats it!
|
|
*/
|
|
|
|
/******************** notify of new Cert **************************/
|
|
|
|
#include <openssl/evp.h>
|
|
#include <openssl/x509.h>
|
|
|
|
#include <string>
|
|
#include <inttypes.h>
|
|
|
|
#include "util/rsdeprecate.h"
|
|
#include "retroshare/rstypes.h"
|
|
|
|
|
|
/****
|
|
* #define AUTHSSL_DEBUG 1
|
|
***/
|
|
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
|
|
|
|
// IF we are compiling against ssl0.9.7 - these functions don't exist.
|
|
|
|
#if (OPENSSL_VERSION_NUMBER & 0xfffff000) < 0x00908000
|
|
#define SSLFNS_ADD_CIPHER_CTX_RAND_KEY 1
|
|
#endif
|
|
|
|
#if defined(SSLFNS_ADD_CIPHER_CTX_RAND_KEY)
|
|
|
|
int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key);
|
|
|
|
#endif
|
|
|
|
// Certificates serial number is used to store the protocol version for the handshake. (*) means current version.
|
|
//
|
|
// 06_0000: < Nov.2017.
|
|
// * 06_0001: > Nov 2017. SSL id is computed by hashing the entire signature of the cert instead of simply picking up the last bytes.
|
|
// 07_0001: Signatures are performed using SHA256+RSA instead of SHA1+RSA
|
|
|
|
static const uint32_t RS_CERTIFICATE_VERSION_NUMBER_06_0000 = 0x00060000 ; // means version RS-0.6, certificate version 0. Default version before patch.
|
|
static const uint32_t RS_CERTIFICATE_VERSION_NUMBER_06_0001 = 0x00060001 ; // means version RS-0.6, certificate version 1.
|
|
static const uint32_t RS_CERTIFICATE_VERSION_NUMBER_07_0001 = 0x00070001 ; // means version RS-0.7, certificate version 1.
|
|
|
|
X509_REQ *GenerateX509Req(
|
|
std::string pkey_file, std::string passwd,
|
|
std::string name, std::string email, std::string org,
|
|
std::string loc, std::string state, std::string country,
|
|
int nbits_in, std::string &errString);
|
|
|
|
X509 *SignX509Certificate(X509_NAME *issuer, EVP_PKEY *privkey, X509_REQ *req, long days);
|
|
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
|
|
|
|
/* Sign / Encrypt / Verify Data */
|
|
bool SSL_SignDataBin(const void *data, const uint32_t len,
|
|
unsigned char *sign, unsigned int *signlen, EVP_PKEY *pkey);
|
|
|
|
bool SSL_VerifySignBin(const void *data, const uint32_t len,
|
|
unsigned char *sign, unsigned int signlen, X509 *cert);
|
|
|
|
bool SSL_VerifySignBin(const void *data, const uint32_t len,
|
|
unsigned char *sign, unsigned int signlen, EVP_PKEY *peerkey);
|
|
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
|
|
X509 *loadX509FromPEM(std::string pem);
|
|
std::string saveX509ToPEM(X509* x509);
|
|
X509 *loadX509FromDER(const uint8_t *ptr, uint32_t len);
|
|
bool saveX509ToDER(X509 *x509, uint8_t **ptr, uint32_t *len);
|
|
|
|
bool getX509id(X509 *x509, RsPeerId &xid);
|
|
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
/********************************************************************************/
|
|
|
|
int pem_passwd_cb(char *buf, int size, int rwflag, void *password);
|
|
|
|
std::string getX509NameString(X509_NAME *name);
|
|
std::string getX509CNString(X509_NAME *name);
|
|
std::string getX509TypeString(X509_NAME *name, const char *type, int len);
|
|
std::string getX509LocString(X509_NAME *name);
|
|
std::string getX509OrgString(X509_NAME *name);
|
|
std::string getX509CountryString(X509_NAME *name);
|
|
std::string getX509Info(X509 *cert);
|
|
|
|
uint64_t getX509SerialNumber(X509 *cert);
|
|
uint32_t getX509RetroshareCertificateVersion(X509 *cert) ;
|
|
|
|
/********** SSL ERROR STUFF ******************************************/
|
|
|
|
RS_DEPRECATED_FOR(sslErrorToString)
|
|
int printSSLError(
|
|
SSL* unused, int retval, int err, unsigned long err2, std::string& out);
|
|
|
|
std::string sslErrorToString(int retval, int err, unsigned long err2);
|