зеркало из https://github.com/github/ruby.git
412 строки
9.7 KiB
C
412 строки
9.7 KiB
C
/*
|
|
* $Id$
|
|
* 'OpenSSL for Ruby' project
|
|
* Copyright (C) 2003 GOTOU Yuuzou <gotoyuzo@notwork.org>
|
|
* All rights reserved.
|
|
*/
|
|
/*
|
|
* This program is licenced under the same licence as Ruby.
|
|
* (See the file 'LICENCE'.)
|
|
*/
|
|
#include "ossl.h"
|
|
|
|
#if defined(OSSL_ENGINE_ENABLED)
|
|
|
|
#define WrapEngine(klass, obj, engine) do { \
|
|
if (!engine) { \
|
|
ossl_raise(rb_eRuntimeError, "ENGINE wasn't initialized."); \
|
|
} \
|
|
obj = Data_Wrap_Struct(klass, 0, ENGINE_free, engine); \
|
|
} while(0)
|
|
#define GetEngine(obj, engine) do { \
|
|
Data_Get_Struct(obj, ENGINE, engine); \
|
|
if (!engine) { \
|
|
ossl_raise(rb_eRuntimeError, "ENGINE wasn't initialized."); \
|
|
} \
|
|
} while (0)
|
|
#define SafeGetEngine(obj, engine) do { \
|
|
OSSL_Check_Kind(obj, cEngine); \
|
|
GetPKCS7(obj, engine); \
|
|
} while (0)
|
|
|
|
/*
|
|
* Classes
|
|
*/
|
|
VALUE cEngine;
|
|
VALUE eEngineError;
|
|
|
|
/*
|
|
* Private
|
|
*/
|
|
#define OSSL_ENGINE_LOAD_IF_MATCH(x) \
|
|
do{\
|
|
if(!strcmp(#x, RSTRING_PTR(name))){\
|
|
ENGINE_load_##x();\
|
|
return Qtrue;\
|
|
}\
|
|
}while(0)
|
|
|
|
static VALUE
|
|
ossl_engine_s_load(int argc, VALUE *argv, VALUE klass)
|
|
{
|
|
#if !defined(HAVE_ENGINE_LOAD_BUILTIN_ENGINES)
|
|
return Qnil;
|
|
#else
|
|
VALUE name;
|
|
|
|
rb_scan_args(argc, argv, "01", &name);
|
|
if(NIL_P(name)){
|
|
ENGINE_load_builtin_engines();
|
|
return Qtrue;
|
|
}
|
|
StringValue(name);
|
|
#ifndef OPENSSL_NO_STATIC_ENGINE
|
|
#if HAVE_ENGINE_LOAD_DYNAMIC
|
|
OSSL_ENGINE_LOAD_IF_MATCH(dynamic);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_CSWIFT
|
|
OSSL_ENGINE_LOAD_IF_MATCH(cswift);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_CHIL
|
|
OSSL_ENGINE_LOAD_IF_MATCH(chil);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_ATALLA
|
|
OSSL_ENGINE_LOAD_IF_MATCH(atalla);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_NURON
|
|
OSSL_ENGINE_LOAD_IF_MATCH(nuron);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_UBSEC
|
|
OSSL_ENGINE_LOAD_IF_MATCH(ubsec);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_AEP
|
|
OSSL_ENGINE_LOAD_IF_MATCH(aep);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_SUREWARE
|
|
OSSL_ENGINE_LOAD_IF_MATCH(sureware);
|
|
#endif
|
|
#if HAVE_ENGINE_LOAD_4758CCA
|
|
OSSL_ENGINE_LOAD_IF_MATCH(4758cca);
|
|
#endif
|
|
#endif
|
|
#ifdef HAVE_ENGINE_LOAD_OPENBSD_DEV_CRYPTO
|
|
OSSL_ENGINE_LOAD_IF_MATCH(openbsd_dev_crypto);
|
|
#endif
|
|
OSSL_ENGINE_LOAD_IF_MATCH(openssl);
|
|
rb_warning("no such builtin loader for `%s'", RSTRING_PTR(name));
|
|
return Qnil;
|
|
#endif /* HAVE_ENGINE_LOAD_BUILTIN_ENGINES */
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_s_cleanup(VALUE self)
|
|
{
|
|
#if defined(HAVE_ENGINE_CLEANUP)
|
|
ENGINE_cleanup();
|
|
#endif
|
|
return Qnil;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_s_engines(VALUE klass)
|
|
{
|
|
ENGINE *e;
|
|
VALUE ary, obj;
|
|
|
|
ary = rb_ary_new();
|
|
for(e = ENGINE_get_first(); e; e = ENGINE_get_next(e)){
|
|
WrapEngine(klass, obj, e);
|
|
rb_ary_push(ary, obj);
|
|
}
|
|
|
|
return ary;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_s_by_id(VALUE klass, VALUE id)
|
|
{
|
|
ENGINE *e;
|
|
VALUE obj;
|
|
|
|
StringValue(id);
|
|
ossl_engine_s_load(1, &id, klass);
|
|
if(!(e = ENGINE_by_id(RSTRING_PTR(id))))
|
|
ossl_raise(eEngineError, NULL);
|
|
WrapEngine(klass, obj, e);
|
|
if(rb_block_given_p()) rb_yield(obj);
|
|
if(!ENGINE_init(e))
|
|
ossl_raise(eEngineError, NULL);
|
|
ENGINE_ctrl(e, ENGINE_CTRL_SET_PASSWORD_CALLBACK,
|
|
0, NULL, (void(*)(void))ossl_pem_passwd_cb);
|
|
ERR_clear_error();
|
|
|
|
return obj;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_s_alloc(VALUE klass)
|
|
{
|
|
ENGINE *e;
|
|
VALUE obj;
|
|
|
|
if (!(e = ENGINE_new())) {
|
|
ossl_raise(eEngineError, NULL);
|
|
}
|
|
WrapEngine(klass, obj, e);
|
|
|
|
return obj;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_get_id(VALUE self)
|
|
{
|
|
ENGINE *e;
|
|
GetEngine(self, e);
|
|
return rb_str_new2(ENGINE_get_id(e));
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_get_name(VALUE self)
|
|
{
|
|
ENGINE *e;
|
|
GetEngine(self, e);
|
|
return rb_str_new2(ENGINE_get_name(e));
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_finish(VALUE self)
|
|
{
|
|
ENGINE *e;
|
|
|
|
GetEngine(self, e);
|
|
if(!ENGINE_finish(e)) ossl_raise(eEngineError, NULL);
|
|
|
|
return Qnil;
|
|
}
|
|
|
|
#if defined(HAVE_ENGINE_GET_CIPHER)
|
|
static VALUE
|
|
ossl_engine_get_cipher(VALUE self, VALUE name)
|
|
{
|
|
ENGINE *e;
|
|
const EVP_CIPHER *ciph, *tmp;
|
|
char *s;
|
|
int nid;
|
|
|
|
s = StringValuePtr(name);
|
|
tmp = EVP_get_cipherbyname(s);
|
|
if(!tmp) ossl_raise(eEngineError, "no such cipher `%s'", s);
|
|
nid = EVP_CIPHER_nid(tmp);
|
|
GetEngine(self, e);
|
|
ciph = ENGINE_get_cipher(e, nid);
|
|
if(!ciph) ossl_raise(eEngineError, NULL);
|
|
|
|
return ossl_cipher_new(ciph);
|
|
}
|
|
#else
|
|
#define ossl_engine_get_cipher rb_f_notimplement
|
|
#endif
|
|
|
|
#if defined(HAVE_ENGINE_GET_DIGEST)
|
|
static VALUE
|
|
ossl_engine_get_digest(VALUE self, VALUE name)
|
|
{
|
|
ENGINE *e;
|
|
const EVP_MD *md, *tmp;
|
|
char *s;
|
|
int nid;
|
|
|
|
s = StringValuePtr(name);
|
|
tmp = EVP_get_digestbyname(s);
|
|
if(!tmp) ossl_raise(eEngineError, "no such digest `%s'", s);
|
|
nid = EVP_MD_nid(tmp);
|
|
GetEngine(self, e);
|
|
md = ENGINE_get_digest(e, nid);
|
|
if(!md) ossl_raise(eEngineError, NULL);
|
|
|
|
return ossl_digest_new(md);
|
|
}
|
|
#else
|
|
#define ossl_engine_get_digest rb_f_notimplement
|
|
#endif
|
|
|
|
static VALUE
|
|
ossl_engine_load_privkey(int argc, VALUE *argv, VALUE self)
|
|
{
|
|
ENGINE *e;
|
|
EVP_PKEY *pkey;
|
|
VALUE id, data, obj;
|
|
char *sid, *sdata;
|
|
|
|
rb_scan_args(argc, argv, "02", &id, &data);
|
|
sid = NIL_P(id) ? NULL : StringValuePtr(id);
|
|
sdata = NIL_P(data) ? NULL : StringValuePtr(data);
|
|
GetEngine(self, e);
|
|
#if OPENSSL_VERSION_NUMBER < 0x00907000L
|
|
pkey = ENGINE_load_private_key(e, sid, sdata);
|
|
#else
|
|
pkey = ENGINE_load_private_key(e, sid, NULL, sdata);
|
|
#endif
|
|
if (!pkey) ossl_raise(eEngineError, NULL);
|
|
obj = ossl_pkey_new(pkey);
|
|
OSSL_PKEY_SET_PRIVATE(obj);
|
|
|
|
return obj;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_load_pubkey(int argc, VALUE *argv, VALUE self)
|
|
{
|
|
ENGINE *e;
|
|
EVP_PKEY *pkey;
|
|
VALUE id, data;
|
|
char *sid, *sdata;
|
|
|
|
rb_scan_args(argc, argv, "02", &id, &data);
|
|
sid = NIL_P(id) ? NULL : StringValuePtr(id);
|
|
sdata = NIL_P(data) ? NULL : StringValuePtr(data);
|
|
GetEngine(self, e);
|
|
#if OPENSSL_VERSION_NUMBER < 0x00907000L
|
|
pkey = ENGINE_load_public_key(e, sid, sdata);
|
|
#else
|
|
pkey = ENGINE_load_public_key(e, sid, NULL, sdata);
|
|
#endif
|
|
if (!pkey) ossl_raise(eEngineError, NULL);
|
|
|
|
return ossl_pkey_new(pkey);
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_set_default(VALUE self, VALUE flag)
|
|
{
|
|
ENGINE *e;
|
|
int f = NUM2INT(flag);
|
|
|
|
GetEngine(self, e);
|
|
ENGINE_set_default(e, f);
|
|
|
|
return Qtrue;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_ctrl_cmd(int argc, VALUE *argv, VALUE self)
|
|
{
|
|
ENGINE *e;
|
|
VALUE cmd, val;
|
|
int ret;
|
|
|
|
GetEngine(self, e);
|
|
rb_scan_args(argc, argv, "11", &cmd, &val);
|
|
StringValue(cmd);
|
|
if (!NIL_P(val)) StringValue(val);
|
|
ret = ENGINE_ctrl_cmd_string(e, RSTRING_PTR(cmd),
|
|
NIL_P(val) ? NULL : RSTRING_PTR(val), 0);
|
|
if (!ret) ossl_raise(eEngineError, NULL);
|
|
|
|
return self;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_cmd_flag_to_name(int flag)
|
|
{
|
|
switch(flag){
|
|
case ENGINE_CMD_FLAG_NUMERIC: return rb_str_new2("NUMERIC");
|
|
case ENGINE_CMD_FLAG_STRING: return rb_str_new2("STRING");
|
|
case ENGINE_CMD_FLAG_NO_INPUT: return rb_str_new2("NO_INPUT");
|
|
case ENGINE_CMD_FLAG_INTERNAL: return rb_str_new2("INTERNAL");
|
|
default: return rb_str_new2("UNKNOWN");
|
|
}
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_get_cmds(VALUE self)
|
|
{
|
|
ENGINE *e;
|
|
const ENGINE_CMD_DEFN *defn, *p;
|
|
VALUE ary, tmp;
|
|
|
|
GetEngine(self, e);
|
|
ary = rb_ary_new();
|
|
if ((defn = ENGINE_get_cmd_defns(e)) != NULL){
|
|
for (p = defn; p->cmd_num > 0; p++){
|
|
tmp = rb_ary_new();
|
|
rb_ary_push(tmp, rb_str_new2(p->cmd_name));
|
|
rb_ary_push(tmp, rb_str_new2(p->cmd_desc));
|
|
rb_ary_push(tmp, ossl_engine_cmd_flag_to_name(p->cmd_flags));
|
|
rb_ary_push(ary, tmp);
|
|
}
|
|
}
|
|
|
|
return ary;
|
|
}
|
|
|
|
static VALUE
|
|
ossl_engine_inspect(VALUE self)
|
|
{
|
|
VALUE str;
|
|
const char *cname = rb_class2name(rb_obj_class(self));
|
|
|
|
str = rb_str_new2("#<");
|
|
rb_str_cat2(str, cname);
|
|
rb_str_cat2(str, " id=\"");
|
|
rb_str_append(str, ossl_engine_get_id(self));
|
|
rb_str_cat2(str, "\" name=\"");
|
|
rb_str_append(str, ossl_engine_get_name(self));
|
|
rb_str_cat2(str, "\">");
|
|
|
|
return str;
|
|
}
|
|
|
|
#define DefEngineConst(x) rb_define_const(cEngine, #x, INT2NUM(ENGINE_##x))
|
|
|
|
void
|
|
Init_ossl_engine()
|
|
{
|
|
cEngine = rb_define_class_under(mOSSL, "Engine", rb_cObject);
|
|
eEngineError = rb_define_class_under(cEngine, "EngineError", eOSSLError);
|
|
|
|
rb_define_alloc_func(cEngine, ossl_engine_s_alloc);
|
|
rb_define_singleton_method(cEngine, "load", ossl_engine_s_load, -1);
|
|
rb_define_singleton_method(cEngine, "cleanup", ossl_engine_s_cleanup, 0);
|
|
rb_define_singleton_method(cEngine, "engines", ossl_engine_s_engines, 0);
|
|
rb_define_singleton_method(cEngine, "by_id", ossl_engine_s_by_id, 1);
|
|
rb_undef_method(CLASS_OF(cEngine), "new");
|
|
|
|
rb_define_method(cEngine, "id", ossl_engine_get_id, 0);
|
|
rb_define_method(cEngine, "name", ossl_engine_get_name, 0);
|
|
rb_define_method(cEngine, "finish", ossl_engine_finish, 0);
|
|
rb_define_method(cEngine, "cipher", ossl_engine_get_cipher, 1);
|
|
rb_define_method(cEngine, "digest", ossl_engine_get_digest, 1);
|
|
rb_define_method(cEngine, "load_private_key", ossl_engine_load_privkey, -1);
|
|
rb_define_method(cEngine, "load_public_key", ossl_engine_load_pubkey, -1);
|
|
rb_define_method(cEngine, "set_default", ossl_engine_set_default, 1);
|
|
rb_define_method(cEngine, "ctrl_cmd", ossl_engine_ctrl_cmd, -1);
|
|
rb_define_method(cEngine, "cmds", ossl_engine_get_cmds, 0);
|
|
rb_define_method(cEngine, "inspect", ossl_engine_inspect, 0);
|
|
|
|
DefEngineConst(METHOD_RSA);
|
|
DefEngineConst(METHOD_DSA);
|
|
DefEngineConst(METHOD_DH);
|
|
DefEngineConst(METHOD_RAND);
|
|
#ifdef ENGINE_METHOD_BN_MOD_EXP
|
|
DefEngineConst(METHOD_BN_MOD_EXP);
|
|
#endif
|
|
#ifdef ENGINE_METHOD_BN_MOD_EXP_CRT
|
|
DefEngineConst(METHOD_BN_MOD_EXP_CRT);
|
|
#endif
|
|
#ifdef ENGINE_METHOD_CIPHERS
|
|
DefEngineConst(METHOD_CIPHERS);
|
|
#endif
|
|
#ifdef ENGINE_METHOD_DIGESTS
|
|
DefEngineConst(METHOD_DIGESTS);
|
|
#endif
|
|
DefEngineConst(METHOD_ALL);
|
|
DefEngineConst(METHOD_NONE);
|
|
}
|
|
#else
|
|
void
|
|
Init_ossl_engine()
|
|
{
|
|
}
|
|
#endif
|