|
Packit Service |
4684c1 |
/*
|
|
Packit Service |
4684c1 |
* Copyright © 2014 Nikos Mavrogiannopoulos
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Author: Nikos Mavrogiannopoulos
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* GnuTLS is free software; you can redistribute it and/or
|
|
Packit Service |
4684c1 |
* modify it under the terms of the GNU Lesser General Public License
|
|
Packit Service |
4684c1 |
* as published by the Free Software Foundation; either version 2.1 of
|
|
Packit Service |
4684c1 |
* the License, or (at your option) any later version.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* This library is distributed in the hope that it will be useful, but
|
|
Packit Service |
4684c1 |
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit Service |
4684c1 |
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Packit Service |
4684c1 |
* Lesser General Public License for more details.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* You should have received a copy of the GNU Lesser General Public License
|
|
Packit Service |
4684c1 |
* along with this program. If not, see <https://www.gnu.org/licenses/>
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
*/
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#include "gnutls_int.h"
|
|
Packit Service |
4684c1 |
#include "errors.h"
|
|
Packit Service |
4684c1 |
#include "str.h"
|
|
Packit Service |
4684c1 |
#include "urls.h"
|
|
Packit Service |
4684c1 |
#include "system-keys.h"
|
|
Packit Service |
4684c1 |
#include <c-strcase.h>
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#define MAX_CUSTOM_URLS 8
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
gnutls_custom_url_st _gnutls_custom_urls[MAX_CUSTOM_URLS];
|
|
Packit Service |
4684c1 |
unsigned _gnutls_custom_urls_size = 0;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
/**
|
|
Packit Service |
4684c1 |
* gnutls_url_is_supported:
|
|
Packit Service |
4684c1 |
* @url: A URI to be tested
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Check whether the provided @url is supported. Depending on the system libraries
|
|
Packit Service |
4684c1 |
* GnuTLS may support pkcs11, tpmkey or other URLs.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Returns: return non-zero if the given URL is supported, and zero if
|
|
Packit Service |
4684c1 |
* it is not known.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Since: 3.1.0
|
|
Packit Service |
4684c1 |
**/
|
|
Packit Service |
4684c1 |
unsigned gnutls_url_is_supported(const char *url)
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
unsigned i;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
for (i=0;i<_gnutls_custom_urls_size;i++) {
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, _gnutls_custom_urls[i].name, _gnutls_custom_urls[i].name_size) == 0)
|
|
Packit Service |
4684c1 |
return 1;
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#ifdef ENABLE_PKCS11
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, PKCS11_URL, sizeof(PKCS11_URL)-1) == 0)
|
|
Packit Service |
4684c1 |
return 1;
|
|
Packit Service |
4684c1 |
#endif
|
|
Packit Service |
4684c1 |
#ifdef HAVE_TROUSERS
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, TPMKEY_URL, sizeof(TPMKEY_URL)-1) == 0)
|
|
Packit Service |
4684c1 |
return 1;
|
|
Packit Service |
4684c1 |
#endif
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, SYSTEM_URL, sizeof(SYSTEM_URL)-1) == 0)
|
|
Packit Service |
4684c1 |
return _gnutls_system_url_is_supported(url);
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
return 0;
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
int _gnutls_url_is_known(const char *url)
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
unsigned i;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, PKCS11_URL, sizeof(PKCS11_URL)-1) == 0)
|
|
Packit Service |
4684c1 |
return 1;
|
|
Packit Service |
4684c1 |
else if (c_strncasecmp(url, TPMKEY_URL, sizeof(TPMKEY_URL)-1) == 0)
|
|
Packit Service |
4684c1 |
return 1;
|
|
Packit Service |
4684c1 |
else if (c_strncasecmp(url, SYSTEM_URL, sizeof(SYSTEM_URL)-1) == 0)
|
|
Packit Service |
4684c1 |
return 1;
|
|
Packit Service |
4684c1 |
else {
|
|
Packit Service |
4684c1 |
for (i=0;i<_gnutls_custom_urls_size;i++) {
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, _gnutls_custom_urls[i].name, _gnutls_custom_urls[i].name_size) == 0)
|
|
Packit Service |
4684c1 |
return 1;
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
return 0;
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
/**
|
|
Packit Service |
4684c1 |
* gnutls_register_custom_url:
|
|
Packit Service |
4684c1 |
* @st: A %gnutls_custom_url_st structure
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Register a custom URL. This will affect the following functions:
|
|
Packit Service |
4684c1 |
* gnutls_url_is_supported(), gnutls_privkey_import_url(),
|
|
Packit Service |
4684c1 |
* gnutls_pubkey_import_url, gnutls_x509_crt_import_url()
|
|
Packit Service |
4684c1 |
* and all functions that depend on
|
|
Packit Service |
4684c1 |
* them, e.g., gnutls_certificate_set_x509_key_file2().
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* The provided structure and callback functions must be valid throughout
|
|
Packit Service |
4684c1 |
* the lifetime of the process. The registration of an existing URL type
|
|
Packit Service |
4684c1 |
* will fail with %GNUTLS_E_INVALID_REQUEST. Since GnuTLS 3.5.0 this function
|
|
Packit Service |
4684c1 |
* can be used to override the builtin URLs.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* This function is not thread safe.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Returns: returns zero if the given structure was imported or a negative value otherwise.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Since: 3.4.0
|
|
Packit Service |
4684c1 |
**/
|
|
Packit Service |
4684c1 |
int gnutls_register_custom_url(const gnutls_custom_url_st *st)
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
unsigned i;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
for (i=0;i<_gnutls_custom_urls_size;i++) {
|
|
Packit Service |
4684c1 |
if (_gnutls_custom_urls[i].name_size == st->name_size &&
|
|
Packit Service |
4684c1 |
strcmp(_gnutls_custom_urls[i].name, st->name) == 0) {
|
|
Packit Service |
4684c1 |
return gnutls_assert_val(GNUTLS_E_INVALID_REQUEST);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
if (_gnutls_custom_urls_size < MAX_CUSTOM_URLS-1) {
|
|
Packit Service |
4684c1 |
memcpy(&_gnutls_custom_urls[_gnutls_custom_urls_size], st, sizeof(*st));
|
|
Packit Service |
4684c1 |
_gnutls_custom_urls_size++;
|
|
Packit Service |
4684c1 |
return 0;
|
|
Packit Service |
4684c1 |
} else {
|
|
Packit Service |
4684c1 |
return gnutls_assert_val(GNUTLS_E_UNIMPLEMENTED_FEATURE);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
/*-
|
|
Packit Service |
4684c1 |
* _gnutls_get_raw_issuer:
|
|
Packit Service |
4684c1 |
* @url: A PKCS 11 url identifying a token
|
|
Packit Service |
4684c1 |
* @cert: is the certificate to find issuer for
|
|
Packit Service |
4684c1 |
* @issuer: Will hold the issuer if any in an allocated buffer.
|
|
Packit Service |
4684c1 |
* @flags: Use zero or flags from %GNUTLS_PKCS11_OBJ_FLAG.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* This function will return the issuer of a given certificate in
|
|
Packit Service |
4684c1 |
* DER format.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned, otherwise a
|
|
Packit Service |
4684c1 |
* negative error value.
|
|
Packit Service |
4684c1 |
*
|
|
Packit Service |
4684c1 |
* Since: 3.4.0
|
|
Packit Service |
4684c1 |
-*/
|
|
Packit Service |
4684c1 |
int _gnutls_get_raw_issuer(const char *url, gnutls_x509_crt_t cert,
|
|
Packit Service |
4684c1 |
gnutls_datum_t * issuer,
|
|
Packit Service |
4684c1 |
unsigned int flags)
|
|
Packit Service |
4684c1 |
{
|
|
Packit Service |
4684c1 |
unsigned i;
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
#ifdef ENABLE_PKCS11
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, PKCS11_URL, PKCS11_URL_SIZE) == 0) {
|
|
Packit Service |
4684c1 |
return gnutls_pkcs11_get_raw_issuer(url, cert, issuer, GNUTLS_X509_FMT_DER, flags);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
#endif
|
|
Packit Service |
4684c1 |
for (i=0;i<_gnutls_custom_urls_size;i++) {
|
|
Packit Service |
4684c1 |
if (c_strncasecmp(url, _gnutls_custom_urls[i].name, _gnutls_custom_urls[i].name_size) == 0) {
|
|
Packit Service |
4684c1 |
if (_gnutls_custom_urls[i].get_issuer) {
|
|
Packit Service |
4684c1 |
return _gnutls_custom_urls[i].get_issuer(url, cert, issuer, flags);
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
break;
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
}
|
|
Packit Service |
4684c1 |
|
|
Packit Service |
4684c1 |
return GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE;
|
|
Packit Service |
4684c1 |
}
|