|
Packit |
549fdc |
/*
|
|
Packit |
549fdc |
* Copyright (C) 2001-2016 Free Software Foundation, Inc.
|
|
Packit |
549fdc |
* Copyright (C) 2015-2016 Red Hat, Inc.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Author: Nikos Mavrogiannopoulos
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This file is part of GnuTLS.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* The GnuTLS is free software; you can redistribute it and/or
|
|
Packit |
549fdc |
* modify it under the terms of the GNU Lesser General Public License
|
|
Packit |
549fdc |
* as published by the Free Software Foundation; either version 2.1 of
|
|
Packit |
549fdc |
* the License, or (at your option) any later version.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This library is distributed in the hope that it will be useful, but
|
|
Packit |
549fdc |
* WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
Packit |
549fdc |
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
Packit |
549fdc |
* Lesser General Public License for more details.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* You should have received a copy of the GNU Lesser General Public License
|
|
Packit |
549fdc |
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
*/
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#include "gnutls_int.h"
|
|
Packit |
549fdc |
#include "errors.h"
|
|
Packit |
549fdc |
#include <libtasn1.h>
|
|
Packit |
549fdc |
#include <dh.h>
|
|
Packit |
549fdc |
#include <random.h>
|
|
Packit |
549fdc |
#include <gnutls/pkcs11.h>
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#include <extensions.h> /* for _gnutls_ext_init */
|
|
Packit |
549fdc |
#include <supplemental.h> /* for _gnutls_supplemental_deinit */
|
|
Packit |
549fdc |
#include <locks.h>
|
|
Packit |
549fdc |
#include <system.h>
|
|
Packit |
549fdc |
#include <accelerated/cryptodev.h>
|
|
Packit |
549fdc |
#include <accelerated/accelerated.h>
|
|
Packit |
549fdc |
#include <fips.h>
|
|
Packit |
549fdc |
#include <atfork.h>
|
|
Packit |
549fdc |
#include <system-keys.h>
|
|
Packit |
549fdc |
#include "str.h"
|
|
Packit |
549fdc |
#include "global.h"
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/* Minimum library versions we accept. */
|
|
Packit |
549fdc |
#define GNUTLS_MIN_LIBTASN1_VERSION "0.3.4"
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#ifdef __sun
|
|
Packit |
549fdc |
# pragma fini(lib_deinit)
|
|
Packit |
549fdc |
# pragma init(lib_init)
|
|
Packit |
549fdc |
# define _CONSTRUCTOR
|
|
Packit |
549fdc |
# define _DESTRUCTOR
|
|
Packit |
549fdc |
#else
|
|
Packit |
549fdc |
# define _CONSTRUCTOR __attribute__((constructor))
|
|
Packit |
549fdc |
# define _DESTRUCTOR __attribute__((destructor))
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#ifndef _WIN32
|
|
Packit |
549fdc |
int __attribute__((weak)) _gnutls_global_init_skip(void);
|
|
Packit |
549fdc |
int _gnutls_global_init_skip(void)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
return 0;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
#else
|
|
Packit |
549fdc |
inline static int _gnutls_global_init_skip(void)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
return 0;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/* created by asn1c */
|
|
Packit |
549fdc |
extern const ASN1_ARRAY_TYPE gnutls_asn1_tab[];
|
|
Packit |
549fdc |
extern const ASN1_ARRAY_TYPE pkix_asn1_tab[];
|
|
Packit |
549fdc |
void *_gnutls_file_mutex;
|
|
Packit |
549fdc |
void *_gnutls_pkcs11_mutex;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
ASN1_TYPE _gnutls_pkix1_asn = ASN1_TYPE_EMPTY;
|
|
Packit |
549fdc |
ASN1_TYPE _gnutls_gnutls_asn = ASN1_TYPE_EMPTY;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
gnutls_log_func _gnutls_log_func = NULL;
|
|
Packit |
549fdc |
gnutls_audit_log_func _gnutls_audit_log_func = NULL;
|
|
Packit |
549fdc |
int _gnutls_log_level = 0; /* default log level */
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
static int _gnutls_global_init(unsigned constructor);
|
|
Packit |
549fdc |
static void _gnutls_global_deinit(unsigned destructor);
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
static void default_log_func(int level, const char* str)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
fprintf(stderr, "gnutls[%d]: %s", level, str);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_global_set_log_function:
|
|
Packit |
549fdc |
* @log_func: it's a log function
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This is the function where you set the logging function gnutls is
|
|
Packit |
549fdc |
* going to use. This function only accepts a character array.
|
|
Packit |
549fdc |
* Normally you may not use this function since it is only used for
|
|
Packit |
549fdc |
* debugging purposes.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* @gnutls_log_func is of the form,
|
|
Packit |
549fdc |
* void (*gnutls_log_func)( int level, const char*);
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
void gnutls_global_set_log_function(gnutls_log_func log_func)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
_gnutls_log_func = log_func;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_global_set_audit_log_function:
|
|
Packit |
549fdc |
* @log_func: it is the audit log function
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This is the function to set the audit logging function. This
|
|
Packit |
549fdc |
* is a function to report important issues, such as possible
|
|
Packit |
549fdc |
* attacks in the protocol. This is different from gnutls_global_set_log_function()
|
|
Packit |
549fdc |
* because it will report also session-specific events. The session
|
|
Packit |
549fdc |
* parameter will be null if there is no corresponding TLS session.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* @gnutls_audit_log_func is of the form,
|
|
Packit |
549fdc |
* void (*gnutls_audit_log_func)( gnutls_session_t, const char*);
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Since: 3.0
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
void gnutls_global_set_audit_log_function(gnutls_audit_log_func log_func)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
_gnutls_audit_log_func = log_func;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_global_set_time_function:
|
|
Packit |
549fdc |
* @time_func: it's the system time function, a gnutls_time_func() callback.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This is the function where you can override the default system time
|
|
Packit |
549fdc |
* function. The application provided function should behave the same
|
|
Packit |
549fdc |
* as the standard function.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Since: 2.12.0
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
void gnutls_global_set_time_function(gnutls_time_func time_func)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
gnutls_time = time_func;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_global_set_log_level:
|
|
Packit |
549fdc |
* @level: it's an integer from 0 to 99.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This is the function that allows you to set the log level. The
|
|
Packit |
549fdc |
* level is an integer between 0 and 9. Higher values mean more
|
|
Packit |
549fdc |
* verbosity. The default value is 0. Larger values should only be
|
|
Packit |
549fdc |
* used with care, since they may reveal sensitive information.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Use a log level over 10 to enable all debugging options.
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
void gnutls_global_set_log_level(int level)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
_gnutls_log_level = level;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_global_set_mem_functions:
|
|
Packit |
549fdc |
* @alloc_func: it's the default memory allocation function. Like malloc().
|
|
Packit |
549fdc |
* @secure_alloc_func: This is the memory allocation function that will be used for sensitive data.
|
|
Packit |
549fdc |
* @is_secure_func: a function that returns 0 if the memory given is not secure. May be NULL.
|
|
Packit |
549fdc |
* @realloc_func: A realloc function
|
|
Packit |
549fdc |
* @free_func: The function that frees allocated data. Must accept a NULL pointer.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Deprecated: since 3.3.0 it is no longer possible to replace the internally used
|
|
Packit |
549fdc |
* memory allocation functions
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This is the function where you set the memory allocation functions
|
|
Packit |
549fdc |
* gnutls is going to use. By default the libc's allocation functions
|
|
Packit |
549fdc |
* (malloc(), free()), are used by gnutls, to allocate both sensitive
|
|
Packit |
549fdc |
* and not sensitive data. This function is provided to set the
|
|
Packit |
549fdc |
* memory allocation functions to something other than the defaults
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This function must be called before gnutls_global_init() is called.
|
|
Packit |
549fdc |
* This function is not thread safe.
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
void
|
|
Packit |
549fdc |
gnutls_global_set_mem_functions(gnutls_alloc_function alloc_func,
|
|
Packit |
549fdc |
gnutls_alloc_function secure_alloc_func,
|
|
Packit |
549fdc |
gnutls_is_secure_function is_secure_func,
|
|
Packit |
549fdc |
gnutls_realloc_function realloc_func,
|
|
Packit |
549fdc |
gnutls_free_function free_func)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
_gnutls_debug_log("called the deprecated gnutls_global_set_mem_functions()\n");
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
GNUTLS_STATIC_MUTEX(global_init_mutex);
|
|
Packit |
549fdc |
static int _gnutls_init = 0;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/* cache the return code */
|
|
Packit |
549fdc |
static int _gnutls_init_ret = 0;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_global_init:
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Since GnuTLS 3.3.0 this function is no longer necessary to be explicitly
|
|
Packit |
549fdc |
* called. To disable the implicit call (in a library constructor) of this
|
|
Packit |
549fdc |
* function set the environment variable %GNUTLS_NO_EXPLICIT_INIT to 1.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This function performs any required precalculations, detects
|
|
Packit |
549fdc |
* the supported CPU capabilities and initializes the underlying
|
|
Packit |
549fdc |
* cryptographic backend. In order to free any resources
|
|
Packit |
549fdc |
* taken by this call you should gnutls_global_deinit()
|
|
Packit |
549fdc |
* when gnutls usage is no longer needed.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This function increments a global counter, so that
|
|
Packit |
549fdc |
* gnutls_global_deinit() only releases resources when it has been
|
|
Packit |
549fdc |
* called as many times as gnutls_global_init(). This is useful when
|
|
Packit |
549fdc |
* GnuTLS is used by more than one library in an application. This
|
|
Packit |
549fdc |
* function can be called many times, but will only do something the
|
|
Packit |
549fdc |
* first time.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* A subsequent call of this function if the initial has failed will
|
|
Packit |
549fdc |
* return the same error code.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Returns: On success, %GNUTLS_E_SUCCESS (0) is returned,
|
|
Packit |
549fdc |
* otherwise a negative error code is returned.
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
int gnutls_global_init(void)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
return _gnutls_global_init(0);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
static int _gnutls_global_init(unsigned constructor)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
int ret = 0, res;
|
|
Packit |
549fdc |
int level;
|
|
Packit |
549fdc |
const char* e;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
if (!constructor) {
|
|
Packit |
549fdc |
GNUTLS_STATIC_MUTEX_LOCK(global_init_mutex);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_init++;
|
|
Packit |
549fdc |
if (_gnutls_init > 1) {
|
|
Packit |
549fdc |
if (_gnutls_init == 2 && _gnutls_init_ret == 0) {
|
|
Packit |
549fdc |
/* some applications may close the urandom fd
|
|
Packit |
549fdc |
* before calling gnutls_global_init(). in that
|
|
Packit |
549fdc |
* case reopen it */
|
|
Packit |
549fdc |
ret = _gnutls_rnd_check();
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
ret = _gnutls_init_ret;
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_switch_lib_state(LIB_STATE_INIT);
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
e = secure_getenv("GNUTLS_DEBUG_LEVEL");
|
|
Packit |
549fdc |
if (e != NULL) {
|
|
Packit |
549fdc |
level = atoi(e);
|
|
Packit |
549fdc |
gnutls_global_set_log_level(level);
|
|
Packit |
549fdc |
if (_gnutls_log_func == NULL)
|
|
Packit |
549fdc |
gnutls_global_set_log_function(default_log_func);
|
|
Packit |
549fdc |
_gnutls_debug_log("Enabled GnuTLS "VERSION" logging...\n");
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#ifdef HAVE_DCGETTEXT
|
|
Packit |
549fdc |
bindtextdomain(PACKAGE, LOCALEDIR);
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
res = gnutls_crypto_init();
|
|
Packit |
549fdc |
if (res != 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
ret = GNUTLS_E_CRYPTO_INIT_FAILED;
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
ret = _gnutls_system_key_init();
|
|
Packit |
549fdc |
if (ret != 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/* initialize ASN.1 parser
|
|
Packit |
549fdc |
*/
|
|
Packit |
549fdc |
if (asn1_check_version(GNUTLS_MIN_LIBTASN1_VERSION) == NULL) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
_gnutls_debug_log
|
|
Packit |
549fdc |
("Checking for libtasn1 failed: %s < %s\n",
|
|
Packit |
549fdc |
asn1_check_version(NULL),
|
|
Packit |
549fdc |
GNUTLS_MIN_LIBTASN1_VERSION);
|
|
Packit |
549fdc |
ret = GNUTLS_E_INCOMPATIBLE_LIBTASN1_LIBRARY;
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_pkix1_asn = ASN1_TYPE_EMPTY;
|
|
Packit |
549fdc |
res = asn1_array2tree(pkix_asn1_tab, &_gnutls_pkix1_asn, NULL);
|
|
Packit |
549fdc |
if (res != ASN1_SUCCESS) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
ret = _gnutls_asn2err(res);
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
res = asn1_array2tree(gnutls_asn1_tab, &_gnutls_gnutls_asn, NULL);
|
|
Packit |
549fdc |
if (res != ASN1_SUCCESS) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
ret = _gnutls_asn2err(res);
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/* Initialize the random generator */
|
|
Packit |
549fdc |
ret = _gnutls_rnd_preinit();
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/* Initialize the default TLS extensions */
|
|
Packit |
549fdc |
ret = _gnutls_ext_init();
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
ret = gnutls_mutex_init(&_gnutls_file_mutex);
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
ret = gnutls_mutex_init(&_gnutls_pkcs11_mutex);
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
ret = gnutls_system_global_init();
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#ifndef _WIN32
|
|
Packit |
549fdc |
ret = _gnutls_register_fork_handler();
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#ifdef ENABLE_FIPS140
|
|
Packit |
549fdc |
res = _gnutls_fips_mode_enabled();
|
|
Packit |
549fdc |
/* res == 1 -> fips140-2 mode enabled
|
|
Packit |
549fdc |
* res == 2 -> only self checks performed - but no failure
|
|
Packit |
549fdc |
* res == not in fips140 mode
|
|
Packit |
549fdc |
*/
|
|
Packit |
549fdc |
if (res != 0) {
|
|
Packit |
549fdc |
_gnutls_debug_log("FIPS140-2 mode: %d\n", res);
|
|
Packit |
549fdc |
_gnutls_priority_update_fips();
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/* first round of self checks, these are done on the
|
|
Packit |
549fdc |
* nettle algorithms which are used internally */
|
|
Packit |
549fdc |
ret = _gnutls_fips_perform_self_checks1();
|
|
Packit |
549fdc |
if (res != 2) {
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_register_accel_crypto();
|
|
Packit |
549fdc |
_gnutls_cryptodev_init();
|
|
Packit |
549fdc |
_gnutls_load_system_priorities();
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#ifdef ENABLE_FIPS140
|
|
Packit |
549fdc |
/* These self tests are performed on the overriden algorithms
|
|
Packit |
549fdc |
* (e.g., AESNI overriden AES). They are after _gnutls_register_accel_crypto()
|
|
Packit |
549fdc |
* intentionally */
|
|
Packit |
549fdc |
if (res != 0) {
|
|
Packit |
549fdc |
ret = _gnutls_fips_perform_self_checks2();
|
|
Packit |
549fdc |
if (res != 2) {
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto out;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
_gnutls_fips_mode_reset_zombie();
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
_gnutls_switch_lib_state(LIB_STATE_OPERATIONAL);
|
|
Packit |
549fdc |
ret = 0;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
out:
|
|
Packit |
549fdc |
_gnutls_init_ret = ret;
|
|
Packit |
549fdc |
if (!constructor) {
|
|
Packit |
549fdc |
GNUTLS_STATIC_MUTEX_UNLOCK(global_init_mutex);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
return ret;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
static void _gnutls_global_deinit(unsigned destructor)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
if (!destructor) {
|
|
Packit |
549fdc |
GNUTLS_STATIC_MUTEX_LOCK(global_init_mutex);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
if (_gnutls_init == 1) {
|
|
Packit |
549fdc |
_gnutls_init = 0;
|
|
Packit |
549fdc |
if (_gnutls_init_ret < 0) {
|
|
Packit |
549fdc |
/* only deinitialize if gnutls_global_init() has
|
|
Packit |
549fdc |
* succeeded */
|
|
Packit |
549fdc |
gnutls_assert();
|
|
Packit |
549fdc |
goto fail;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_system_key_deinit();
|
|
Packit |
549fdc |
gnutls_crypto_deinit();
|
|
Packit |
549fdc |
_gnutls_rnd_deinit();
|
|
Packit |
549fdc |
_gnutls_ext_deinit();
|
|
Packit |
549fdc |
asn1_delete_structure(&_gnutls_gnutls_asn);
|
|
Packit |
549fdc |
asn1_delete_structure(&_gnutls_pkix1_asn);
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_crypto_deregister();
|
|
Packit |
549fdc |
gnutls_system_global_deinit();
|
|
Packit |
549fdc |
_gnutls_cryptodev_deinit();
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_supplemental_deinit();
|
|
Packit |
549fdc |
_gnutls_unload_system_priorities();
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
#ifdef ENABLE_PKCS11
|
|
Packit |
549fdc |
/* Do not try to deinitialize the PKCS #11 libraries
|
|
Packit |
549fdc |
* from the destructor. If we do and the PKCS #11 modules
|
|
Packit |
549fdc |
* are already being unloaded, we may crash.
|
|
Packit |
549fdc |
*/
|
|
Packit |
549fdc |
if (destructor == 0) {
|
|
Packit |
549fdc |
gnutls_pkcs11_deinit();
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
#ifdef HAVE_TROUSERS
|
|
Packit |
549fdc |
_gnutls_tpm_global_deinit();
|
|
Packit |
549fdc |
#endif
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
gnutls_mutex_deinit(&_gnutls_file_mutex);
|
|
Packit |
549fdc |
gnutls_mutex_deinit(&_gnutls_pkcs11_mutex);
|
|
Packit |
549fdc |
} else {
|
|
Packit |
549fdc |
if (_gnutls_init > 0)
|
|
Packit |
549fdc |
_gnutls_init--;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
fail:
|
|
Packit |
549fdc |
if (!destructor) {
|
|
Packit |
549fdc |
GNUTLS_STATIC_MUTEX_UNLOCK(global_init_mutex);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_global_deinit:
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* This function deinitializes the global data, that were initialized
|
|
Packit |
549fdc |
* using gnutls_global_init().
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Since GnuTLS 3.3.0 this function is no longer necessary to be explicitly
|
|
Packit |
549fdc |
* called. GnuTLS will automatically deinitialize on library destructor. See
|
|
Packit |
549fdc |
* gnutls_global_init() for disabling the implicit initialization/deinitialization.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
void gnutls_global_deinit(void)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
_gnutls_global_deinit(0);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
/**
|
|
Packit |
549fdc |
* gnutls_check_version:
|
|
Packit |
549fdc |
* @req_version: version string to compare with, or %NULL.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Check the GnuTLS Library version against the provided string.
|
|
Packit |
549fdc |
* See %GNUTLS_VERSION for a suitable @req_version string.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* See also gnutls_check_version_numeric(), which provides this
|
|
Packit |
549fdc |
* functionality as a macro.
|
|
Packit |
549fdc |
*
|
|
Packit |
549fdc |
* Returns: Check that the version of the library is at
|
|
Packit |
549fdc |
* minimum the one given as a string in @req_version and return the
|
|
Packit |
549fdc |
* actual version string of the library; return %NULL if the
|
|
Packit |
549fdc |
* condition is not met. If %NULL is passed to this function no
|
|
Packit |
549fdc |
* check is done and only the version string is returned.
|
|
Packit |
549fdc |
**/
|
|
Packit |
549fdc |
const char *gnutls_check_version(const char *req_version)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
if (!req_version || strverscmp(req_version, VERSION) <= 0)
|
|
Packit |
549fdc |
return VERSION;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
return NULL;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
static void _CONSTRUCTOR lib_init(void)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
int ret;
|
|
Packit |
549fdc |
const char *e;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
if (_gnutls_global_init_skip() != 0)
|
|
Packit |
549fdc |
return;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
e = secure_getenv("GNUTLS_NO_EXPLICIT_INIT");
|
|
Packit |
549fdc |
if (e != NULL) {
|
|
Packit |
549fdc |
ret = atoi(e);
|
|
Packit |
549fdc |
if (ret == 1)
|
|
Packit |
549fdc |
return;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
ret = _gnutls_global_init(1);
|
|
Packit |
549fdc |
if (ret < 0) {
|
|
Packit |
549fdc |
fprintf(stderr, "Error in GnuTLS initialization: %s\n", gnutls_strerror(ret));
|
|
Packit |
549fdc |
_gnutls_switch_lib_state(LIB_STATE_ERROR);
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
static void _DESTRUCTOR lib_deinit(void)
|
|
Packit |
549fdc |
{
|
|
Packit |
549fdc |
const char *e;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
if (_gnutls_global_init_skip() != 0)
|
|
Packit |
549fdc |
return;
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
e = secure_getenv("GNUTLS_NO_EXPLICIT_INIT");
|
|
Packit |
549fdc |
if (e != NULL) {
|
|
Packit |
549fdc |
int ret = atoi(e);
|
|
Packit |
549fdc |
if (ret == 1)
|
|
Packit |
549fdc |
return;
|
|
Packit |
549fdc |
}
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
_gnutls_global_deinit(1);
|
|
Packit |
549fdc |
}
|