mirror of
https://github.com/apache/httpd.git
synced 2025-11-06 16:49:32 +03:00
fb9c4b137c
to check for both the existence of the openssl/engine.h header file and some 'expected function' such as ENGINE_init() (better suggestions are welcome.) Also clear up some confusion; so long as we have ENGINE_load_builtin_engines() we should attempt to preload those. This patch protects all ENGINE-based code within the tests for the engine header and function, and changes a version test into a function test. git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@100104 13f79535-47bb-0310-9956-ffa450edef68
261 lines
8.4 KiB
C
261 lines
8.4 KiB
C
/* ====================================================================
|
|
* The Apache Software License, Version 1.1
|
|
*
|
|
* Copyright (c) 2000-2003 The Apache Software Foundation. All rights
|
|
* reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
*
|
|
* 3. The end-user documentation included with the redistribution,
|
|
* if any, must include the following acknowledgment:
|
|
* "This product includes software developed by the
|
|
* Apache Software Foundation (http://www.apache.org/)."
|
|
* Alternately, this acknowledgment may appear in the software itself,
|
|
* if and wherever such third-party acknowledgments normally appear.
|
|
*
|
|
* 4. The names "Apache" and "Apache Software Foundation" must
|
|
* not be used to endorse or promote products derived from this
|
|
* software without prior written permission. For written
|
|
* permission, please contact apache@apache.org.
|
|
*
|
|
* 5. Products derived from this software may not be called "Apache",
|
|
* nor may "Apache" appear in their name, without prior written
|
|
* permission of the Apache Software Foundation.
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESSED OR IMPLIED
|
|
* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
|
|
* OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
|
|
* DISCLAIMED. IN NO EVENT SHALL THE APACHE SOFTWARE FOUNDATION OR
|
|
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
|
* LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF
|
|
* USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
|
|
* ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
|
|
* OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
|
|
* OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
* SUCH DAMAGE.
|
|
* ====================================================================
|
|
*/
|
|
|
|
#ifndef SSL_TOOLKIT_COMPAT_H
|
|
#define SSL_TOOLKIT_COMPAT_H
|
|
|
|
/*
|
|
* this header file provides a compatiblity layer
|
|
* between OpenSSL and RSA sslc
|
|
*/
|
|
|
|
#ifdef HAVE_OPENSSL
|
|
|
|
/* OpenSSL headers */
|
|
#include <openssl/ssl.h>
|
|
#include <openssl/err.h>
|
|
#include <openssl/x509.h>
|
|
#include <openssl/pem.h>
|
|
#include <openssl/crypto.h>
|
|
#include <openssl/evp.h>
|
|
#include <openssl/rand.h>
|
|
#include <openssl/x509v3.h>
|
|
/* Avoid tripping over an engine build installed globally and detected
|
|
* when the user points at an explicit non-engine flavor of OpenSSL
|
|
*/
|
|
#if defined(HAVE_OPENSSL_ENGINE_H) && defined(HAVE_ENGINE_INIT)
|
|
#include <openssl/engine.h>
|
|
#endif
|
|
|
|
/*
|
|
* rsa sslc uses incomplete types for most structures
|
|
* so we macroize for OpenSSL those which cannot be dereferenced
|
|
* using the same sames as the sslc functions
|
|
*/
|
|
|
|
#define EVP_PKEY_key_type(k) (EVP_PKEY_type(k->type))
|
|
|
|
#define X509_NAME_get_entries(xs) (xs->entries)
|
|
#define X509_REVOKED_get_serialNumber(xs) (xs->serialNumber)
|
|
|
|
#define X509_get_signature_algorithm(xs) (xs->cert_info->signature->algorithm)
|
|
#define X509_get_key_algorithm(xs) (xs->cert_info->key->algor->algorithm)
|
|
|
|
#define X509_NAME_ENTRY_get_data_ptr(xs) (xs->value->data)
|
|
#define X509_NAME_ENTRY_get_data_len(xs) (xs->value->length)
|
|
|
|
#define SSL_CTX_get_extra_certs(ctx) (ctx->extra_certs)
|
|
#define SSL_CTX_set_extra_certs(ctx,value) {ctx->extra_certs = value;}
|
|
|
|
#define SSL_CIPHER_get_name(s) (s->name)
|
|
#define SSL_CIPHER_get_valid(s) (s->valid)
|
|
|
|
#define SSL_SESSION_get_session_id(s) (s->session_id)
|
|
#define SSL_SESSION_get_session_id_length(s) (s->session_id_length)
|
|
|
|
/*
|
|
* Support for retrieving/overriding states
|
|
*/
|
|
#ifndef SSL_get_state
|
|
#define SSL_get_state(ssl) SSL_state(ssl)
|
|
#endif
|
|
|
|
#define SSL_set_state(ssl,val) (ssl)->state = val
|
|
|
|
#define MODSSL_BIO_CB_ARG_TYPE const char
|
|
#define MODSSL_CRYPTO_CB_ARG_TYPE const char
|
|
#if (OPENSSL_VERSION_NUMBER < 0x00907000)
|
|
#define MODSSL_INFO_CB_ARG_TYPE SSL*
|
|
#else
|
|
#define MODSSL_INFO_CB_ARG_TYPE const SSL*
|
|
#endif
|
|
#define MODSSL_CLIENT_CERT_CB_ARG_TYPE X509
|
|
#define MODSSL_PCHAR_CAST
|
|
|
|
#define modssl_X509_verify_cert X509_verify_cert
|
|
|
|
typedef int (modssl_read_bio_cb_fn)(char*,int,int,void*);
|
|
|
|
#if (OPENSSL_VERSION_NUMBER < 0x00904000)
|
|
#define modssl_PEM_read_bio_X509(b, x, cb, arg) PEM_read_bio_X509(b, x, cb)
|
|
#else
|
|
#define modssl_PEM_read_bio_X509(b, x, cb, arg) PEM_read_bio_X509(b, x, cb, arg)
|
|
#endif
|
|
|
|
#define modssl_PEM_X509_INFO_read_bio PEM_X509_INFO_read_bio
|
|
|
|
#define modssl_PEM_read_bio_PrivateKey PEM_read_bio_PrivateKey
|
|
|
|
#define modssl_set_cipher_list SSL_set_cipher_list
|
|
|
|
#define modssl_free OPENSSL_free
|
|
|
|
#define EVP_PKEY_reference_inc(pkey) \
|
|
CRYPTO_add(&((pkey)->references), +1, CRYPTO_LOCK_X509_PKEY)
|
|
|
|
#define X509_reference_inc(cert) \
|
|
CRYPTO_add(&((cert)->references), +1, CRYPTO_LOCK_X509)
|
|
|
|
#define HAVE_SSL_RAND_EGD /* since 9.5.1 */
|
|
|
|
#define HAVE_SSL_X509V3_EXT_d2i
|
|
|
|
#elif defined(HAVE_SSLC)
|
|
|
|
#include <bio.h>
|
|
#include <ssl.h>
|
|
#include <err.h>
|
|
#include <x509.h>
|
|
#include <pem.h>
|
|
#include <evp.h>
|
|
#include <objects.h>
|
|
#include <sslc.h>
|
|
|
|
/* sslc does not support this function, OpenSSL has since 9.5.1 */
|
|
#define RAND_status() 1
|
|
|
|
/* sslc names this function a bit differently */
|
|
#define CRYPTO_num_locks() CRYPTO_get_num_locks()
|
|
|
|
#ifndef STACK_OF
|
|
#define STACK_OF(type) STACK
|
|
#endif
|
|
|
|
#define MODSSL_BIO_CB_ARG_TYPE char
|
|
#define MODSSL_CRYPTO_CB_ARG_TYPE char
|
|
#define MODSSL_INFO_CB_ARG_TYPE SSL*
|
|
#define MODSSL_CLIENT_CERT_CB_ARG_TYPE void
|
|
#define MODSSL_PCHAR_CAST (char *)
|
|
|
|
typedef int (modssl_read_bio_cb_fn)(char*,int,int);
|
|
|
|
#define modssl_X509_verify_cert(c) X509_verify_cert(c, NULL)
|
|
|
|
#define modssl_PEM_read_bio_X509(b, x, cb, arg) \
|
|
PEM_read_bio_X509(b, x, cb)
|
|
|
|
#define modssl_PEM_X509_INFO_read_bio(b, x, cb, arg)\
|
|
PEM_X509_INFO_read_bio(b, x, cb)
|
|
|
|
#define modssl_PEM_read_bio_PrivateKey(b, k, cb, arg) \
|
|
PEM_read_bio_PrivateKey(b, k, cb)
|
|
|
|
#ifndef HAVE_SSL_SET_STATE
|
|
#define SSL_set_state(ssl, state) /* XXX: should throw an error */
|
|
#endif
|
|
|
|
#define modssl_set_cipher_list(ssl, l) \
|
|
SSL_set_cipher_list(ssl, (char *)l)
|
|
|
|
#define modssl_free free
|
|
|
|
#ifndef PEM_F_DEF_CALLBACK
|
|
#define PEM_F_DEF_CALLBACK PEM_F_DEF_CB
|
|
#endif
|
|
|
|
#if SSLC_VERSION_NUMBER < 0x2000
|
|
|
|
#define X509_STORE_CTX_set_depth(st, d)
|
|
#define X509_CRL_get_lastUpdate(x) ((x)->crl->lastUpdate)
|
|
#define X509_CRL_get_nextUpdate(x) ((x)->crl->nextUpdate)
|
|
#define X509_CRL_get_REVOKED(x) ((x)->crl->revoked)
|
|
#define X509_REVOKED_get_serialNumber(xs) (xs->serialNumber)
|
|
|
|
#define modssl_set_verify(ssl, verify, cb) \
|
|
SSL_set_verify(ssl, verify)
|
|
|
|
#else /* SSLC_VERSION_NUMBER >= 0x2000 */
|
|
|
|
#define CRYPTO_malloc_init R_malloc_init
|
|
|
|
#define EVP_cleanup()
|
|
|
|
#endif /* SSLC_VERSION_NUMBER >= 0x2000 */
|
|
|
|
typedef void (*modssl_popfree_fn)(char *data);
|
|
|
|
#define sk_SSL_CIPHER_dup sk_dup
|
|
#define sk_SSL_CIPHER_find(st, data) sk_find(st, (void *)data)
|
|
#define sk_SSL_CIPHER_free sk_free
|
|
#define sk_SSL_CIPHER_num sk_num
|
|
#define sk_SSL_CIPHER_value (SSL_CIPHER *)sk_value
|
|
#define sk_X509_num sk_num
|
|
#define sk_X509_push sk_push
|
|
#define sk_X509_pop_free(st, free) sk_pop_free((STACK*)(st), (modssl_popfree_fn)(free))
|
|
#define sk_X509_value (X509 *)sk_value
|
|
#define sk_X509_INFO_free sk_free
|
|
#define sk_X509_INFO_pop_free(st, free) sk_pop_free((STACK*)(st), (modssl_popfree_fn)(free))
|
|
#define sk_X509_INFO_num sk_num
|
|
#define sk_X509_INFO_new_null sk_new_null
|
|
#define sk_X509_INFO_value (X509_INFO *)sk_value
|
|
#define sk_X509_NAME_find(st, data) sk_find(st, (void *)data)
|
|
#define sk_X509_NAME_free sk_free
|
|
#define sk_X509_NAME_new sk_new
|
|
#define sk_X509_NAME_num sk_num
|
|
#define sk_X509_NAME_push(st, data) sk_push(st, (void *)data)
|
|
#define sk_X509_NAME_value (X509_NAME *)sk_value
|
|
#define sk_X509_NAME_ENTRY_num sk_num
|
|
#define sk_X509_NAME_ENTRY_value (X509_NAME_ENTRY *)sk_value
|
|
#define sk_X509_NAME_set_cmp_func sk_set_cmp_func
|
|
#define sk_X509_REVOKED_num sk_num
|
|
#define sk_X509_REVOKED_value (X509_REVOKED *)sk_value
|
|
|
|
#else /* ! HAVE_OPENSSL && ! HAVE_SSLC */
|
|
|
|
#error "Unrecognized SSL Toolkit!"
|
|
|
|
#endif /* ! HAVE_OPENSSL && ! HAVE_SSLC */
|
|
|
|
#ifndef modssl_set_verify
|
|
#define modssl_set_verify(ssl, verify, cb) \
|
|
SSL_set_verify(ssl, verify, cb)
|
|
#endif
|
|
|
|
#endif /* SSL_TOOLKIT_COMPAT_H */
|