71 lines
2.2 KiB
C
71 lines
2.2 KiB
C
#include "context.h"
|
|
#include <openssl/bio.h>
|
|
#include <openssl/bn.h>
|
|
#include <openssl/err.h>
|
|
#include <openssl/opensslconf.h>
|
|
#include <openssl/opensslv.h>
|
|
#include <openssl/pem.h>
|
|
#include <openssl/rand.h>
|
|
#include <openssl/ts.h>
|
|
#include <stdbool.h>
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
#include <sys/syslog.h>
|
|
|
|
#if OPENSSL_VERSION_NUMBER < 0x10000000L
|
|
#error OpenSSL version too old
|
|
#endif
|
|
|
|
/* LibreSSL is really annoying
|
|
* the OPENSSL_VERSION_NUMBER #define in opensslv.h
|
|
* is 0x20000000L but the API is that of openssl 1.0.
|
|
* That breaks version matching to determine which API
|
|
* to use.
|
|
* So, special case here for LibreSSL...
|
|
* (why didn't you just keep 0x100000L LibreSSL?)
|
|
*/
|
|
#ifdef LIBRESSL_VERSION_NUMBER
|
|
// for now, LibreSSL is 1.0 API only
|
|
#define OPENSSL_API_1_0
|
|
#else
|
|
// for OpenSSL, we must differenciate between 1.0 and 1.1
|
|
#if OPENSSL_VERSION_NUMBER < 0x10100000L && \
|
|
OPENSSL_VERSION_NUMBER >= 0x10000000L
|
|
#define OPENSSL_API_1_0
|
|
#endif
|
|
#if OPENSSL_VERSION_NUMBER >= 0x10100000L
|
|
#define OPENSSL_API_1_1
|
|
#endif
|
|
#endif
|
|
|
|
/* Name of config entry that defines the OID file. */
|
|
#define OID_SECTION "oids"
|
|
#define TSA_SECTION "tsa"
|
|
|
|
// number of char we get to log for the serial
|
|
#define SERIAL_ID_SIZE 8
|
|
|
|
#define B_FORMAT_TEXT 0x8000
|
|
#define FORMAT_UNDEF 0
|
|
#define FORMAT_TEXT (1 | B_FORMAT_TEXT) /* Generic text */
|
|
#define FORMAT_ASN1 4 /* ASN.1/DER */
|
|
|
|
static ASN1_OBJECT *txt2obj(const char *oid);
|
|
|
|
/* Reply related functions. */
|
|
static ASN1_INTEGER *serial_cb(TS_RESP_CTX *ctx, void *data);
|
|
static TS_RESP *read_PKCS7(BIO *in_bio);
|
|
int create_response(rfc3161_context *ct, char *query, int query_len,
|
|
TS_RESP_CTX *resp_ctx, size_t *resp_size,
|
|
unsigned char **resp, char **serial_id);
|
|
static ASN1_INTEGER *serial_cb(TS_RESP_CTX *ctx, void *data);
|
|
static ASN1_INTEGER *next_serial(const char *serialfile);
|
|
static int save_ts_serial(const char *serialfile, ASN1_INTEGER *serial);
|
|
TS_RESP_CTX *create_tsctx(rfc3161_context *ct, CONF *conf, const char *section,
|
|
const char *policy);
|
|
int add_oid_section(rfc3161_context *ct, CONF *conf);
|
|
ts_resp_ctx_wrapper *get_ctxw(rfc3161_context *ct);
|
|
void init_ssl();
|
|
void free_ssl();
|