mirror of
https://github.com/XRPLF/rippled.git
synced 2025-11-21 19:45:53 +00:00
527 lines
83 KiB
HTML
527 lines
83 KiB
HTML
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<meta http-equiv="Content-Type" content="text/xhtml;charset=UTF-8"/>
|
|
<meta http-equiv="X-UA-Compatible" content="IE=9"/>
|
|
<meta name="generator" content="Doxygen 1.8.17"/>
|
|
<meta name="viewport" content="width=device-width, initial-scale=1"/>
|
|
<title>rippled: make_SSLContext.cpp Source File</title>
|
|
<link href="tabs.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="jquery.js"></script>
|
|
<script type="text/javascript" src="dynsections.js"></script>
|
|
<link href="search/search.css" rel="stylesheet" type="text/css"/>
|
|
<script type="text/javascript" src="search/searchdata.js"></script>
|
|
<script type="text/javascript" src="search/search.js"></script>
|
|
<link href="doxygen.css" rel="stylesheet" type="text/css" />
|
|
</head>
|
|
<body>
|
|
<div id="top"><!-- do not remove this div, it is closed by doxygen! -->
|
|
<div id="titlearea">
|
|
<table cellspacing="0" cellpadding="0">
|
|
<tbody>
|
|
<tr style="height: 56px;">
|
|
<td id="projectalign" style="padding-left: 0.5em;">
|
|
<div id="projectname">rippled
|
|
</div>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
</div>
|
|
<!-- end header part -->
|
|
<!-- Generated by Doxygen 1.8.17 -->
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
var searchBox = new SearchBox("searchBox", "search",false,'Search');
|
|
/* @license-end */
|
|
</script>
|
|
<script type="text/javascript" src="menudata.js"></script>
|
|
<script type="text/javascript" src="menu.js"></script>
|
|
<script type="text/javascript">
|
|
/* @license magnet:?xt=urn:btih:cf05388f2679ee054f2beb29a391d25f4e673ac3&dn=gpl-2.0.txt GPL-v2 */
|
|
$(function() {
|
|
initMenu('',true,false,'search.php','Search');
|
|
$(document).ready(function() { init_search(); });
|
|
});
|
|
/* @license-end */</script>
|
|
<div id="main-nav"></div>
|
|
<!-- window showing the filter options -->
|
|
<div id="MSearchSelectWindow"
|
|
onmouseover="return searchBox.OnSearchSelectShow()"
|
|
onmouseout="return searchBox.OnSearchSelectHide()"
|
|
onkeydown="return searchBox.OnSearchSelectKey(event)">
|
|
</div>
|
|
|
|
<!-- iframe showing the search results (closed by default) -->
|
|
<div id="MSearchResultsWindow">
|
|
<iframe src="javascript:void(0)" frameborder="0"
|
|
name="MSearchResults" id="MSearchResults">
|
|
</iframe>
|
|
</div>
|
|
|
|
<div id="nav-path" class="navpath">
|
|
<ul>
|
|
<li class="navelem"><a class="el" href="dir_df9c78dcf3f59a33b12284f95992a64b.html">ripple</a></li><li class="navelem"><a class="el" href="dir_5f536ab1985a8dcd28bcfd618bc58e92.html">basics</a></li><li class="navelem"><a class="el" href="dir_6f921693cf6aba7edd915fbfc33f741e.html">impl</a></li> </ul>
|
|
</div>
|
|
</div><!-- top -->
|
|
<div class="header">
|
|
<div class="headertitle">
|
|
<div class="title">make_SSLContext.cpp</div> </div>
|
|
</div><!--header-->
|
|
<div class="contents">
|
|
<div class="fragment"><div class="line"><a name="l00001"></a><span class="lineno"> 1</span> <span class="comment">//------------------------------------------------------------------------------</span></div>
|
|
<div class="line"><a name="l00002"></a><span class="lineno"> 2</span> <span class="comment">/*</span></div>
|
|
<div class="line"><a name="l00003"></a><span class="lineno"> 3</span> <span class="comment"> This file is part of rippled: https://github.com/ripple/rippled</span></div>
|
|
<div class="line"><a name="l00004"></a><span class="lineno"> 4</span> <span class="comment"> Copyright (c) 2012, 2013 Ripple Labs Inc.</span></div>
|
|
<div class="line"><a name="l00005"></a><span class="lineno"> 5</span> <span class="comment"></span> </div>
|
|
<div class="line"><a name="l00006"></a><span class="lineno"> 6</span> <span class="comment"> Permission to use, copy, modify, and/or distribute this software for any</span></div>
|
|
<div class="line"><a name="l00007"></a><span class="lineno"> 7</span> <span class="comment"> purpose with or without fee is hereby granted, provided that the above</span></div>
|
|
<div class="line"><a name="l00008"></a><span class="lineno"> 8</span> <span class="comment"> copyright notice and this permission notice appear in all copies.</span></div>
|
|
<div class="line"><a name="l00009"></a><span class="lineno"> 9</span> <span class="comment"></span> </div>
|
|
<div class="line"><a name="l00010"></a><span class="lineno"> 10</span> <span class="comment"> THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES</span></div>
|
|
<div class="line"><a name="l00011"></a><span class="lineno"> 11</span> <span class="comment"> WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF</span></div>
|
|
<div class="line"><a name="l00012"></a><span class="lineno"> 12</span> <span class="comment"> MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR</span></div>
|
|
<div class="line"><a name="l00013"></a><span class="lineno"> 13</span> <span class="comment"> ANY SPECIAL , DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES</span></div>
|
|
<div class="line"><a name="l00014"></a><span class="lineno"> 14</span> <span class="comment"> WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN</span></div>
|
|
<div class="line"><a name="l00015"></a><span class="lineno"> 15</span> <span class="comment"> ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF</span></div>
|
|
<div class="line"><a name="l00016"></a><span class="lineno"> 16</span> <span class="comment"> OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.</span></div>
|
|
<div class="line"><a name="l00017"></a><span class="lineno"> 17</span> <span class="comment">*/</span></div>
|
|
<div class="line"><a name="l00018"></a><span class="lineno"> 18</span> <span class="comment">//==============================================================================</span></div>
|
|
<div class="line"><a name="l00019"></a><span class="lineno"> 19</span>  </div>
|
|
<div class="line"><a name="l00020"></a><span class="lineno"> 20</span> <span class="preprocessor">#include <ripple/basics/chrono.h></span></div>
|
|
<div class="line"><a name="l00021"></a><span class="lineno"> 21</span> <span class="preprocessor">#include <ripple/basics/contract.h></span></div>
|
|
<div class="line"><a name="l00022"></a><span class="lineno"> 22</span> <span class="preprocessor">#include <ripple/basics/make_SSLContext.h></span></div>
|
|
<div class="line"><a name="l00023"></a><span class="lineno"> 23</span> <span class="preprocessor">#include <ripple/beast/container/aged_unordered_set.h></span></div>
|
|
<div class="line"><a name="l00024"></a><span class="lineno"> 24</span> <span class="preprocessor">#include <<a class="codeRef" href="http://en.cppreference.com/w/cpp/header/cstdint.html">cstdint</a>></span></div>
|
|
<div class="line"><a name="l00025"></a><span class="lineno"> 25</span> <span class="preprocessor">#include <<a class="codeRef" href="http://en.cppreference.com/w/cpp/header/sstream.html">sstream</a>></span></div>
|
|
<div class="line"><a name="l00026"></a><span class="lineno"> 26</span> <span class="preprocessor">#include <<a class="codeRef" href="http://en.cppreference.com/w/cpp/header/stdexcept.html">stdexcept</a>></span></div>
|
|
<div class="line"><a name="l00027"></a><span class="lineno"> 27</span>  </div>
|
|
<div class="line"><a name="l00028"></a><span class="lineno"> 28</span> <span class="keyword">namespace </span><a class="code" href="namespaceripple.html">ripple</a> {</div>
|
|
<div class="line"><a name="l00029"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl.html"> 29</a></span> <span class="keyword">namespace </span>openssl {</div>
|
|
<div class="line"><a name="l00030"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html"> 30</a></span> <span class="keyword">namespace </span>detail {</div>
|
|
<div class="line"><a name="l00031"></a><span class="lineno"> 31</span>  </div>
|
|
<div class="line"><a name="l00046"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#aad232b4e5ba55646b1c05dc19250b8ad"> 46</a></span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#aad232b4e5ba55646b1c05dc19250b8ad">defaultCipherList</a> = <span class="stringliteral">"TLSv1.2:!DSS:!PSK:!eNULL:!aNULL"</span>;</div>
|
|
<div class="line"><a name="l00047"></a><span class="lineno"> 47</span>  </div>
|
|
<div class="line"><a name="l00048"></a><span class="lineno"> 48</span> <span class="keyword">template</span> <<span class="keyword">class</span>></div>
|
|
<div class="line"><a name="l00049"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html"> 49</a></span> <span class="keyword">struct </span><a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a>;</div>
|
|
<div class="line"><a name="l00050"></a><span class="lineno"> 50</span>  </div>
|
|
<div class="line"><a name="l00051"></a><span class="lineno"> 51</span> <span class="keyword">template</span> <></div>
|
|
<div class="line"><a name="l00052"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01RSA_01_4.html"> 52</a></span> <span class="keyword">struct </span><a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a><RSA></div>
|
|
<div class="line"><a name="l00053"></a><span class="lineno"> 53</span> {</div>
|
|
<div class="line"><a name="l00054"></a><span class="lineno"> 54</span>  <span class="keyword">explicit</span> <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a>() = <span class="keywordflow">default</span>;</div>
|
|
<div class="line"><a name="l00055"></a><span class="lineno"> 55</span>  </div>
|
|
<div class="line"><a name="l00056"></a><span class="lineno"> 56</span>  <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00057"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01RSA_01_4.html#ade01c3e3966798c9f6c50f0e029690d2"> 57</a></span>  <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01RSA_01_4.html#ade01c3e3966798c9f6c50f0e029690d2">operator()</a>(RSA* rsa)<span class="keyword"> const</span></div>
|
|
<div class="line"><a name="l00058"></a><span class="lineno"> 58</span> <span class="keyword"> </span>{</div>
|
|
<div class="line"><a name="l00059"></a><span class="lineno"> 59</span>  RSA_free(rsa);</div>
|
|
<div class="line"><a name="l00060"></a><span class="lineno"> 60</span>  }</div>
|
|
<div class="line"><a name="l00061"></a><span class="lineno"> 61</span> };</div>
|
|
<div class="line"><a name="l00062"></a><span class="lineno"> 62</span>  </div>
|
|
<div class="line"><a name="l00063"></a><span class="lineno"> 63</span> <span class="keyword">template</span> <></div>
|
|
<div class="line"><a name="l00064"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01EVP__PKEY_01_4.html"> 64</a></span> <span class="keyword">struct </span><a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a><EVP_PKEY></div>
|
|
<div class="line"><a name="l00065"></a><span class="lineno"> 65</span> {</div>
|
|
<div class="line"><a name="l00066"></a><span class="lineno"> 66</span>  <span class="keyword">explicit</span> <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a>() = <span class="keywordflow">default</span>;</div>
|
|
<div class="line"><a name="l00067"></a><span class="lineno"> 67</span>  </div>
|
|
<div class="line"><a name="l00068"></a><span class="lineno"> 68</span>  <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00069"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01EVP__PKEY_01_4.html#adab8a495c675462d6fac4cd1966a0264"> 69</a></span>  <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01EVP__PKEY_01_4.html#adab8a495c675462d6fac4cd1966a0264">operator()</a>(EVP_PKEY* evp_pkey)<span class="keyword"> const</span></div>
|
|
<div class="line"><a name="l00070"></a><span class="lineno"> 70</span> <span class="keyword"> </span>{</div>
|
|
<div class="line"><a name="l00071"></a><span class="lineno"> 71</span>  EVP_PKEY_free(evp_pkey);</div>
|
|
<div class="line"><a name="l00072"></a><span class="lineno"> 72</span>  }</div>
|
|
<div class="line"><a name="l00073"></a><span class="lineno"> 73</span> };</div>
|
|
<div class="line"><a name="l00074"></a><span class="lineno"> 74</span>  </div>
|
|
<div class="line"><a name="l00075"></a><span class="lineno"> 75</span> <span class="keyword">template</span> <></div>
|
|
<div class="line"><a name="l00076"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01X509_01_4.html"> 76</a></span> <span class="keyword">struct </span><a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a><X509></div>
|
|
<div class="line"><a name="l00077"></a><span class="lineno"> 77</span> {</div>
|
|
<div class="line"><a name="l00078"></a><span class="lineno"> 78</span>  <span class="keyword">explicit</span> <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a>() = <span class="keywordflow">default</span>;</div>
|
|
<div class="line"><a name="l00079"></a><span class="lineno"> 79</span>  </div>
|
|
<div class="line"><a name="l00080"></a><span class="lineno"> 80</span>  <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00081"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01X509_01_4.html#a98a5135b5e0b2c90735c61002212f410"> 81</a></span>  <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01X509_01_4.html#a98a5135b5e0b2c90735c61002212f410">operator()</a>(X509* x509)<span class="keyword"> const</span></div>
|
|
<div class="line"><a name="l00082"></a><span class="lineno"> 82</span> <span class="keyword"> </span>{</div>
|
|
<div class="line"><a name="l00083"></a><span class="lineno"> 83</span>  X509_free(x509);</div>
|
|
<div class="line"><a name="l00084"></a><span class="lineno"> 84</span>  }</div>
|
|
<div class="line"><a name="l00085"></a><span class="lineno"> 85</span> };</div>
|
|
<div class="line"><a name="l00086"></a><span class="lineno"> 86</span>  </div>
|
|
<div class="line"><a name="l00087"></a><span class="lineno"> 87</span> <span class="keyword">template</span> <></div>
|
|
<div class="line"><a name="l00088"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01DH_01_4.html"> 88</a></span> <span class="keyword">struct </span><a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a><DH></div>
|
|
<div class="line"><a name="l00089"></a><span class="lineno"> 89</span> {</div>
|
|
<div class="line"><a name="l00090"></a><span class="lineno"> 90</span>  <span class="keyword">explicit</span> <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">custom_delete</a>() = <span class="keywordflow">default</span>;</div>
|
|
<div class="line"><a name="l00091"></a><span class="lineno"> 91</span>  </div>
|
|
<div class="line"><a name="l00092"></a><span class="lineno"> 92</span>  <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00093"></a><span class="lineno"><a class="line" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01DH_01_4.html#a25f8f206a00a0fffeea05a720d7846d9"> 93</a></span>  <a class="code" href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01DH_01_4.html#a25f8f206a00a0fffeea05a720d7846d9">operator()</a>(DH* dh)<span class="keyword"> const</span></div>
|
|
<div class="line"><a name="l00094"></a><span class="lineno"> 94</span> <span class="keyword"> </span>{</div>
|
|
<div class="line"><a name="l00095"></a><span class="lineno"> 95</span>  DH_free(dh);</div>
|
|
<div class="line"><a name="l00096"></a><span class="lineno"> 96</span>  }</div>
|
|
<div class="line"><a name="l00097"></a><span class="lineno"> 97</span> };</div>
|
|
<div class="line"><a name="l00098"></a><span class="lineno"> 98</span>  </div>
|
|
<div class="line"><a name="l00099"></a><span class="lineno"> 99</span> <span class="keyword">template</span> <<span class="keyword">class</span> T></div>
|
|
<div class="line"><a name="l00100"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a4e89e6d4a2944cc905f7c8621ca53f9d"> 100</a></span> <span class="keyword">using</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">custom_delete_unique_ptr</a> = <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">std::unique_ptr<T, custom_delete<T></a>>;</div>
|
|
<div class="line"><a name="l00101"></a><span class="lineno"> 101</span>  </div>
|
|
<div class="line"><a name="l00102"></a><span class="lineno"> 102</span> <span class="comment">// RSA</span></div>
|
|
<div class="line"><a name="l00103"></a><span class="lineno"> 103</span>  </div>
|
|
<div class="line"><a name="l00104"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#aaf9eaa2814ed9cd4e5547d8575a7db96"> 104</a></span> <span class="keyword">using</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">rsa_ptr</a> = <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">custom_delete_unique_ptr<RSA></a>;</div>
|
|
<div class="line"><a name="l00105"></a><span class="lineno"> 105</span>  </div>
|
|
<div class="line"><a name="l00106"></a><span class="lineno"> 106</span> <span class="keyword">static</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">rsa_ptr</a></div>
|
|
<div class="line"><a name="l00107"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#afe690bae645d6073e4439d7d58774390"> 107</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#afe690bae645d6073e4439d7d58774390">rsa_generate_key</a>(<span class="keywordtype">int</span> n_bits)</div>
|
|
<div class="line"><a name="l00108"></a><span class="lineno"> 108</span> {</div>
|
|
<div class="line"><a name="l00109"></a><span class="lineno"> 109</span> <span class="preprocessor">#if OPENSSL_VERSION_NUMBER >= 0x00908000L</span></div>
|
|
<div class="line"><a name="l00110"></a><span class="lineno"> 110</span>  BIGNUM* bn = BN_new();</div>
|
|
<div class="line"><a name="l00111"></a><span class="lineno"> 111</span>  BN_set_word(bn, RSA_F4);</div>
|
|
<div class="line"><a name="l00112"></a><span class="lineno"> 112</span>  </div>
|
|
<div class="line"><a name="l00113"></a><span class="lineno"> 113</span>  RSA* rsa = RSA_new();</div>
|
|
<div class="line"><a name="l00114"></a><span class="lineno"> 114</span>  <span class="keywordflow">if</span> (RSA_generate_key_ex(rsa, n_bits, bn, <span class="keyword">nullptr</span>) != 1)</div>
|
|
<div class="line"><a name="l00115"></a><span class="lineno"> 115</span>  {</div>
|
|
<div class="line"><a name="l00116"></a><span class="lineno"> 116</span>  RSA_free(rsa);</div>
|
|
<div class="line"><a name="l00117"></a><span class="lineno"> 117</span>  rsa = <span class="keyword">nullptr</span>;</div>
|
|
<div class="line"><a name="l00118"></a><span class="lineno"> 118</span>  }</div>
|
|
<div class="line"><a name="l00119"></a><span class="lineno"> 119</span>  </div>
|
|
<div class="line"><a name="l00120"></a><span class="lineno"> 120</span>  BN_free(bn);</div>
|
|
<div class="line"><a name="l00121"></a><span class="lineno"> 121</span> <span class="preprocessor">#else</span></div>
|
|
<div class="line"><a name="l00122"></a><span class="lineno"> 122</span>  RSA* rsa = RSA_generate_key(n_bits, RSA_F4, <span class="keyword">nullptr</span>, <span class="keyword">nullptr</span>);</div>
|
|
<div class="line"><a name="l00123"></a><span class="lineno"> 123</span> <span class="preprocessor">#endif</span></div>
|
|
<div class="line"><a name="l00124"></a><span class="lineno"> 124</span>  </div>
|
|
<div class="line"><a name="l00125"></a><span class="lineno"> 125</span>  <span class="keywordflow">if</span> (rsa == <span class="keyword">nullptr</span>)</div>
|
|
<div class="line"><a name="l00126"></a><span class="lineno"> 126</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"RSA_generate_key failed"</span>);</div>
|
|
<div class="line"><a name="l00127"></a><span class="lineno"> 127</span>  </div>
|
|
<div class="line"><a name="l00128"></a><span class="lineno"> 128</span>  <span class="keywordflow">return</span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#aaf9eaa2814ed9cd4e5547d8575a7db96">rsa_ptr</a>(rsa);</div>
|
|
<div class="line"><a name="l00129"></a><span class="lineno"> 129</span> }</div>
|
|
<div class="line"><a name="l00130"></a><span class="lineno"> 130</span>  </div>
|
|
<div class="line"><a name="l00131"></a><span class="lineno"> 131</span> <span class="comment">// EVP_PKEY</span></div>
|
|
<div class="line"><a name="l00132"></a><span class="lineno"> 132</span>  </div>
|
|
<div class="line"><a name="l00133"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a123058afafe8e8f5b75e68cb456b0ba0"> 133</a></span> <span class="keyword">using</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">evp_pkey_ptr</a> = <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">custom_delete_unique_ptr<EVP_PKEY></a>;</div>
|
|
<div class="line"><a name="l00134"></a><span class="lineno"> 134</span>  </div>
|
|
<div class="line"><a name="l00135"></a><span class="lineno"> 135</span> <span class="keyword">static</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">evp_pkey_ptr</a></div>
|
|
<div class="line"><a name="l00136"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#abfa5623dad369e7932a5ce55e32cb3bf"> 136</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#abfa5623dad369e7932a5ce55e32cb3bf">evp_pkey_new</a>()</div>
|
|
<div class="line"><a name="l00137"></a><span class="lineno"> 137</span> {</div>
|
|
<div class="line"><a name="l00138"></a><span class="lineno"> 138</span>  EVP_PKEY* evp_pkey = EVP_PKEY_new();</div>
|
|
<div class="line"><a name="l00139"></a><span class="lineno"> 139</span>  </div>
|
|
<div class="line"><a name="l00140"></a><span class="lineno"> 140</span>  <span class="keywordflow">if</span> (evp_pkey == <span class="keyword">nullptr</span>)</div>
|
|
<div class="line"><a name="l00141"></a><span class="lineno"> 141</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"EVP_PKEY_new failed"</span>);</div>
|
|
<div class="line"><a name="l00142"></a><span class="lineno"> 142</span>  </div>
|
|
<div class="line"><a name="l00143"></a><span class="lineno"> 143</span>  <span class="keywordflow">return</span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a123058afafe8e8f5b75e68cb456b0ba0">evp_pkey_ptr</a>(evp_pkey);</div>
|
|
<div class="line"><a name="l00144"></a><span class="lineno"> 144</span> }</div>
|
|
<div class="line"><a name="l00145"></a><span class="lineno"> 145</span>  </div>
|
|
<div class="line"><a name="l00146"></a><span class="lineno"> 146</span> <span class="keyword">static</span> <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00147"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#ad536d870b6ec8bae51effb86c6defcd4"> 147</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#ad536d870b6ec8bae51effb86c6defcd4">evp_pkey_assign_rsa</a>(EVP_PKEY* evp_pkey, <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">rsa_ptr</a> rsa)</div>
|
|
<div class="line"><a name="l00148"></a><span class="lineno"> 148</span> {</div>
|
|
<div class="line"><a name="l00149"></a><span class="lineno"> 149</span>  <span class="keywordflow">if</span> (!EVP_PKEY_assign_RSA(evp_pkey, rsa.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>()))</div>
|
|
<div class="line"><a name="l00150"></a><span class="lineno"> 150</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"EVP_PKEY_assign_RSA failed"</span>);</div>
|
|
<div class="line"><a name="l00151"></a><span class="lineno"> 151</span>  </div>
|
|
<div class="line"><a name="l00152"></a><span class="lineno"> 152</span>  rsa.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/release.html">release</a>();</div>
|
|
<div class="line"><a name="l00153"></a><span class="lineno"> 153</span> }</div>
|
|
<div class="line"><a name="l00154"></a><span class="lineno"> 154</span>  </div>
|
|
<div class="line"><a name="l00155"></a><span class="lineno"> 155</span> <span class="comment">// X509</span></div>
|
|
<div class="line"><a name="l00156"></a><span class="lineno"> 156</span>  </div>
|
|
<div class="line"><a name="l00157"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#ae2d29f79e03cddf63e1c4d4b9d0c0db3"> 157</a></span> <span class="keyword">using</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">x509_ptr</a> = <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">custom_delete_unique_ptr<X509></a>;</div>
|
|
<div class="line"><a name="l00158"></a><span class="lineno"> 158</span>  </div>
|
|
<div class="line"><a name="l00159"></a><span class="lineno"> 159</span> <span class="keyword">static</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">x509_ptr</a></div>
|
|
<div class="line"><a name="l00160"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a66a57746695d60a6f1f4bc3947af2408"> 160</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a66a57746695d60a6f1f4bc3947af2408">x509_new</a>()</div>
|
|
<div class="line"><a name="l00161"></a><span class="lineno"> 161</span> {</div>
|
|
<div class="line"><a name="l00162"></a><span class="lineno"> 162</span>  X509* x509 = X509_new();</div>
|
|
<div class="line"><a name="l00163"></a><span class="lineno"> 163</span>  </div>
|
|
<div class="line"><a name="l00164"></a><span class="lineno"> 164</span>  <span class="keywordflow">if</span> (x509 == <span class="keyword">nullptr</span>)</div>
|
|
<div class="line"><a name="l00165"></a><span class="lineno"> 165</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"X509_new failed"</span>);</div>
|
|
<div class="line"><a name="l00166"></a><span class="lineno"> 166</span>  </div>
|
|
<div class="line"><a name="l00167"></a><span class="lineno"> 167</span>  X509_set_version(x509, NID_X509);</div>
|
|
<div class="line"><a name="l00168"></a><span class="lineno"> 168</span>  </div>
|
|
<div class="line"><a name="l00169"></a><span class="lineno"> 169</span>  <span class="keywordtype">int</span> <span class="keyword">const</span> margin = 60 * 60; <span class="comment">// 3600, one hour</span></div>
|
|
<div class="line"><a name="l00170"></a><span class="lineno"> 170</span>  <span class="keywordtype">int</span> <span class="keyword">const</span> length = 10 * 365.25 * 24 * 60 * 60; <span class="comment">// 315576000, ten years</span></div>
|
|
<div class="line"><a name="l00171"></a><span class="lineno"> 171</span>  </div>
|
|
<div class="line"><a name="l00172"></a><span class="lineno"> 172</span>  X509_gmtime_adj(X509_get_notBefore(x509), -margin);</div>
|
|
<div class="line"><a name="l00173"></a><span class="lineno"> 173</span>  X509_gmtime_adj(X509_get_notAfter(x509), length);</div>
|
|
<div class="line"><a name="l00174"></a><span class="lineno"> 174</span>  </div>
|
|
<div class="line"><a name="l00175"></a><span class="lineno"> 175</span>  <span class="keywordflow">return</span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#ae2d29f79e03cddf63e1c4d4b9d0c0db3">x509_ptr</a>(x509);</div>
|
|
<div class="line"><a name="l00176"></a><span class="lineno"> 176</span> }</div>
|
|
<div class="line"><a name="l00177"></a><span class="lineno"> 177</span>  </div>
|
|
<div class="line"><a name="l00178"></a><span class="lineno"> 178</span> <span class="keyword">static</span> <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00179"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#abb617bff910d2048c529faaac094c48c"> 179</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#abb617bff910d2048c529faaac094c48c">x509_set_pubkey</a>(X509* x509, EVP_PKEY* evp_pkey)</div>
|
|
<div class="line"><a name="l00180"></a><span class="lineno"> 180</span> {</div>
|
|
<div class="line"><a name="l00181"></a><span class="lineno"> 181</span>  X509_set_pubkey(x509, evp_pkey);</div>
|
|
<div class="line"><a name="l00182"></a><span class="lineno"> 182</span> }</div>
|
|
<div class="line"><a name="l00183"></a><span class="lineno"> 183</span>  </div>
|
|
<div class="line"><a name="l00184"></a><span class="lineno"> 184</span> <span class="keyword">static</span> <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00185"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#aac5589b9199eabe436098831445adbf6"> 185</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#aac5589b9199eabe436098831445adbf6">x509_sign</a>(X509* x509, EVP_PKEY* evp_pkey)</div>
|
|
<div class="line"><a name="l00186"></a><span class="lineno"> 186</span> {</div>
|
|
<div class="line"><a name="l00187"></a><span class="lineno"> 187</span>  <span class="keywordflow">if</span> (!X509_sign(x509, evp_pkey, EVP_sha1()))</div>
|
|
<div class="line"><a name="l00188"></a><span class="lineno"> 188</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"X509_sign failed"</span>);</div>
|
|
<div class="line"><a name="l00189"></a><span class="lineno"> 189</span> }</div>
|
|
<div class="line"><a name="l00190"></a><span class="lineno"> 190</span>  </div>
|
|
<div class="line"><a name="l00191"></a><span class="lineno"> 191</span> <span class="keyword">static</span> <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00192"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a2e63280706f62e0c926855f2f2301c67"> 192</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a2e63280706f62e0c926855f2f2301c67">ssl_ctx_use_certificate</a>(SSL_CTX* <span class="keyword">const</span> ctx, <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">x509_ptr</a> cert)</div>
|
|
<div class="line"><a name="l00193"></a><span class="lineno"> 193</span> {</div>
|
|
<div class="line"><a name="l00194"></a><span class="lineno"> 194</span>  <span class="keywordflow">if</span> (SSL_CTX_use_certificate(ctx, cert.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>()) <= 0)</div>
|
|
<div class="line"><a name="l00195"></a><span class="lineno"> 195</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"SSL_CTX_use_certificate failed"</span>);</div>
|
|
<div class="line"><a name="l00196"></a><span class="lineno"> 196</span> }</div>
|
|
<div class="line"><a name="l00197"></a><span class="lineno"> 197</span>  </div>
|
|
<div class="line"><a name="l00198"></a><span class="lineno"> 198</span> <span class="keyword">static</span> <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00199"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a1779f378ad1cc4ac9010a3a33364fb52"> 199</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a1779f378ad1cc4ac9010a3a33364fb52">ssl_ctx_use_privatekey</a>(SSL_CTX* <span class="keyword">const</span> ctx, <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">evp_pkey_ptr</a> key)</div>
|
|
<div class="line"><a name="l00200"></a><span class="lineno"> 200</span> {</div>
|
|
<div class="line"><a name="l00201"></a><span class="lineno"> 201</span>  <span class="keywordflow">if</span> (SSL_CTX_use_PrivateKey(ctx, key.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>()) <= 0)</div>
|
|
<div class="line"><a name="l00202"></a><span class="lineno"> 202</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"SSL_CTX_use_PrivateKey failed"</span>);</div>
|
|
<div class="line"><a name="l00203"></a><span class="lineno"> 203</span> }</div>
|
|
<div class="line"><a name="l00204"></a><span class="lineno"> 204</span>  </div>
|
|
<div class="line"><a name="l00205"></a><span class="lineno"> 205</span> <span class="keyword">static</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a></div>
|
|
<div class="line"><a name="l00206"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a07f6e634c7dd32f515fc5383ed577c58"> 206</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a07f6e634c7dd32f515fc5383ed577c58">error_message</a>(<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& what, boost::system::error_code <span class="keyword">const</span>& ec)</div>
|
|
<div class="line"><a name="l00207"></a><span class="lineno"> 207</span> {</div>
|
|
<div class="line"><a name="l00208"></a><span class="lineno"> 208</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/io/basic_stringstream.html">std::stringstream</a> ss;</div>
|
|
<div class="line"><a name="l00209"></a><span class="lineno"> 209</span>  ss << what << <span class="stringliteral">": "</span> << ec.message() << <span class="stringliteral">" ("</span> << ec.value() << <span class="stringliteral">")"</span>;</div>
|
|
<div class="line"><a name="l00210"></a><span class="lineno"> 210</span>  <span class="keywordflow">return</span> ss.<a class="codeRef" href="http://en.cppreference.com/w/cpp/io/basic_stringstream/str.html">str</a>();</div>
|
|
<div class="line"><a name="l00211"></a><span class="lineno"> 211</span> }</div>
|
|
<div class="line"><a name="l00212"></a><span class="lineno"> 212</span>  </div>
|
|
<div class="line"><a name="l00213"></a><span class="lineno"> 213</span> <span class="keyword">static</span> <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00214"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a5424207e5a700ac59ea8b9ab1e2b9397"> 214</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a5424207e5a700ac59ea8b9ab1e2b9397">initAnonymous</a>(boost::asio::ssl::context& context)</div>
|
|
<div class="line"><a name="l00215"></a><span class="lineno"> 215</span> {</div>
|
|
<div class="line"><a name="l00216"></a><span class="lineno"> 216</span>  <span class="keyword">using namespace </span>openssl;</div>
|
|
<div class="line"><a name="l00217"></a><span class="lineno"> 217</span>  </div>
|
|
<div class="line"><a name="l00218"></a><span class="lineno"> 218</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">evp_pkey_ptr</a> pkey = <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#abfa5623dad369e7932a5ce55e32cb3bf">evp_pkey_new</a>();</div>
|
|
<div class="line"><a name="l00219"></a><span class="lineno"> 219</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#ad536d870b6ec8bae51effb86c6defcd4">evp_pkey_assign_rsa</a>(pkey.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>(), <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#afe690bae645d6073e4439d7d58774390">rsa_generate_key</a>(2048));</div>
|
|
<div class="line"><a name="l00220"></a><span class="lineno"> 220</span>  </div>
|
|
<div class="line"><a name="l00221"></a><span class="lineno"> 221</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">x509_ptr</a> cert = <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a66a57746695d60a6f1f4bc3947af2408">x509_new</a>();</div>
|
|
<div class="line"><a name="l00222"></a><span class="lineno"> 222</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#abb617bff910d2048c529faaac094c48c">x509_set_pubkey</a>(cert.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>(), pkey.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>());</div>
|
|
<div class="line"><a name="l00223"></a><span class="lineno"> 223</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#aac5589b9199eabe436098831445adbf6">x509_sign</a>(cert.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>(), pkey.<a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">get</a>());</div>
|
|
<div class="line"><a name="l00224"></a><span class="lineno"> 224</span>  </div>
|
|
<div class="line"><a name="l00225"></a><span class="lineno"> 225</span>  SSL_CTX* <span class="keyword">const</span> ctx = context.native_handle();</div>
|
|
<div class="line"><a name="l00226"></a><span class="lineno"> 226</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a2e63280706f62e0c926855f2f2301c67">ssl_ctx_use_certificate</a>(ctx, std::move(cert));</div>
|
|
<div class="line"><a name="l00227"></a><span class="lineno"> 227</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a1779f378ad1cc4ac9010a3a33364fb52">ssl_ctx_use_privatekey</a>(ctx, std::move(pkey));</div>
|
|
<div class="line"><a name="l00228"></a><span class="lineno"> 228</span> }</div>
|
|
<div class="line"><a name="l00229"></a><span class="lineno"> 229</span>  </div>
|
|
<div class="line"><a name="l00230"></a><span class="lineno"> 230</span> <span class="keyword">static</span> <span class="keywordtype">void</span></div>
|
|
<div class="line"><a name="l00231"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a70f3d81f87a75113774c421267a670b7"> 231</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a70f3d81f87a75113774c421267a670b7">initAuthenticated</a>(</div>
|
|
<div class="line"><a name="l00232"></a><span class="lineno"> 232</span>  boost::asio::ssl::context& context,</div>
|
|
<div class="line"><a name="l00233"></a><span class="lineno"> 233</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& key_file,</div>
|
|
<div class="line"><a name="l00234"></a><span class="lineno"> 234</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& cert_file,</div>
|
|
<div class="line"><a name="l00235"></a><span class="lineno"> 235</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& chain_file)</div>
|
|
<div class="line"><a name="l00236"></a><span class="lineno"> 236</span> {</div>
|
|
<div class="line"><a name="l00237"></a><span class="lineno"> 237</span>  SSL_CTX* <span class="keyword">const</span> ssl = context.native_handle();</div>
|
|
<div class="line"><a name="l00238"></a><span class="lineno"> 238</span>  </div>
|
|
<div class="line"><a name="l00239"></a><span class="lineno"> 239</span>  <span class="keywordtype">bool</span> cert_set = <span class="keyword">false</span>;</div>
|
|
<div class="line"><a name="l00240"></a><span class="lineno"> 240</span>  </div>
|
|
<div class="line"><a name="l00241"></a><span class="lineno"> 241</span>  <span class="keywordflow">if</span> (!cert_file.<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string/empty.html">empty</a>())</div>
|
|
<div class="line"><a name="l00242"></a><span class="lineno"> 242</span>  {</div>
|
|
<div class="line"><a name="l00243"></a><span class="lineno"> 243</span>  boost::system::error_code ec;</div>
|
|
<div class="line"><a name="l00244"></a><span class="lineno"> 244</span>  </div>
|
|
<div class="line"><a name="l00245"></a><span class="lineno"> 245</span>  context.use_certificate_file(</div>
|
|
<div class="line"><a name="l00246"></a><span class="lineno"> 246</span>  cert_file, boost::asio::ssl::context::pem, ec);</div>
|
|
<div class="line"><a name="l00247"></a><span class="lineno"> 247</span>  </div>
|
|
<div class="line"><a name="l00248"></a><span class="lineno"> 248</span>  <span class="keywordflow">if</span> (ec)</div>
|
|
<div class="line"><a name="l00249"></a><span class="lineno"> 249</span>  {</div>
|
|
<div class="line"><a name="l00250"></a><span class="lineno"> 250</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a07f6e634c7dd32f515fc5383ed577c58">error_message</a>(<span class="stringliteral">"Problem with SSL certificate file."</span>, ec)</div>
|
|
<div class="line"><a name="l00251"></a><span class="lineno"> 251</span>  .c_str());</div>
|
|
<div class="line"><a name="l00252"></a><span class="lineno"> 252</span>  }</div>
|
|
<div class="line"><a name="l00253"></a><span class="lineno"> 253</span>  </div>
|
|
<div class="line"><a name="l00254"></a><span class="lineno"> 254</span>  cert_set = <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00255"></a><span class="lineno"> 255</span>  }</div>
|
|
<div class="line"><a name="l00256"></a><span class="lineno"> 256</span>  </div>
|
|
<div class="line"><a name="l00257"></a><span class="lineno"> 257</span>  <span class="keywordflow">if</span> (!chain_file.<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string/empty.html">empty</a>())</div>
|
|
<div class="line"><a name="l00258"></a><span class="lineno"> 258</span>  {</div>
|
|
<div class="line"><a name="l00259"></a><span class="lineno"> 259</span>  <span class="comment">// VFALCO Replace fopen() with RAII</span></div>
|
|
<div class="line"><a name="l00260"></a><span class="lineno"> 260</span>  FILE* f = fopen(chain_file.<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string/c_str.html">c_str</a>(), <span class="stringliteral">"r"</span>);</div>
|
|
<div class="line"><a name="l00261"></a><span class="lineno"> 261</span>  </div>
|
|
<div class="line"><a name="l00262"></a><span class="lineno"> 262</span>  <span class="keywordflow">if</span> (!f)</div>
|
|
<div class="line"><a name="l00263"></a><span class="lineno"> 263</span>  {</div>
|
|
<div class="line"><a name="l00264"></a><span class="lineno"> 264</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a07f6e634c7dd32f515fc5383ed577c58">error_message</a>(</div>
|
|
<div class="line"><a name="l00265"></a><span class="lineno"> 265</span>  <span class="stringliteral">"Problem opening SSL chain file."</span>,</div>
|
|
<div class="line"><a name="l00266"></a><span class="lineno"> 266</span>  boost::system::error_code(</div>
|
|
<div class="line"><a name="l00267"></a><span class="lineno"> 267</span>  errno, boost::system::generic_category()))</div>
|
|
<div class="line"><a name="l00268"></a><span class="lineno"> 268</span>  .c_str());</div>
|
|
<div class="line"><a name="l00269"></a><span class="lineno"> 269</span>  }</div>
|
|
<div class="line"><a name="l00270"></a><span class="lineno"> 270</span>  </div>
|
|
<div class="line"><a name="l00271"></a><span class="lineno"> 271</span>  <span class="keywordflow">try</span></div>
|
|
<div class="line"><a name="l00272"></a><span class="lineno"> 272</span>  {</div>
|
|
<div class="line"><a name="l00273"></a><span class="lineno"> 273</span>  <span class="keywordflow">for</span> (;;)</div>
|
|
<div class="line"><a name="l00274"></a><span class="lineno"> 274</span>  {</div>
|
|
<div class="line"><a name="l00275"></a><span class="lineno"> 275</span>  X509* <span class="keyword">const</span> x = PEM_read_X509(f, <span class="keyword">nullptr</span>, <span class="keyword">nullptr</span>, <span class="keyword">nullptr</span>);</div>
|
|
<div class="line"><a name="l00276"></a><span class="lineno"> 276</span>  </div>
|
|
<div class="line"><a name="l00277"></a><span class="lineno"> 277</span>  <span class="keywordflow">if</span> (x == <span class="keyword">nullptr</span>)</div>
|
|
<div class="line"><a name="l00278"></a><span class="lineno"> 278</span>  <span class="keywordflow">break</span>;</div>
|
|
<div class="line"><a name="l00279"></a><span class="lineno"> 279</span>  </div>
|
|
<div class="line"><a name="l00280"></a><span class="lineno"> 280</span>  <span class="keywordflow">if</span> (!cert_set)</div>
|
|
<div class="line"><a name="l00281"></a><span class="lineno"> 281</span>  {</div>
|
|
<div class="line"><a name="l00282"></a><span class="lineno"> 282</span>  <span class="keywordflow">if</span> (SSL_CTX_use_certificate(ssl, x) != 1)</div>
|
|
<div class="line"><a name="l00283"></a><span class="lineno"> 283</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(</div>
|
|
<div class="line"><a name="l00284"></a><span class="lineno"> 284</span>  <span class="stringliteral">"Problem retrieving SSL certificate from chain "</span></div>
|
|
<div class="line"><a name="l00285"></a><span class="lineno"> 285</span>  <span class="stringliteral">"file."</span>);</div>
|
|
<div class="line"><a name="l00286"></a><span class="lineno"> 286</span>  </div>
|
|
<div class="line"><a name="l00287"></a><span class="lineno"> 287</span>  cert_set = <span class="keyword">true</span>;</div>
|
|
<div class="line"><a name="l00288"></a><span class="lineno"> 288</span>  }</div>
|
|
<div class="line"><a name="l00289"></a><span class="lineno"> 289</span>  <span class="keywordflow">else</span> <span class="keywordflow">if</span> (SSL_CTX_add_extra_chain_cert(ssl, x) != 1)</div>
|
|
<div class="line"><a name="l00290"></a><span class="lineno"> 290</span>  {</div>
|
|
<div class="line"><a name="l00291"></a><span class="lineno"> 291</span>  X509_free(x);</div>
|
|
<div class="line"><a name="l00292"></a><span class="lineno"> 292</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"Problem adding SSL chain certificate."</span>);</div>
|
|
<div class="line"><a name="l00293"></a><span class="lineno"> 293</span>  }</div>
|
|
<div class="line"><a name="l00294"></a><span class="lineno"> 294</span>  }</div>
|
|
<div class="line"><a name="l00295"></a><span class="lineno"> 295</span>  </div>
|
|
<div class="line"><a name="l00296"></a><span class="lineno"> 296</span>  fclose(f);</div>
|
|
<div class="line"><a name="l00297"></a><span class="lineno"> 297</span>  }</div>
|
|
<div class="line"><a name="l00298"></a><span class="lineno"> 298</span>  <span class="keywordflow">catch</span> (<a class="codeRef" href="http://en.cppreference.com/w/cpp/error/exception.html">std::exception</a> <span class="keyword">const</span>&)</div>
|
|
<div class="line"><a name="l00299"></a><span class="lineno"> 299</span>  {</div>
|
|
<div class="line"><a name="l00300"></a><span class="lineno"> 300</span>  fclose(f);</div>
|
|
<div class="line"><a name="l00301"></a><span class="lineno"> 301</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"Reading the SSL chain file generated an exception."</span>);</div>
|
|
<div class="line"><a name="l00302"></a><span class="lineno"> 302</span>  }</div>
|
|
<div class="line"><a name="l00303"></a><span class="lineno"> 303</span>  }</div>
|
|
<div class="line"><a name="l00304"></a><span class="lineno"> 304</span>  </div>
|
|
<div class="line"><a name="l00305"></a><span class="lineno"> 305</span>  <span class="keywordflow">if</span> (!key_file.<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string/empty.html">empty</a>())</div>
|
|
<div class="line"><a name="l00306"></a><span class="lineno"> 306</span>  {</div>
|
|
<div class="line"><a name="l00307"></a><span class="lineno"> 307</span>  boost::system::error_code ec;</div>
|
|
<div class="line"><a name="l00308"></a><span class="lineno"> 308</span>  </div>
|
|
<div class="line"><a name="l00309"></a><span class="lineno"> 309</span>  context.use_private_key_file(</div>
|
|
<div class="line"><a name="l00310"></a><span class="lineno"> 310</span>  key_file, boost::asio::ssl::context::pem, ec);</div>
|
|
<div class="line"><a name="l00311"></a><span class="lineno"> 311</span>  </div>
|
|
<div class="line"><a name="l00312"></a><span class="lineno"> 312</span>  <span class="keywordflow">if</span> (ec)</div>
|
|
<div class="line"><a name="l00313"></a><span class="lineno"> 313</span>  {</div>
|
|
<div class="line"><a name="l00314"></a><span class="lineno"> 314</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(</div>
|
|
<div class="line"><a name="l00315"></a><span class="lineno"> 315</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a07f6e634c7dd32f515fc5383ed577c58">error_message</a>(<span class="stringliteral">"Problem using the SSL private key file."</span>, ec)</div>
|
|
<div class="line"><a name="l00316"></a><span class="lineno"> 316</span>  .c_str());</div>
|
|
<div class="line"><a name="l00317"></a><span class="lineno"> 317</span>  }</div>
|
|
<div class="line"><a name="l00318"></a><span class="lineno"> 318</span>  }</div>
|
|
<div class="line"><a name="l00319"></a><span class="lineno"> 319</span>  </div>
|
|
<div class="line"><a name="l00320"></a><span class="lineno"> 320</span>  <span class="keywordflow">if</span> (SSL_CTX_check_private_key(ssl) != 1)</div>
|
|
<div class="line"><a name="l00321"></a><span class="lineno"> 321</span>  {</div>
|
|
<div class="line"><a name="l00322"></a><span class="lineno"> 322</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"Invalid key in SSL private key file."</span>);</div>
|
|
<div class="line"><a name="l00323"></a><span class="lineno"> 323</span>  }</div>
|
|
<div class="line"><a name="l00324"></a><span class="lineno"> 324</span> }</div>
|
|
<div class="line"><a name="l00325"></a><span class="lineno"> 325</span>  </div>
|
|
<div class="line"><a name="l00326"></a><span class="lineno"> 326</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/shared_ptr.html">std::shared_ptr<boost::asio::ssl::context></a></div>
|
|
<div class="line"><a name="l00327"></a><span class="lineno"><a class="line" href="namespaceripple_1_1openssl_1_1detail.html#a626f9d4252b4849da511e507938955d6"> 327</a></span> <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a626f9d4252b4849da511e507938955d6">get_context</a>(<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& cipherList)</div>
|
|
<div class="line"><a name="l00328"></a><span class="lineno"> 328</span> {</div>
|
|
<div class="line"><a name="l00329"></a><span class="lineno"> 329</span>  <span class="keyword">auto</span> c = std::make_shared<boost::asio::ssl::context>(</div>
|
|
<div class="line"><a name="l00330"></a><span class="lineno"> 330</span>  boost::asio::ssl::context::sslv23);</div>
|
|
<div class="line"><a name="l00331"></a><span class="lineno"> 331</span>  </div>
|
|
<div class="line"><a name="l00332"></a><span class="lineno"> 332</span>  c->set_options(</div>
|
|
<div class="line"><a name="l00333"></a><span class="lineno"> 333</span>  boost::asio::ssl::context::default_workarounds |</div>
|
|
<div class="line"><a name="l00334"></a><span class="lineno"> 334</span>  boost::asio::ssl::context::no_sslv2 |</div>
|
|
<div class="line"><a name="l00335"></a><span class="lineno"> 335</span>  boost::asio::ssl::context::no_sslv3 |</div>
|
|
<div class="line"><a name="l00336"></a><span class="lineno"> 336</span>  boost::asio::ssl::context::no_tlsv1 |</div>
|
|
<div class="line"><a name="l00337"></a><span class="lineno"> 337</span>  boost::asio::ssl::context::no_tlsv1_1 |</div>
|
|
<div class="line"><a name="l00338"></a><span class="lineno"> 338</span>  boost::asio::ssl::context::single_dh_use |</div>
|
|
<div class="line"><a name="l00339"></a><span class="lineno"> 339</span>  boost::asio::ssl::context::no_compression);</div>
|
|
<div class="line"><a name="l00340"></a><span class="lineno"> 340</span>  </div>
|
|
<div class="line"><a name="l00341"></a><span class="lineno"> 341</span>  {</div>
|
|
<div class="line"><a name="l00342"></a><span class="lineno"> 342</span>  <span class="keyword">auto</span> <span class="keyword">const</span>& l = !cipherList.<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string/empty.html">empty</a>() ? cipherList : <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#aad232b4e5ba55646b1c05dc19250b8ad">defaultCipherList</a>;</div>
|
|
<div class="line"><a name="l00343"></a><span class="lineno"> 343</span>  <span class="keyword">auto</span> result = SSL_CTX_set_cipher_list(c->native_handle(), l.c_str());</div>
|
|
<div class="line"><a name="l00344"></a><span class="lineno"> 344</span>  <span class="keywordflow">if</span> (result != 1)</div>
|
|
<div class="line"><a name="l00345"></a><span class="lineno"> 345</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"SSL_CTX_set_cipher_list failed"</span>);</div>
|
|
<div class="line"><a name="l00346"></a><span class="lineno"> 346</span>  }</div>
|
|
<div class="line"><a name="l00347"></a><span class="lineno"> 347</span>  </div>
|
|
<div class="line"><a name="l00348"></a><span class="lineno"> 348</span>  <span class="comment">// These are the raw DH parameters that Ripple Labs has</span></div>
|
|
<div class="line"><a name="l00349"></a><span class="lineno"> 349</span>  <span class="comment">// chosen for Ripple, in the binary format needed by</span></div>
|
|
<div class="line"><a name="l00350"></a><span class="lineno"> 350</span>  <span class="comment">// d2i_DHparams.</span></div>
|
|
<div class="line"><a name="l00351"></a><span class="lineno"> 351</span>  <span class="comment">//</span></div>
|
|
<div class="line"><a name="l00352"></a><span class="lineno"> 352</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <span class="keyword">const</span> params[] = {</div>
|
|
<div class="line"><a name="l00353"></a><span class="lineno"> 353</span>  0x30, 0x82, 0x01, 0x08, 0x02, 0x82, 0x01, 0x01, 0x00, 0x8f, 0xca, 0x66,</div>
|
|
<div class="line"><a name="l00354"></a><span class="lineno"> 354</span>  0x85, 0x33, 0xcb, 0xcf, 0x36, 0x27, 0xb2, 0x4c, 0xb8, 0x50, 0xb8, 0xf9,</div>
|
|
<div class="line"><a name="l00355"></a><span class="lineno"> 355</span>  0x53, 0xf8, 0xb9, 0x2d, 0x1c, 0xa2, 0xad, 0x86, 0x58, 0x29, 0x3b, 0x88,</div>
|
|
<div class="line"><a name="l00356"></a><span class="lineno"> 356</span>  0x3e, 0xf5, 0x65, 0xb8, 0xda, 0x22, 0xf4, 0x8b, 0x21, 0x12, 0x18, 0xf7,</div>
|
|
<div class="line"><a name="l00357"></a><span class="lineno"> 357</span>  0x16, 0xcd, 0x7c, 0xc7, 0x3a, 0x2d, 0x61, 0xb7, 0x11, 0xf6, 0xb0, 0x65,</div>
|
|
<div class="line"><a name="l00358"></a><span class="lineno"> 358</span>  0xa0, 0x5b, 0xa4, 0x06, 0x95, 0x28, 0xa4, 0x4f, 0x76, 0xc0, 0xeb, 0xfa,</div>
|
|
<div class="line"><a name="l00359"></a><span class="lineno"> 359</span>  0x95, 0xdf, 0xbf, 0x19, 0x90, 0x64, 0x8f, 0x60, 0xd5, 0x36, 0xba, 0xab,</div>
|
|
<div class="line"><a name="l00360"></a><span class="lineno"> 360</span>  0x0d, 0x5a, 0x5c, 0x94, 0xd5, 0xf7, 0x32, 0xd6, 0x2a, 0x76, 0x77, 0x83,</div>
|
|
<div class="line"><a name="l00361"></a><span class="lineno"> 361</span>  0x10, 0xc4, 0x2f, 0x10, 0x96, 0x3e, 0x37, 0x84, 0x45, 0x9c, 0xef, 0x33,</div>
|
|
<div class="line"><a name="l00362"></a><span class="lineno"> 362</span>  0xf6, 0xd0, 0x2a, 0xa7, 0xce, 0x0a, 0xce, 0x0d, 0xa1, 0xa7, 0x44, 0x5d,</div>
|
|
<div class="line"><a name="l00363"></a><span class="lineno"> 363</span>  0x18, 0x3f, 0x4f, 0xa4, 0x23, 0x9c, 0x5d, 0x74, 0x4f, 0xee, 0xdf, 0xaa,</div>
|
|
<div class="line"><a name="l00364"></a><span class="lineno"> 364</span>  0x0d, 0x0a, 0x52, 0x57, 0x73, 0xb1, 0xe4, 0xc5, 0x72, 0x93, 0x9d, 0x03,</div>
|
|
<div class="line"><a name="l00365"></a><span class="lineno"> 365</span>  0xe9, 0xf5, 0x48, 0x8c, 0xd1, 0xe6, 0x7c, 0x21, 0x65, 0x4e, 0x16, 0x51,</div>
|
|
<div class="line"><a name="l00366"></a><span class="lineno"> 366</span>  0xa3, 0x16, 0x51, 0x10, 0x75, 0x60, 0x37, 0x93, 0xb8, 0x15, 0xd6, 0x14,</div>
|
|
<div class="line"><a name="l00367"></a><span class="lineno"> 367</span>  0x41, 0x4a, 0x61, 0xc9, 0x1a, 0x4e, 0x9f, 0x38, 0xd8, 0x2c, 0xa5, 0x31,</div>
|
|
<div class="line"><a name="l00368"></a><span class="lineno"> 368</span>  0xe1, 0x87, 0xda, 0x1f, 0xa4, 0x31, 0xa2, 0xa4, 0x42, 0x1e, 0xe0, 0x30,</div>
|
|
<div class="line"><a name="l00369"></a><span class="lineno"> 369</span>  0xea, 0x2f, 0x9b, 0x77, 0x91, 0x59, 0x3e, 0xd5, 0xd0, 0xc5, 0x84, 0x45,</div>
|
|
<div class="line"><a name="l00370"></a><span class="lineno"> 370</span>  0x17, 0x19, 0x74, 0x8b, 0x18, 0xb0, 0xc1, 0xe0, 0xfc, 0x1c, 0xaf, 0xe6,</div>
|
|
<div class="line"><a name="l00371"></a><span class="lineno"> 371</span>  0x2a, 0xef, 0x4e, 0x0e, 0x8a, 0x5c, 0xc2, 0x91, 0xb9, 0x2b, 0xf8, 0x17,</div>
|
|
<div class="line"><a name="l00372"></a><span class="lineno"> 372</span>  0x8d, 0xed, 0x44, 0xaa, 0x47, 0xaa, 0x52, 0xa2, 0xdb, 0xb6, 0xf5, 0xa1,</div>
|
|
<div class="line"><a name="l00373"></a><span class="lineno"> 373</span>  0x88, 0x85, 0xa1, 0xd5, 0x87, 0xb8, 0x07, 0xd3, 0x97, 0xbe, 0x37, 0x74,</div>
|
|
<div class="line"><a name="l00374"></a><span class="lineno"> 374</span>  0x72, 0xf1, 0xa8, 0x29, 0xf1, 0xa7, 0x7d, 0x19, 0xc3, 0x27, 0x09, 0xcf,</div>
|
|
<div class="line"><a name="l00375"></a><span class="lineno"> 375</span>  0x23, 0x02, 0x01, 0x02};</div>
|
|
<div class="line"><a name="l00376"></a><span class="lineno"> 376</span>  </div>
|
|
<div class="line"><a name="l00377"></a><span class="lineno"> 377</span>  <span class="keywordtype">unsigned</span> <span class="keywordtype">char</span> <span class="keyword">const</span>* data = &params[0];</div>
|
|
<div class="line"><a name="l00378"></a><span class="lineno"> 378</span>  </div>
|
|
<div class="line"><a name="l00379"></a><span class="lineno"> 379</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">custom_delete_unique_ptr<DH></a> <span class="keyword">const</span> dh{</div>
|
|
<div class="line"><a name="l00380"></a><span class="lineno"> 380</span>  d2i_DHparams(<span class="keyword">nullptr</span>, &data, <span class="keyword">sizeof</span>(params))};</div>
|
|
<div class="line"><a name="l00381"></a><span class="lineno"> 381</span>  <span class="keywordflow">if</span> (!dh)</div>
|
|
<div class="line"><a name="l00382"></a><span class="lineno"> 382</span>  <a class="code" href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">LogicError</a>(<span class="stringliteral">"d2i_DHparams returned nullptr."</span>);</div>
|
|
<div class="line"><a name="l00383"></a><span class="lineno"> 383</span>  </div>
|
|
<div class="line"><a name="l00384"></a><span class="lineno"> 384</span>  SSL_CTX_set_tmp_dh(c->native_handle(), dh.get());</div>
|
|
<div class="line"><a name="l00385"></a><span class="lineno"> 385</span>  </div>
|
|
<div class="line"><a name="l00386"></a><span class="lineno"> 386</span>  <span class="comment">// Disable all renegotiation support in TLS v1.2. This can help prevent</span></div>
|
|
<div class="line"><a name="l00387"></a><span class="lineno"> 387</span>  <span class="comment">// exploitation of the bug described in CVE-2021-3499 (for details see</span></div>
|
|
<div class="line"><a name="l00388"></a><span class="lineno"> 388</span>  <span class="comment">// https://www.openssl.org/news/secadv/20210325.txt) when linking against</span></div>
|
|
<div class="line"><a name="l00389"></a><span class="lineno"> 389</span>  <span class="comment">// OpenSSL versions prior to 1.1.1k.</span></div>
|
|
<div class="line"><a name="l00390"></a><span class="lineno"> 390</span>  SSL_CTX_set_options(c->native_handle(), SSL_OP_NO_RENEGOTIATION);</div>
|
|
<div class="line"><a name="l00391"></a><span class="lineno"> 391</span>  </div>
|
|
<div class="line"><a name="l00392"></a><span class="lineno"> 392</span>  <span class="keywordflow">return</span> c;</div>
|
|
<div class="line"><a name="l00393"></a><span class="lineno"> 393</span> }</div>
|
|
<div class="line"><a name="l00394"></a><span class="lineno"> 394</span>  </div>
|
|
<div class="line"><a name="l00395"></a><span class="lineno"> 395</span> } <span class="comment">// namespace detail</span></div>
|
|
<div class="line"><a name="l00396"></a><span class="lineno"> 396</span> } <span class="comment">// namespace openssl</span></div>
|
|
<div class="line"><a name="l00397"></a><span class="lineno"> 397</span>  </div>
|
|
<div class="line"><a name="l00398"></a><span class="lineno"> 398</span> <span class="comment">//------------------------------------------------------------------------------</span></div>
|
|
<div class="line"><a name="l00399"></a><span class="lineno"> 399</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/shared_ptr.html">std::shared_ptr<boost::asio::ssl::context></a></div>
|
|
<div class="line"><a name="l00400"></a><span class="lineno"><a class="line" href="namespaceripple.html#a4d435c32e5733f8d57bf0562c25e0f3b"> 400</a></span> <a class="code" href="namespaceripple.html#a4d435c32e5733f8d57bf0562c25e0f3b">make_SSLContext</a>(<a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& cipherList)</div>
|
|
<div class="line"><a name="l00401"></a><span class="lineno"> 401</span> {</div>
|
|
<div class="line"><a name="l00402"></a><span class="lineno"> 402</span>  <span class="keyword">auto</span> context = <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a626f9d4252b4849da511e507938955d6">openssl::detail::get_context</a>(cipherList);</div>
|
|
<div class="line"><a name="l00403"></a><span class="lineno"> 403</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a5424207e5a700ac59ea8b9ab1e2b9397">openssl::detail::initAnonymous</a>(*context);</div>
|
|
<div class="line"><a name="l00404"></a><span class="lineno"> 404</span>  <span class="comment">// VFALCO NOTE, It seems the WebSocket context never has</span></div>
|
|
<div class="line"><a name="l00405"></a><span class="lineno"> 405</span>  <span class="comment">// set_verify_mode called, for either setting of WEBSOCKET_SECURE</span></div>
|
|
<div class="line"><a name="l00406"></a><span class="lineno"> 406</span>  context->set_verify_mode(boost::asio::ssl::verify_none);</div>
|
|
<div class="line"><a name="l00407"></a><span class="lineno"> 407</span>  <span class="keywordflow">return</span> context;</div>
|
|
<div class="line"><a name="l00408"></a><span class="lineno"> 408</span> }</div>
|
|
<div class="line"><a name="l00409"></a><span class="lineno"> 409</span>  </div>
|
|
<div class="line"><a name="l00410"></a><span class="lineno"> 410</span> <a class="codeRef" href="http://en.cppreference.com/w/cpp/memory/shared_ptr.html">std::shared_ptr<boost::asio::ssl::context></a></div>
|
|
<div class="line"><a name="l00411"></a><span class="lineno"><a class="line" href="namespaceripple.html#ae8b021ae4b350b66b5e9e39f4a32c844"> 411</a></span> <a class="code" href="namespaceripple.html#ae8b021ae4b350b66b5e9e39f4a32c844">make_SSLContextAuthed</a>(</div>
|
|
<div class="line"><a name="l00412"></a><span class="lineno"> 412</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& keyFile,</div>
|
|
<div class="line"><a name="l00413"></a><span class="lineno"> 413</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& certFile,</div>
|
|
<div class="line"><a name="l00414"></a><span class="lineno"> 414</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& chainFile,</div>
|
|
<div class="line"><a name="l00415"></a><span class="lineno"> 415</span>  <a class="codeRef" href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a> <span class="keyword">const</span>& cipherList)</div>
|
|
<div class="line"><a name="l00416"></a><span class="lineno"> 416</span> {</div>
|
|
<div class="line"><a name="l00417"></a><span class="lineno"> 417</span>  <span class="keyword">auto</span> context = <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a626f9d4252b4849da511e507938955d6">openssl::detail::get_context</a>(cipherList);</div>
|
|
<div class="line"><a name="l00418"></a><span class="lineno"> 418</span>  <a class="code" href="namespaceripple_1_1openssl_1_1detail.html#a70f3d81f87a75113774c421267a670b7">openssl::detail::initAuthenticated</a>(*context, keyFile, certFile, chainFile);</div>
|
|
<div class="line"><a name="l00419"></a><span class="lineno"> 419</span>  <span class="keywordflow">return</span> context;</div>
|
|
<div class="line"><a name="l00420"></a><span class="lineno"> 420</span> }</div>
|
|
<div class="line"><a name="l00421"></a><span class="lineno"> 421</span>  </div>
|
|
<div class="line"><a name="l00422"></a><span class="lineno"> 422</span> } <span class="comment">// namespace ripple</span></div>
|
|
</div><!-- fragment --></div><!-- contents -->
|
|
<div class="ttc" id="asstream_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/header/sstream.html">sstream</a></div></div>
|
|
<div class="ttc" id="astructripple_1_1openssl_1_1detail_1_1custom__delete_3_01RSA_01_4_html_ade01c3e3966798c9f6c50f0e029690d2"><div class="ttname"><a href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01RSA_01_4.html#ade01c3e3966798c9f6c50f0e029690d2">ripple::openssl::detail::custom_delete< RSA >::operator()</a></div><div class="ttdeci">void operator()(RSA *rsa) const</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00057">make_SSLContext.cpp:57</a></div></div>
|
|
<div class="ttc" id="abasic_string_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/string/basic_string.html">std::string</a></div><div class="ttdoc">STL class.</div></div>
|
|
<div class="ttc" id="ashared_ptr_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/memory/shared_ptr.html">std::shared_ptr< boost::asio::ssl::context ></a></div></div>
|
|
<div class="ttc" id="aexception_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/error/exception.html">std::exception</a></div><div class="ttdoc">STL class.</div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a626f9d4252b4849da511e507938955d6"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a626f9d4252b4849da511e507938955d6">ripple::openssl::detail::get_context</a></div><div class="ttdeci">std::shared_ptr< boost::asio::ssl::context > get_context(std::string const &cipherList)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00327">make_SSLContext.cpp:327</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a123058afafe8e8f5b75e68cb456b0ba0"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a123058afafe8e8f5b75e68cb456b0ba0">ripple::openssl::detail::evp_pkey_ptr</a></div><div class="ttdeci">custom_delete_unique_ptr< EVP_PKEY > evp_pkey_ptr</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00133">make_SSLContext.cpp:133</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a2e63280706f62e0c926855f2f2301c67"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a2e63280706f62e0c926855f2f2301c67">ripple::openssl::detail::ssl_ctx_use_certificate</a></div><div class="ttdeci">static void ssl_ctx_use_certificate(SSL_CTX *const ctx, x509_ptr cert)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00192">make_SSLContext.cpp:192</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_html_a4d435c32e5733f8d57bf0562c25e0f3b"><div class="ttname"><a href="namespaceripple.html#a4d435c32e5733f8d57bf0562c25e0f3b">ripple::make_SSLContext</a></div><div class="ttdeci">std::shared_ptr< boost::asio::ssl::context > make_SSLContext(std::string const &cipherList)</div><div class="ttdoc">Create a self-signed SSL context that allows anonymous Diffie Hellman.</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00400">make_SSLContext.cpp:400</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a07f6e634c7dd32f515fc5383ed577c58"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a07f6e634c7dd32f515fc5383ed577c58">ripple::openssl::detail::error_message</a></div><div class="ttdeci">static std::string error_message(std::string const &what, boost::system::error_code const &ec)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00206">make_SSLContext.cpp:206</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a1779f378ad1cc4ac9010a3a33364fb52"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a1779f378ad1cc4ac9010a3a33364fb52">ripple::openssl::detail::ssl_ctx_use_privatekey</a></div><div class="ttdeci">static void ssl_ctx_use_privatekey(SSL_CTX *const ctx, evp_pkey_ptr key)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00199">make_SSLContext.cpp:199</a></div></div>
|
|
<div class="ttc" id="abasic_stringstream_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/io/basic_stringstream.html">std::stringstream</a></div><div class="ttdoc">STL class.</div></div>
|
|
<div class="ttc" id="aget_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/memory/unique_ptr/get.html">std::unique_ptr::get</a></div><div class="ttdeci">T get(T... args)</div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a5424207e5a700ac59ea8b9ab1e2b9397"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a5424207e5a700ac59ea8b9ab1e2b9397">ripple::openssl::detail::initAnonymous</a></div><div class="ttdeci">static void initAnonymous(boost::asio::ssl::context &context)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00214">make_SSLContext.cpp:214</a></div></div>
|
|
<div class="ttc" id="arelease_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/memory/unique_ptr/release.html">std::unique_ptr::release</a></div><div class="ttdeci">T release(T... args)</div></div>
|
|
<div class="ttc" id="astructripple_1_1openssl_1_1detail_1_1custom__delete_3_01EVP__PKEY_01_4_html_adab8a495c675462d6fac4cd1966a0264"><div class="ttname"><a href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01EVP__PKEY_01_4.html#adab8a495c675462d6fac4cd1966a0264">ripple::openssl::detail::custom_delete< EVP_PKEY >::operator()</a></div><div class="ttdeci">void operator()(EVP_PKEY *evp_pkey) const</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00069">make_SSLContext.cpp:69</a></div></div>
|
|
<div class="ttc" id="astructripple_1_1openssl_1_1detail_1_1custom__delete_3_01DH_01_4_html_a25f8f206a00a0fffeea05a720d7846d9"><div class="ttname"><a href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01DH_01_4.html#a25f8f206a00a0fffeea05a720d7846d9">ripple::openssl::detail::custom_delete< DH >::operator()</a></div><div class="ttdeci">void operator()(DH *dh) const</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00093">make_SSLContext.cpp:93</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_html_ae8b021ae4b350b66b5e9e39f4a32c844"><div class="ttname"><a href="namespaceripple.html#ae8b021ae4b350b66b5e9e39f4a32c844">ripple::make_SSLContextAuthed</a></div><div class="ttdeci">std::shared_ptr< boost::asio::ssl::context > make_SSLContextAuthed(std::string const &keyFile, std::string const &certFile, std::string const &chainFile, std::string const &cipherList)</div><div class="ttdoc">Create an authenticated SSL context using the specified files.</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00411">make_SSLContext.cpp:411</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_aad232b4e5ba55646b1c05dc19250b8ad"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#aad232b4e5ba55646b1c05dc19250b8ad">ripple::openssl::detail::defaultCipherList</a></div><div class="ttdeci">const std::string defaultCipherList</div><div class="ttdoc">The default list of ciphers we accept over TLS.</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00046">make_SSLContext.cpp:46</a></div></div>
|
|
<div class="ttc" id="astdexcept_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/header/stdexcept.html">stdexcept</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_ad536d870b6ec8bae51effb86c6defcd4"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#ad536d870b6ec8bae51effb86c6defcd4">ripple::openssl::detail::evp_pkey_assign_rsa</a></div><div class="ttdeci">static void evp_pkey_assign_rsa(EVP_PKEY *evp_pkey, rsa_ptr rsa)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00147">make_SSLContext.cpp:147</a></div></div>
|
|
<div class="ttc" id="astructripple_1_1openssl_1_1detail_1_1custom__delete_html"><div class="ttname"><a href="structripple_1_1openssl_1_1detail_1_1custom__delete.html">ripple::openssl::detail::custom_delete</a></div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00049">make_SSLContext.cpp:49</a></div></div>
|
|
<div class="ttc" id="ac_str_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/string/basic_string/c_str.html">std::string::c_str</a></div><div class="ttdeci">T c_str(T... args)</div></div>
|
|
<div class="ttc" id="acstdint_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/header/cstdint.html">cstdint</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_html"><div class="ttname"><a href="namespaceripple.html">ripple</a></div><div class="ttdoc">Use hash_* containers for keys that do not need a cryptographically secure hashing algorithm.</div><div class="ttdef"><b>Definition:</b> <a href="RCLCensorshipDetector_8h_source.html#l00029">RCLCensorshipDetector.h:29</a></div></div>
|
|
<div class="ttc" id="astructripple_1_1openssl_1_1detail_1_1custom__delete_3_01X509_01_4_html_a98a5135b5e0b2c90735c61002212f410"><div class="ttname"><a href="structripple_1_1openssl_1_1detail_1_1custom__delete_3_01X509_01_4.html#a98a5135b5e0b2c90735c61002212f410">ripple::openssl::detail::custom_delete< X509 >::operator()</a></div><div class="ttdeci">void operator()(X509 *x509) const</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00081">make_SSLContext.cpp:81</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_abfa5623dad369e7932a5ce55e32cb3bf"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#abfa5623dad369e7932a5ce55e32cb3bf">ripple::openssl::detail::evp_pkey_new</a></div><div class="ttdeci">static evp_pkey_ptr evp_pkey_new()</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00136">make_SSLContext.cpp:136</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_html_aefd2f77338ce3c9a2fffc4f0b289b483"><div class="ttname"><a href="namespaceripple.html#aefd2f77338ce3c9a2fffc4f0b289b483">ripple::LogicError</a></div><div class="ttdeci">void LogicError(std::string const &how) noexcept</div><div class="ttdoc">Called when faulty logic causes a broken invariant.</div><div class="ttdef"><b>Definition:</b> <a href="contract_8cpp_source.html#l00048">contract.cpp:48</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_ae2d29f79e03cddf63e1c4d4b9d0c0db3"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#ae2d29f79e03cddf63e1c4d4b9d0c0db3">ripple::openssl::detail::x509_ptr</a></div><div class="ttdeci">custom_delete_unique_ptr< X509 > x509_ptr</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00157">make_SSLContext.cpp:157</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a66a57746695d60a6f1f4bc3947af2408"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a66a57746695d60a6f1f4bc3947af2408">ripple::openssl::detail::x509_new</a></div><div class="ttdeci">static x509_ptr x509_new()</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00160">make_SSLContext.cpp:160</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_aaf9eaa2814ed9cd4e5547d8575a7db96"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#aaf9eaa2814ed9cd4e5547d8575a7db96">ripple::openssl::detail::rsa_ptr</a></div><div class="ttdeci">custom_delete_unique_ptr< RSA > rsa_ptr</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00104">make_SSLContext.cpp:104</a></div></div>
|
|
<div class="ttc" id="aempty_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/string/basic_string/empty.html">std::string::empty</a></div><div class="ttdeci">T empty(T... args)</div></div>
|
|
<div class="ttc" id="astr_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/io/basic_stringstream/str.html">std::stringstream::str</a></div><div class="ttdeci">T str(T... args)</div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_abb617bff910d2048c529faaac094c48c"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#abb617bff910d2048c529faaac094c48c">ripple::openssl::detail::x509_set_pubkey</a></div><div class="ttdeci">static void x509_set_pubkey(X509 *x509, EVP_PKEY *evp_pkey)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00179">make_SSLContext.cpp:179</a></div></div>
|
|
<div class="ttc" id="aunique_ptr_html"><div class="ttname"><a href="http://en.cppreference.com/w/cpp/memory/unique_ptr.html">std::unique_ptr</a></div><div class="ttdoc">STL class.</div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_a70f3d81f87a75113774c421267a670b7"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#a70f3d81f87a75113774c421267a670b7">ripple::openssl::detail::initAuthenticated</a></div><div class="ttdeci">static void initAuthenticated(boost::asio::ssl::context &context, std::string const &key_file, std::string const &cert_file, std::string const &chain_file)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00231">make_SSLContext.cpp:231</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_afe690bae645d6073e4439d7d58774390"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#afe690bae645d6073e4439d7d58774390">ripple::openssl::detail::rsa_generate_key</a></div><div class="ttdeci">static rsa_ptr rsa_generate_key(int n_bits)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00107">make_SSLContext.cpp:107</a></div></div>
|
|
<div class="ttc" id="anamespaceripple_1_1openssl_1_1detail_html_aac5589b9199eabe436098831445adbf6"><div class="ttname"><a href="namespaceripple_1_1openssl_1_1detail.html#aac5589b9199eabe436098831445adbf6">ripple::openssl::detail::x509_sign</a></div><div class="ttdeci">static void x509_sign(X509 *x509, EVP_PKEY *evp_pkey)</div><div class="ttdef"><b>Definition:</b> <a href="make__SSLContext_8cpp_source.html#l00185">make_SSLContext.cpp:185</a></div></div>
|
|
<!-- start footer part -->
|
|
<hr class="footer"/><address class="footer"><small>
|
|
Generated by  <a href="http://www.doxygen.org/index.html">
|
|
<img class="footer" src="doxygen.png" alt="doxygen"/>
|
|
</a> 1.8.17
|
|
</small></address>
|
|
</body>
|
|
</html>
|