From e5bbda4df989848cbcd92263dd4b11a99b019b4f Mon Sep 17 00:00:00 2001
From: Nikos Mavrogiannopoulos <nmav@gnutls.org>
Date: Sat, 15 Dec 2007 13:26:01 +0000
Subject: Initial support for openpgp keys

---
(limited to 'src/gnutls_config.c')

diff --git a/src/gnutls_config.c b/src/gnutls_config.c
index 8d6308a..4dccd08 100644
--- a/src/gnutls_config.c
+++ b/src/gnutls_config.c
@@ -202,6 +202,85 @@ const char *mgs_set_key_file(cmd_parms * parms, void *dummy,
     return NULL;
 }
 
+const char *mgs_set_pgpcert_file(cmd_parms * parms, void *dummy,
+			      const char *arg)
+{
+    int ret;
+    gnutls_datum_t data;
+    const char *file;
+    apr_pool_t *spool;
+    mgs_srvconf_rec *sc =
+	(mgs_srvconf_rec *) ap_get_module_config(parms->server->
+						 module_config,
+						 &gnutls_module);
+    apr_pool_create(&spool, parms->pool);
+
+    file = ap_server_root_relative(spool, arg);
+
+    if (load_datum_from_file(spool, file, &data) != 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
+			    "Certificate '%s'", file);
+    }
+
+    ret = gnutls_openpgp_crt_init( &sc->cert_pgp);
+    if (ret < 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Failed to Init "
+			    "PGP Certificate: (%d) %s", ret,
+			    gnutls_strerror(ret));
+    }
+      
+
+    ret =
+	gnutls_openpgp_crt_import(sc->cert_pgp, &data, GNUTLS_OPENPGP_FMT_BASE64);
+    if (ret < 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
+			    "PGP Certificate '%s': (%d) %s", file, ret,
+			    gnutls_strerror(ret));
+    }
+
+    apr_pool_destroy(spool);
+    return NULL;
+}
+
+const char *mgs_set_pgpkey_file(cmd_parms * parms, void *dummy,
+			     const char *arg)
+{
+    int ret;
+    gnutls_datum_t data;
+    const char *file;
+    apr_pool_t *spool;
+    mgs_srvconf_rec *sc =
+	(mgs_srvconf_rec *) ap_get_module_config(parms->server->
+						 module_config,
+						 &gnutls_module);
+    apr_pool_create(&spool, parms->pool);
+
+    file = ap_server_root_relative(spool, arg);
+
+    if (load_datum_from_file(spool, file, &data) != 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
+			    "Private Key '%s'", file);
+    }
+
+    ret = gnutls_openpgp_privkey_init(&sc->privkey_pgp);
+    if (ret < 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Failed to initialize"
+			    ": (%d) %s", ret, gnutls_strerror(ret));
+    }
+
+    ret =
+	gnutls_openpgp_privkey_import(sc->privkey_pgp, &data,
+				   GNUTLS_OPENPGP_FMT_BASE64, NULL, 0);
+    if (ret != 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
+			    "PGP Private Key '%s': (%d) %s", file, ret,
+			    gnutls_strerror(ret));
+    }
+    apr_pool_destroy(spool);
+    return NULL;
+}
+
+
 const char *mgs_set_srp_tpasswd_file(cmd_parms * parms, void *dummy,
 				     const char *arg)
 {
@@ -350,6 +429,38 @@ const char *mgs_set_client_ca_file(cmd_parms * parms, void *dummy,
     return NULL;
 }
 
+const char *mgs_set_keyring_file(cmd_parms * parms, void *dummy,
+				   const char *arg)
+{
+    int rv;
+    const char *file;
+    apr_pool_t *spool;
+    gnutls_datum_t data;
+
+    mgs_srvconf_rec *sc =
+	(mgs_srvconf_rec *) ap_get_module_config(parms->server->
+						 module_config,
+						 &gnutls_module);
+    apr_pool_create(&spool, parms->pool);
+
+    file = ap_server_root_relative(spool, arg);
+
+    if (load_datum_from_file(spool, file, &data) != 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
+			    "Keyring File '%s'", file);
+    }
+
+    rv = gnutls_openpgp_keyring_import(sc->pgp_list, &data, GNUTLS_OPENPGP_FMT_BASE64);
+    if (rv < 0) {
+	return apr_psprintf(parms->pool, "GnuTLS: Failed to load "
+			    "Keyring File '%s': (%d) %s", file, rv,
+			    gnutls_strerror(rv));
+    }
+
+    apr_pool_destroy(spool);
+    return NULL;
+}
+
 const char *mgs_set_enabled(cmd_parms * parms, void *dummy,
 			    const char *arg)
 {
--
cgit v0.9.2