/**
* Copyright 2004-2005 Paul Querna
* Copyright 2007 Nikos Mavrogiannopoulos
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*
*/
#include "mod_gnutls.h"
static int load_datum_from_file(apr_pool_t * pool,
const char *file, gnutls_datum_t * data)
{
apr_file_t *fp;
apr_finfo_t finfo;
apr_status_t rv;
apr_size_t br = 0;
rv = apr_file_open(&fp, file, APR_READ | APR_BINARY, APR_OS_DEFAULT,
pool);
if (rv != APR_SUCCESS) {
return rv;
}
rv = apr_file_info_get(&finfo, APR_FINFO_SIZE, fp);
if (rv != APR_SUCCESS) {
return rv;
}
data->data = apr_palloc(pool, finfo.size + 1);
rv = apr_file_read_full(fp, data->data, finfo.size, &br);
if (rv != APR_SUCCESS) {
return rv;
}
apr_file_close(fp);
data->data[br] = '\0';
data->size = br;
return 0;
}
const char *mgs_set_dh_file(cmd_parms * parms, void *dummy,
const char *arg)
{
int ret;
gnutls_datum_t data;
const char *file;
apr_pool_t *spool;
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
apr_pool_create(&spool, parms->pool);
file = ap_server_root_relative(spool, arg);
if (load_datum_from_file(spool, file, &data) != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
"DH params '%s'", file);
}
ret = gnutls_dh_params_init(&sc->dh_params);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to initialize"
": (%d) %s", ret, gnutls_strerror(ret));
}
ret =
gnutls_dh_params_import_pkcs3(sc->dh_params, &data, GNUTLS_X509_FMT_PEM);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
"DH params '%s': (%d) %s", file, ret,
gnutls_strerror(ret));
}
apr_pool_destroy(spool);
return NULL;
}
const char *mgs_set_rsa_export_file(cmd_parms * parms, void *dummy,
const char *arg)
{
int ret;
gnutls_datum_t data;
const char *file;
apr_pool_t *spool;
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
apr_pool_create(&spool, parms->pool);
file = ap_server_root_relative(spool, arg);
if (load_datum_from_file(spool, file, &data) != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
"RSA params '%s'", file);
}
ret = gnutls_rsa_params_init(&sc->rsa_params);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to initialize"
": (%d) %s", ret, gnutls_strerror(ret));
}
ret =
gnutls_rsa_params_import_pkcs1(sc->rsa_params, &data, GNUTLS_X509_FMT_PEM);
if (ret != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
"RSA params '%s': (%d) %s", file, ret,
gnutls_strerror(ret));
}
apr_pool_destroy(spool);
return NULL;
}
const char *mgs_set_cert_file(cmd_parms * parms, void *dummy,
const char *arg)
{
int ret;
gnutls_datum_t data;
const char *file;
apr_pool_t *spool;
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
apr_pool_create(&spool, parms->pool);
file = ap_server_root_relative(spool, arg);
if (load_datum_from_file(spool, file, &data) != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
"Certificate '%s'", file);
}
sc->certs_x509_num = MAX_CHAIN_SIZE;
ret =
gnutls_x509_crt_list_import(sc->certs_x509, &sc->certs_x509_num, &data, GNUTLS_X509_FMT_PEM, 0);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
"Certificate '%s': (%d) %s", file, ret,
gnutls_strerror(ret));
}
apr_pool_destroy(spool);
return NULL;
}
const char *mgs_set_key_file(cmd_parms * parms, void *dummy,
const char *arg)
{
int ret;
gnutls_datum_t data;
const char *file;
apr_pool_t *spool;
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
apr_pool_create(&spool, parms->pool);
file = ap_server_root_relative(spool, arg);
if (load_datum_from_file(spool, file, &data) != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
"Private Key '%s'", file);
}
ret = gnutls_x509_privkey_init(&sc->privkey_x509);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to initialize"
": (%d) %s", ret, gnutls_strerror(ret));
}
ret =
gnutls_x509_privkey_import(sc->privkey_x509, &data,
GNUTLS_X509_FMT_PEM);
if (ret != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
"Private Key '%s': (%d) %s", file, ret,
gnutls_strerror(ret));
}
apr_pool_destroy(spool);
return NULL;
}
const char *mgs_set_pgpcert_file(cmd_parms * parms, void *dummy,
const char *arg)
{
int ret;
gnutls_datum_t data;
const char *file;
apr_pool_t *spool;
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
apr_pool_create(&spool, parms->pool);
file = ap_server_root_relative(spool, arg);
if (load_datum_from_file(spool, file, &data) != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
"Certificate '%s'", file);
}
ret = gnutls_openpgp_crt_init( &sc->cert_pgp);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to Init "
"PGP Certificate: (%d) %s", ret,
gnutls_strerror(ret));
}
ret =
gnutls_openpgp_crt_import(sc->cert_pgp, &data, GNUTLS_OPENPGP_FMT_BASE64);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
"PGP Certificate '%s': (%d) %s", file, ret,
gnutls_strerror(ret));
}
apr_pool_destroy(spool);
return NULL;
}
const char *mgs_set_pgpkey_file(cmd_parms * parms, void *dummy,
const char *arg)
{
int ret;
gnutls_datum_t data;
const char *file;
apr_pool_t *spool;
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
apr_pool_create(&spool, parms->pool);
file = ap_server_root_relative(spool, arg);
if (load_datum_from_file(spool, file, &data) != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Error Reading "
"Private Key '%s'", file);
}
ret = gnutls_openpgp_privkey_init(&sc->privkey_pgp);
if (ret < 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to initialize"
": (%d) %s", ret, gnutls_strerror(ret));
}
ret =
gnutls_openpgp_privkey_import(sc->privkey_pgp, &data,
GNUTLS_OPENPGP_FMT_BASE64, NULL, 0);
if (ret != 0) {
return apr_psprintf(parms->pool, "GnuTLS: Failed to Import "
"PGP Private Key '%s': (%d) %s", file, ret,
gnutls_strerror(ret));
}
apr_pool_destroy(spool);
return NULL;
}
#ifdef ENABLE_SRP
const char *mgs_set_srp_tpasswd_file(cmd_parms * parms, void *dummy,
const char *arg)
{
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
sc->srp_tpasswd_file = ap_server_root_relative(parms->pool, arg);
return NULL;
}
const char *mgs_set_srp_tpasswd_conf_file(cmd_parms * parms, void *dummy,
const char *arg)
{
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
sc->srp_tpasswd_conf_file = ap_server_root_relative(parms->pool, arg);
return NULL;
}
#endif
const char *mgs_set_cache(cmd_parms * parms, void *dummy,
const char *type, const char *arg)
{
const char *err;
mgs_srvconf_rec *sc = ap_get_module_config(parms->server->
module_config,
&gnutls_module);
if ((err = ap_check_cmd_context(parms, GLOBAL_ONLY))) {
return err;
}
if (strcasecmp("none", type) == 0) {
sc->cache_type = mgs_cache_none;
} else if (strcasecmp("dbm", type) == 0) {
sc->cache_type = mgs_cache_dbm;
}
#if HAVE_APR_MEMCACHE
else if (strcasecmp("memcache", type) == 0) {
sc->cache_type = mgs_cache_memcache;
}
#endif
else {
return "Invalid Type for GnuTLSCache!";
}
if (sc->cache_type == mgs_cache_dbm) {
sc->cache_config = ap_server_root_relative(parms->pool, arg);
} else {
sc->cache_config = apr_pstrdup(parms->pool, arg);
}
return NULL;
}
const char *mgs_set_cache_timeout(cmd_parms * parms, void *dummy,
const char *arg)
{
int argint;
mgs_srvconf_rec *sc =
(mgs_srvconf_rec *) ap_get_module_config(parms->server->
module_config,
&gnutls_module);
argint = atoi(arg);
if (argint < 0) {
return "GnuTLSCacheTimeout: Invalid argument";
} else if (argint == 0) {
sc->cache_timeout = 0;
} else {
sc->cache_timeout = apr_time_from_sec(argint);
}
return NULL;
}
const char *mgs_set_client_verify(cmd_parms * parms, void *dummy,
const char *arg)
{
int mode;
if (strcasecmp("none", arg) == 0 || strcasecmp("ignore", arg) == 0) {
mode = GNUTLS_CERT_IGNORE;
} else if (strcasecmp("optional", arg) == 0
|| st| 2005-04-05 |
| | |
|
| |
|
|
|
|
| |
- update for 2.1.x branch changes.
- some mucking around with the conf stuff
|
| | |
|
| | |
|
| | |
|
|
|
adding an empty cache files
trying to fix >16kb writes.
|
Paul Querna