4485ffb58d
Any file that uses the RTC_DISALLOW_* macros should #include "webrtc/base/constructormagic.h", but a shocking number of them don't. This causes trouble when we try to wean files off of #including scoped_ptr.h, since a bunch of files get their constructormagic macros only from there. Rather than fixing these errors one by one as they turn up, this CL simply ensures that every file in the WebRTC tree that uses the RTC_DISALLOW_* macros #includes "webrtc/base/constructormagic.h". BUG=webrtc:5520 Review URL: https://codereview.webrtc.org/1917043005 Cr-Commit-Position: refs/heads/master@{#12509}
134 lines
4.0 KiB
C++
134 lines
4.0 KiB
C++
/*
|
|
* Copyright 2004 The WebRTC Project Authors. All rights reserved.
|
|
*
|
|
* Use of this source code is governed by a BSD-style license
|
|
* that can be found in the LICENSE file in the root of the source
|
|
* tree. An additional intellectual property rights grant can be found
|
|
* in the file PATENTS. All contributing project authors may
|
|
* be found in the AUTHORS file in the root of the source tree.
|
|
*/
|
|
|
|
#ifndef WEBRTC_BASE_OPENSSLIDENTITY_H_
|
|
#define WEBRTC_BASE_OPENSSLIDENTITY_H_
|
|
|
|
#include <openssl/evp.h>
|
|
#include <openssl/x509.h>
|
|
|
|
#include <memory>
|
|
#include <string>
|
|
|
|
#include "webrtc/base/common.h"
|
|
#include "webrtc/base/constructormagic.h"
|
|
#include "webrtc/base/sslidentity.h"
|
|
|
|
typedef struct ssl_ctx_st SSL_CTX;
|
|
|
|
namespace rtc {
|
|
|
|
// OpenSSLKeyPair encapsulates an OpenSSL EVP_PKEY* keypair object,
|
|
// which is reference counted inside the OpenSSL library.
|
|
class OpenSSLKeyPair {
|
|
public:
|
|
explicit OpenSSLKeyPair(EVP_PKEY* pkey) : pkey_(pkey) {
|
|
ASSERT(pkey_ != NULL);
|
|
}
|
|
|
|
static OpenSSLKeyPair* Generate(const KeyParams& key_params);
|
|
|
|
virtual ~OpenSSLKeyPair();
|
|
|
|
virtual OpenSSLKeyPair* GetReference();
|
|
|
|
EVP_PKEY* pkey() const { return pkey_; }
|
|
|
|
private:
|
|
void AddReference();
|
|
|
|
EVP_PKEY* pkey_;
|
|
|
|
RTC_DISALLOW_COPY_AND_ASSIGN(OpenSSLKeyPair);
|
|
};
|
|
|
|
// OpenSSLCertificate encapsulates an OpenSSL X509* certificate object,
|
|
// which is also reference counted inside the OpenSSL library.
|
|
class OpenSSLCertificate : public SSLCertificate {
|
|
public:
|
|
// Caller retains ownership of the X509 object.
|
|
explicit OpenSSLCertificate(X509* x509) : x509_(x509) {
|
|
AddReference();
|
|
}
|
|
|
|
static OpenSSLCertificate* Generate(OpenSSLKeyPair* key_pair,
|
|
const SSLIdentityParams& params);
|
|
static OpenSSLCertificate* FromPEMString(const std::string& pem_string);
|
|
|
|
~OpenSSLCertificate() override;
|
|
|
|
OpenSSLCertificate* GetReference() const override;
|
|
|
|
X509* x509() const { return x509_; }
|
|
|
|
std::string ToPEMString() const override;
|
|
|
|
void ToDER(Buffer* der_buffer) const override;
|
|
|
|
// Compute the digest of the certificate given algorithm
|
|
bool ComputeDigest(const std::string& algorithm,
|
|
unsigned char* digest,
|
|
size_t size,
|
|
size_t* length) const override;
|
|
|
|
// Compute the digest of a certificate as an X509 *
|
|
static bool ComputeDigest(const X509* x509,
|
|
const std::string& algorithm,
|
|
unsigned char* digest,
|
|
size_t size,
|
|
size_t* length);
|
|
|
|
bool GetSignatureDigestAlgorithm(std::string* algorithm) const override;
|
|
std::unique_ptr<SSLCertChain> GetChain() const override;
|
|
|
|
int64_t CertificateExpirationTime() const override;
|
|
|
|
private:
|
|
void AddReference() const;
|
|
|
|
X509* x509_;
|
|
|
|
RTC_DISALLOW_COPY_AND_ASSIGN(OpenSSLCertificate);
|
|
};
|
|
|
|
// Holds a keypair and certificate together, and a method to generate
|
|
// them consistently.
|
|
class OpenSSLIdentity : public SSLIdentity {
|
|
public:
|
|
static OpenSSLIdentity* GenerateWithExpiration(const std::string& common_name,
|
|
const KeyParams& key_params,
|
|
time_t certificate_lifetime);
|
|
static OpenSSLIdentity* GenerateForTest(const SSLIdentityParams& params);
|
|
static SSLIdentity* FromPEMStrings(const std::string& private_key,
|
|
const std::string& certificate);
|
|
~OpenSSLIdentity() override;
|
|
|
|
const OpenSSLCertificate& certificate() const override;
|
|
OpenSSLIdentity* GetReference() const override;
|
|
|
|
// Configure an SSL context object to use our key and certificate.
|
|
bool ConfigureIdentity(SSL_CTX* ctx);
|
|
|
|
private:
|
|
OpenSSLIdentity(OpenSSLKeyPair* key_pair, OpenSSLCertificate* certificate);
|
|
|
|
static OpenSSLIdentity* GenerateInternal(const SSLIdentityParams& params);
|
|
|
|
std::unique_ptr<OpenSSLKeyPair> key_pair_;
|
|
std::unique_ptr<OpenSSLCertificate> certificate_;
|
|
|
|
RTC_DISALLOW_COPY_AND_ASSIGN(OpenSSLIdentity);
|
|
};
|
|
|
|
|
|
} // namespace rtc
|
|
|
|
#endif // WEBRTC_BASE_OPENSSLIDENTITY_H_
|