Squashed 'OpenVPN Adapter/Vendors/openvpn/' content from commit da99df6

git-subtree-dir: OpenVPN Adapter/Vendors/openvpn git-subtree-split: da99df69492256d7a18bbea303ae98457782a4bf
2026-04-24 00:00:05 +08:00 · 2017-04-09 14:13:07 +03:00
commit f65d76170b
519 changed files with 88163 additions and 0 deletions
@@ -0,0 +1,122 @@
+//    OpenVPN -- An application to securely tunnel IP networks
+//               over a single port, with support for SSL/TLS-based
+//               session authentication and key exchange,
+//               packet encryption, packet authentication, and
+//               packet compression.
+//
+//    Copyright (C) 2012-2017 OpenVPN Technologies, Inc.
+//
+//    This program is free software: you can redistribute it and/or modify
+//    it under the terms of the GNU General Public License Version 3
+//    as published by the Free Software Foundation.
+//
+//    This program is distributed in the hope that it will be useful,
+//    but WITHOUT ANY WARRANTY; without even the implied warranty of
+//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//    GNU General Public License for more details.
+//
+//    You should have received a copy of the GNU General Public License
+//    along with this program in the COPYING file.
+//    If not, see <http://www.gnu.org/licenses/>.
+
+// Parse the tls-cert-profile option.
+
+#ifndef OPENVPN_SSL_TLS_CERT_PROFILE_H
+#define OPENVPN_SSL_TLS_CERT_PROFILE_H
+
+#include <string>
+
+#include <openvpn/common/size.hpp>
+#include <openvpn/common/exception.hpp>
+#include <openvpn/common/options.hpp>
+
+namespace openvpn {
+  namespace TLSCertProfile {
+    enum Type {
+      UNDEF=0,
+      LEGACY,
+      PREFERRED,
+      SUITEB,
+    };
+
+    inline Type default_if_undef(const Type type)
+    {
+      if (type == UNDEF)
+	return LEGACY; // this is the default if unspecified
+      else
+	return type;
+    }
+
+    inline const std::string to_string(const Type type)
+    {
+      switch (type)
+	{
+	case UNDEF:
+	  return "UNDEF";
+	case LEGACY:
+	  return "LEGACY";
+	case PREFERRED:
+	  return "PREFERRED";
+	case SUITEB:
+	  return "SUITEB";
+	default:
+	  return "???";
+	}
+    }
+
+    inline Type parse_tls_cert_profile(const std::string& profile_name)
+    {
+      if (profile_name == "legacy")
+	return LEGACY;
+      else if (profile_name == "preferred")
+	return PREFERRED;
+      else if (profile_name == "suiteb")
+	return SUITEB;
+      else
+	throw option_error("tls-cert-profile: unrecognized profile name");
+    }
+
+    inline Type parse_tls_cert_profile(const OptionList& opt,
+				       const std::string& relay_prefix)
+    {
+      const Option* o = opt.get_ptr(relay_prefix + "tls-cert-profile");
+      if (o)
+	{
+	  const std::string profile_name = o->get_optional(1, 16);
+	  return parse_tls_cert_profile(profile_name);
+	}
+      return UNDEF;
+    }
+
+    // If the override ends with "default", it is only applied
+    // if the config doesn't specify tls-cert-profile.
+    // Otherwise, the override has priority over the config.
+    inline void apply_override(Type& type, const std::string& override)
+    {
+      const Type orig = type;
+      if (override.empty() || override == "default")
+	;
+      else if (override == "legacy-default")
+	{
+	  if (orig == UNDEF)
+	    type = LEGACY;
+	}
+      else if (override == "preferred-default")
+	{
+	  if (orig == UNDEF)
+	    type = PREFERRED;
+	}
+      else if (override == "legacy")
+	type = LEGACY;
+      else if (override == "preferred")
+	type = PREFERRED;
+      else if (override == "suiteb")
+	type = SUITEB;
+      else
+	throw option_error("tls-cert-profile: unrecognized override string");
+      //OPENVPN_LOG("*** tls-cert-profile before=" << to_string(orig) << " override=" << override << " after=" << to_string(type));
+    }
+  }
+}
+
+#endif