mirror of
https://github.com/deneraraujo/OpenVPNAdapter.git
synced 2026-04-24 00:00:05 +08:00
Sergey Abramchuk
f65d76170b
git-subtree-dir: OpenVPN Adapter/Vendors/openvpn git-subtree-split: da99df69492256d7a18bbea303ae98457782a4bf
149 lines
3.3 KiB
C++
149 lines
3.3 KiB
C++
// OpenVPN -- An application to securely tunnel IP networks
|
|
// over a single port, with support for SSL/TLS-based
|
|
// session authentication and key exchange,
|
|
// packet encryption, packet authentication, and
|
|
// packet compression.
|
|
//
|
|
// Copyright (C) 2012-2017 OpenVPN Technologies, Inc.
|
|
//
|
|
// This program is free software: you can redistribute it and/or modify
|
|
// it under the terms of the GNU General Public License Version 3
|
|
// as published by the Free Software Foundation.
|
|
//
|
|
// This program is distributed in the hope that it will be useful,
|
|
// but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
// MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
// GNU General Public License for more details.
|
|
//
|
|
// You should have received a copy of the GNU General Public License
|
|
// along with this program in the COPYING file.
|
|
// If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
// Wrap an OpenSSL DH object
|
|
|
|
#ifndef OPENVPN_OPENSSL_PKI_DH_H
|
|
#define OPENVPN_OPENSSL_PKI_DH_H
|
|
|
|
#include <string>
|
|
|
|
#include <openssl/ssl.h>
|
|
#include <openssl/bio.h>
|
|
|
|
#include <openvpn/common/size.hpp>
|
|
#include <openvpn/common/exception.hpp>
|
|
#include <openvpn/openssl/util/error.hpp>
|
|
|
|
// workaround for bug in DHparams_dup macro on OpenSSL 0.9.8 and lower
|
|
#if SSLEAY_VERSION_NUMBER <= 0x00908000L
|
|
#undef CHECKED_PTR_OF
|
|
#define CHECKED_PTR_OF(type, p) ((char*) (1 ? p : (type*)0))
|
|
#endif
|
|
|
|
namespace openvpn {
|
|
namespace OpenSSLPKI {
|
|
|
|
namespace DH_private {
|
|
// defined outside of DH class to avoid symbol collision in way
|
|
// that DHparams_dup macro is defined
|
|
inline ::DH *dup(const ::DH *dh)
|
|
{
|
|
if (dh)
|
|
return DHparams_dup(const_cast< ::DH * >(dh));
|
|
else
|
|
return nullptr;
|
|
}
|
|
}
|
|
|
|
class DH
|
|
{
|
|
public:
|
|
DH() : dh_(nullptr) {}
|
|
|
|
explicit DH(const std::string& dh_txt)
|
|
: dh_(nullptr)
|
|
{
|
|
parse_pem(dh_txt);
|
|
}
|
|
|
|
DH(const DH& other)
|
|
: dh_(nullptr)
|
|
{
|
|
assign(other.dh_);
|
|
}
|
|
|
|
void operator=(const DH& other)
|
|
{
|
|
assign(other.dh_);
|
|
}
|
|
|
|
bool defined() const { return dh_ != nullptr; }
|
|
::DH* obj() const { return dh_; }
|
|
|
|
void parse_pem(const std::string& dh_txt)
|
|
{
|
|
BIO *bio = BIO_new_mem_buf(const_cast<char *>(dh_txt.c_str()), dh_txt.length());
|
|
if (!bio)
|
|
throw OpenSSLException();
|
|
|
|
::DH *dh = PEM_read_bio_DHparams(bio, nullptr, nullptr, nullptr);
|
|
BIO_free(bio);
|
|
if (!dh)
|
|
throw OpenSSLException("DH::parse_pem");
|
|
|
|
erase();
|
|
dh_ = dh;
|
|
}
|
|
|
|
std::string render_pem() const
|
|
{
|
|
if (dh_)
|
|
{
|
|
BIO *bio = BIO_new(BIO_s_mem());
|
|
const int ret = PEM_write_bio_DHparams(bio, dh_);
|
|
if (ret == 0)
|
|
{
|
|
BIO_free(bio);
|
|
throw OpenSSLException("DH::render_pem");
|
|
}
|
|
|
|
{
|
|
char *temp;
|
|
const int buf_len = BIO_get_mem_data(bio, &temp);
|
|
std::string ret = std::string(temp, buf_len);
|
|
BIO_free(bio);
|
|
return ret;
|
|
}
|
|
}
|
|
else
|
|
return "";
|
|
}
|
|
|
|
void erase()
|
|
{
|
|
if (dh_)
|
|
{
|
|
DH_free(dh_);
|
|
dh_ = nullptr;
|
|
}
|
|
}
|
|
|
|
~DH()
|
|
{
|
|
erase();
|
|
}
|
|
|
|
private:
|
|
void assign(const ::DH *dh)
|
|
{
|
|
erase();
|
|
dh_ = DH_private::dup(dh);
|
|
}
|
|
|
|
::DH *dh_;
|
|
};
|
|
}
|
|
} // namespace openvpn
|
|
|
|
#endif // OPENVPN_OPENSSL_PKI_DH_H
|
|
|