mirror of
https://github.com/ClassiCube/ClassiCube.git
synced 2025-09-17 11:35:08 -04:00
Add root certificates for most important websites for BearSSL
This commit is contained in:
UnknownShadow200
parent
797f75140f
commit
e538100409
348
misc/certs.h
Normal file
348
misc/certs.h
Normal file
@ -0,0 +1,348 @@
|
|||||||
|
// This file includes the following root certificates:
|
||||||
|
// - DigiCert Global Root (dropbox.com)
|
||||||
|
// - DigiCert Global Root G2 (resources.download.minecraft.net)
|
||||||
|
// - ISRG Root X1 (catbox.moe)
|
||||||
|
// - ISRG Root X2 (123dmwm.com, garbage.loan)
|
||||||
|
// - Baltimore CyberTrust Root (classicube.net)
|
||||||
|
// - USERTrust RSA (imgur.com)
|
||||||
|
// Generated using "brssl -ta [cert 1] [cert 2].." from BearSSL
|
||||||
|
|
||||||
|
static const unsigned char TA0_DN[] = {
|
||||||
|
0x30, 0x61, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13,
|
||||||
|
0x02, 0x55, 0x53, 0x31, 0x15, 0x30, 0x13, 0x06, 0x03, 0x55, 0x04, 0x0A,
|
||||||
|
0x13, 0x0C, 0x44, 0x69, 0x67, 0x69, 0x43, 0x65, 0x72, 0x74, 0x20, 0x49,
|
||||||
|
0x6E, 0x63, 0x31, 0x19, 0x30, 0x17, 0x06, 0x03, 0x55, 0x04, 0x0B, 0x13,
|
||||||
|
0x10, 0x77, 0x77, 0x77, 0x2E, 0x64, 0x69, 0x67, 0x69, 0x63, 0x65, 0x72,
|
||||||
|
0x74, 0x2E, 0x63, 0x6F, 0x6D, 0x31, 0x20, 0x30, 0x1E, 0x06, 0x03, 0x55,
|
||||||
|
0x04, 0x03, 0x13, 0x17, 0x44, 0x69, 0x67, 0x69, 0x43, 0x65, 0x72, 0x74,
|
||||||
|
0x20, 0x47, 0x6C, 0x6F, 0x62, 0x61, 0x6C, 0x20, 0x52, 0x6F, 0x6F, 0x74,
|
||||||
|
0x20, 0x43, 0x41
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA0_RSA_N[] = {
|
||||||
|
0xE2, 0x3B, 0xE1, 0x11, 0x72, 0xDE, 0xA8, 0xA4, 0xD3, 0xA3, 0x57, 0xAA,
|
||||||
|
0x50, 0xA2, 0x8F, 0x0B, 0x77, 0x90, 0xC9, 0xA2, 0xA5, 0xEE, 0x12, 0xCE,
|
||||||
|
0x96, 0x5B, 0x01, 0x09, 0x20, 0xCC, 0x01, 0x93, 0xA7, 0x4E, 0x30, 0xB7,
|
||||||
|
0x53, 0xF7, 0x43, 0xC4, 0x69, 0x00, 0x57, 0x9D, 0xE2, 0x8D, 0x22, 0xDD,
|
||||||
|
0x87, 0x06, 0x40, 0x00, 0x81, 0x09, 0xCE, 0xCE, 0x1B, 0x83, 0xBF, 0xDF,
|
||||||
|
0xCD, 0x3B, 0x71, 0x46, 0xE2, 0xD6, 0x66, 0xC7, 0x05, 0xB3, 0x76, 0x27,
|
||||||
|
0x16, 0x8F, 0x7B, 0x9E, 0x1E, 0x95, 0x7D, 0xEE, 0xB7, 0x48, 0xA3, 0x08,
|
||||||
|
0xDA, 0xD6, 0xAF, 0x7A, 0x0C, 0x39, 0x06, 0x65, 0x7F, 0x4A, 0x5D, 0x1F,
|
||||||
|
0xBC, 0x17, 0xF8, 0xAB, 0xBE, 0xEE, 0x28, 0xD7, 0x74, 0x7F, 0x7A, 0x78,
|
||||||
|
0x99, 0x59, 0x85, 0x68, 0x6E, 0x5C, 0x23, 0x32, 0x4B, 0xBF, 0x4E, 0xC0,
|
||||||
|
0xE8, 0x5A, 0x6D, 0xE3, 0x70, 0xBF, 0x77, 0x10, 0xBF, 0xFC, 0x01, 0xF6,
|
||||||
|
0x85, 0xD9, 0xA8, 0x44, 0x10, 0x58, 0x32, 0xA9, 0x75, 0x18, 0xD5, 0xD1,
|
||||||
|
0xA2, 0xBE, 0x47, 0xE2, 0x27, 0x6A, 0xF4, 0x9A, 0x33, 0xF8, 0x49, 0x08,
|
||||||
|
0x60, 0x8B, 0xD4, 0x5F, 0xB4, 0x3A, 0x84, 0xBF, 0xA1, 0xAA, 0x4A, 0x4C,
|
||||||
|
0x7D, 0x3E, 0xCF, 0x4F, 0x5F, 0x6C, 0x76, 0x5E, 0xA0, 0x4B, 0x37, 0x91,
|
||||||
|
0x9E, 0xDC, 0x22, 0xE6, 0x6D, 0xCE, 0x14, 0x1A, 0x8E, 0x6A, 0xCB, 0xFE,
|
||||||
|
0xCD, 0xB3, 0x14, 0x64, 0x17, 0xC7, 0x5B, 0x29, 0x9E, 0x32, 0xBF, 0xF2,
|
||||||
|
0xEE, 0xFA, 0xD3, 0x0B, 0x42, 0xD4, 0xAB, 0xB7, 0x41, 0x32, 0xDA, 0x0C,
|
||||||
|
0xD4, 0xEF, 0xF8, 0x81, 0xD5, 0xBB, 0x8D, 0x58, 0x3F, 0xB5, 0x1B, 0xE8,
|
||||||
|
0x49, 0x28, 0xA2, 0x70, 0xDA, 0x31, 0x04, 0xDD, 0xF7, 0xB2, 0x16, 0xF2,
|
||||||
|
0x4C, 0x0A, 0x4E, 0x07, 0xA8, 0xED, 0x4A, 0x3D, 0x5E, 0xB5, 0x7F, 0xA3,
|
||||||
|
0x90, 0xC3, 0xAF, 0x27
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA0_RSA_E[] = {
|
||||||
|
0x01, 0x00, 0x01
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA1_DN[] = {
|
||||||
|
0x30, 0x61, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13,
|
||||||
|
0x02, 0x55, 0x53, 0x31, 0x15, 0x30, 0x13, 0x06, 0x03, 0x55, 0x04, 0x0A,
|
||||||
|
0x13, 0x0C, 0x44, 0x69, 0x67, 0x69, 0x43, 0x65, 0x72, 0x74, 0x20, 0x49,
|
||||||
|
0x6E, 0x63, 0x31, 0x19, 0x30, 0x17, 0x06, 0x03, 0x55, 0x04, 0x0B, 0x13,
|
||||||
|
0x10, 0x77, 0x77, 0x77, 0x2E, 0x64, 0x69, 0x67, 0x69, 0x63, 0x65, 0x72,
|
||||||
|
0x74, 0x2E, 0x63, 0x6F, 0x6D, 0x31, 0x20, 0x30, 0x1E, 0x06, 0x03, 0x55,
|
||||||
|
0x04, 0x03, 0x13, 0x17, 0x44, 0x69, 0x67, 0x69, 0x43, 0x65, 0x72, 0x74,
|
||||||
|
0x20, 0x47, 0x6C, 0x6F, 0x62, 0x61, 0x6C, 0x20, 0x52, 0x6F, 0x6F, 0x74,
|
||||||
|
0x20, 0x47, 0x32
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA1_RSA_N[] = {
|
||||||
|
0xBB, 0x37, 0xCD, 0x34, 0xDC, 0x7B, 0x6B, 0xC9, 0xB2, 0x68, 0x90, 0xAD,
|
||||||
|
0x4A, 0x75, 0xFF, 0x46, 0xBA, 0x21, 0x0A, 0x08, 0x8D, 0xF5, 0x19, 0x54,
|
||||||
|
0xC9, 0xFB, 0x88, 0xDB, 0xF3, 0xAE, 0xF2, 0x3A, 0x89, 0x91, 0x3C, 0x7A,
|
||||||
|
0xE6, 0xAB, 0x06, 0x1A, 0x6B, 0xCF, 0xAC, 0x2D, 0xE8, 0x5E, 0x09, 0x24,
|
||||||
|
0x44, 0xBA, 0x62, 0x9A, 0x7E, 0xD6, 0xA3, 0xA8, 0x7E, 0xE0, 0x54, 0x75,
|
||||||
|
0x20, 0x05, 0xAC, 0x50, 0xB7, 0x9C, 0x63, 0x1A, 0x6C, 0x30, 0xDC, 0xDA,
|
||||||
|
0x1F, 0x19, 0xB1, 0xD7, 0x1E, 0xDE, 0xFD, 0xD7, 0xE0, 0xCB, 0x94, 0x83,
|
||||||
|
0x37, 0xAE, 0xEC, 0x1F, 0x43, 0x4E, 0xDD, 0x7B, 0x2C, 0xD2, 0xBD, 0x2E,
|
||||||
|
0xA5, 0x2F, 0xE4, 0xA9, 0xB8, 0xAD, 0x3A, 0xD4, 0x99, 0xA4, 0xB6, 0x25,
|
||||||
|
0xE9, 0x9B, 0x6B, 0x00, 0x60, 0x92, 0x60, 0xFF, 0x4F, 0x21, 0x49, 0x18,
|
||||||
|
0xF7, 0x67, 0x90, 0xAB, 0x61, 0x06, 0x9C, 0x8F, 0xF2, 0xBA, 0xE9, 0xB4,
|
||||||
|
0xE9, 0x92, 0x32, 0x6B, 0xB5, 0xF3, 0x57, 0xE8, 0x5D, 0x1B, 0xCD, 0x8C,
|
||||||
|
0x1D, 0xAB, 0x95, 0x04, 0x95, 0x49, 0xF3, 0x35, 0x2D, 0x96, 0xE3, 0x49,
|
||||||
|
0x6D, 0xDD, 0x77, 0xE3, 0xFB, 0x49, 0x4B, 0xB4, 0xAC, 0x55, 0x07, 0xA9,
|
||||||
|
0x8F, 0x95, 0xB3, 0xB4, 0x23, 0xBB, 0x4C, 0x6D, 0x45, 0xF0, 0xF6, 0xA9,
|
||||||
|
0xB2, 0x95, 0x30, 0xB4, 0xFD, 0x4C, 0x55, 0x8C, 0x27, 0x4A, 0x57, 0x14,
|
||||||
|
0x7C, 0x82, 0x9D, 0xCD, 0x73, 0x92, 0xD3, 0x16, 0x4A, 0x06, 0x0C, 0x8C,
|
||||||
|
0x50, 0xD1, 0x8F, 0x1E, 0x09, 0xBE, 0x17, 0xA1, 0xE6, 0x21, 0xCA, 0xFD,
|
||||||
|
0x83, 0xE5, 0x10, 0xBC, 0x83, 0xA5, 0x0A, 0xC4, 0x67, 0x28, 0xF6, 0x73,
|
||||||
|
0x14, 0x14, 0x3D, 0x46, 0x76, 0xC3, 0x87, 0x14, 0x89, 0x21, 0x34, 0x4D,
|
||||||
|
0xAF, 0x0F, 0x45, 0x0C, 0xA6, 0x49, 0xA1, 0xBA, 0xBB, 0x9C, 0xC5, 0xB1,
|
||||||
|
0x33, 0x83, 0x29, 0x85
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA1_RSA_E[] = {
|
||||||
|
0x01, 0x00, 0x01
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA2_DN[] = {
|
||||||
|
0x30, 0x4F, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13,
|
||||||
|
0x02, 0x55, 0x53, 0x31, 0x29, 0x30, 0x27, 0x06, 0x03, 0x55, 0x04, 0x0A,
|
||||||
|
0x13, 0x20, 0x49, 0x6E, 0x74, 0x65, 0x72, 0x6E, 0x65, 0x74, 0x20, 0x53,
|
||||||
|
0x65, 0x63, 0x75, 0x72, 0x69, 0x74, 0x79, 0x20, 0x52, 0x65, 0x73, 0x65,
|
||||||
|
0x61, 0x72, 0x63, 0x68, 0x20, 0x47, 0x72, 0x6F, 0x75, 0x70, 0x31, 0x15,
|
||||||
|
0x30, 0x13, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x0C, 0x49, 0x53, 0x52,
|
||||||
|
0x47, 0x20, 0x52, 0x6F, 0x6F, 0x74, 0x20, 0x58, 0x31
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA2_RSA_N[] = {
|
||||||
|
0xAD, 0xE8, 0x24, 0x73, 0xF4, 0x14, 0x37, 0xF3, 0x9B, 0x9E, 0x2B, 0x57,
|
||||||
|
0x28, 0x1C, 0x87, 0xBE, 0xDC, 0xB7, 0xDF, 0x38, 0x90, 0x8C, 0x6E, 0x3C,
|
||||||
|
0xE6, 0x57, 0xA0, 0x78, 0xF7, 0x75, 0xC2, 0xA2, 0xFE, 0xF5, 0x6A, 0x6E,
|
||||||
|
0xF6, 0x00, 0x4F, 0x28, 0xDB, 0xDE, 0x68, 0x86, 0x6C, 0x44, 0x93, 0xB6,
|
||||||
|
0xB1, 0x63, 0xFD, 0x14, 0x12, 0x6B, 0xBF, 0x1F, 0xD2, 0xEA, 0x31, 0x9B,
|
||||||
|
0x21, 0x7E, 0xD1, 0x33, 0x3C, 0xBA, 0x48, 0xF5, 0xDD, 0x79, 0xDF, 0xB3,
|
||||||
|
0xB8, 0xFF, 0x12, 0xF1, 0x21, 0x9A, 0x4B, 0xC1, 0x8A, 0x86, 0x71, 0x69,
|
||||||
|
0x4A, 0x66, 0x66, 0x6C, 0x8F, 0x7E, 0x3C, 0x70, 0xBF, 0xAD, 0x29, 0x22,
|
||||||
|
0x06, 0xF3, 0xE4, 0xC0, 0xE6, 0x80, 0xAE, 0xE2, 0x4B, 0x8F, 0xB7, 0x99,
|
||||||
|
0x7E, 0x94, 0x03, 0x9F, 0xD3, 0x47, 0x97, 0x7C, 0x99, 0x48, 0x23, 0x53,
|
||||||
|
0xE8, 0x38, 0xAE, 0x4F, 0x0A, 0x6F, 0x83, 0x2E, 0xD1, 0x49, 0x57, 0x8C,
|
||||||
|
0x80, 0x74, 0xB6, 0xDA, 0x2F, 0xD0, 0x38, 0x8D, 0x7B, 0x03, 0x70, 0x21,
|
||||||
|
0x1B, 0x75, 0xF2, 0x30, 0x3C, 0xFA, 0x8F, 0xAE, 0xDD, 0xDA, 0x63, 0xAB,
|
||||||
|
0xEB, 0x16, 0x4F, 0xC2, 0x8E, 0x11, 0x4B, 0x7E, 0xCF, 0x0B, 0xE8, 0xFF,
|
||||||
|
0xB5, 0x77, 0x2E, 0xF4, 0xB2, 0x7B, 0x4A, 0xE0, 0x4C, 0x12, 0x25, 0x0C,
|
||||||
|
0x70, 0x8D, 0x03, 0x29, 0xA0, 0xE1, 0x53, 0x24, 0xEC, 0x13, 0xD9, 0xEE,
|
||||||
|
0x19, 0xBF, 0x10, 0xB3, 0x4A, 0x8C, 0x3F, 0x89, 0xA3, 0x61, 0x51, 0xDE,
|
||||||
|
0xAC, 0x87, 0x07, 0x94, 0xF4, 0x63, 0x71, 0xEC, 0x2E, 0xE2, 0x6F, 0x5B,
|
||||||
|
0x98, 0x81, 0xE1, 0x89, 0x5C, 0x34, 0x79, 0x6C, 0x76, 0xEF, 0x3B, 0x90,
|
||||||
|
0x62, 0x79, 0xE6, 0xDB, 0xA4, 0x9A, 0x2F, 0x26, 0xC5, 0xD0, 0x10, 0xE1,
|
||||||
|
0x0E, 0xDE, 0xD9, 0x10, 0x8E, 0x16, 0xFB, 0xB7, 0xF7, 0xA8, 0xF7, 0xC7,
|
||||||
|
0xE5, 0x02, 0x07, 0x98, 0x8F, 0x36, 0x08, 0x95, 0xE7, 0xE2, 0x37, 0x96,
|
||||||
|
0x0D, 0x36, 0x75, 0x9E, 0xFB, 0x0E, 0x72, 0xB1, 0x1D, 0x9B, 0xBC, 0x03,
|
||||||
|
0xF9, 0x49, 0x05, 0xD8, 0x81, 0xDD, 0x05, 0xB4, 0x2A, 0xD6, 0x41, 0xE9,
|
||||||
|
0xAC, 0x01, 0x76, 0x95, 0x0A, 0x0F, 0xD8, 0xDF, 0xD5, 0xBD, 0x12, 0x1F,
|
||||||
|
0x35, 0x2F, 0x28, 0x17, 0x6C, 0xD2, 0x98, 0xC1, 0xA8, 0x09, 0x64, 0x77,
|
||||||
|
0x6E, 0x47, 0x37, 0xBA, 0xCE, 0xAC, 0x59, 0x5E, 0x68, 0x9D, 0x7F, 0x72,
|
||||||
|
0xD6, 0x89, 0xC5, 0x06, 0x41, 0x29, 0x3E, 0x59, 0x3E, 0xDD, 0x26, 0xF5,
|
||||||
|
0x24, 0xC9, 0x11, 0xA7, 0x5A, 0xA3, 0x4C, 0x40, 0x1F, 0x46, 0xA1, 0x99,
|
||||||
|
0xB5, 0xA7, 0x3A, 0x51, 0x6E, 0x86, 0x3B, 0x9E, 0x7D, 0x72, 0xA7, 0x12,
|
||||||
|
0x05, 0x78, 0x59, 0xED, 0x3E, 0x51, 0x78, 0x15, 0x0B, 0x03, 0x8F, 0x8D,
|
||||||
|
0xD0, 0x2F, 0x05, 0xB2, 0x3E, 0x7B, 0x4A, 0x1C, 0x4B, 0x73, 0x05, 0x12,
|
||||||
|
0xFC, 0xC6, 0xEA, 0xE0, 0x50, 0x13, 0x7C, 0x43, 0x93, 0x74, 0xB3, 0xCA,
|
||||||
|
0x74, 0xE7, 0x8E, 0x1F, 0x01, 0x08, 0xD0, 0x30, 0xD4, 0x5B, 0x71, 0x36,
|
||||||
|
0xB4, 0x07, 0xBA, 0xC1, 0x30, 0x30, 0x5C, 0x48, 0xB7, 0x82, 0x3B, 0x98,
|
||||||
|
0xA6, 0x7D, 0x60, 0x8A, 0xA2, 0xA3, 0x29, 0x82, 0xCC, 0xBA, 0xBD, 0x83,
|
||||||
|
0x04, 0x1B, 0xA2, 0x83, 0x03, 0x41, 0xA1, 0xD6, 0x05, 0xF1, 0x1B, 0xC2,
|
||||||
|
0xB6, 0xF0, 0xA8, 0x7C, 0x86, 0x3B, 0x46, 0xA8, 0x48, 0x2A, 0x88, 0xDC,
|
||||||
|
0x76, 0x9A, 0x76, 0xBF, 0x1F, 0x6A, 0xA5, 0x3D, 0x19, 0x8F, 0xEB, 0x38,
|
||||||
|
0xF3, 0x64, 0xDE, 0xC8, 0x2B, 0x0D, 0x0A, 0x28, 0xFF, 0xF7, 0xDB, 0xE2,
|
||||||
|
0x15, 0x42, 0xD4, 0x22, 0xD0, 0x27, 0x5D, 0xE1, 0x79, 0xFE, 0x18, 0xE7,
|
||||||
|
0x70, 0x88, 0xAD, 0x4E, 0xE6, 0xD9, 0x8B, 0x3A, 0xC6, 0xDD, 0x27, 0x51,
|
||||||
|
0x6E, 0xFF, 0xBC, 0x64, 0xF5, 0x33, 0x43, 0x4F
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA2_RSA_E[] = {
|
||||||
|
0x01, 0x00, 0x01
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA3_DN[] = {
|
||||||
|
0x30, 0x4F, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13,
|
||||||
|
0x02, 0x55, 0x53, 0x31, 0x29, 0x30, 0x27, 0x06, 0x03, 0x55, 0x04, 0x0A,
|
||||||
|
0x13, 0x20, 0x49, 0x6E, 0x74, 0x65, 0x72, 0x6E, 0x65, 0x74, 0x20, 0x53,
|
||||||
|
0x65, 0x63, 0x75, 0x72, 0x69, 0x74, 0x79, 0x20, 0x52, 0x65, 0x73, 0x65,
|
||||||
|
0x61, 0x72, 0x63, 0x68, 0x20, 0x47, 0x72, 0x6F, 0x75, 0x70, 0x31, 0x15,
|
||||||
|
0x30, 0x13, 0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x0C, 0x49, 0x53, 0x52,
|
||||||
|
0x47, 0x20, 0x52, 0x6F, 0x6F, 0x74, 0x20, 0x58, 0x32
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA3_EC_Q[] = {
|
||||||
|
0x04, 0xCD, 0x9B, 0xD5, 0x9F, 0x80, 0x83, 0x0A, 0xEC, 0x09, 0x4A, 0xF3,
|
||||||
|
0x16, 0x4A, 0x3E, 0x5C, 0xCF, 0x77, 0xAC, 0xDE, 0x67, 0x05, 0x0D, 0x1D,
|
||||||
|
0x07, 0xB6, 0xDC, 0x16, 0xFB, 0x5A, 0x8B, 0x14, 0xDB, 0xE2, 0x71, 0x60,
|
||||||
|
0xC4, 0xBA, 0x45, 0x95, 0x11, 0x89, 0x8E, 0xEA, 0x06, 0xDF, 0xF7, 0x2A,
|
||||||
|
0x16, 0x1C, 0xA4, 0xB9, 0xC5, 0xC5, 0x32, 0xE0, 0x03, 0xE0, 0x1E, 0x82,
|
||||||
|
0x18, 0x38, 0x8B, 0xD7, 0x45, 0xD8, 0x0A, 0x6A, 0x6E, 0xE6, 0x00, 0x77,
|
||||||
|
0xFB, 0x02, 0x51, 0x7D, 0x22, 0xD8, 0x0A, 0x6E, 0x9A, 0x5B, 0x77, 0xDF,
|
||||||
|
0xF0, 0xFA, 0x41, 0xEC, 0x39, 0xDC, 0x75, 0xCA, 0x68, 0x07, 0x0C, 0x1F,
|
||||||
|
0xEA
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA4_DN[] = {
|
||||||
|
0x30, 0x5A, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13,
|
||||||
|
0x02, 0x49, 0x45, 0x31, 0x12, 0x30, 0x10, 0x06, 0x03, 0x55, 0x04, 0x0A,
|
||||||
|
0x13, 0x09, 0x42, 0x61, 0x6C, 0x74, 0x69, 0x6D, 0x6F, 0x72, 0x65, 0x31,
|
||||||
|
0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04, 0x0B, 0x13, 0x0A, 0x43, 0x79,
|
||||||
|
0x62, 0x65, 0x72, 0x54, 0x72, 0x75, 0x73, 0x74, 0x31, 0x22, 0x30, 0x20,
|
||||||
|
0x06, 0x03, 0x55, 0x04, 0x03, 0x13, 0x19, 0x42, 0x61, 0x6C, 0x74, 0x69,
|
||||||
|
0x6D, 0x6F, 0x72, 0x65, 0x20, 0x43, 0x79, 0x62, 0x65, 0x72, 0x54, 0x72,
|
||||||
|
0x75, 0x73, 0x74, 0x20, 0x52, 0x6F, 0x6F, 0x74
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA4_RSA_N[] = {
|
||||||
|
0xA3, 0x04, 0xBB, 0x22, 0xAB, 0x98, 0x3D, 0x57, 0xE8, 0x26, 0x72, 0x9A,
|
||||||
|
0xB5, 0x79, 0xD4, 0x29, 0xE2, 0xE1, 0xE8, 0x95, 0x80, 0xB1, 0xB0, 0xE3,
|
||||||
|
0x5B, 0x8E, 0x2B, 0x29, 0x9A, 0x64, 0xDF, 0xA1, 0x5D, 0xED, 0xB0, 0x09,
|
||||||
|
0x05, 0x6D, 0xDB, 0x28, 0x2E, 0xCE, 0x62, 0xA2, 0x62, 0xFE, 0xB4, 0x88,
|
||||||
|
0xDA, 0x12, 0xEB, 0x38, 0xEB, 0x21, 0x9D, 0xC0, 0x41, 0x2B, 0x01, 0x52,
|
||||||
|
0x7B, 0x88, 0x77, 0xD3, 0x1C, 0x8F, 0xC7, 0xBA, 0xB9, 0x88, 0xB5, 0x6A,
|
||||||
|
0x09, 0xE7, 0x73, 0xE8, 0x11, 0x40, 0xA7, 0xD1, 0xCC, 0xCA, 0x62, 0x8D,
|
||||||
|
0x2D, 0xE5, 0x8F, 0x0B, 0xA6, 0x50, 0xD2, 0xA8, 0x50, 0xC3, 0x28, 0xEA,
|
||||||
|
0xF5, 0xAB, 0x25, 0x87, 0x8A, 0x9A, 0x96, 0x1C, 0xA9, 0x67, 0xB8, 0x3F,
|
||||||
|
0x0C, 0xD5, 0xF7, 0xF9, 0x52, 0x13, 0x2F, 0xC2, 0x1B, 0xD5, 0x70, 0x70,
|
||||||
|
0xF0, 0x8F, 0xC0, 0x12, 0xCA, 0x06, 0xCB, 0x9A, 0xE1, 0xD9, 0xCA, 0x33,
|
||||||
|
0x7A, 0x77, 0xD6, 0xF8, 0xEC, 0xB9, 0xF1, 0x68, 0x44, 0x42, 0x48, 0x13,
|
||||||
|
0xD2, 0xC0, 0xC2, 0xA4, 0xAE, 0x5E, 0x60, 0xFE, 0xB6, 0xA6, 0x05, 0xFC,
|
||||||
|
0xB4, 0xDD, 0x07, 0x59, 0x02, 0xD4, 0x59, 0x18, 0x98, 0x63, 0xF5, 0xA5,
|
||||||
|
0x63, 0xE0, 0x90, 0x0C, 0x7D, 0x5D, 0xB2, 0x06, 0x7A, 0xF3, 0x85, 0xEA,
|
||||||
|
0xEB, 0xD4, 0x03, 0xAE, 0x5E, 0x84, 0x3E, 0x5F, 0xFF, 0x15, 0xED, 0x69,
|
||||||
|
0xBC, 0xF9, 0x39, 0x36, 0x72, 0x75, 0xCF, 0x77, 0x52, 0x4D, 0xF3, 0xC9,
|
||||||
|
0x90, 0x2C, 0xB9, 0x3D, 0xE5, 0xC9, 0x23, 0x53, 0x3F, 0x1F, 0x24, 0x98,
|
||||||
|
0x21, 0x5C, 0x07, 0x99, 0x29, 0xBD, 0xC6, 0x3A, 0xEC, 0xE7, 0x6E, 0x86,
|
||||||
|
0x3A, 0x6B, 0x97, 0x74, 0x63, 0x33, 0xBD, 0x68, 0x18, 0x31, 0xF0, 0x78,
|
||||||
|
0x8D, 0x76, 0xBF, 0xFC, 0x9E, 0x8E, 0x5D, 0x2A, 0x86, 0xA7, 0x4D, 0x90,
|
||||||
|
0xDC, 0x27, 0x1A, 0x39
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA4_RSA_E[] = {
|
||||||
|
0x01, 0x00, 0x01
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA5_DN[] = {
|
||||||
|
0x30, 0x81, 0x88, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06,
|
||||||
|
0x13, 0x02, 0x55, 0x53, 0x31, 0x13, 0x30, 0x11, 0x06, 0x03, 0x55, 0x04,
|
||||||
|
0x08, 0x13, 0x0A, 0x4E, 0x65, 0x77, 0x20, 0x4A, 0x65, 0x72, 0x73, 0x65,
|
||||||
|
0x79, 0x31, 0x14, 0x30, 0x12, 0x06, 0x03, 0x55, 0x04, 0x07, 0x13, 0x0B,
|
||||||
|
0x4A, 0x65, 0x72, 0x73, 0x65, 0x79, 0x20, 0x43, 0x69, 0x74, 0x79, 0x31,
|
||||||
|
0x1E, 0x30, 0x1C, 0x06, 0x03, 0x55, 0x04, 0x0A, 0x13, 0x15, 0x54, 0x68,
|
||||||
|
0x65, 0x20, 0x55, 0x53, 0x45, 0x52, 0x54, 0x52, 0x55, 0x53, 0x54, 0x20,
|
||||||
|
0x4E, 0x65, 0x74, 0x77, 0x6F, 0x72, 0x6B, 0x31, 0x2E, 0x30, 0x2C, 0x06,
|
||||||
|
0x03, 0x55, 0x04, 0x03, 0x13, 0x25, 0x55, 0x53, 0x45, 0x52, 0x54, 0x72,
|
||||||
|
0x75, 0x73, 0x74, 0x20, 0x52, 0x53, 0x41, 0x20, 0x43, 0x65, 0x72, 0x74,
|
||||||
|
0x69, 0x66, 0x69, 0x63, 0x61, 0x74, 0x69, 0x6F, 0x6E, 0x20, 0x41, 0x75,
|
||||||
|
0x74, 0x68, 0x6F, 0x72, 0x69, 0x74, 0x79
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA5_RSA_N[] = {
|
||||||
|
0x80, 0x12, 0x65, 0x17, 0x36, 0x0E, 0xC3, 0xDB, 0x08, 0xB3, 0xD0, 0xAC,
|
||||||
|
0x57, 0x0D, 0x76, 0xED, 0xCD, 0x27, 0xD3, 0x4C, 0xAD, 0x50, 0x83, 0x61,
|
||||||
|
0xE2, 0xAA, 0x20, 0x4D, 0x09, 0x2D, 0x64, 0x09, 0xDC, 0xCE, 0x89, 0x9F,
|
||||||
|
0xCC, 0x3D, 0xA9, 0xEC, 0xF6, 0xCF, 0xC1, 0xDC, 0xF1, 0xD3, 0xB1, 0xD6,
|
||||||
|
0x7B, 0x37, 0x28, 0x11, 0x2B, 0x47, 0xDA, 0x39, 0xC6, 0xBC, 0x3A, 0x19,
|
||||||
|
0xB4, 0x5F, 0xA6, 0xBD, 0x7D, 0x9D, 0xA3, 0x63, 0x42, 0xB6, 0x76, 0xF2,
|
||||||
|
0xA9, 0x3B, 0x2B, 0x91, 0xF8, 0xE2, 0x6F, 0xD0, 0xEC, 0x16, 0x20, 0x90,
|
||||||
|
0x09, 0x3E, 0xE2, 0xE8, 0x74, 0xC9, 0x18, 0xB4, 0x91, 0xD4, 0x62, 0x64,
|
||||||
|
0xDB, 0x7F, 0xA3, 0x06, 0xF1, 0x88, 0x18, 0x6A, 0x90, 0x22, 0x3C, 0xBC,
|
||||||
|
0xFE, 0x13, 0xF0, 0x87, 0x14, 0x7B, 0xF6, 0xE4, 0x1F, 0x8E, 0xD4, 0xE4,
|
||||||
|
0x51, 0xC6, 0x11, 0x67, 0x46, 0x08, 0x51, 0xCB, 0x86, 0x14, 0x54, 0x3F,
|
||||||
|
0xBC, 0x33, 0xFE, 0x7E, 0x6C, 0x9C, 0xFF, 0x16, 0x9D, 0x18, 0xBD, 0x51,
|
||||||
|
0x8E, 0x35, 0xA6, 0xA7, 0x66, 0xC8, 0x72, 0x67, 0xDB, 0x21, 0x66, 0xB1,
|
||||||
|
0xD4, 0x9B, 0x78, 0x03, 0xC0, 0x50, 0x3A, 0xE8, 0xCC, 0xF0, 0xDC, 0xBC,
|
||||||
|
0x9E, 0x4C, 0xFE, 0xAF, 0x05, 0x96, 0x35, 0x1F, 0x57, 0x5A, 0xB7, 0xFF,
|
||||||
|
0xCE, 0xF9, 0x3D, 0xB7, 0x2C, 0xB6, 0xF6, 0x54, 0xDD, 0xC8, 0xE7, 0x12,
|
||||||
|
0x3A, 0x4D, 0xAE, 0x4C, 0x8A, 0xB7, 0x5C, 0x9A, 0xB4, 0xB7, 0x20, 0x3D,
|
||||||
|
0xCA, 0x7F, 0x22, 0x34, 0xAE, 0x7E, 0x3B, 0x68, 0x66, 0x01, 0x44, 0xE7,
|
||||||
|
0x01, 0x4E, 0x46, 0x53, 0x9B, 0x33, 0x60, 0xF7, 0x94, 0xBE, 0x53, 0x37,
|
||||||
|
0x90, 0x73, 0x43, 0xF3, 0x32, 0xC3, 0x53, 0xEF, 0xDB, 0xAA, 0xFE, 0x74,
|
||||||
|
0x4E, 0x69, 0xC7, 0x6B, 0x8C, 0x60, 0x93, 0xDE, 0xC4, 0xC7, 0x0C, 0xDF,
|
||||||
|
0xE1, 0x32, 0xAE, 0xCC, 0x93, 0x3B, 0x51, 0x78, 0x95, 0x67, 0x8B, 0xEE,
|
||||||
|
0x3D, 0x56, 0xFE, 0x0C, 0xD0, 0x69, 0x0F, 0x1B, 0x0F, 0xF3, 0x25, 0x26,
|
||||||
|
0x6B, 0x33, 0x6D, 0xF7, 0x6E, 0x47, 0xFA, 0x73, 0x43, 0xE5, 0x7E, 0x0E,
|
||||||
|
0xA5, 0x66, 0xB1, 0x29, 0x7C, 0x32, 0x84, 0x63, 0x55, 0x89, 0xC4, 0x0D,
|
||||||
|
0xC1, 0x93, 0x54, 0x30, 0x19, 0x13, 0xAC, 0xD3, 0x7D, 0x37, 0xA7, 0xEB,
|
||||||
|
0x5D, 0x3A, 0x6C, 0x35, 0x5C, 0xDB, 0x41, 0xD7, 0x12, 0xDA, 0xA9, 0x49,
|
||||||
|
0x0B, 0xDF, 0xD8, 0x80, 0x8A, 0x09, 0x93, 0x62, 0x8E, 0xB5, 0x66, 0xCF,
|
||||||
|
0x25, 0x88, 0xCD, 0x84, 0xB8, 0xB1, 0x3F, 0xA4, 0x39, 0x0F, 0xD9, 0x02,
|
||||||
|
0x9E, 0xEB, 0x12, 0x4C, 0x95, 0x7C, 0xF3, 0x6B, 0x05, 0xA9, 0x5E, 0x16,
|
||||||
|
0x83, 0xCC, 0xB8, 0x67, 0xE2, 0xE8, 0x13, 0x9D, 0xCC, 0x5B, 0x82, 0xD3,
|
||||||
|
0x4C, 0xB3, 0xED, 0x5B, 0xFF, 0xDE, 0xE5, 0x73, 0xAC, 0x23, 0x3B, 0x2D,
|
||||||
|
0x00, 0xBF, 0x35, 0x55, 0x74, 0x09, 0x49, 0xD8, 0x49, 0x58, 0x1A, 0x7F,
|
||||||
|
0x92, 0x36, 0xE6, 0x51, 0x92, 0x0E, 0xF3, 0x26, 0x7D, 0x1C, 0x4D, 0x17,
|
||||||
|
0xBC, 0xC9, 0xEC, 0x43, 0x26, 0xD0, 0xBF, 0x41, 0x5F, 0x40, 0xA9, 0x44,
|
||||||
|
0x44, 0xF4, 0x99, 0xE7, 0x57, 0x87, 0x9E, 0x50, 0x1F, 0x57, 0x54, 0xA8,
|
||||||
|
0x3E, 0xFD, 0x74, 0x63, 0x2F, 0xB1, 0x50, 0x65, 0x09, 0xE6, 0x58, 0x42,
|
||||||
|
0x2E, 0x43, 0x1A, 0x4C, 0xB4, 0xF0, 0x25, 0x47, 0x59, 0xFA, 0x04, 0x1E,
|
||||||
|
0x93, 0xD4, 0x26, 0x46, 0x4A, 0x50, 0x81, 0xB2, 0xDE, 0xBE, 0x78, 0xB7,
|
||||||
|
0xFC, 0x67, 0x15, 0xE1, 0xC9, 0x57, 0x84, 0x1E, 0x0F, 0x63, 0xD6, 0xE9,
|
||||||
|
0x62, 0xBA, 0xD6, 0x5F, 0x55, 0x2E, 0xEA, 0x5C, 0xC6, 0x28, 0x08, 0x04,
|
||||||
|
0x25, 0x39, 0xB8, 0x0E, 0x2B, 0xA9, 0xF2, 0x4C, 0x97, 0x1C, 0x07, 0x3F,
|
||||||
|
0x0D, 0x52, 0xF5, 0xED, 0xEF, 0x2F, 0x82, 0x0F
|
||||||
|
};
|
||||||
|
|
||||||
|
static const unsigned char TA5_RSA_E[] = {
|
||||||
|
0x01, 0x00, 0x01
|
||||||
|
};
|
||||||
|
|
||||||
|
static const br_x509_trust_anchor TAs[6] = {
|
||||||
|
{
|
||||||
|
{ (unsigned char *)TA0_DN, sizeof TA0_DN },
|
||||||
|
BR_X509_TA_CA,
|
||||||
|
{
|
||||||
|
BR_KEYTYPE_RSA,
|
||||||
|
{ .rsa = {
|
||||||
|
(unsigned char *)TA0_RSA_N, sizeof TA0_RSA_N,
|
||||||
|
(unsigned char *)TA0_RSA_E, sizeof TA0_RSA_E,
|
||||||
|
} }
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ (unsigned char *)TA1_DN, sizeof TA1_DN },
|
||||||
|
BR_X509_TA_CA,
|
||||||
|
{
|
||||||
|
BR_KEYTYPE_RSA,
|
||||||
|
{ .rsa = {
|
||||||
|
(unsigned char *)TA1_RSA_N, sizeof TA1_RSA_N,
|
||||||
|
(unsigned char *)TA1_RSA_E, sizeof TA1_RSA_E,
|
||||||
|
} }
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ (unsigned char *)TA2_DN, sizeof TA2_DN },
|
||||||
|
BR_X509_TA_CA,
|
||||||
|
{
|
||||||
|
BR_KEYTYPE_RSA,
|
||||||
|
{ .rsa = {
|
||||||
|
(unsigned char *)TA2_RSA_N, sizeof TA2_RSA_N,
|
||||||
|
(unsigned char *)TA2_RSA_E, sizeof TA2_RSA_E,
|
||||||
|
} }
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ (unsigned char *)TA3_DN, sizeof TA3_DN },
|
||||||
|
BR_X509_TA_CA,
|
||||||
|
{
|
||||||
|
BR_KEYTYPE_EC,
|
||||||
|
{ .ec = {
|
||||||
|
BR_EC_secp384r1,
|
||||||
|
(unsigned char *)TA3_EC_Q, sizeof TA3_EC_Q,
|
||||||
|
} }
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ (unsigned char *)TA4_DN, sizeof TA4_DN },
|
||||||
|
BR_X509_TA_CA,
|
||||||
|
{
|
||||||
|
BR_KEYTYPE_RSA,
|
||||||
|
{ .rsa = {
|
||||||
|
(unsigned char *)TA4_RSA_N, sizeof TA4_RSA_N,
|
||||||
|
(unsigned char *)TA4_RSA_E, sizeof TA4_RSA_E,
|
||||||
|
} }
|
||||||
|
}
|
||||||
|
},
|
||||||
|
{
|
||||||
|
{ (unsigned char *)TA5_DN, sizeof TA5_DN },
|
||||||
|
BR_X509_TA_CA,
|
||||||
|
{
|
||||||
|
BR_KEYTYPE_RSA,
|
||||||
|
{ .rsa = {
|
||||||
|
(unsigned char *)TA5_RSA_N, sizeof TA5_RSA_N,
|
||||||
|
(unsigned char *)TA5_RSA_E, sizeof TA5_RSA_E,
|
||||||
|
} }
|
||||||
|
}
|
||||||
|
}
|
||||||
|
};
|
||||||
|
|
||||||
|
#define TAs_NUM 6
|
||||||
87
src/SSL.c
87
src/SSL.c
@ -420,7 +420,7 @@ cc_result SSL_Free(void* ctx_) {
|
|||||||
#elif defined CC_BUILD_BEARSSL
|
#elif defined CC_BUILD_BEARSSL
|
||||||
#include "bearssl.h"
|
#include "bearssl.h"
|
||||||
#define CERT_ATTRIBUTES
|
#define CERT_ATTRIBUTES
|
||||||
#include "../misc/RootCerts.h"
|
#include "../misc/certs.h"
|
||||||
#include "String.h"
|
#include "String.h"
|
||||||
// https://github.com/unkaktus/bearssl/blob/master/samples/client_basic.c#L283
|
// https://github.com/unkaktus/bearssl/blob/master/samples/client_basic.c#L283
|
||||||
|
|
||||||
@ -439,6 +439,7 @@ void SSLBackend_Init(cc_bool verifyCerts) {
|
|||||||
}
|
}
|
||||||
cc_bool SSLBackend_DescribeError(cc_result res, cc_string* dst) { return false; }
|
cc_bool SSLBackend_DescribeError(cc_result res, cc_string* dst) { return false; }
|
||||||
|
|
||||||
|
|
||||||
static int sock_read(void *ctx, unsigned char *buf, size_t len) {
|
static int sock_read(void *ctx, unsigned char *buf, size_t len) {
|
||||||
cc_uint32 read;
|
cc_uint32 read;
|
||||||
cc_result res = Socket_Read((int)ctx, buf, len, &read);
|
cc_result res = Socket_Read((int)ctx, buf, len, &read);
|
||||||
@ -446,6 +447,7 @@ static int sock_read(void *ctx, unsigned char *buf, size_t len) {
|
|||||||
if (res) return -1;
|
if (res) return -1;
|
||||||
return read;
|
return read;
|
||||||
}
|
}
|
||||||
|
|
||||||
static int sock_write(void *ctx, const unsigned char *buf, size_t len) {
|
static int sock_write(void *ctx, const unsigned char *buf, size_t len) {
|
||||||
cc_uint32 wrote;
|
cc_uint32 wrote;
|
||||||
cc_result res = Socket_Write((int)ctx, buf, len, &wrote);
|
cc_result res = Socket_Write((int)ctx, buf, len, &wrote);
|
||||||
@ -453,84 +455,6 @@ static int sock_write(void *ctx, const unsigned char *buf, size_t len) {
|
|||||||
if (res) return -1;
|
if (res) return -1;
|
||||||
return wrote;
|
return wrote;
|
||||||
}
|
}
|
||||||
/*
|
|
||||||
* The hardcoded trust anchors. These are the two DN + public key that
|
|
||||||
* correspond to the self-signed certificates cert-root-rsa.pem and
|
|
||||||
* cert-root-ec.pem.
|
|
||||||
*
|
|
||||||
* C code for hardcoded trust anchors can be generated with the "brssl"
|
|
||||||
* command-line tool (with the "ta" command).
|
|
||||||
*/
|
|
||||||
static const unsigned char TA0_DN[] = {
|
|
||||||
0x30, 0x1C, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13,
|
|
||||||
0x02, 0x43, 0x41, 0x31, 0x0D, 0x30, 0x0B, 0x06, 0x03, 0x55, 0x04, 0x03,
|
|
||||||
0x13, 0x04, 0x52, 0x6F, 0x6F, 0x74
|
|
||||||
};
|
|
||||||
static const unsigned char TA0_RSA_N[] = {
|
|
||||||
0xB6, 0xD9, 0x34, 0xD4, 0x50, 0xFD, 0xB3, 0xAF, 0x7A, 0x73, 0xF1, 0xCE,
|
|
||||||
0x38, 0xBF, 0x5D, 0x6F, 0x45, 0xE1, 0xFD, 0x4E, 0xB1, 0x98, 0xC6, 0x60,
|
|
||||||
0x83, 0x26, 0xD2, 0x17, 0xD1, 0xC5, 0xB7, 0x9A, 0xA3, 0xC1, 0xDE, 0x63,
|
|
||||||
0x39, 0x97, 0x9C, 0xF0, 0x5E, 0x5C, 0xC8, 0x1C, 0x17, 0xB9, 0x88, 0x19,
|
|
||||||
0x6D, 0xF0, 0xB6, 0x2E, 0x30, 0x50, 0xA1, 0x54, 0x6E, 0x93, 0xC0, 0xDB,
|
|
||||||
0xCF, 0x30, 0xCB, 0x9F, 0x1E, 0x27, 0x79, 0xF1, 0xC3, 0x99, 0x52, 0x35,
|
|
||||||
0xAA, 0x3D, 0xB6, 0xDF, 0xB0, 0xAD, 0x7C, 0xCB, 0x49, 0xCD, 0xC0, 0xED,
|
|
||||||
0xE7, 0x66, 0x10, 0x2A, 0xE9, 0xCE, 0x28, 0x1F, 0x21, 0x50, 0xFA, 0x77,
|
|
||||||
0x4C, 0x2D, 0xDA, 0xEF, 0x3C, 0x58, 0xEB, 0x4E, 0xBF, 0xCE, 0xE9, 0xFB,
|
|
||||||
0x1A, 0xDA, 0xA3, 0x83, 0xA3, 0xCD, 0xA3, 0xCA, 0x93, 0x80, 0xDC, 0xDA,
|
|
||||||
0xF3, 0x17, 0xCC, 0x7A, 0xAB, 0x33, 0x80, 0x9C, 0xB2, 0xD4, 0x7F, 0x46,
|
|
||||||
0x3F, 0xC5, 0x3C, 0xDC, 0x61, 0x94, 0xB7, 0x27, 0x29, 0x6E, 0x2A, 0xBC,
|
|
||||||
0x5B, 0x09, 0x36, 0xD4, 0xC6, 0x3B, 0x0D, 0xEB, 0xBE, 0xCE, 0xDB, 0x1D,
|
|
||||||
0x1C, 0xBC, 0x10, 0x6A, 0x71, 0x71, 0xB3, 0xF2, 0xCA, 0x28, 0x9A, 0x77,
|
|
||||||
0xF2, 0x8A, 0xEC, 0x42, 0xEF, 0xB1, 0x4A, 0x8E, 0xE2, 0xF2, 0x1A, 0x32,
|
|
||||||
0x2A, 0xCD, 0xC0, 0xA6, 0x46, 0x2C, 0x9A, 0xC2, 0x85, 0x37, 0x91, 0x7F,
|
|
||||||
0x46, 0xA1, 0x93, 0x81, 0xA1, 0x74, 0x66, 0xDF, 0xBA, 0xB3, 0x39, 0x20,
|
|
||||||
0x91, 0x93, 0xFA, 0x1D, 0xA1, 0xA8, 0x85, 0xE7, 0xE4, 0xF9, 0x07, 0xF6,
|
|
||||||
0x10, 0xF6, 0xA8, 0x27, 0x01, 0xB6, 0x7F, 0x12, 0xC3, 0x40, 0xC3, 0xC9,
|
|
||||||
0xE2, 0xB0, 0xAB, 0x49, 0x18, 0x3A, 0x64, 0xB6, 0x59, 0xB7, 0x95, 0xB5,
|
|
||||||
0x96, 0x36, 0xDF, 0x22, 0x69, 0xAA, 0x72, 0x6A, 0x54, 0x4E, 0x27, 0x29,
|
|
||||||
0xA3, 0x0E, 0x97, 0x15
|
|
||||||
};
|
|
||||||
static const unsigned char TA0_RSA_E[] = {
|
|
||||||
0x01, 0x00, 0x01
|
|
||||||
};
|
|
||||||
static const unsigned char TA1_DN[] = {
|
|
||||||
0x30, 0x1C, 0x31, 0x0B, 0x30, 0x09, 0x06, 0x03, 0x55, 0x04, 0x06, 0x13,
|
|
||||||
0x02, 0x43, 0x41, 0x31, 0x0D, 0x30, 0x0B, 0x06, 0x03, 0x55, 0x04, 0x03,
|
|
||||||
0x13, 0x04, 0x52, 0x6F, 0x6F, 0x74
|
|
||||||
};
|
|
||||||
static const unsigned char TA1_EC_Q[] = {
|
|
||||||
0x04, 0x71, 0x74, 0xBA, 0xAB, 0xB9, 0x30, 0x2E, 0x81, 0xD5, 0xE5, 0x57,
|
|
||||||
0xF9, 0xF3, 0x20, 0x68, 0x0C, 0x9C, 0xF9, 0x64, 0xDB, 0xB4, 0x20, 0x0D,
|
|
||||||
0x6D, 0xEA, 0x40, 0xD0, 0x4A, 0x6E, 0x42, 0xFD, 0xB6, 0x9A, 0x68, 0x25,
|
|
||||||
0x44, 0xF6, 0xDF, 0x7B, 0xC4, 0xFC, 0xDE, 0xDD, 0x7B, 0xBB, 0xC5, 0xDB,
|
|
||||||
0x7C, 0x76, 0x3F, 0x41, 0x66, 0x40, 0x6E, 0xDB, 0xA7, 0x87, 0xC2, 0xE5,
|
|
||||||
0xD8, 0xC5, 0xF3, 0x7F, 0x8D
|
|
||||||
};
|
|
||||||
static const br_x509_trust_anchor TAs[2] = {
|
|
||||||
{
|
|
||||||
{ (unsigned char *)TA0_DN, sizeof TA0_DN },
|
|
||||||
BR_X509_TA_CA,
|
|
||||||
{
|
|
||||||
BR_KEYTYPE_RSA,
|
|
||||||
{ .rsa = {
|
|
||||||
(unsigned char *)TA0_RSA_N, sizeof TA0_RSA_N,
|
|
||||||
(unsigned char *)TA0_RSA_E, sizeof TA0_RSA_E,
|
|
||||||
} }
|
|
||||||
}
|
|
||||||
},
|
|
||||||
{
|
|
||||||
{ (unsigned char *)TA1_DN, sizeof TA1_DN },
|
|
||||||
BR_X509_TA_CA,
|
|
||||||
{
|
|
||||||
BR_KEYTYPE_EC,
|
|
||||||
{ .ec = {
|
|
||||||
BR_EC_secp256r1,
|
|
||||||
(unsigned char *)TA1_EC_Q, sizeof TA1_EC_Q,
|
|
||||||
} }
|
|
||||||
}
|
|
||||||
}
|
|
||||||
};
|
|
||||||
#define TAs_NUM 2
|
|
||||||
|
|
||||||
cc_result SSL_Init(cc_socket socket, const cc_string* host_, void** out_ctx) {
|
cc_result SSL_Init(cc_socket socket, const cc_string* host_, void** out_ctx) {
|
||||||
SSLContext* ctx;
|
SSLContext* ctx;
|
||||||
@ -542,10 +466,11 @@ cc_result SSL_Init(cc_socket socket, const cc_string* host_, void** out_ctx) {
|
|||||||
*out_ctx = (void*)ctx;
|
*out_ctx = (void*)ctx;
|
||||||
|
|
||||||
br_ssl_client_init_full(&ctx->sc, &ctx->xc, TAs, TAs_NUM);
|
br_ssl_client_init_full(&ctx->sc, &ctx->xc, TAs, TAs_NUM);
|
||||||
if (!_verify_certs) {
|
/*if (!_verify_certs) {
|
||||||
br_x509_minimal_set_rsa(&ctx->xc, &br_rsa_i31_pkcs1_vrfy);
|
br_x509_minimal_set_rsa(&ctx->xc, &br_rsa_i31_pkcs1_vrfy);
|
||||||
br_x509_minimal_set_ecdsa(&ctx->xc, &br_ec_prime_i31, &br_ecdsa_i31_vrfy_asn1);
|
br_x509_minimal_set_ecdsa(&ctx->xc, &br_ec_prime_i31, &br_ecdsa_i31_vrfy_asn1);
|
||||||
}
|
}*/
|
||||||
|
|
||||||
br_ssl_engine_set_buffer(&ctx->sc.eng, ctx->iobuf, sizeof(ctx->iobuf), 1);
|
br_ssl_engine_set_buffer(&ctx->sc.eng, ctx->iobuf, sizeof(ctx->iobuf), 1);
|
||||||
br_ssl_client_reset(&ctx->sc, host, 0);
|
br_ssl_client_reset(&ctx->sc, host, 0);
|
||||||
|
|
||||||
|
|||||||
526
third_party/bearssl/src/pemdec.c
vendored
526
third_party/bearssl/src/pemdec.c
vendored
@ -1,526 +0,0 @@
|
|||||||
/* Automatically generated code; do not modify directly. */
|
|
||||||
|
|
||||||
#include <stddef.h>
|
|
||||||
#include <stdint.h>
|
|
||||||
|
|
||||||
typedef struct {
|
|
||||||
uint32_t *dp;
|
|
||||||
uint32_t *rp;
|
|
||||||
const unsigned char *ip;
|
|
||||||
} t0_context;
|
|
||||||
|
|
||||||
static uint32_t
|
|
||||||
t0_parse7E_unsigned(const unsigned char **p)
|
|
||||||
{
|
|
||||||
uint32_t x;
|
|
||||||
|
|
||||||
x = 0;
|
|
||||||
for (;;) {
|
|
||||||
unsigned y;
|
|
||||||
|
|
||||||
y = *(*p) ++;
|
|
||||||
x = (x << 7) | (uint32_t)(y & 0x7F);
|
|
||||||
if (y < 0x80) {
|
|
||||||
return x;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
static int32_t
|
|
||||||
t0_parse7E_signed(const unsigned char **p)
|
|
||||||
{
|
|
||||||
int neg;
|
|
||||||
uint32_t x;
|
|
||||||
|
|
||||||
neg = ((**p) >> 6) & 1;
|
|
||||||
x = (uint32_t)-neg;
|
|
||||||
for (;;) {
|
|
||||||
unsigned y;
|
|
||||||
|
|
||||||
y = *(*p) ++;
|
|
||||||
x = (x << 7) | (uint32_t)(y & 0x7F);
|
|
||||||
if (y < 0x80) {
|
|
||||||
if (neg) {
|
|
||||||
return -(int32_t)~x - 1;
|
|
||||||
} else {
|
|
||||||
return (int32_t)x;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
#define T0_VBYTE(x, n) (unsigned char)((((uint32_t)(x) >> (n)) & 0x7F) | 0x80)
|
|
||||||
#define T0_FBYTE(x, n) (unsigned char)(((uint32_t)(x) >> (n)) & 0x7F)
|
|
||||||
#define T0_SBYTE(x) (unsigned char)((((uint32_t)(x) >> 28) + 0xF8) ^ 0xF8)
|
|
||||||
#define T0_INT1(x) T0_FBYTE(x, 0)
|
|
||||||
#define T0_INT2(x) T0_VBYTE(x, 7), T0_FBYTE(x, 0)
|
|
||||||
#define T0_INT3(x) T0_VBYTE(x, 14), T0_VBYTE(x, 7), T0_FBYTE(x, 0)
|
|
||||||
#define T0_INT4(x) T0_VBYTE(x, 21), T0_VBYTE(x, 14), T0_VBYTE(x, 7), T0_FBYTE(x, 0)
|
|
||||||
#define T0_INT5(x) T0_SBYTE(x), T0_VBYTE(x, 21), T0_VBYTE(x, 14), T0_VBYTE(x, 7), T0_FBYTE(x, 0)
|
|
||||||
|
|
||||||
/* static const unsigned char t0_datablock[]; */
|
|
||||||
|
|
||||||
|
|
||||||
void br_pem_decoder_init_main(void *t0ctx);
|
|
||||||
|
|
||||||
void br_pem_decoder_run(void *t0ctx);
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
#define CTX ((br_pem_decoder_context *)(void *)((unsigned char *)t0ctx - offsetof(br_pem_decoder_context, cpu)))
|
|
||||||
|
|
||||||
/* see bearssl_pem.h */
|
|
||||||
void
|
|
||||||
br_pem_decoder_init(br_pem_decoder_context *ctx)
|
|
||||||
{
|
|
||||||
memset(ctx, 0, sizeof *ctx);
|
|
||||||
ctx->cpu.dp = &ctx->dp_stack[0];
|
|
||||||
ctx->cpu.rp = &ctx->rp_stack[0];
|
|
||||||
br_pem_decoder_init_main(&ctx->cpu);
|
|
||||||
br_pem_decoder_run(&ctx->cpu);
|
|
||||||
}
|
|
||||||
|
|
||||||
/* see bearssl_pem.h */
|
|
||||||
size_t
|
|
||||||
br_pem_decoder_push(br_pem_decoder_context *ctx,
|
|
||||||
const void *data, size_t len)
|
|
||||||
{
|
|
||||||
if (ctx->event) {
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
ctx->hbuf = data;
|
|
||||||
ctx->hlen = len;
|
|
||||||
br_pem_decoder_run(&ctx->cpu);
|
|
||||||
return len - ctx->hlen;
|
|
||||||
}
|
|
||||||
|
|
||||||
/* see bearssl_pem.h */
|
|
||||||
int
|
|
||||||
br_pem_decoder_event(br_pem_decoder_context *ctx)
|
|
||||||
{
|
|
||||||
int event;
|
|
||||||
|
|
||||||
event = ctx->event;
|
|
||||||
ctx->event = 0;
|
|
||||||
return event;
|
|
||||||
}
|
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
static const unsigned char t0_datablock[] = {
|
|
||||||
0x00, 0x2D, 0x2D, 0x2D, 0x2D, 0x2D, 0x42, 0x45, 0x47, 0x49, 0x4E, 0x20,
|
|
||||||
0x00, 0x2D, 0x2D, 0x2D, 0x2D, 0x45, 0x4E, 0x44, 0x20, 0x00
|
|
||||||
};
|
|
||||||
|
|
||||||
static const unsigned char t0_codeblock[] = {
|
|
||||||
0x00, 0x01, 0x00, 0x09, 0x00, 0x00, 0x01, 0x01, 0x07, 0x00, 0x00, 0x01,
|
|
||||||
0x01, 0x08, 0x00, 0x00, 0x13, 0x13, 0x00, 0x00, 0x01,
|
|
||||||
T0_INT2(offsetof(br_pem_decoder_context, event)), 0x00, 0x00, 0x01,
|
|
||||||
T0_INT2(offsetof(br_pem_decoder_context, name)), 0x00, 0x00, 0x05,
|
|
||||||
0x14, 0x2C, 0x14, 0x01, 0x0A, 0x0D, 0x06, 0x03, 0x13, 0x04, 0x76, 0x01,
|
|
||||||
0x2D, 0x0C, 0x06, 0x05, 0x2E, 0x01, 0x03, 0x2D, 0x00, 0x01, 0x0D, 0x27,
|
|
||||||
0x05, 0x04, 0x01, 0x03, 0x2D, 0x00, 0x15, 0x2E, 0x01, 0x02, 0x2D, 0x00,
|
|
||||||
0x01, 0x01, 0x7F, 0x03, 0x00, 0x25, 0x01, 0x00, 0x18, 0x0D, 0x06, 0x03,
|
|
||||||
0x13, 0x04, 0x3C, 0x01, 0x7F, 0x18, 0x0D, 0x06, 0x13, 0x13, 0x02, 0x00,
|
|
||||||
0x05, 0x06, 0x2E, 0x01, 0x03, 0x2D, 0x04, 0x03, 0x01, 0x7F, 0x23, 0x01,
|
|
||||||
0x00, 0x00, 0x04, 0x23, 0x01, 0x01, 0x18, 0x0D, 0x06, 0x09, 0x13, 0x01,
|
|
||||||
0x00, 0x23, 0x01, 0x00, 0x00, 0x04, 0x14, 0x01, 0x02, 0x18, 0x0D, 0x06,
|
|
||||||
0x06, 0x13, 0x01, 0x7F, 0x00, 0x04, 0x08, 0x13, 0x01, 0x03, 0x2D, 0x01,
|
|
||||||
0x00, 0x00, 0x13, 0x01, 0x00, 0x03, 0x00, 0x04, 0xFF, 0x33, 0x01, 0x2C,
|
|
||||||
0x14, 0x01, 0x2D, 0x0D, 0x06, 0x04, 0x13, 0x01, 0x7F, 0x00, 0x14, 0x31,
|
|
||||||
0x06, 0x02, 0x13, 0x29, 0x14, 0x01, 0x0A, 0x0D, 0x06, 0x04, 0x13, 0x01,
|
|
||||||
0x02, 0x00, 0x16, 0x14, 0x1D, 0x06, 0x05, 0x13, 0x2E, 0x01, 0x03, 0x00,
|
|
||||||
0x03, 0x00, 0x29, 0x14, 0x01, 0x0A, 0x0D, 0x06, 0x04, 0x13, 0x01, 0x03,
|
|
||||||
0x00, 0x16, 0x14, 0x1D, 0x06, 0x05, 0x13, 0x2E, 0x01, 0x03, 0x00, 0x02,
|
|
||||||
0x00, 0x01, 0x06, 0x0A, 0x07, 0x03, 0x00, 0x29, 0x14, 0x01, 0x0A, 0x0D,
|
|
||||||
0x06, 0x04, 0x13, 0x01, 0x03, 0x00, 0x14, 0x01, 0x3D, 0x0D, 0x06, 0x2E,
|
|
||||||
0x13, 0x29, 0x14, 0x01, 0x0A, 0x0D, 0x06, 0x04, 0x13, 0x01, 0x03, 0x00,
|
|
||||||
0x2F, 0x05, 0x04, 0x13, 0x01, 0x03, 0x00, 0x01, 0x3D, 0x0C, 0x06, 0x03,
|
|
||||||
0x01, 0x03, 0x00, 0x02, 0x00, 0x01, 0x0F, 0x10, 0x06, 0x03, 0x01, 0x03,
|
|
||||||
0x00, 0x02, 0x00, 0x01, 0x04, 0x0F, 0x1C, 0x01, 0x01, 0x00, 0x16, 0x14,
|
|
||||||
0x1D, 0x06, 0x05, 0x13, 0x2E, 0x01, 0x03, 0x00, 0x02, 0x00, 0x01, 0x06,
|
|
||||||
0x0A, 0x07, 0x03, 0x00, 0x29, 0x14, 0x01, 0x0A, 0x0D, 0x06, 0x04, 0x13,
|
|
||||||
0x01, 0x03, 0x00, 0x14, 0x01, 0x3D, 0x0D, 0x06, 0x20, 0x13, 0x2F, 0x05,
|
|
||||||
0x03, 0x01, 0x03, 0x00, 0x02, 0x00, 0x01, 0x03, 0x10, 0x06, 0x03, 0x01,
|
|
||||||
0x03, 0x00, 0x02, 0x00, 0x01, 0x0A, 0x0F, 0x1C, 0x02, 0x00, 0x01, 0x02,
|
|
||||||
0x0F, 0x1C, 0x01, 0x01, 0x00, 0x16, 0x14, 0x1D, 0x06, 0x05, 0x13, 0x2E,
|
|
||||||
0x01, 0x03, 0x00, 0x02, 0x00, 0x01, 0x06, 0x0A, 0x07, 0x03, 0x00, 0x02,
|
|
||||||
0x00, 0x01, 0x10, 0x0F, 0x1C, 0x02, 0x00, 0x01, 0x08, 0x0F, 0x1C, 0x02,
|
|
||||||
0x00, 0x1C, 0x01, 0x00, 0x00, 0x00, 0x28, 0x01, 0x01, 0x2D, 0x24, 0x06,
|
|
||||||
0x02, 0x04, 0x7B, 0x04, 0x75, 0x00, 0x14, 0x12, 0x2A, 0x14, 0x05, 0x04,
|
|
||||||
0x20, 0x01, 0x7F, 0x00, 0x2C, 0x2A, 0x14, 0x01, 0x0A, 0x0D, 0x06, 0x05,
|
|
||||||
0x13, 0x20, 0x01, 0x00, 0x00, 0x0D, 0x05, 0x05, 0x13, 0x2E, 0x01, 0x00,
|
|
||||||
0x00, 0x1E, 0x04, 0x5E, 0x00, 0x01, 0x01, 0x27, 0x06, 0x0B, 0x22, 0x01,
|
|
||||||
0x80, 0x7F, 0x2B, 0x14, 0x06, 0x02, 0x30, 0x00, 0x13, 0x04, 0x6E, 0x00,
|
|
||||||
0x2C, 0x14, 0x31, 0x05, 0x01, 0x00, 0x13, 0x04, 0x77, 0x00, 0x14, 0x14,
|
|
||||||
0x01, 0x80, 0x61, 0x0E, 0x1B, 0x01, 0x80, 0x7A, 0x0B, 0x10, 0x06, 0x03,
|
|
||||||
0x01, 0x20, 0x08, 0x00, 0x01, 0x14, 0x03, 0x00, 0x1B, 0x18, 0x05, 0x05,
|
|
||||||
0x20, 0x2E, 0x01, 0x00, 0x00, 0x2C, 0x14, 0x01, 0x0A, 0x0D, 0x06, 0x06,
|
|
||||||
0x20, 0x02, 0x00, 0x1B, 0x08, 0x00, 0x14, 0x01, 0x0D, 0x0D, 0x06, 0x03,
|
|
||||||
0x13, 0x04, 0x03, 0x2A, 0x18, 0x1A, 0x1E, 0x1B, 0x1F, 0x1B, 0x04, 0x59,
|
|
||||||
0x00, 0x19, 0x14, 0x1D, 0x05, 0x01, 0x00, 0x13, 0x11, 0x04, 0x76, 0x00,
|
|
||||||
0x21, 0x1A, 0x11, 0x00, 0x00, 0x2C, 0x01, 0x0A, 0x0C, 0x06, 0x02, 0x04,
|
|
||||||
0x78, 0x00, 0x01, 0x01, 0x7F, 0x03, 0x00, 0x2C, 0x14, 0x01, 0x0A, 0x0C,
|
|
||||||
0x06, 0x09, 0x31, 0x05, 0x04, 0x01, 0x00, 0x03, 0x00, 0x04, 0x70, 0x13,
|
|
||||||
0x02, 0x00, 0x00, 0x00, 0x14, 0x06, 0x14, 0x1F, 0x14, 0x22, 0x07, 0x17,
|
|
||||||
0x01, 0x2D, 0x0C, 0x06, 0x08, 0x22, 0x07, 0x1E, 0x01, 0x00, 0x1B, 0x1A,
|
|
||||||
0x00, 0x04, 0x69, 0x22, 0x1A, 0x00, 0x00, 0x14, 0x01, 0x0A, 0x0C, 0x1B,
|
|
||||||
0x01, 0x20, 0x0B, 0x10, 0x00
|
|
||||||
};
|
|
||||||
|
|
||||||
static const uint16_t t0_caddr[] = {
|
|
||||||
0,
|
|
||||||
5,
|
|
||||||
10,
|
|
||||||
15,
|
|
||||||
19,
|
|
||||||
24,
|
|
||||||
29,
|
|
||||||
67,
|
|
||||||
149,
|
|
||||||
384,
|
|
||||||
396,
|
|
||||||
431,
|
|
||||||
450,
|
|
||||||
460,
|
|
||||||
479,
|
|
||||||
523,
|
|
||||||
534,
|
|
||||||
539,
|
|
||||||
549,
|
|
||||||
574,
|
|
||||||
601
|
|
||||||
};
|
|
||||||
|
|
||||||
#define T0_INTERPRETED 29
|
|
||||||
|
|
||||||
#define T0_ENTER(ip, rp, slot) do { \
|
|
||||||
const unsigned char *t0_newip; \
|
|
||||||
uint32_t t0_lnum; \
|
|
||||||
t0_newip = &t0_codeblock[t0_caddr[(slot) - T0_INTERPRETED]]; \
|
|
||||||
t0_lnum = t0_parse7E_unsigned(&t0_newip); \
|
|
||||||
(rp) += t0_lnum; \
|
|
||||||
*((rp) ++) = (uint32_t)((ip) - &t0_codeblock[0]) + (t0_lnum << 16); \
|
|
||||||
(ip) = t0_newip; \
|
|
||||||
} while (0)
|
|
||||||
|
|
||||||
#define T0_DEFENTRY(name, slot) \
|
|
||||||
void \
|
|
||||||
name(void *ctx) \
|
|
||||||
{ \
|
|
||||||
t0_context *t0ctx = ctx; \
|
|
||||||
t0ctx->ip = &t0_codeblock[0]; \
|
|
||||||
T0_ENTER(t0ctx->ip, t0ctx->rp, slot); \
|
|
||||||
}
|
|
||||||
|
|
||||||
T0_DEFENTRY(br_pem_decoder_init_main, 38)
|
|
||||||
|
|
||||||
#define T0_NEXT(t0ipp) (*(*(t0ipp)) ++)
|
|
||||||
|
|
||||||
void
|
|
||||||
br_pem_decoder_run(void *t0ctx)
|
|
||||||
{
|
|
||||||
uint32_t *dp, *rp;
|
|
||||||
const unsigned char *ip;
|
|
||||||
|
|
||||||
#define T0_LOCAL(x) (*(rp - 2 - (x)))
|
|
||||||
#define T0_POP() (*-- dp)
|
|
||||||
#define T0_POPi() (*(int32_t *)(-- dp))
|
|
||||||
#define T0_PEEK(x) (*(dp - 1 - (x)))
|
|
||||||
#define T0_PEEKi(x) (*(int32_t *)(dp - 1 - (x)))
|
|
||||||
#define T0_PUSH(v) do { *dp = (v); dp ++; } while (0)
|
|
||||||
#define T0_PUSHi(v) do { *(int32_t *)dp = (v); dp ++; } while (0)
|
|
||||||
#define T0_RPOP() (*-- rp)
|
|
||||||
#define T0_RPOPi() (*(int32_t *)(-- rp))
|
|
||||||
#define T0_RPUSH(v) do { *rp = (v); rp ++; } while (0)
|
|
||||||
#define T0_RPUSHi(v) do { *(int32_t *)rp = (v); rp ++; } while (0)
|
|
||||||
#define T0_ROLL(x) do { \
|
|
||||||
size_t t0len = (size_t)(x); \
|
|
||||||
uint32_t t0tmp = *(dp - 1 - t0len); \
|
|
||||||
memmove(dp - t0len - 1, dp - t0len, t0len * sizeof *dp); \
|
|
||||||
*(dp - 1) = t0tmp; \
|
|
||||||
} while (0)
|
|
||||||
#define T0_SWAP() do { \
|
|
||||||
uint32_t t0tmp = *(dp - 2); \
|
|
||||||
*(dp - 2) = *(dp - 1); \
|
|
||||||
*(dp - 1) = t0tmp; \
|
|
||||||
} while (0)
|
|
||||||
#define T0_ROT() do { \
|
|
||||||
uint32_t t0tmp = *(dp - 3); \
|
|
||||||
*(dp - 3) = *(dp - 2); \
|
|
||||||
*(dp - 2) = *(dp - 1); \
|
|
||||||
*(dp - 1) = t0tmp; \
|
|
||||||
} while (0)
|
|
||||||
#define T0_NROT() do { \
|
|
||||||
uint32_t t0tmp = *(dp - 1); \
|
|
||||||
*(dp - 1) = *(dp - 2); \
|
|
||||||
*(dp - 2) = *(dp - 3); \
|
|
||||||
*(dp - 3) = t0tmp; \
|
|
||||||
} while (0)
|
|
||||||
#define T0_PICK(x) do { \
|
|
||||||
uint32_t t0depth = (x); \
|
|
||||||
T0_PUSH(T0_PEEK(t0depth)); \
|
|
||||||
} while (0)
|
|
||||||
#define T0_CO() do { \
|
|
||||||
goto t0_exit; \
|
|
||||||
} while (0)
|
|
||||||
#define T0_RET() goto t0_next
|
|
||||||
|
|
||||||
dp = ((t0_context *)t0ctx)->dp;
|
|
||||||
rp = ((t0_context *)t0ctx)->rp;
|
|
||||||
ip = ((t0_context *)t0ctx)->ip;
|
|
||||||
goto t0_next;
|
|
||||||
for (;;) {
|
|
||||||
uint32_t t0x;
|
|
||||||
|
|
||||||
t0_next:
|
|
||||||
t0x = T0_NEXT(&ip);
|
|
||||||
if (t0x < T0_INTERPRETED) {
|
|
||||||
switch (t0x) {
|
|
||||||
int32_t t0off;
|
|
||||||
|
|
||||||
case 0: /* ret */
|
|
||||||
t0x = T0_RPOP();
|
|
||||||
rp -= (t0x >> 16);
|
|
||||||
t0x &= 0xFFFF;
|
|
||||||
if (t0x == 0) {
|
|
||||||
ip = NULL;
|
|
||||||
goto t0_exit;
|
|
||||||
}
|
|
||||||
ip = &t0_codeblock[t0x];
|
|
||||||
break;
|
|
||||||
case 1: /* literal constant */
|
|
||||||
T0_PUSHi(t0_parse7E_signed(&ip));
|
|
||||||
break;
|
|
||||||
case 2: /* read local */
|
|
||||||
T0_PUSH(T0_LOCAL(t0_parse7E_unsigned(&ip)));
|
|
||||||
break;
|
|
||||||
case 3: /* write local */
|
|
||||||
T0_LOCAL(t0_parse7E_unsigned(&ip)) = T0_POP();
|
|
||||||
break;
|
|
||||||
case 4: /* jump */
|
|
||||||
t0off = t0_parse7E_signed(&ip);
|
|
||||||
ip += t0off;
|
|
||||||
break;
|
|
||||||
case 5: /* jump if */
|
|
||||||
t0off = t0_parse7E_signed(&ip);
|
|
||||||
if (T0_POP()) {
|
|
||||||
ip += t0off;
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 6: /* jump if not */
|
|
||||||
t0off = t0_parse7E_signed(&ip);
|
|
||||||
if (!T0_POP()) {
|
|
||||||
ip += t0off;
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 7: {
|
|
||||||
/* + */
|
|
||||||
|
|
||||||
uint32_t b = T0_POP();
|
|
||||||
uint32_t a = T0_POP();
|
|
||||||
T0_PUSH(a + b);
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 8: {
|
|
||||||
/* - */
|
|
||||||
|
|
||||||
uint32_t b = T0_POP();
|
|
||||||
uint32_t a = T0_POP();
|
|
||||||
T0_PUSH(a - b);
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 9: {
|
|
||||||
/* < */
|
|
||||||
|
|
||||||
int32_t b = T0_POPi();
|
|
||||||
int32_t a = T0_POPi();
|
|
||||||
T0_PUSH(-(uint32_t)(a < b));
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 10: {
|
|
||||||
/* << */
|
|
||||||
|
|
||||||
int c = (int)T0_POPi();
|
|
||||||
uint32_t x = T0_POP();
|
|
||||||
T0_PUSH(x << c);
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 11: {
|
|
||||||
/* <= */
|
|
||||||
|
|
||||||
int32_t b = T0_POPi();
|
|
||||||
int32_t a = T0_POPi();
|
|
||||||
T0_PUSH(-(uint32_t)(a <= b));
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 12: {
|
|
||||||
/* <> */
|
|
||||||
|
|
||||||
uint32_t b = T0_POP();
|
|
||||||
uint32_t a = T0_POP();
|
|
||||||
T0_PUSH(-(uint32_t)(a != b));
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 13: {
|
|
||||||
/* = */
|
|
||||||
|
|
||||||
uint32_t b = T0_POP();
|
|
||||||
uint32_t a = T0_POP();
|
|
||||||
T0_PUSH(-(uint32_t)(a == b));
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 14: {
|
|
||||||
/* >= */
|
|
||||||
|
|
||||||
int32_t b = T0_POPi();
|
|
||||||
int32_t a = T0_POPi();
|
|
||||||
T0_PUSH(-(uint32_t)(a >= b));
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 15: {
|
|
||||||
/* >> */
|
|
||||||
|
|
||||||
int c = (int)T0_POPi();
|
|
||||||
int32_t x = T0_POPi();
|
|
||||||
T0_PUSHi(x >> c);
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 16: {
|
|
||||||
/* and */
|
|
||||||
|
|
||||||
uint32_t b = T0_POP();
|
|
||||||
uint32_t a = T0_POP();
|
|
||||||
T0_PUSH(a & b);
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 17: {
|
|
||||||
/* co */
|
|
||||||
T0_CO();
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 18: {
|
|
||||||
/* data-get8 */
|
|
||||||
|
|
||||||
size_t addr = T0_POP();
|
|
||||||
T0_PUSH(t0_datablock[addr]);
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 19: {
|
|
||||||
/* drop */
|
|
||||||
(void)T0_POP();
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 20: {
|
|
||||||
/* dup */
|
|
||||||
T0_PUSH(T0_PEEK(0));
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 21: {
|
|
||||||
/* flush-buf */
|
|
||||||
|
|
||||||
if (CTX->ptr > 0) {
|
|
||||||
if (CTX->dest) {
|
|
||||||
CTX->dest(CTX->dest_ctx, CTX->buf, CTX->ptr);
|
|
||||||
}
|
|
||||||
CTX->ptr = 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 22: {
|
|
||||||
/* from-base64 */
|
|
||||||
|
|
||||||
uint32_t c = T0_POP();
|
|
||||||
uint32_t p, q, r, z;
|
|
||||||
p = c - 0x41;
|
|
||||||
q = c - 0x61;
|
|
||||||
r = c - 0x30;
|
|
||||||
|
|
||||||
z = ((p + 2) & -LT(p, 26))
|
|
||||||
| ((q + 28) & -LT(q, 26))
|
|
||||||
| ((r + 54) & -LT(r, 10))
|
|
||||||
| (64 & -EQ(c, 0x2B))
|
|
||||||
| (65 & -EQ(c, 0x2F))
|
|
||||||
| EQ(c, 0x3D);
|
|
||||||
T0_PUSHi((int32_t)z - 2);
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 23: {
|
|
||||||
/* get8 */
|
|
||||||
|
|
||||||
size_t addr = T0_POP();
|
|
||||||
T0_PUSH(*((unsigned char *)CTX + addr));
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 24: {
|
|
||||||
/* over */
|
|
||||||
T0_PUSH(T0_PEEK(1));
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 25: {
|
|
||||||
/* read8-native */
|
|
||||||
|
|
||||||
if (CTX->hlen > 0) {
|
|
||||||
T0_PUSH(*CTX->hbuf ++);
|
|
||||||
CTX->hlen --;
|
|
||||||
} else {
|
|
||||||
T0_PUSHi(-1);
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 26: {
|
|
||||||
/* set8 */
|
|
||||||
|
|
||||||
size_t addr = T0_POP();
|
|
||||||
unsigned x = T0_POP();
|
|
||||||
*((unsigned char *)CTX + addr) = x;
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 27: {
|
|
||||||
/* swap */
|
|
||||||
T0_SWAP();
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
case 28: {
|
|
||||||
/* write8 */
|
|
||||||
|
|
||||||
unsigned char x = (unsigned char)T0_POP();
|
|
||||||
CTX->buf[CTX->ptr ++] = x;
|
|
||||||
if (CTX->ptr == sizeof CTX->buf) {
|
|
||||||
if (CTX->dest) {
|
|
||||||
CTX->dest(CTX->dest_ctx, CTX->buf, sizeof CTX->buf);
|
|
||||||
}
|
|
||||||
CTX->ptr = 0;
|
|
||||||
}
|
|
||||||
|
|
||||||
}
|
|
||||||
break;
|
|
||||||
}
|
|
||||||
|
|
||||||
} else {
|
|
||||||
T0_ENTER(ip, rp, t0x);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
t0_exit:
|
|
||||||
((t0_context *)t0ctx)->dp = dp;
|
|
||||||
((t0_context *)t0ctx)->rp = rp;
|
|
||||||
((t0_context *)t0ctx)->ip = ip;
|
|
||||||
}
|
|
||||||
173
third_party/bearssl/src/pemenc.c
vendored
173
third_party/bearssl/src/pemenc.c
vendored
@ -1,173 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2018 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Get the appropriate Base64 character for a numeric value in the
|
|
||||||
* 0..63 range. This is constant-time.
|
|
||||||
*/
|
|
||||||
static char
|
|
||||||
b64char(uint32_t x)
|
|
||||||
{
|
|
||||||
/*
|
|
||||||
* Values 0 to 25 map to 0x41..0x5A ('A' to 'Z')
|
|
||||||
* Values 26 to 51 map to 0x61..0x7A ('a' to 'z')
|
|
||||||
* Values 52 to 61 map to 0x30..0x39 ('0' to '9')
|
|
||||||
* Value 62 maps to 0x2B ('+')
|
|
||||||
* Value 63 maps to 0x2F ('/')
|
|
||||||
*/
|
|
||||||
uint32_t a, b, c;
|
|
||||||
|
|
||||||
a = x - 26;
|
|
||||||
b = x - 52;
|
|
||||||
c = x - 62;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Looking at bits 8..15 of values a, b and c:
|
|
||||||
*
|
|
||||||
* x a b c
|
|
||||||
* ---------------------
|
|
||||||
* 0..25 FF FF FF
|
|
||||||
* 26..51 00 FF FF
|
|
||||||
* 52..61 00 00 FF
|
|
||||||
* 62..63 00 00 00
|
|
||||||
*/
|
|
||||||
return (char)(((x + 0x41) & ((a & b & c) >> 8))
|
|
||||||
| ((x + (0x61 - 26)) & ((~a & b & c) >> 8))
|
|
||||||
| ((x - (52 - 0x30)) & ((~a & ~b & c) >> 8))
|
|
||||||
| ((0x2B + ((x & 1) << 2)) & (~(a | b | c) >> 8)));
|
|
||||||
}
|
|
||||||
|
|
||||||
/* see bearssl_pem.h */
|
|
||||||
size_t
|
|
||||||
br_pem_encode(void *dest, const void *data, size_t len,
|
|
||||||
const char *banner, unsigned flags)
|
|
||||||
{
|
|
||||||
size_t dlen, banner_len, lines;
|
|
||||||
char *d;
|
|
||||||
unsigned char *buf;
|
|
||||||
size_t u;
|
|
||||||
int off, lim;
|
|
||||||
|
|
||||||
banner_len = strlen(banner);
|
|
||||||
/* FIXME: try to avoid divisions here, as they may pull
|
|
||||||
an extra libc function. */
|
|
||||||
if ((flags & BR_PEM_LINE64) != 0) {
|
|
||||||
lines = (len + 47) / 48;
|
|
||||||
} else {
|
|
||||||
lines = (len + 56) / 57;
|
|
||||||
}
|
|
||||||
dlen = (banner_len << 1) + 30 + (((len + 2) / 3) << 2)
|
|
||||||
+ lines + 2;
|
|
||||||
if ((flags & BR_PEM_CRLF) != 0) {
|
|
||||||
dlen += lines + 2;
|
|
||||||
}
|
|
||||||
|
|
||||||
if (dest == NULL) {
|
|
||||||
return dlen;
|
|
||||||
}
|
|
||||||
|
|
||||||
d = dest;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* We always move the source data to the end of output buffer;
|
|
||||||
* the encoding process never "catches up" except at the very
|
|
||||||
* end. This also handles all conditions of partial or total
|
|
||||||
* overlap.
|
|
||||||
*/
|
|
||||||
buf = (unsigned char *)d + dlen - len;
|
|
||||||
memmove(buf, data, len);
|
|
||||||
|
|
||||||
memcpy(d, "-----BEGIN ", 11);
|
|
||||||
d += 11;
|
|
||||||
memcpy(d, banner, banner_len);
|
|
||||||
d += banner_len;
|
|
||||||
memcpy(d, "-----", 5);
|
|
||||||
d += 5;
|
|
||||||
if ((flags & BR_PEM_CRLF) != 0) {
|
|
||||||
*d ++ = 0x0D;
|
|
||||||
}
|
|
||||||
*d ++ = 0x0A;
|
|
||||||
|
|
||||||
off = 0;
|
|
||||||
lim = (flags & BR_PEM_LINE64) != 0 ? 16 : 19;
|
|
||||||
for (u = 0; (u + 2) < len; u += 3) {
|
|
||||||
uint32_t w;
|
|
||||||
|
|
||||||
w = ((uint32_t)buf[u] << 16)
|
|
||||||
| ((uint32_t)buf[u + 1] << 8)
|
|
||||||
| (uint32_t)buf[u + 2];
|
|
||||||
*d ++ = b64char(w >> 18);
|
|
||||||
*d ++ = b64char((w >> 12) & 0x3F);
|
|
||||||
*d ++ = b64char((w >> 6) & 0x3F);
|
|
||||||
*d ++ = b64char(w & 0x3F);
|
|
||||||
if (++ off == lim) {
|
|
||||||
off = 0;
|
|
||||||
if ((flags & BR_PEM_CRLF) != 0) {
|
|
||||||
*d ++ = 0x0D;
|
|
||||||
}
|
|
||||||
*d ++ = 0x0A;
|
|
||||||
}
|
|
||||||
}
|
|
||||||
if (u < len) {
|
|
||||||
uint32_t w;
|
|
||||||
|
|
||||||
w = (uint32_t)buf[u] << 16;
|
|
||||||
if (u + 1 < len) {
|
|
||||||
w |= (uint32_t)buf[u + 1] << 8;
|
|
||||||
}
|
|
||||||
*d ++ = b64char(w >> 18);
|
|
||||||
*d ++ = b64char((w >> 12) & 0x3F);
|
|
||||||
if (u + 1 < len) {
|
|
||||||
*d ++ = b64char((w >> 6) & 0x3F);
|
|
||||||
} else {
|
|
||||||
*d ++ = 0x3D;
|
|
||||||
}
|
|
||||||
*d ++ = 0x3D;
|
|
||||||
off ++;
|
|
||||||
}
|
|
||||||
if (off != 0) {
|
|
||||||
if ((flags & BR_PEM_CRLF) != 0) {
|
|
||||||
*d ++ = 0x0D;
|
|
||||||
}
|
|
||||||
*d ++ = 0x0A;
|
|
||||||
}
|
|
||||||
|
|
||||||
memcpy(d, "-----END ", 9);
|
|
||||||
d += 9;
|
|
||||||
memcpy(d, banner, banner_len);
|
|
||||||
d += banner_len;
|
|
||||||
memcpy(d, "-----", 5);
|
|
||||||
d += 5;
|
|
||||||
if ((flags & BR_PEM_CRLF) != 0) {
|
|
||||||
*d ++ = 0x0D;
|
|
||||||
}
|
|
||||||
*d ++ = 0x0A;
|
|
||||||
|
|
||||||
/* Final zero, not counted in returned length. */
|
|
||||||
*d ++ = 0x00;
|
|
||||||
|
|
||||||
return dlen;
|
|
||||||
}
|
|
||||||
2009
third_party/bearssl/src/ssl_hs_server.c
vendored
2009
third_party/bearssl/src/ssl_hs_server.c
vendored
File diff suppressed because it is too large
Load Diff
52
third_party/bearssl/src/ssl_server.c
vendored
52
third_party/bearssl/src/ssl_server.c
vendored
@ -1,52 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_zero(br_ssl_server_context *cc)
|
|
||||||
{
|
|
||||||
/*
|
|
||||||
* For really standard C, we should explicitly set to NULL all
|
|
||||||
* pointers, and 0 all other fields. However, on all our target
|
|
||||||
* architectures, a direct memset() will work, be faster, and
|
|
||||||
* use a lot less code.
|
|
||||||
*/
|
|
||||||
memset(cc, 0, sizeof *cc);
|
|
||||||
}
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
int
|
|
||||||
br_ssl_server_reset(br_ssl_server_context *cc)
|
|
||||||
{
|
|
||||||
br_ssl_engine_set_buffer(&cc->eng, NULL, 0, 0);
|
|
||||||
if (!br_ssl_engine_init_rand(&cc->eng)) {
|
|
||||||
return 0;
|
|
||||||
}
|
|
||||||
cc->eng.reneg = 0;
|
|
||||||
br_ssl_engine_hs_reset(&cc->eng,
|
|
||||||
br_ssl_hs_server_init_main, br_ssl_hs_server_run);
|
|
||||||
return br_ssl_engine_last_error(&cc->eng) == BR_ERR_OK;
|
|
||||||
}
|
|
||||||
149
third_party/bearssl/src/ssl_server_full_ec.c
vendored
149
third_party/bearssl/src/ssl_server_full_ec.c
vendored
@ -1,149 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_full_ec(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
unsigned cert_issuer_key_type, const br_ec_private_key *sk)
|
|
||||||
{
|
|
||||||
/*
|
|
||||||
* The "full" profile supports all implemented cipher suites.
|
|
||||||
*
|
|
||||||
* Rationale for suite order, from most important to least
|
|
||||||
* important rule:
|
|
||||||
*
|
|
||||||
* -- Don't use 3DES if AES is available.
|
|
||||||
* -- Try to have Forward Secrecy (ECDHE suite) if possible.
|
|
||||||
* -- ChaCha20+Poly1305 is better than AES/GCM (faster, smaller).
|
|
||||||
* -- GCM is better than CCM and CBC. CCM is better than CBC.
|
|
||||||
* -- CCM is better than CCM_8.
|
|
||||||
* -- AES-128 is preferred over AES-256 (AES-128 is already
|
|
||||||
* strong enough, and AES-256 is 40% more expensive).
|
|
||||||
*
|
|
||||||
* Note that for ECDH suites, the list will be automatically
|
|
||||||
* filtered based on the issuing CA key type.
|
|
||||||
*/
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_128_CCM,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_256_CCM,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_128_CCM_8,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_256_CCM_8,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA,
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256,
|
|
||||||
BR_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256,
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_AES_256_GCM_SHA384,
|
|
||||||
BR_TLS_ECDH_RSA_WITH_AES_256_GCM_SHA384,
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA256,
|
|
||||||
BR_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA256,
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA384,
|
|
||||||
BR_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA384,
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_AES_128_CBC_SHA,
|
|
||||||
BR_TLS_ECDH_RSA_WITH_AES_128_CBC_SHA,
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_AES_256_CBC_SHA,
|
|
||||||
BR_TLS_ECDH_RSA_WITH_AES_256_CBC_SHA,
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_3DES_EDE_CBC_SHA,
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_3DES_EDE_CBC_SHA,
|
|
||||||
BR_TLS_ECDH_RSA_WITH_3DES_EDE_CBC_SHA
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* All hash functions are activated.
|
|
||||||
* Note: the X.509 validation engine will nonetheless refuse to
|
|
||||||
* validate signatures that use MD5 as hash function.
|
|
||||||
*/
|
|
||||||
static const br_hash_class *hashes[] = {
|
|
||||||
&br_md5_vtable,
|
|
||||||
&br_sha1_vtable,
|
|
||||||
&br_sha224_vtable,
|
|
||||||
&br_sha256_vtable,
|
|
||||||
&br_sha384_vtable,
|
|
||||||
&br_sha512_vtable
|
|
||||||
};
|
|
||||||
|
|
||||||
int id;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions from TLS-1.0
|
|
||||||
* to TLS-1.2 (inclusive).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS10, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites and elliptic curve implementation (for ECDHE).
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
br_ssl_engine_set_default_ec(&cc->eng);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_ec(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_KEYX | BR_KEYTYPE_SIGN,
|
|
||||||
cert_issuer_key_type,
|
|
||||||
br_ssl_engine_get_ec(&cc->eng),
|
|
||||||
#if BR_LOMUL
|
|
||||||
br_ecdsa_i15_sign_asn1
|
|
||||||
#else
|
|
||||||
br_ecdsa_i31_sign_asn1
|
|
||||||
#endif
|
|
||||||
);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
for (id = br_md5_ID; id <= br_sha512_ID; id ++) {
|
|
||||||
const br_hash_class *hc;
|
|
||||||
|
|
||||||
hc = hashes[id - 1];
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, id, hc);
|
|
||||||
}
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf10(&cc->eng, &br_tls10_prf);
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
br_ssl_engine_set_prf_sha384(&cc->eng, &br_tls12_sha384_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_aes_cbc(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_aes_ccm(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_aes_gcm(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_des_cbc(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_chapol(&cc->eng);
|
|
||||||
}
|
|
||||||
132
third_party/bearssl/src/ssl_server_full_rsa.c
vendored
132
third_party/bearssl/src/ssl_server_full_rsa.c
vendored
@ -1,132 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_full_rsa(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_rsa_private_key *sk)
|
|
||||||
{
|
|
||||||
/*
|
|
||||||
* The "full" profile supports all implemented cipher suites.
|
|
||||||
*
|
|
||||||
* Rationale for suite order, from most important to least
|
|
||||||
* important rule:
|
|
||||||
*
|
|
||||||
* -- Don't use 3DES if AES is available.
|
|
||||||
* -- Try to have Forward Secrecy (ECDHE suite) if possible.
|
|
||||||
* -- ChaCha20+Poly1305 is better than AES/GCM (faster, smaller).
|
|
||||||
* -- GCM is better than CBC.
|
|
||||||
* -- AES-128 is preferred over AES-256 (AES-128 is already
|
|
||||||
* strong enough, and AES-256 is 40% more expensive).
|
|
||||||
*/
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256,
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA,
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA,
|
|
||||||
BR_TLS_RSA_WITH_AES_128_GCM_SHA256,
|
|
||||||
BR_TLS_RSA_WITH_AES_256_GCM_SHA384,
|
|
||||||
BR_TLS_RSA_WITH_AES_128_CCM,
|
|
||||||
BR_TLS_RSA_WITH_AES_256_CCM,
|
|
||||||
BR_TLS_RSA_WITH_AES_128_CCM_8,
|
|
||||||
BR_TLS_RSA_WITH_AES_256_CCM_8,
|
|
||||||
BR_TLS_RSA_WITH_AES_128_CBC_SHA256,
|
|
||||||
BR_TLS_RSA_WITH_AES_256_CBC_SHA256,
|
|
||||||
BR_TLS_RSA_WITH_AES_128_CBC_SHA,
|
|
||||||
BR_TLS_RSA_WITH_AES_256_CBC_SHA,
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA,
|
|
||||||
BR_TLS_RSA_WITH_3DES_EDE_CBC_SHA
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* All hash functions are activated.
|
|
||||||
* Note: the X.509 validation engine will nonetheless refuse to
|
|
||||||
* validate signatures that use MD5 as hash function.
|
|
||||||
*/
|
|
||||||
static const br_hash_class *hashes[] = {
|
|
||||||
&br_md5_vtable,
|
|
||||||
&br_sha1_vtable,
|
|
||||||
&br_sha224_vtable,
|
|
||||||
&br_sha256_vtable,
|
|
||||||
&br_sha384_vtable,
|
|
||||||
&br_sha512_vtable
|
|
||||||
};
|
|
||||||
|
|
||||||
int id;
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions from TLS-1.0
|
|
||||||
* to TLS-1.2 (inclusive).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS10, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites and elliptic curve implementation (for ECDHE).
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
br_ssl_engine_set_default_ec(&cc->eng);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_rsa(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_KEYX | BR_KEYTYPE_SIGN,
|
|
||||||
br_rsa_private_get_default(),
|
|
||||||
br_rsa_pkcs1_sign_get_default());
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
for (id = br_md5_ID; id <= br_sha512_ID; id ++) {
|
|
||||||
const br_hash_class *hc;
|
|
||||||
|
|
||||||
hc = hashes[id - 1];
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, id, hc);
|
|
||||||
}
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf10(&cc->eng, &br_tls10_prf);
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
br_ssl_engine_set_prf_sha384(&cc->eng, &br_tls12_sha384_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_aes_cbc(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_aes_ccm(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_aes_gcm(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_des_cbc(&cc->eng);
|
|
||||||
br_ssl_engine_set_default_chapol(&cc->eng);
|
|
||||||
}
|
|
||||||
71
third_party/bearssl/src/ssl_server_mine2c.c
vendored
71
third_party/bearssl/src/ssl_server_mine2c.c
vendored
@ -1,71 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_mine2c(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_rsa_private_key *sk)
|
|
||||||
{
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions to TLS-1.2 (only).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS12, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites and elliptic curve implementation (for ECDHE).
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
br_ssl_engine_set_ec(&cc->eng, &br_ec_all_m15);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_rsa(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_SIGN, 0, br_rsa_i31_pkcs1_sign);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, br_sha256_ID, &br_sha256_vtable);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_chapol(&cc->eng);
|
|
||||||
}
|
|
||||||
71
third_party/bearssl/src/ssl_server_mine2g.c
vendored
71
third_party/bearssl/src/ssl_server_mine2g.c
vendored
@ -1,71 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_mine2g(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_rsa_private_key *sk)
|
|
||||||
{
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions to TLS-1.2 (only).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS12, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites and elliptic curve implementation (for ECDHE).
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
br_ssl_engine_set_ec(&cc->eng, &br_ec_all_m15);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_rsa(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_SIGN, 0, br_rsa_i31_pkcs1_sign);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, br_sha256_ID, &br_sha256_vtable);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_aes_gcm(&cc->eng);
|
|
||||||
}
|
|
||||||
71
third_party/bearssl/src/ssl_server_minf2c.c
vendored
71
third_party/bearssl/src/ssl_server_minf2c.c
vendored
@ -1,71 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_minf2c(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_ec_private_key *sk)
|
|
||||||
{
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions to TLS-1.2 (only).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS12, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites and elliptic curve implementation (for ECDHE).
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
br_ssl_engine_set_ec(&cc->eng, &br_ec_all_m15);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_ec(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_SIGN, 0, &br_ec_all_m15, br_ecdsa_i31_sign_asn1);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, br_sha256_ID, &br_sha256_vtable);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_chapol(&cc->eng);
|
|
||||||
}
|
|
||||||
71
third_party/bearssl/src/ssl_server_minf2g.c
vendored
71
third_party/bearssl/src/ssl_server_minf2g.c
vendored
@ -1,71 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_minf2g(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_ec_private_key *sk)
|
|
||||||
{
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions to TLS-1.2 (only).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS12, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites and elliptic curve implementation (for ECDHE).
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
br_ssl_engine_set_ec(&cc->eng, &br_ec_all_m15);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_ec(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_SIGN, 0, &br_ec_all_m15, br_ecdsa_i31_sign_asn1);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, br_sha256_ID, &br_sha256_vtable);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_aes_gcm(&cc->eng);
|
|
||||||
}
|
|
||||||
70
third_party/bearssl/src/ssl_server_minr2g.c
vendored
70
third_party/bearssl/src/ssl_server_minr2g.c
vendored
@ -1,70 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_minr2g(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_rsa_private_key *sk)
|
|
||||||
{
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_RSA_WITH_AES_128_GCM_SHA256
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions to TLS-1.2 (only).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS12, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_rsa(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_KEYX, br_rsa_i31_private, 0);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, br_sha256_ID, &br_sha256_vtable);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_aes_gcm(&cc->eng);
|
|
||||||
}
|
|
||||||
70
third_party/bearssl/src/ssl_server_minu2g.c
vendored
70
third_party/bearssl/src/ssl_server_minu2g.c
vendored
@ -1,70 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_minu2g(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_ec_private_key *sk)
|
|
||||||
{
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDH_RSA_WITH_AES_128_GCM_SHA256
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions to TLS-1.2 (only).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS12, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_ec(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_KEYX, BR_KEYTYPE_RSA, &br_ec_all_m15, 0);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, br_sha256_ID, &br_sha256_vtable);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_aes_gcm(&cc->eng);
|
|
||||||
}
|
|
||||||
70
third_party/bearssl/src/ssl_server_minv2g.c
vendored
70
third_party/bearssl/src/ssl_server_minv2g.c
vendored
@ -1,70 +0,0 @@
|
|||||||
/*
|
|
||||||
* Copyright (c) 2016 Thomas Pornin <pornin@bolet.org>
|
|
||||||
*
|
|
||||||
* Permission is hereby granted, free of charge, to any person obtaining
|
|
||||||
* a copy of this software and associated documentation files (the
|
|
||||||
* "Software"), to deal in the Software without restriction, including
|
|
||||||
* without limitation the rights to use, copy, modify, merge, publish,
|
|
||||||
* distribute, sublicense, and/or sell copies of the Software, and to
|
|
||||||
* permit persons to whom the Software is furnished to do so, subject to
|
|
||||||
* the following conditions:
|
|
||||||
*
|
|
||||||
* The above copyright notice and this permission notice shall be
|
|
||||||
* included in all copies or substantial portions of the Software.
|
|
||||||
*
|
|
||||||
* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
|
|
||||||
* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
|
|
||||||
* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
|
|
||||||
* NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
|
|
||||||
* BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
|
|
||||||
* ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
|
|
||||||
* CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
|
||||||
* SOFTWARE.
|
|
||||||
*/
|
|
||||||
|
|
||||||
#include "inner.h"
|
|
||||||
|
|
||||||
/* see bearssl_ssl.h */
|
|
||||||
void
|
|
||||||
br_ssl_server_init_minv2g(br_ssl_server_context *cc,
|
|
||||||
const br_x509_certificate *chain, size_t chain_len,
|
|
||||||
const br_ec_private_key *sk)
|
|
||||||
{
|
|
||||||
static const uint16_t suites[] = {
|
|
||||||
BR_TLS_ECDH_ECDSA_WITH_AES_128_GCM_SHA256
|
|
||||||
};
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Reset server context and set supported versions to TLS-1.2 (only).
|
|
||||||
*/
|
|
||||||
br_ssl_server_zero(cc);
|
|
||||||
br_ssl_engine_set_versions(&cc->eng, BR_TLS12, BR_TLS12);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set suites.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_suites(&cc->eng, suites,
|
|
||||||
(sizeof suites) / (sizeof suites[0]));
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the "server policy": handler for the certificate chain
|
|
||||||
* and private key operations.
|
|
||||||
*/
|
|
||||||
br_ssl_server_set_single_ec(cc, chain, chain_len, sk,
|
|
||||||
BR_KEYTYPE_KEYX, BR_KEYTYPE_EC, &br_ec_all_m15, 0);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set supported hash functions.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_hash(&cc->eng, br_sha256_ID, &br_sha256_vtable);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Set the PRF implementations.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_prf_sha256(&cc->eng, &br_tls12_sha256_prf);
|
|
||||||
|
|
||||||
/*
|
|
||||||
* Symmetric encryption.
|
|
||||||
*/
|
|
||||||
br_ssl_engine_set_default_aes_gcm(&cc->eng);
|
|
||||||
}
|
|
||||||
Loading…
x
Reference in New Issue
Block a user