mirror of
https://github.com/Icinga/icinga2.git
synced 2025-07-31 01:24:19 +02:00
61d7ec4bf7
The function was never used and it's implementation contains a bug where a buffer of too small size is used as a paramter to ERR_error_string. According to the `man 3 ERR_error_info`, the buffer has to be at least 256 bytes in size. Also the function seems of limited use as it allows to output the tag object used with additional error information for exceptions in Boost. However, you boost::get_error_info<>() just returns the value type but not the full tag object from the exception.
68 lines
2.6 KiB
C++
68 lines
2.6 KiB
C++
/* Icinga 2 | (c) 2012 Icinga GmbH | GPLv2+ */
|
|
|
|
#ifndef TLSUTILITY_H
|
|
#define TLSUTILITY_H
|
|
|
|
#include "base/i2-base.hpp"
|
|
#include "base/object.hpp"
|
|
#include "base/shared.hpp"
|
|
#include "base/array.hpp"
|
|
#include "base/string.hpp"
|
|
#include <openssl/ssl.h>
|
|
#include <openssl/bio.h>
|
|
#include <openssl/err.h>
|
|
#include <openssl/comp.h>
|
|
#include <openssl/sha.h>
|
|
#include <openssl/pem.h>
|
|
#include <openssl/x509.h>
|
|
#include <openssl/x509v3.h>
|
|
#include <openssl/evp.h>
|
|
#include <openssl/rand.h>
|
|
#include <boost/asio/ssl/context.hpp>
|
|
#include <boost/exception/info.hpp>
|
|
|
|
namespace icinga
|
|
{
|
|
|
|
void InitializeOpenSSL();
|
|
|
|
String GetOpenSSLVersion();
|
|
|
|
Shared<boost::asio::ssl::context>::Ptr MakeAsioSslContext(const String& pubkey = String(), const String& privkey = String(), const String& cakey = String());
|
|
void AddCRLToSSLContext(const Shared<boost::asio::ssl::context>::Ptr& context, const String& crlPath);
|
|
void SetCipherListToSSLContext(const Shared<boost::asio::ssl::context>::Ptr& context, const String& cipherList);
|
|
void SetTlsProtocolminToSSLContext(const Shared<boost::asio::ssl::context>::Ptr& context, const String& tlsProtocolmin);
|
|
|
|
String GetCertificateCN(const std::shared_ptr<X509>& certificate);
|
|
std::shared_ptr<X509> GetX509Certificate(const String& pemfile);
|
|
int MakeX509CSR(const String& cn, const String& keyfile, const String& csrfile = String(), const String& certfile = String(), bool ca = false);
|
|
std::shared_ptr<X509> CreateCert(EVP_PKEY *pubkey, X509_NAME *subject, X509_NAME *issuer, EVP_PKEY *cakey, bool ca);
|
|
|
|
String GetIcingaCADir();
|
|
String CertificateToString(const std::shared_ptr<X509>& cert);
|
|
|
|
std::shared_ptr<X509> StringToCertificate(const String& cert);
|
|
std::shared_ptr<X509> CreateCertIcingaCA(EVP_PKEY *pubkey, X509_NAME *subject);
|
|
std::shared_ptr<X509> CreateCertIcingaCA(const std::shared_ptr<X509>& cert);
|
|
|
|
String PBKDF2_SHA1(const String& password, const String& salt, int iterations);
|
|
String PBKDF2_SHA256(const String& password, const String& salt, int iterations);
|
|
String SHA1(const String& s, bool binary = false);
|
|
String SHA256(const String& s);
|
|
String RandomString(int length);
|
|
|
|
bool VerifyCertificate(const std::shared_ptr<X509>& caCertificate, const std::shared_ptr<X509>& certificate);
|
|
bool IsCa(const std::shared_ptr<X509>& cacert);
|
|
int GetCertificateVersion(const std::shared_ptr<X509>& cert);
|
|
String GetSignatureAlgorithm(const std::shared_ptr<X509>& cert);
|
|
Array::Ptr GetSubjectAltNames(const std::shared_ptr<X509>& cert);
|
|
|
|
class openssl_error : virtual public std::exception, virtual public boost::exception { };
|
|
|
|
struct errinfo_openssl_error_;
|
|
typedef boost::error_info<struct errinfo_openssl_error_, unsigned long> errinfo_openssl_error;
|
|
|
|
}
|
|
|
|
#endif /* TLSUTILITY_H */
|