diff options
Diffstat (limited to 'ssl.c')
| -rw-r--r-- | ssl.c | 452 |
1 files changed, 0 insertions, 452 deletions
@@ -1,452 +0,0 @@ -/* $OpenBSD: ssl.c,v 1.93 2019/06/05 06:40:13 gilles Exp $ */ - -/* - * Copyright (c) 2008 Pierre-Yves Ritschard <pyr@openbsd.org> - * Copyright (c) 2008 Reyk Floeter <reyk@openbsd.org> - * Copyright (c) 2012 Gilles Chehade <gilles@poolp.org> - * - * Permission to use, copy, modify, and distribute this software for any - * purpose with or without fee is hereby granted, provided that the above - * copyright notice and this permission notice appear in all copies. - * - * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES - * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF - * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR - * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES - * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN - * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF - * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. - */ - -#include <sys/types.h> -#include <sys/queue.h> -#include <sys/tree.h> -#include <sys/socket.h> -#include <sys/stat.h> - -#include <ctype.h> -#include <event.h> -#include <fcntl.h> -#include <imsg.h> -#include <limits.h> -#include <pwd.h> -#include <stdio.h> -#include <stdlib.h> -#include <string.h> -#include <unistd.h> - -#include <openssl/ssl.h> -#include <openssl/engine.h> -#include <openssl/err.h> -#include <openssl/rsa.h> -#include <openssl/ecdsa.h> -#include <openssl/dh.h> -#include <openssl/bn.h> - -#include "log.h" -#include "ssl.h" - -void -ssl_init(void) -{ - static int inited = 0; - - if (inited) - return; - - SSL_library_init(); - SSL_load_error_strings(); - - OpenSSL_add_all_algorithms(); - - /* Init hardware crypto engines. */ - ENGINE_load_builtin_engines(); - ENGINE_register_all_complete(); - inited = 1; -} - -int -ssl_setup(SSL_CTX **ctxp, struct pki *pki, - int (*sni_cb)(SSL *,int *,void *), const char *ciphers) -{ - SSL_CTX *ctx; - uint8_t sid[SSL_MAX_SID_CTX_LENGTH]; - - ctx = ssl_ctx_create(pki->pki_name, pki->pki_cert, pki->pki_cert_len, ciphers); - - /* - * Set session ID context to a random value. We don't support - * persistent caching of sessions so it is OK to set a temporary - * session ID context that is valid during run time. - */ - arc4random_buf(sid, sizeof(sid)); - if (!SSL_CTX_set_session_id_context(ctx, sid, sizeof(sid))) - goto err; - - if (sni_cb) - SSL_CTX_set_tlsext_servername_callback(ctx, sni_cb); - - SSL_CTX_set_dh_auto(ctx, pki->pki_dhe); - - SSL_CTX_set_ecdh_auto(ctx, 1); - - *ctxp = ctx; - return 1; - -err: - SSL_CTX_free(ctx); - ssl_error("ssl_setup"); - return 0; -} - -char * -ssl_load_file(const char *name, off_t *len, mode_t perm) -{ - struct stat st; - off_t size; - char *buf = NULL; - int fd, saved_errno; - char mode[12]; - - if ((fd = open(name, O_RDONLY)) == -1) - return (NULL); - if (fstat(fd, &st) != 0) - goto fail; - if (st.st_uid != 0) { - log_warnx("warn: %s: not owned by uid 0", name); - errno = EACCES; - goto fail; - } - if (st.st_mode & (S_IRWXU | S_IRWXG | S_IRWXO) & ~perm) { - strmode(perm, mode); - log_warnx("warn: %s: insecure permissions: must be at most %s", - name, &mode[1]); - errno = EACCES; - goto fail; - } - size = st.st_size; - if ((buf = calloc(1, size + 1)) == NULL) - goto fail; - if (read(fd, buf, size) != size) - goto fail; - close(fd); - - *len = size + 1; - return (buf); - -fail: - free(buf); - saved_errno = errno; - close(fd); - errno = saved_errno; - return (NULL); -} - -#if 0 -static int -ssl_password_cb(char *buf, int size, int rwflag, void *u) -{ - size_t len; - if (u == NULL) { - explicit_bzero(buf, size); - return (0); - } - if ((len = strlcpy(buf, u, size)) >= (size_t)size) - return (0); - return (len); -} -#endif - -static int -ssl_password_cb(char *buf, int size, int rwflag, void *u) -{ - int ret = 0; - size_t len; - char *pass; - - pass = getpass((const char *)u); - if (pass == NULL) - return 0; - len = strlen(pass); - if (strlcpy(buf, pass, size) >= (size_t)size) - goto end; - ret = len; -end: - if (len) - explicit_bzero(pass, len); - return ret; -} - -char * -ssl_load_key(const char *name, off_t *len, char *pass, mode_t perm, const char *pkiname) -{ - FILE *fp = NULL; - EVP_PKEY *key = NULL; - BIO *bio = NULL; - long size; - char *data, *buf, *filebuf; - struct stat st; - char mode[12]; - char prompt[2048]; - - /* Initialize SSL library once */ - ssl_init(); - - /* - * Read (possibly) encrypted key from file - */ - if ((fp = fopen(name, "r")) == NULL) - return (NULL); - if ((filebuf = malloc_conceal(BUFSIZ)) == NULL) - goto fail; - setvbuf(fp, filebuf, _IOFBF, BUFSIZ); - - if (fstat(fileno(fp), &st) != 0) - goto fail; - if (st.st_uid != 0) { - log_warnx("warn: %s: not owned by uid 0", name); - errno = EACCES; - goto fail; - } - if (st.st_mode & (S_IRWXU | S_IRWXG | S_IRWXO) & ~perm) { - strmode(perm, mode); - log_warnx("warn: %s: insecure permissions: must be at most %s", - name, &mode[1]); - errno = EACCES; - goto fail; - } - - (void)snprintf(prompt, sizeof prompt, "passphrase for %s: ", pkiname); - key = PEM_read_PrivateKey(fp, NULL, ssl_password_cb, prompt); - fclose(fp); - fp = NULL; - freezero(filebuf, BUFSIZ); - filebuf = NULL; - if (key == NULL) - goto fail; - /* - * Write unencrypted key to memory buffer - */ - if ((bio = BIO_new(BIO_s_mem())) == NULL) - goto fail; - if (!PEM_write_bio_PrivateKey(bio, key, NULL, NULL, 0, NULL, NULL)) - goto fail; - if ((size = BIO_get_mem_data(bio, &data)) <= 0) - goto fail; - if ((buf = calloc_conceal(1, size + 1)) == NULL) - goto fail; - memcpy(buf, data, size); - - BIO_free_all(bio); - EVP_PKEY_free(key); - - *len = (off_t)size + 1; - return (buf); - -fail: - ssl_error("ssl_load_key"); - BIO_free_all(bio); - EVP_PKEY_free(key); - if (fp) - fclose(fp); - freezero(filebuf, BUFSIZ); - return (NULL); -} - -SSL_CTX * -ssl_ctx_create(const char *pkiname, char *cert, off_t cert_len, const char *ciphers) -{ - SSL_CTX *ctx; - size_t pkinamelen = 0; - - ctx = SSL_CTX_new(SSLv23_method()); - if (ctx == NULL) { - ssl_error("ssl_ctx_create"); - fatal("ssl_ctx_create: could not create SSL context"); - } - - SSL_CTX_set_session_cache_mode(ctx, SSL_SESS_CACHE_OFF); - SSL_CTX_set_timeout(ctx, SSL_SESSION_TIMEOUT); - SSL_CTX_set_options(ctx, - SSL_OP_ALL | SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3 | SSL_OP_NO_TICKET); - SSL_CTX_set_options(ctx, - SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION); - SSL_CTX_set_options(ctx, SSL_OP_NO_CLIENT_RENEGOTIATION); - SSL_CTX_set_options(ctx, SSL_OP_CIPHER_SERVER_PREFERENCE); - - if (ciphers == NULL) - ciphers = SSL_CIPHERS; - if (!SSL_CTX_set_cipher_list(ctx, ciphers)) { - ssl_error("ssl_ctx_create"); - fatal("ssl_ctx_create: could not set cipher list"); - } - - if (cert != NULL) { - if (pkiname != NULL) - pkinamelen = strlen(pkiname) + 1; - if (!SSL_CTX_use_certificate_chain_mem(ctx, cert, cert_len)) { - ssl_error("ssl_ctx_create"); - fatal("ssl_ctx_create: invalid certificate chain"); - } else if (!ssl_ctx_fake_private_key(ctx, - pkiname, pkinamelen, cert, cert_len, NULL, NULL)) { - ssl_error("ssl_ctx_create"); - fatal("ssl_ctx_create: could not fake private key"); - } else if (!SSL_CTX_check_private_key(ctx)) { - ssl_error("ssl_ctx_create"); - fatal("ssl_ctx_create: invalid private key"); - } - } - - return (ctx); -} - -int -ssl_load_certificate(struct pki *p, const char *pathname) -{ - p->pki_cert = ssl_load_file(pathname, &p->pki_cert_len, 0755); - if (p->pki_cert == NULL) - return 0; - return 1; -} - -int -ssl_load_keyfile(struct pki *p, const char *pathname, const char *pkiname) -{ - char pass[1024]; - - p->pki_key = ssl_load_key(pathname, &p->pki_key_len, pass, 0740, pkiname); - if (p->pki_key == NULL) - return 0; - return 1; -} - -int -ssl_load_cafile(struct ca *c, const char *pathname) -{ - c->ca_cert = ssl_load_file(pathname, &c->ca_cert_len, 0755); - if (c->ca_cert == NULL) - return 0; - return 1; -} - -const char * -ssl_to_text(const SSL *ssl) -{ - static char buf[256]; - - (void)snprintf(buf, sizeof buf, "%s:%s:%d", - SSL_get_version(ssl), - SSL_get_cipher_name(ssl), - SSL_get_cipher_bits(ssl, NULL)); - - return (buf); -} - -void -ssl_error(const char *where) -{ - unsigned long code; - char errbuf[128]; - - for (; (code = ERR_get_error()) != 0 ;) { - ERR_error_string_n(code, errbuf, sizeof(errbuf)); - log_debug("debug: SSL library error: %s: %s", where, errbuf); - } -} - -int -ssl_load_pkey(const void *data, size_t datalen, char *buf, off_t len, - X509 **x509ptr, EVP_PKEY **pkeyptr) -{ - BIO *in; - X509 *x509 = NULL; - EVP_PKEY *pkey = NULL; - RSA *rsa = NULL; - EC_KEY *eckey = NULL; - void *exdata = NULL; - - if ((in = BIO_new_mem_buf(buf, len)) == NULL) { - SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY, ERR_R_BUF_LIB); - return (0); - } - - if ((x509 = PEM_read_bio_X509(in, NULL, - ssl_password_cb, NULL)) == NULL) { - SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY, ERR_R_PEM_LIB); - goto fail; - } - - if ((pkey = X509_get_pubkey(x509)) == NULL) { - SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY, ERR_R_X509_LIB); - goto fail; - } - - BIO_free(in); - in = NULL; - - if (data != NULL && datalen) { - if (((rsa = EVP_PKEY_get1_RSA(pkey)) == NULL && - (eckey = EVP_PKEY_get1_EC_KEY(pkey)) == NULL) || - (exdata = malloc(datalen)) == NULL) { - SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY, ERR_R_EVP_LIB); - goto fail; - } - - memcpy(exdata, data, datalen); - if (rsa) - RSA_set_ex_data(rsa, 0, exdata); - if (eckey) - ECDSA_set_ex_data(eckey, 0, exdata); - RSA_free(rsa); /* dereference, will be cleaned up with pkey */ - EC_KEY_free(eckey); /* dereference, will be cleaned up with pkey */ - } - - *x509ptr = x509; - *pkeyptr = pkey; - - return (1); - - fail: - RSA_free(rsa); - EC_KEY_free(eckey); - BIO_free(in); - EVP_PKEY_free(pkey); - X509_free(x509); - free(exdata); - - return (0); -} - -int -ssl_ctx_fake_private_key(SSL_CTX *ctx, const void *data, size_t datalen, - char *buf, off_t len, X509 **x509ptr, EVP_PKEY **pkeyptr) -{ - int ret = 0; - EVP_PKEY *pkey = NULL; - X509 *x509 = NULL; - - if (!ssl_load_pkey(data, datalen, buf, len, &x509, &pkey)) - return (0); - - /* - * Use the public key as the "private" key - the secret key - * parameters are hidden in an extra process that will be - * contacted by the RSA engine. The SSL/TLS library needs at - * least the public key parameters in the current process. - */ - ret = SSL_CTX_use_PrivateKey(ctx, pkey); - if (!ret) - SSLerr(SSL_F_SSL_CTX_USE_PRIVATEKEY, ERR_LIB_SSL); - - if (pkeyptr != NULL) - *pkeyptr = pkey; - else - EVP_PKEY_free(pkey); - - if (x509ptr != NULL) - *x509ptr = x509; - else - X509_free(x509); - - return (ret); -} |