annotate lisp/net/tls.el @ 58470:7858de1f2bdf

(dedicated-switch-to-buffer): New function. (gdb-ann3, gdb-setup-windows, gdb-restore-windows): Dedicate gdb-related windows. (gdb-display-buffer): Dedicate gdb-related windows. Don't grab other frames. (gdb-reset): Remove dedicated property after debugging.
author Nick Roberts <nickrob@snap.net.nz>
date Wed, 24 Nov 2004 10:31:15 +0000
parents df80d19d7a2e
children aac0a33f5772 e24e2e78deda
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
50313
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
1 ;;; tls.el --- TLS/SSL support via wrapper around GnuTLS
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
2
57448
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
3 ;; Copyright (C) 1996-1999, 2003, 2004 Free Software Foundation, Inc.
50313
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
4
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
5 ;; Author: Simon Josefsson <simon@josefsson.org>
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
6 ;; Keywords: comm, tls, gnutls, ssl
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
7
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
8 ;; This file is part of GNU Emacs.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
9
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
10 ;; GNU Emacs is free software; you can redistribute it and/or modify
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
11 ;; it under the terms of the GNU General Public License as published by
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
12 ;; the Free Software Foundation; either version 2, or (at your option)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
13 ;; any later version.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
14
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
15 ;; GNU Emacs is distributed in the hope that it will be useful,
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
16 ;; but WITHOUT ANY WARRANTY; without even the implied warranty of
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
17 ;; MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
18 ;; GNU General Public License for more details.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
19
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
20 ;; You should have received a copy of the GNU General Public License
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
21 ;; along with GNU Emacs; see the file COPYING. If not, write to the
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
22 ;; Free Software Foundation, Inc., 59 Temple Place - Suite 330,
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
23 ;; Boston, MA 02111-1307, USA.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
24
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
25 ;;; Commentary:
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
26
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
27 ;; This package implements a simple wrapper around "gnutls-cli" to
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
28 ;; make Emacs support TLS/SSL.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
29 ;;
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
30 ;; Usage is the same as `open-network-stream', i.e.:
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
31 ;;
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
32 ;; (setq tmp (open-tls-stream "test" (current-buffer) "news.mozilla.org" 563))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
33 ;; ...
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
34 ;; #<process test>
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
35 ;; (process-send-string tmp "mode reader\n")
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
36 ;; 200 secnews.netscape.com Netscape-Collabra/3.52 03615 NNRP ready ...
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
37 ;; nil
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
38 ;; (process-send-string tmp "quit\n")
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
39 ;; 205
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
40 ;; nil
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
41
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
42 ;; To use this package as a replacement for ssl.el by William M. Perry
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
43 ;; <wmperry@cs.indiana.edu>, you need to evaluate the following:
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
44 ;;
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
45 ;; (defalias 'open-ssl-stream 'open-tls-stream)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
46
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
47 ;;; Code:
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
48
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
49 (eval-and-compile
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
50 (autoload 'format-spec "format-spec")
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
51 (autoload 'format-spec-make "format-spec"))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
52
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
53 (defgroup tls nil
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
54 "Transport Layer Security (TLS) parameters."
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
55 :group 'comm)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
56
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
57 (defcustom tls-program '("gnutls-cli -p %p %h"
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
58 "gnutls-cli -p %p %h --protocols ssl3")
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
59 "List of strings containing commands to start TLS stream to a host.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
60 Each entry in the list is tried until a connection is successful.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
61 %s is replaced with server hostname, %p with port to connect to.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
62 The program should read input on stdin and write output to
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
63 stdout. Also see `tls-success' for what the program should output
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
64 after successful negotiation."
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
65 :type '(repeat string)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
66 :group 'tls)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
67
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
68 (defcustom tls-process-connection-type nil
56927
55fd4f77387a Revision: miles@gnu.org--gnu-2004/emacs--cvs-trunk--0--patch-523
Miles Bader <miles@gnu.org>
parents: 52401
diff changeset
69 "*Value for `process-connection-type' to use when starting TLS process."
57856
df80d19d7a2e Revision: miles@gnu.org--gnu-2004/emacs--cvs-trunk--0--patch-660
Miles Bader <miles@gnu.org>
parents: 57448
diff changeset
70 :version "21.4"
50313
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
71 :type 'boolean
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
72 :group 'tls)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
73
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
74 (defcustom tls-success "- Handshake was completed"
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
75 "*Regular expression indicating completed TLS handshakes.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
76 The default is what GNUTLS's \"gnutls-cli\" outputs."
57856
df80d19d7a2e Revision: miles@gnu.org--gnu-2004/emacs--cvs-trunk--0--patch-660
Miles Bader <miles@gnu.org>
parents: 57448
diff changeset
77 :version "21.4"
50313
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
78 :type 'regexp
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
79 :group 'tls)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
80
57448
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
81 (defcustom tls-certtool-program (executable-find "certtool")
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
82 "Name of GnuTLS certtool.
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
83 Used by `tls-certificate-information'."
57856
df80d19d7a2e Revision: miles@gnu.org--gnu-2004/emacs--cvs-trunk--0--patch-660
Miles Bader <miles@gnu.org>
parents: 57448
diff changeset
84 :version "21.4"
57448
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
85 :type '(repeat string)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
86 :group 'tls)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
87
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
88 (defun tls-certificate-information (der)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
89 "Parse X.509 certificate in DER format into an assoc list."
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
90 (let ((certificate (concat "-----BEGIN CERTIFICATE-----\n"
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
91 (base64-encode-string der)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
92 "\n-----END CERTIFICATE-----\n"))
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
93 (exit-code 0))
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
94 (with-current-buffer (get-buffer-create " *certtool*")
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
95 (erase-buffer)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
96 (insert certificate)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
97 (setq exit-code (condition-case ()
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
98 (call-process-region (point-min) (point-max)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
99 tls-certtool-program
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
100 t (list (current-buffer) nil) t
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
101 "--certificate-info")
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
102 (error -1)))
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
103 (if (/= exit-code 0)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
104 nil
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
105 (let ((vals nil))
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
106 (goto-char (point-min))
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
107 (while (re-search-forward "^\\([^:]+\\): \\(.*\\)" nil t)
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
108 (push (cons (match-string 1) (match-string 2)) vals))
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
109 (nreverse vals))))))
821d95294db5 (tls-certtool-program): New variable.
Simon Josefsson <jas@extundo.com>
parents: 56927
diff changeset
110
50313
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
111 (defun open-tls-stream (name buffer host service)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
112 "Open a TLS connection for a service to a host.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
113 Returns a subprocess-object to represent the connection.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
114 Input and output work as for subprocesses; `delete-process' closes it.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
115 Args are NAME BUFFER HOST SERVICE.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
116 NAME is name for process. It is modified if necessary to make it unique.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
117 BUFFER is the buffer (or buffer-name) to associate with the process.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
118 Process output goes at end of that buffer, unless you specify
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
119 an output stream or filter function to handle the output.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
120 BUFFER may be also nil, meaning that this process is not associated
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
121 with any buffer
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
122 Third arg is name of the host to connect to, or its IP address.
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
123 Fourth arg SERVICE is name of the service desired, or an integer
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
124 specifying a port number to connect to."
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
125 (let ((cmds tls-program) cmd done)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
126 (message "Opening TLS connection to `%s'..." host)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
127 (while (and (not done) (setq cmd (pop cmds)))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
128 (message "Opening TLS connection with `%s'..." cmd)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
129 (let* ((process-connection-type tls-process-connection-type)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
130 (process (start-process
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
131 name buffer shell-file-name shell-command-switch
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
132 (format-spec
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
133 cmd
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
134 (format-spec-make
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
135 ?h host
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
136 ?p (if (integerp service)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
137 (int-to-string service)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
138 service)))))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
139 response)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
140 (while (and process
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
141 (memq (process-status process) '(open run))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
142 (save-excursion
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
143 (set-buffer buffer) ;; XXX "blue moon" nntp.el bug
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
144 (goto-char (point-min))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
145 (not (setq done (re-search-forward tls-success nil t)))))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
146 (accept-process-output process 1)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
147 (sit-for 1))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
148 (message "Opening TLS connection with `%s'...%s" cmd
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
149 (if done "done" "failed"))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
150 (if done
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
151 (setq done process)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
152 (delete-process process))))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
153 (message "Opening TLS connection to `%s'...%s"
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
154 host (if done "done" "failed"))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
155 done))
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
156
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
157 (provide 'tls)
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
158
52401
695cf19ef79e Add arch taglines
Miles Bader <miles@gnu.org>
parents: 50313
diff changeset
159 ;;; arch-tag: 5596d1c4-facc-4bc4-94a9-9863b928d7ac
50313
59ddec11881f Initial revision
Simon Josefsson <jas@extundo.com>
parents:
diff changeset
160 ;;; tls.el ends here