Mercurial > pidgin.yaz
annotate libpurple/plugins/ssl/ssl-nss.c @ 24008:67cb8706a2f2
Fix a NULL pointer deref in the NSS SSL implementation with certain self-signed
certs.
Fixes #7013
author | Daniel Atallah <daniel.atallah@gmail.com> |
---|---|
date | Mon, 08 Sep 2008 23:04:15 +0000 |
parents | d7c62b220ed0 |
children | 0006181485ea |
rev | line source |
---|---|
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
1 /** |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
2 * @file ssl-nss.c Mozilla NSS SSL plugin. |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
3 * |
15823 | 4 * purple |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
5 * |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
6 * Copyright (C) 2003 Christian Hammond <chipx86@gnupdate.org> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
7 * |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
8 * This program is free software; you can redistribute it and/or modify |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
9 * it under the terms of the GNU General Public License as published by |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
10 * the Free Software Foundation; either version 2 of the License, or |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
11 * (at your option) any later version. |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
12 * |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
13 * This program is distributed in the hope that it will be useful, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
16 * GNU General Public License for more details. |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
17 * |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
18 * You should have received a copy of the GNU General Public License |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
19 * along with this program; if not, write to the Free Software |
19680
44b4e8bd759b
The FSF changed its address a while ago; our files were out of date.
John Bailey <rekkanoryo@rekkanoryo.org>
parents:
19669
diff
changeset
|
20 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02111-1301 USA |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
21 */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
22 #include "internal.h" |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
23 #include "debug.h" |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
24 #include "certificate.h" |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
25 #include "plugin.h" |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
26 #include "sslconn.h" |
19988
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
27 #include "util.h" |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
28 #include "version.h" |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
29 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
30 #define SSL_NSS_PLUGIN_ID "ssl-nss" |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
31 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
32 #ifdef HAVE_NSS |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
33 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
34 #undef HAVE_LONG_LONG /* Make Mozilla less angry. If angry, Mozilla SMASH! */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
35 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
36 #include <nspr.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
37 #include <nss.h> |
19988
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
38 #include <nssb64.h> |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
39 #include <pk11func.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
40 #include <prio.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
41 #include <secerr.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
42 #include <secmod.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
43 #include <ssl.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
44 #include <sslerr.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
45 #include <sslproto.h> |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
46 |
17804
016eee704a96
Avoid including NSPR's private header pprio.h just for the prototype of
Stu Tomlinson <stu@nosnilmot.com>
parents:
17752
diff
changeset
|
47 /* This is defined in NSPR's <private/pprio.h>, but to avoid including a |
016eee704a96
Avoid including NSPR's private header pprio.h just for the prototype of
Stu Tomlinson <stu@nosnilmot.com>
parents:
17752
diff
changeset
|
48 * private header we duplicate the prototype here */ |
016eee704a96
Avoid including NSPR's private header pprio.h just for the prototype of
Stu Tomlinson <stu@nosnilmot.com>
parents:
17752
diff
changeset
|
49 NSPR_API(PRFileDesc*) PR_ImportTCPSocket(PRInt32 osfd); |
016eee704a96
Avoid including NSPR's private header pprio.h just for the prototype of
Stu Tomlinson <stu@nosnilmot.com>
parents:
17752
diff
changeset
|
50 |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
51 typedef struct |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
52 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
53 PRFileDesc *fd; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
54 PRFileDesc *in; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
55 guint handshake_handler; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
56 |
15823 | 57 } PurpleSslNssData; |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
58 |
15823 | 59 #define PURPLE_SSL_NSS_DATA(gsc) ((PurpleSslNssData *)gsc->private_data) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
60 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
61 static const PRIOMethods *_nss_methods = NULL; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
62 static PRDescIdentity _identity; |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
63 static PurpleCertificateScheme x509_nss; |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
64 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
65 /* Thank you, Evolution */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
66 static void |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
67 set_errno(int code) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
68 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
69 /* FIXME: this should handle more. */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
70 switch (code) { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
71 case PR_INVALID_ARGUMENT_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
72 errno = EINVAL; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
73 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
74 case PR_PENDING_INTERRUPT_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
75 errno = EINTR; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
76 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
77 case PR_IO_PENDING_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
78 errno = EAGAIN; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
79 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
80 case PR_WOULD_BLOCK_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
81 errno = EAGAIN; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
82 /*errno = EWOULDBLOCK; */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
83 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
84 case PR_IN_PROGRESS_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
85 errno = EINPROGRESS; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
86 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
87 case PR_ALREADY_INITIATED_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
88 errno = EALREADY; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
89 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
90 case PR_NETWORK_UNREACHABLE_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
91 errno = EHOSTUNREACH; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
92 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
93 case PR_CONNECT_REFUSED_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
94 errno = ECONNREFUSED; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
95 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
96 case PR_CONNECT_TIMEOUT_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
97 case PR_IO_TIMEOUT_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
98 errno = ETIMEDOUT; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
99 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
100 case PR_NOT_CONNECTED_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
101 errno = ENOTCONN; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
102 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
103 case PR_CONNECT_RESET_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
104 errno = ECONNRESET; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
105 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
106 case PR_IO_ERROR: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
107 default: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
108 errno = EIO; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
109 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
110 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
111 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
112 |
22007
c38d72677c8a
Probe for -Wstrict-prototypes to get some more warnings. I then cleaned up
Richard Laager <rlaager@wiktel.com>
parents:
21030
diff
changeset
|
113 static gchar *get_error_text(void) |
19669
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
114 { |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
115 PRInt32 len = PR_GetErrorTextLength(); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
116 gchar *ret = NULL; |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
117 |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
118 if (len > 0) { |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
119 ret = g_malloc(len + 1); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
120 len = PR_GetErrorText(ret); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
121 ret[len] = '\0'; |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
122 } |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
123 |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
124 return ret; |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
125 } |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
126 |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
127 static void |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
128 ssl_nss_init_nss(void) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
129 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
130 char *lib; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
131 PR_Init(PR_SYSTEM_THREAD, PR_PRIORITY_NORMAL, 1); |
16820
2a98d8b6095e
Proabably fixes ticket #578, it's the recommended way of initializing NSS
Stu Tomlinson <stu@nosnilmot.com>
parents:
16673
diff
changeset
|
132 NSS_NoDB_Init("."); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
133 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
134 /* TODO: Fix this so autoconf does the work trying to find this lib. */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
135 #ifndef _WIN32 |
16098 | 136 lib = g_strdup(LIBDIR "/libnssckbi.so"); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
137 #else |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
138 lib = g_strdup("nssckbi.dll"); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
139 #endif |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
140 SECMOD_AddNewModule("Builtins", lib, 0, 0); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
141 g_free(lib); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
142 NSS_SetDomesticPolicy(); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
143 |
15823 | 144 _identity = PR_GetUniqueIdentity("Purple"); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
145 _nss_methods = PR_GetDefaultIOMethods(); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
146 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
147 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
148 static SECStatus |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
149 ssl_auth_cert(void *arg, PRFileDesc *socket, PRBool checksig, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
150 PRBool is_server) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
151 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
152 return SECSuccess; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
153 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
154 #if 0 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
155 CERTCertificate *cert; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
156 void *pinArg; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
157 SECStatus status; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
158 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
159 cert = SSL_PeerCertificate(socket); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
160 pinArg = SSL_RevealPinArg(socket); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
161 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
162 status = CERT_VerifyCertNow((CERTCertDBHandle *)arg, cert, checksig, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
163 certUsageSSLClient, pinArg); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
164 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
165 if (status != SECSuccess) { |
15823 | 166 purple_debug_error("nss", "CERT_VerifyCertNow failed\n"); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
167 CERT_DestroyCertificate(cert); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
168 return status; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
169 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
170 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
171 CERT_DestroyCertificate(cert); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
172 return SECSuccess; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
173 #endif |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
174 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
175 |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
176 #if 0 |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
177 static SECStatus |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
178 ssl_bad_cert(void *arg, PRFileDesc *socket) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
179 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
180 SECStatus status = SECFailure; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
181 PRErrorCode err; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
182 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
183 if (arg == NULL) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
184 return status; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
185 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
186 *(PRErrorCode *)arg = err = PORT_GetError(); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
187 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
188 switch (err) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
189 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
190 case SEC_ERROR_INVALID_AVA: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
191 case SEC_ERROR_INVALID_TIME: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
192 case SEC_ERROR_BAD_SIGNATURE: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
193 case SEC_ERROR_EXPIRED_CERTIFICATE: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
194 case SEC_ERROR_UNKNOWN_ISSUER: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
195 case SEC_ERROR_UNTRUSTED_CERT: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
196 case SEC_ERROR_CERT_VALID: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
197 case SEC_ERROR_EXPIRED_ISSUER_CERTIFICATE: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
198 case SEC_ERROR_CRL_EXPIRED: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
199 case SEC_ERROR_CRL_BAD_SIGNATURE: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
200 case SEC_ERROR_EXTENSION_VALUE_INVALID: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
201 case SEC_ERROR_CA_CERT_INVALID: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
202 case SEC_ERROR_CERT_USAGES_INVALID: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
203 case SEC_ERROR_UNKNOWN_CRITICAL_EXTENSION: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
204 status = SECSuccess; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
205 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
206 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
207 default: |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
208 status = SECFailure; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
209 break; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
210 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
211 |
15823 | 212 purple_debug_error("nss", "Bad certificate: %d\n", err); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
213 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
214 return status; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
215 } |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
216 #endif |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
217 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
218 static gboolean |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
219 ssl_nss_init(void) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
220 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
221 return TRUE; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
222 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
223 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
224 static void |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
225 ssl_nss_uninit(void) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
226 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
227 PR_Cleanup(); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
228 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
229 _nss_methods = NULL; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
230 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
231 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
232 static void |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
233 ssl_nss_verified_cb(PurpleCertificateVerificationStatus st, |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
234 gpointer userdata) |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
235 { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
236 PurpleSslConnection *gsc = (PurpleSslConnection *) userdata; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
237 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
238 if (st == PURPLE_CERTIFICATE_VALID) { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
239 /* Certificate valid? Good! Do the connection! */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
240 gsc->connect_cb(gsc->connect_cb_data, gsc, PURPLE_INPUT_READ); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
241 } else { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
242 /* Otherwise, signal an error */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
243 if(gsc->error_cb != NULL) |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
244 gsc->error_cb(gsc, PURPLE_SSL_CERTIFICATE_INVALID, |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
245 gsc->connect_cb_data); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
246 purple_ssl_close(gsc); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
247 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
248 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
249 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
250 /** Transforms an NSS containing an X.509 certificate into a Certificate instance |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
251 * |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
252 * @param cert Certificate to transform |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
253 * @return A newly allocated Certificate |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
254 */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
255 static PurpleCertificate * |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
256 x509_import_from_nss(CERTCertificate* cert) |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
257 { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
258 /* New certificate to return */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
259 PurpleCertificate * crt; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
260 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
261 /* Allocate the certificate and load it with data */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
262 crt = g_new0(PurpleCertificate, 1); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
263 crt->scheme = &x509_nss; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
264 crt->data = CERT_DupCertificate(cert); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
265 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
266 return crt; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
267 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
268 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
269 static GList * |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
270 ssl_nss_get_peer_certificates(PRFileDesc *socket, PurpleSslConnection * gsc) |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
271 { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
272 CERTCertificate *curcert; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
273 CERTCertificate *issuerCert; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
274 PurpleCertificate * newcrt; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
275 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
276 /* List of Certificate instances to return */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
277 GList * peer_certs = NULL; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
278 int count; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
279 int64 now = PR_Now(); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
280 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
281 curcert = SSL_PeerCertificate(socket); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
282 if (curcert == NULL) { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
283 purple_debug_error("nss", "could not DupCertificate\n"); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
284 return NULL; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
285 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
286 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
287 for (count = 0 ; count < CERT_MAX_CERT_CHAIN ; count++) { |
24008
67cb8706a2f2
Fix a NULL pointer deref in the NSS SSL implementation with certain self-signed
Daniel Atallah <daniel.atallah@gmail.com>
parents:
23799
diff
changeset
|
288 purple_debug_info("nss", "subject=%s issuer=%s\n", curcert->subjectName, |
67cb8706a2f2
Fix a NULL pointer deref in the NSS SSL implementation with certain self-signed
Daniel Atallah <daniel.atallah@gmail.com>
parents:
23799
diff
changeset
|
289 curcert->issuerName ? curcert->issuerName : "(null)"); |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
290 newcrt = x509_import_from_nss(curcert); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
291 peer_certs = g_list_append(peer_certs, newcrt); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
292 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
293 if (curcert->isRoot) { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
294 break; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
295 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
296 issuerCert = CERT_FindCertIssuer(curcert, now, certUsageSSLServer); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
297 if (!issuerCert) { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
298 purple_debug_error("nss", "partial certificate chain\n"); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
299 break; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
300 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
301 CERT_DestroyCertificate(curcert); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
302 curcert = issuerCert; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
303 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
304 CERT_DestroyCertificate(curcert); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
305 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
306 return peer_certs; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
307 } |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
308 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
309 static void |
15823 | 310 ssl_nss_handshake_cb(gpointer data, int fd, PurpleInputCondition cond) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
311 { |
15823 | 312 PurpleSslConnection *gsc = (PurpleSslConnection *)data; |
313 PurpleSslNssData *nss_data = gsc->private_data; | |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
314 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
315 /* I don't think this the best way to do this... |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
316 * It seems to work because it'll eventually use the cached value |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
317 */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
318 if(SSL_ForceHandshake(nss_data->in) != SECSuccess) { |
19669
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
319 gchar *error_txt; |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
320 set_errno(PR_GetError()); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
321 if (errno == EAGAIN || errno == EWOULDBLOCK) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
322 return; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
323 |
19669
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
324 error_txt = get_error_text(); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
325 purple_debug_error("nss", "Handshake failed %s (%d)\n", error_txt ? error_txt : "", PR_GetError()); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
326 g_free(error_txt); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
327 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
328 if (gsc->error_cb != NULL) |
15823 | 329 gsc->error_cb(gsc, PURPLE_SSL_HANDSHAKE_FAILED, gsc->connect_cb_data); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
330 |
15823 | 331 purple_ssl_close(gsc); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
332 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
333 return; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
334 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
335 |
15823 | 336 purple_input_remove(nss_data->handshake_handler); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
337 nss_data->handshake_handler = 0; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
338 |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
339 /* If a Verifier was given, hand control over to it */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
340 if (gsc->verifier) { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
341 GList *peers; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
342 /* First, get the peer cert chain */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
343 peers = ssl_nss_get_peer_certificates(nss_data->in, gsc); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
344 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
345 /* Now kick off the verification process */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
346 purple_certificate_verify(gsc->verifier, |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
347 gsc->host, |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
348 peers, |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
349 ssl_nss_verified_cb, |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
350 gsc); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
351 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
352 purple_certificate_destroy_list(peers); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
353 } else { |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
354 /* Otherwise, just call the "connection complete" |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
355 callback */ |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
356 gsc->connect_cb(gsc->connect_cb_data, gsc, cond); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
357 } |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
358 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
359 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
360 static void |
15823 | 361 ssl_nss_connect(PurpleSslConnection *gsc) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
362 { |
15823 | 363 PurpleSslNssData *nss_data = g_new0(PurpleSslNssData, 1); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
364 PRSocketOptionData socket_opt; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
365 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
366 gsc->private_data = nss_data; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
367 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
368 nss_data->fd = PR_ImportTCPSocket(gsc->fd); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
369 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
370 if (nss_data->fd == NULL) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
371 { |
15823 | 372 purple_debug_error("nss", "nss_data->fd == NULL!\n"); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
373 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
374 if (gsc->error_cb != NULL) |
15823 | 375 gsc->error_cb(gsc, PURPLE_SSL_CONNECT_FAILED, gsc->connect_cb_data); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
376 |
15823 | 377 purple_ssl_close((PurpleSslConnection *)gsc); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
378 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
379 return; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
380 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
381 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
382 socket_opt.option = PR_SockOpt_Nonblocking; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
383 socket_opt.value.non_blocking = PR_TRUE; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
384 |
19669
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
385 if (PR_SetSocketOption(nss_data->fd, &socket_opt) != PR_SUCCESS) { |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
386 gchar *error_txt = get_error_text(); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
387 purple_debug_warning("nss", "unable to set socket into non-blocking mode: %s (%d)\n", error_txt ? error_txt : "", PR_GetError()); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
388 g_free(error_txt); |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
389 } |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
390 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
391 nss_data->in = SSL_ImportFD(NULL, nss_data->fd); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
392 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
393 if (nss_data->in == NULL) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
394 { |
15823 | 395 purple_debug_error("nss", "nss_data->in == NUL!\n"); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
396 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
397 if (gsc->error_cb != NULL) |
15823 | 398 gsc->error_cb(gsc, PURPLE_SSL_CONNECT_FAILED, gsc->connect_cb_data); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
399 |
15823 | 400 purple_ssl_close((PurpleSslConnection *)gsc); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
401 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
402 return; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
403 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
404 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
405 SSL_OptionSet(nss_data->in, SSL_SECURITY, PR_TRUE); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
406 SSL_OptionSet(nss_data->in, SSL_HANDSHAKE_AS_CLIENT, PR_TRUE); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
407 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
408 SSL_AuthCertificateHook(nss_data->in, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
409 (SSLAuthCertificate)ssl_auth_cert, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
410 (void *)CERT_GetDefaultCertDB()); |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
411 #if 0 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
412 /* No point in hooking BadCert, since ssl_auth_cert always succeeds */ |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
413 SSL_BadCertHook(nss_data->in, (SSLBadCertHandler)ssl_bad_cert, NULL); |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
414 #endif |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
415 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
416 if(gsc->host) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
417 SSL_SetURL(nss_data->in, gsc->host); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
418 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
419 #if 0 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
420 /* This seems like it'd the be the correct way to implement the |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
421 nonblocking stuff, but it doesn't seem to work */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
422 SSL_HandshakeCallback(nss_data->in, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
423 (SSLHandshakeCallback) ssl_nss_handshake_cb, gsc); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
424 #endif |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
425 SSL_ResetHandshake(nss_data->in, PR_FALSE); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
426 |
15823 | 427 nss_data->handshake_handler = purple_input_add(gsc->fd, |
428 PURPLE_INPUT_READ, ssl_nss_handshake_cb, gsc); | |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
429 |
15823 | 430 ssl_nss_handshake_cb(gsc, gsc->fd, PURPLE_INPUT_READ); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
431 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
432 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
433 static void |
15823 | 434 ssl_nss_close(PurpleSslConnection *gsc) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
435 { |
15823 | 436 PurpleSslNssData *nss_data = PURPLE_SSL_NSS_DATA(gsc); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
437 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
438 if(!nss_data) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
439 return; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
440 |
17752
278e22624ce5
A while ago, "Paranoid" emailed devel@p.i, having noticed that purple_ssl_close() closes the ssl fd twice. I meant to commit this fix sooner, but here it is.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
16820
diff
changeset
|
441 if (nss_data->in) { |
278e22624ce5
A while ago, "Paranoid" emailed devel@p.i, having noticed that purple_ssl_close() closes the ssl fd twice. I meant to commit this fix sooner, but here it is.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
16820
diff
changeset
|
442 PR_Close(nss_data->in); |
278e22624ce5
A while ago, "Paranoid" emailed devel@p.i, having noticed that purple_ssl_close() closes the ssl fd twice. I meant to commit this fix sooner, but here it is.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
16820
diff
changeset
|
443 gsc->fd = -1; |
278e22624ce5
A while ago, "Paranoid" emailed devel@p.i, having noticed that purple_ssl_close() closes the ssl fd twice. I meant to commit this fix sooner, but here it is.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
16820
diff
changeset
|
444 } else if (nss_data->fd) { |
278e22624ce5
A while ago, "Paranoid" emailed devel@p.i, having noticed that purple_ssl_close() closes the ssl fd twice. I meant to commit this fix sooner, but here it is.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
16820
diff
changeset
|
445 PR_Close(nss_data->fd); |
278e22624ce5
A while ago, "Paranoid" emailed devel@p.i, having noticed that purple_ssl_close() closes the ssl fd twice. I meant to commit this fix sooner, but here it is.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
16820
diff
changeset
|
446 gsc->fd = -1; |
278e22624ce5
A while ago, "Paranoid" emailed devel@p.i, having noticed that purple_ssl_close() closes the ssl fd twice. I meant to commit this fix sooner, but here it is.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
16820
diff
changeset
|
447 } |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
448 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
449 if (nss_data->handshake_handler) |
15823 | 450 purple_input_remove(nss_data->handshake_handler); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
451 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
452 g_free(nss_data); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
453 gsc->private_data = NULL; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
454 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
455 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
456 static size_t |
15823 | 457 ssl_nss_read(PurpleSslConnection *gsc, void *data, size_t len) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
458 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
459 ssize_t ret; |
15823 | 460 PurpleSslNssData *nss_data = PURPLE_SSL_NSS_DATA(gsc); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
461 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
462 ret = PR_Read(nss_data->in, data, len); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
463 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
464 if (ret == -1) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
465 set_errno(PR_GetError()); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
466 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
467 return ret; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
468 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
469 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
470 static size_t |
15823 | 471 ssl_nss_write(PurpleSslConnection *gsc, const void *data, size_t len) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
472 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
473 ssize_t ret; |
15823 | 474 PurpleSslNssData *nss_data = PURPLE_SSL_NSS_DATA(gsc); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
475 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
476 if(!nss_data) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
477 return 0; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
478 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
479 ret = PR_Write(nss_data->in, data, len); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
480 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
481 if (ret == -1) |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
482 set_errno(PR_GetError()); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
483 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
484 return ret; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
485 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
486 |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
487 static GList * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
488 ssl_nss_peer_certs(PurpleSslConnection *gsc) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
489 { |
20329
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
490 #if 0 |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
491 PurpleSslNssData *nss_data = PURPLE_SSL_NSS_DATA(gsc); |
19669
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
492 CERTCertificate *cert; |
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
493 /* |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
494 GList *chain = NULL; |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
495 void *pinArg; |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
496 SECStatus status; |
19669
fb3b3e93b9ca
Attempt to display user readable error messages for NSS.
Daniel Atallah <daniel.atallah@gmail.com>
parents:
19648
diff
changeset
|
497 */ |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
498 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
499 /* TODO: this is a blind guess */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
500 cert = SSL_PeerCertificate(nss_data->fd); |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
501 |
20329
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
502 if (cert) |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
503 CERT_DestroyCertificate(cert); |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
504 #endif |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
505 |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
506 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
507 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
508 return NULL; |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
509 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
510 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
511 /************************************************************************/ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
512 /* X.509 functionality */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
513 /************************************************************************/ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
514 static PurpleCertificateScheme x509_nss; |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
515 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
516 /** Helpr macro to retrieve the NSS certdata from a PurpleCertificate */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
517 #define X509_NSS_DATA(pcrt) ( (CERTCertificate * ) (pcrt->data) ) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
518 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
519 /** Imports a PEM-formatted X.509 certificate from the specified file. |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
520 * @param filename Filename to import from. Format is PEM |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
521 * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
522 * @return A newly allocated Certificate structure of the x509_gnutls scheme |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
523 */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
524 static PurpleCertificate * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
525 x509_import_from_file(const gchar *filename) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
526 { |
19273
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
527 gchar *rawcert; |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
528 gsize len = 0; |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
529 CERTCertificate *crt_dat; |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
530 PurpleCertificate *crt; |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
531 |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
532 g_return_val_if_fail(filename, NULL); |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
533 |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
534 purple_debug_info("nss/x509", |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
535 "Loading certificate from %s\n", |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
536 filename); |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
537 |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
538 /* Load the raw data up */ |
20329
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
539 if (!g_file_get_contents(filename, |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
540 &rawcert, &len, |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
541 NULL)) { |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
542 purple_debug_error("nss/x509", "Unable to read certificate file.\n"); |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
543 return NULL; |
24ce4fcce5b0
applied changes from e56db1b8a7bb8729e30fb3bf99a94ff7887fe4ec
Luke Schierer <lschiere@pidgin.im>
parents:
19989
diff
changeset
|
544 } |
19273
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
545 |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
546 /* Decode the certificate */ |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
547 crt_dat = CERT_DecodeCertFromPackage(rawcert, len); |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
548 g_free(rawcert); |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
549 |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
550 g_return_val_if_fail(crt_dat, NULL); |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
551 |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
552 crt = g_new0(PurpleCertificate, 1); |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
553 crt->scheme = &x509_nss; |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
554 crt->data = crt_dat; |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
555 |
db42632ac756
- Add x509_import_from_file
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19272
diff
changeset
|
556 return crt; |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
557 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
558 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
559 /** |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
560 * Exports a PEM-formatted X.509 certificate to the specified file. |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
561 * @param filename Filename to export to. Format will be PEM |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
562 * @param crt Certificate to export |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
563 * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
564 * @return TRUE if success, otherwise FALSE |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
565 */ |
19988
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
566 /* This function should not be so complicated, but NSS doesn't seem to have a |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
567 "convert yon certificate to PEM format" function. */ |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
568 static gboolean |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
569 x509_export_certificate(const gchar *filename, PurpleCertificate *crt) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
570 { |
19988
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
571 CERTCertificate *crt_dat; |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
572 SECItem *dercrt; |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
573 gchar *b64crt; |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
574 gchar *pemcrt; |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
575 gboolean ret = FALSE; |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
576 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
577 g_return_val_if_fail(filename, FALSE); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
578 g_return_val_if_fail(crt, FALSE); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
579 g_return_val_if_fail(crt->scheme == &x509_nss, FALSE); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
580 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
581 crt_dat = X509_NSS_DATA(crt); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
582 g_return_val_if_fail(crt_dat, FALSE); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
583 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
584 purple_debug_info("nss/x509", |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
585 "Exporting certificate to %s\n", filename); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
586 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
587 /* First, use NSS voodoo to create a DER-formatted certificate */ |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
588 dercrt = SEC_ASN1EncodeItem(NULL, NULL, crt_dat, |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
589 SEC_ASN1_GET(SEC_SignedCertificateTemplate)); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
590 g_return_val_if_fail(dercrt != NULL, FALSE); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
591 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
592 /* Now encode it to b64 */ |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
593 b64crt = NSSBase64_EncodeItem(NULL, NULL, 0, dercrt); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
594 SECITEM_FreeItem(dercrt, PR_TRUE); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
595 g_return_val_if_fail(b64crt, FALSE); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
596 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
597 /* Wrap it in nice PEM header things */ |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
598 pemcrt = g_strdup_printf("-----BEGIN CERTIFICATE-----\n%s\n-----END CERTIFICATE-----\n", b64crt); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
599 PORT_Free(b64crt); /* Notice that b64crt was allocated by an NSS |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
600 function; hence, we'll let NSPR free it. */ |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
601 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
602 /* Finally, dump the silly thing to a file. */ |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
603 ret = purple_util_write_data_to_file_absolute(filename, pemcrt, -1); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
604 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
605 g_free(pemcrt); |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
606 |
47f2becb7a60
- Make ssl-nss x509_export_certificate work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19987
diff
changeset
|
607 return ret; |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
608 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
609 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
610 static PurpleCertificate * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
611 x509_copy_certificate(PurpleCertificate *crt) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
612 { |
19069
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
613 CERTCertificate *crt_dat; |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
614 PurpleCertificate *newcrt; |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
615 |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
616 g_return_val_if_fail(crt, NULL); |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
617 g_return_val_if_fail(crt->scheme == &x509_nss, NULL); |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
618 |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
619 crt_dat = X509_NSS_DATA(crt); |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
620 g_return_val_if_fail(crt_dat, NULL); |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
621 |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
622 /* Create the certificate copy */ |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
623 newcrt = g_new0(PurpleCertificate, 1); |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
624 newcrt->scheme = &x509_nss; |
19083
5b8035030053
- Comment on NSS's refcounting prowess
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19074
diff
changeset
|
625 /* NSS does refcounting automatically */ |
19069
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
626 newcrt->data = CERT_DupCertificate(crt_dat); |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
627 |
fcb3e4a2aa9a
- x509_nss copy op
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19068
diff
changeset
|
628 return newcrt; |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
629 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
630 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
631 /** Frees a Certificate |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
632 * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
633 * Destroys a Certificate's internal data structures and frees the pointer |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
634 * given. |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
635 * @param crt Certificate instance to be destroyed. It WILL NOT be destroyed |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
636 * if it is not of the correct CertificateScheme. Can be NULL |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
637 * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
638 */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
639 static void |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
640 x509_destroy_certificate(PurpleCertificate * crt) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
641 { |
19070
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
642 CERTCertificate *crt_dat; |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
643 |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
644 g_return_if_fail(crt); |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
645 g_return_if_fail(crt->scheme == &x509_nss); |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
646 |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
647 crt_dat = X509_NSS_DATA(crt); |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
648 g_return_if_fail(crt_dat); |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
649 |
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
650 /* Finally we have the certificate. So let's kill it */ |
19083
5b8035030053
- Comment on NSS's refcounting prowess
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19074
diff
changeset
|
651 /* NSS does refcounting automatically */ |
19070
7ccb5ab3e07e
- x509_nss destroy_certificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19069
diff
changeset
|
652 CERT_DestroyCertificate(crt_dat); |
19087
7fa5d10969f4
- x509_destroy_certificate is supposed to free the PurpleCertificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19083
diff
changeset
|
653 |
7fa5d10969f4
- x509_destroy_certificate is supposed to free the PurpleCertificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19083
diff
changeset
|
654 /* Delete the PurpleCertificate as well */ |
7fa5d10969f4
- x509_destroy_certificate is supposed to free the PurpleCertificate
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19083
diff
changeset
|
655 g_free(crt); |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
656 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
657 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
658 /** Determines whether one certificate has been issued and signed by another |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
659 * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
660 * @param crt Certificate to check the signature of |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
661 * @param issuer Issuer's certificate |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
662 * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
663 * @return TRUE if crt was signed and issued by issuer, otherwise FALSE |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
664 * @TODO Modify this function to return a reason for invalidity? |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
665 */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
666 static gboolean |
19985
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
667 x509_signed_by(PurpleCertificate * crt, |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
668 PurpleCertificate * issuer) |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
669 { |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
670 CERTCertificate *subjectCert; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
671 CERTCertificate *issuerCert; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
672 SECStatus st; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
673 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
674 issuerCert = X509_NSS_DATA(issuer); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
675 g_return_val_if_fail(issuerCert, FALSE); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
676 |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
677 subjectCert = X509_NSS_DATA(crt); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
678 g_return_val_if_fail(subjectCert, FALSE); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
679 |
24008
67cb8706a2f2
Fix a NULL pointer deref in the NSS SSL implementation with certain self-signed
Daniel Atallah <daniel.atallah@gmail.com>
parents:
23799
diff
changeset
|
680 if (subjectCert->issuerName == NULL |
67cb8706a2f2
Fix a NULL pointer deref in the NSS SSL implementation with certain self-signed
Daniel Atallah <daniel.atallah@gmail.com>
parents:
23799
diff
changeset
|
681 || PORT_Strcmp(subjectCert->issuerName, issuerCert->subjectName) != 0) |
23799
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
682 return FALSE; |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
683 st = CERT_VerifySignedData(&subjectCert->signatureWrap, issuerCert, PR_Now(), NULL); |
d7c62b220ed0
Patch to fully enable NSS SSL Certificates from #6500.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
22007
diff
changeset
|
684 return st == SECSuccess; |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
685 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
686 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
687 static GByteArray * |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
688 x509_sha1sum(PurpleCertificate *crt) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
689 { |
19074
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
690 CERTCertificate *crt_dat; |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
691 size_t hashlen = 20; /* Size of an sha1sum */ |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
692 GByteArray *sha1sum; |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
693 SECItem *derCert; /* DER representation of the cert */ |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
694 SECStatus st; |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
695 |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
696 g_return_val_if_fail(crt, NULL); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
697 g_return_val_if_fail(crt->scheme == &x509_nss, NULL); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
698 |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
699 crt_dat = X509_NSS_DATA(crt); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
700 g_return_val_if_fail(crt_dat, NULL); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
701 |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
702 /* Get the certificate DER representation */ |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
703 derCert = &(crt_dat->derCert); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
704 |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
705 /* Make a hash! */ |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
706 sha1sum = g_byte_array_sized_new(hashlen); |
19630
578b3c67d52c
- ssl-nss now reports a certificate's sha1sum correctly
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19508
diff
changeset
|
707 /* glib leaves the size as 0 by default */ |
578b3c67d52c
- ssl-nss now reports a certificate's sha1sum correctly
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19508
diff
changeset
|
708 sha1sum->len = hashlen; |
578b3c67d52c
- ssl-nss now reports a certificate's sha1sum correctly
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19508
diff
changeset
|
709 |
19074
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
710 st = PK11_HashBuf(SEC_OID_SHA1, sha1sum->data, |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
711 derCert->data, derCert->len); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
712 |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
713 /* Check for errors */ |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
714 if (st != SECSuccess) { |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
715 g_byte_array_free(sha1sum, TRUE); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
716 purple_debug_error("nss/x509", |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
717 "Error: hashing failed!\n"); |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
718 return NULL; |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
719 } |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
720 |
3004bfa0e846
- x509_nss sha1sum
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19073
diff
changeset
|
721 return sha1sum; |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
722 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
723 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
724 static gchar * |
19985
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
725 x509_dn (PurpleCertificate *crt) |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
726 { |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
727 CERTCertificate *crt_dat; |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
728 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
729 g_return_val_if_fail(crt, NULL); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
730 g_return_val_if_fail(crt->scheme == &x509_nss, NULL); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
731 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
732 crt_dat = X509_NSS_DATA(crt); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
733 g_return_val_if_fail(crt_dat, NULL); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
734 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
735 return g_strdup(crt_dat->subjectName); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
736 } |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
737 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
738 static gchar * |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
739 x509_issuer_dn (PurpleCertificate *crt) |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
740 { |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
741 CERTCertificate *crt_dat; |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
742 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
743 g_return_val_if_fail(crt, NULL); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
744 g_return_val_if_fail(crt->scheme == &x509_nss, NULL); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
745 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
746 crt_dat = X509_NSS_DATA(crt); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
747 g_return_val_if_fail(crt_dat, NULL); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
748 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
749 return g_strdup(crt_dat->subjectName); |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
750 } |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
751 |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
752 static gchar * |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
753 x509_common_name (PurpleCertificate *crt) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
754 { |
19071
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
755 CERTCertificate *crt_dat; |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
756 char *nss_cn; |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
757 gchar *ret_cn; |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
758 |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
759 g_return_val_if_fail(crt, NULL); |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
760 g_return_val_if_fail(crt->scheme == &x509_nss, NULL); |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
761 |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
762 crt_dat = X509_NSS_DATA(crt); |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
763 g_return_val_if_fail(crt_dat, NULL); |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
764 |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
765 /* Q: |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
766 Why get a newly allocated string out of NSS, strdup it, and then |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
767 return the new copy? |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
768 |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
769 A: |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
770 The NSS LXR docs state that I should use the NSPR free functions on |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
771 the strings that the NSS cert functions return. Since the libpurple |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
772 API expects a g_free()-able string, we make our own copy and return |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
773 that. |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
774 |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
775 NSPR is something of a prima donna. */ |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
776 |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
777 nss_cn = CERT_GetCommonName( &(crt_dat->subject) ); |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
778 ret_cn = g_strdup(nss_cn); |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
779 PORT_Free(nss_cn); |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
780 |
d224a1e4b919
- x509_nss get_subject_name (x509_common_name)
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19070
diff
changeset
|
781 return ret_cn; |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
782 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
783 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
784 static gboolean |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
785 x509_check_name (PurpleCertificate *crt, const gchar *name) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
786 { |
19072
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
787 CERTCertificate *crt_dat; |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
788 SECStatus st; |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
789 |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
790 g_return_val_if_fail(crt, FALSE); |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
791 g_return_val_if_fail(crt->scheme == &x509_nss, FALSE); |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
792 |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
793 crt_dat = X509_NSS_DATA(crt); |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
794 g_return_val_if_fail(crt_dat, FALSE); |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
795 |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
796 st = CERT_VerifyCertName(crt_dat, name); |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
797 |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
798 if (st == SECSuccess) { |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
799 return TRUE; |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
800 } |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
801 else if (st == SECFailure) { |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
802 return FALSE; |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
803 } |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
804 |
4bdf4ce3473b
- ssl-nss x509_nss check_name
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19071
diff
changeset
|
805 /* If we get here...bad things! */ |
19508
f0c3497e2ea6
- Change g_assert to purple_debug_error
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19273
diff
changeset
|
806 purple_debug_error("nss/x509", |
f0c3497e2ea6
- Change g_assert to purple_debug_error
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19273
diff
changeset
|
807 "x509_check_name fell through where it shouldn't " |
f0c3497e2ea6
- Change g_assert to purple_debug_error
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19273
diff
changeset
|
808 "have.\n"); |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
809 return FALSE; |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
810 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
811 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
812 static gboolean |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
813 x509_times (PurpleCertificate *crt, time_t *activation, time_t *expiration) |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
814 { |
19073
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
815 CERTCertificate *crt_dat; |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
816 PRTime nss_activ, nss_expir; |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
817 |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
818 g_return_val_if_fail(crt, FALSE); |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
819 g_return_val_if_fail(crt->scheme == &x509_nss, FALSE); |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
820 |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
821 crt_dat = X509_NSS_DATA(crt); |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
822 g_return_val_if_fail(crt_dat, FALSE); |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
823 |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
824 /* Extract the times into ugly PRTime thingies */ |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
825 /* TODO: Maybe this shouldn't throw an error? */ |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
826 g_return_val_if_fail( |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
827 SECSuccess == CERT_GetCertTimes(crt_dat, |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
828 &nss_activ, &nss_expir), |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
829 FALSE); |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
830 |
19987
4f870bb6d3e6
- Fix ssl-nss x509 to properly convert NSPR PRTime to time_t (in
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19985
diff
changeset
|
831 /* NSS's native PRTime type *almost* corresponds to time_t; however, |
4f870bb6d3e6
- Fix ssl-nss x509 to properly convert NSPR PRTime to time_t (in
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19985
diff
changeset
|
832 it measures *microseconds* since the epoch, not seconds. Hence |
4f870bb6d3e6
- Fix ssl-nss x509 to properly convert NSPR PRTime to time_t (in
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19985
diff
changeset
|
833 the funny conversion. */ |
19073
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
834 if (activation) { |
19987
4f870bb6d3e6
- Fix ssl-nss x509 to properly convert NSPR PRTime to time_t (in
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19985
diff
changeset
|
835 *activation = nss_activ / 1000000; |
19073
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
836 } |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
837 if (expiration) { |
19987
4f870bb6d3e6
- Fix ssl-nss x509 to properly convert NSPR PRTime to time_t (in
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19985
diff
changeset
|
838 *expiration = nss_expir / 1000000; |
19073
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
839 } |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
840 |
2156321c5482
- x509_nss get_times
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19072
diff
changeset
|
841 return TRUE; |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
842 } |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
843 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
844 static PurpleCertificateScheme x509_nss = { |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
845 "x509", /* Scheme name */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
846 N_("X.509 Certificates"), /* User-visible scheme name */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
847 x509_import_from_file, /* Certificate import function */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
848 x509_export_certificate, /* Certificate export function */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
849 x509_copy_certificate, /* Copy */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
850 x509_destroy_certificate, /* Destroy cert */ |
19985
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
851 x509_signed_by, /* Signed-by */ |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
852 x509_sha1sum, /* SHA1 fingerprint */ |
19985
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
853 x509_dn, /* Unique ID */ |
eda223b50bdc
- Make ssl-nss unique_id and issuer_unique_id work
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19680
diff
changeset
|
854 x509_issuer_dn, /* Issuer Unique ID */ |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
855 x509_common_name, /* Subject name */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
856 x509_check_name, /* Check subject name */ |
19648
450f4a3c4c0f
- Add purple_reserved fields to various structures.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19630
diff
changeset
|
857 x509_times, /* Activation/Expiration time */ |
450f4a3c4c0f
- Add purple_reserved fields to various structures.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19630
diff
changeset
|
858 |
450f4a3c4c0f
- Add purple_reserved fields to various structures.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19630
diff
changeset
|
859 NULL, |
450f4a3c4c0f
- Add purple_reserved fields to various structures.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19630
diff
changeset
|
860 NULL, |
450f4a3c4c0f
- Add purple_reserved fields to various structures.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19630
diff
changeset
|
861 NULL, |
450f4a3c4c0f
- Add purple_reserved fields to various structures.
William Ehlhardt <williamehlhardt@gmail.com>
parents:
19630
diff
changeset
|
862 NULL |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
863 }; |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
864 |
15823 | 865 static PurpleSslOps ssl_ops = |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
866 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
867 ssl_nss_init, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
868 ssl_nss_uninit, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
869 ssl_nss_connect, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
870 ssl_nss_close, |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
871 ssl_nss_read, |
16673
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
872 ssl_nss_write, |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
873 ssl_nss_peer_certs, |
16673
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
874 |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
875 /* padding */ |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
876 NULL, |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
877 NULL, |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
878 NULL |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
879 }; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
880 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
881 #endif /* HAVE_NSS */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
882 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
883 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
884 static gboolean |
15823 | 885 plugin_load(PurplePlugin *plugin) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
886 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
887 #ifdef HAVE_NSS |
15823 | 888 if (!purple_ssl_get_ops()) { |
889 purple_ssl_set_ops(&ssl_ops); | |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
890 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
891 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
892 /* Init NSS now, so others can use it even if sslconn never does */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
893 ssl_nss_init_nss(); |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
894 |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
895 /* Register the X.509 functions we provide */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
896 purple_certificate_register_scheme(&x509_nss); |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
897 |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
898 return TRUE; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
899 #else |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
900 return FALSE; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
901 #endif |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
902 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
903 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
904 static gboolean |
15823 | 905 plugin_unload(PurplePlugin *plugin) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
906 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
907 #ifdef HAVE_NSS |
15823 | 908 if (purple_ssl_get_ops() == &ssl_ops) { |
909 purple_ssl_set_ops(NULL); | |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
910 } |
19068
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
911 |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
912 /* Unregister our X.509 functions */ |
9ac0fbb569a5
- Skeleton for ssl-nss x509 provider
William Ehlhardt <williamehlhardt@gmail.com>
parents:
17804
diff
changeset
|
913 purple_certificate_unregister_scheme(&x509_nss); |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
914 #endif |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
915 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
916 return TRUE; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
917 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
918 |
15823 | 919 static PurplePluginInfo info = |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
920 { |
15823 | 921 PURPLE_PLUGIN_MAGIC, |
922 PURPLE_MAJOR_VERSION, | |
923 PURPLE_MINOR_VERSION, | |
924 PURPLE_PLUGIN_STANDARD, /**< type */ | |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
925 NULL, /**< ui_requirement */ |
15823 | 926 PURPLE_PLUGIN_FLAG_INVISIBLE, /**< flags */ |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
927 NULL, /**< dependencies */ |
15823 | 928 PURPLE_PRIORITY_DEFAULT, /**< priority */ |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
929 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
930 SSL_NSS_PLUGIN_ID, /**< id */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
931 N_("NSS"), /**< name */ |
21030
3cc856ca2338
Add a --with-extraversion option to ./configure so packagers can fine tune
Stu Tomlinson <stu@nosnilmot.com>
parents:
20329
diff
changeset
|
932 DISPLAY_VERSION, /**< version */ |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
933 /** summary */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
934 N_("Provides SSL support through Mozilla NSS."), |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
935 /** description */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
936 N_("Provides SSL support through Mozilla NSS."), |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
937 "Christian Hammond <chipx86@gnupdate.org>", |
15823 | 938 PURPLE_WEBSITE, /**< homepage */ |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
939 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
940 plugin_load, /**< load */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
941 plugin_unload, /**< unload */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
942 NULL, /**< destroy */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
943 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
944 NULL, /**< ui_info */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
945 NULL, /**< extra_info */ |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
946 NULL, /**< prefs_info */ |
16673
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
947 NULL, /**< actions */ |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
948 |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
949 /* padding */ |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
950 NULL, |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
951 NULL, |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
952 NULL, |
6531f1a2e1d7
Added NULL pads to ssl stuff
Gary Kramlich <grim@reaperworld.com>
parents:
16098
diff
changeset
|
953 NULL |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
954 }; |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
955 |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
956 static void |
15823 | 957 init_plugin(PurplePlugin *plugin) |
15374
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
958 { |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
959 } |
5fe8042783c1
Rename gtk/ and libgaim/ to pidgin/ and libpurple/
Sean Egan <seanegan@gmail.com>
parents:
diff
changeset
|
960 |
15823 | 961 PURPLE_INIT_PLUGIN(ssl_nss, init_plugin, info) |