1 ! Copyright (C) 2007 Elie CHAFTARI
2 ! Portions copyright (C) 2008 Slava Pestov
3 ! See http://factorcode.org/license.txt for BSD license.
4 USING: alien alien.c-types alien.syntax combinators kernel
5 system namespaces assocs parser lexer sequences words
6 quotations math.bitwise alien.libraries ;
11 { [ os openbsd? ] [ ] } ! VM is linked with it
12 { [ os netbsd? ] [ ] }
13 { [ os winnt? ] [ "libssl" "ssleay32.dll" "cdecl" add-library ] }
14 { [ os macosx? ] [ "libssl" "libssl.dylib" "cdecl" add-library ] }
15 { [ os unix? ] [ "libssl" "libssl.so" "cdecl" add-library ] }
18 CONSTANT: X509_FILETYPE_PEM 1
19 CONSTANT: X509_FILETYPE_ASN1 2
20 CONSTANT: X509_FILETYPE_DEFAULT 3
22 ALIAS: SSL_FILETYPE_ASN1 X509_FILETYPE_ASN1
23 ALIAS: SSL_FILETYPE_PEM X509_FILETYPE_PEM
25 CONSTANT: SSL_CTRL_NEED_TMP_RSA 1
26 CONSTANT: SSL_CTRL_SET_TMP_RSA 2
27 CONSTANT: SSL_CTRL_SET_TMP_DH 3
28 CONSTANT: SSL_CTRL_SET_TMP_RSA_CB 4
29 CONSTANT: SSL_CTRL_SET_TMP_DH_CB 5
31 CONSTANT: SSL_CTRL_GET_SESSION_REUSED 6
32 CONSTANT: SSL_CTRL_GET_CLIENT_CERT_REQUEST 7
33 CONSTANT: SSL_CTRL_GET_NUM_RENEGOTIATIONS 8
34 CONSTANT: SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS 9
35 CONSTANT: SSL_CTRL_GET_TOTAL_RENEGOTIATIONS 10
36 CONSTANT: SSL_CTRL_GET_FLAGS 11
37 CONSTANT: SSL_CTRL_EXTRA_CHAIN_CERT 12
39 CONSTANT: SSL_CTRL_SET_MSG_CALLBACK 13
40 CONSTANT: SSL_CTRL_SET_MSG_CALLBACK_ARG 14
42 CONSTANT: SSL_CTRL_SESS_NUMBER 20
43 CONSTANT: SSL_CTRL_SESS_CONNECT 21
44 CONSTANT: SSL_CTRL_SESS_CONNECT_GOOD 22
45 CONSTANT: SSL_CTRL_SESS_CONNECT_RENEGOTIATE 23
46 CONSTANT: SSL_CTRL_SESS_ACCEPT 24
47 CONSTANT: SSL_CTRL_SESS_ACCEPT_GOOD 25
48 CONSTANT: SSL_CTRL_SESS_ACCEPT_RENEGOTIATE 26
49 CONSTANT: SSL_CTRL_SESS_HIT 27
50 CONSTANT: SSL_CTRL_SESS_CB_HIT 28
51 CONSTANT: SSL_CTRL_SESS_MISSES 29
52 CONSTANT: SSL_CTRL_SESS_TIMEOUTS 30
53 CONSTANT: SSL_CTRL_SESS_CACHE_FULL 31
54 CONSTANT: SSL_CTRL_OPTIONS 32
55 CONSTANT: SSL_CTRL_MODE 33
57 CONSTANT: SSL_CTRL_GET_READ_AHEAD 40
58 CONSTANT: SSL_CTRL_SET_READ_AHEAD 41
59 CONSTANT: SSL_CTRL_SET_SESS_CACHE_SIZE 42
60 CONSTANT: SSL_CTRL_GET_SESS_CACHE_SIZE 43
61 CONSTANT: SSL_CTRL_SET_SESS_CACHE_MODE 44
62 CONSTANT: SSL_CTRL_GET_SESS_CACHE_MODE 45
64 CONSTANT: SSL_CTRL_GET_MAX_CERT_LIST 50
65 CONSTANT: SSL_CTRL_SET_MAX_CERT_LIST 51
67 CONSTANT: SSL_ERROR_NONE 0
68 CONSTANT: SSL_ERROR_SSL 1
69 CONSTANT: SSL_ERROR_WANT_READ 2
70 CONSTANT: SSL_ERROR_WANT_WRITE 3
71 CONSTANT: SSL_ERROR_WANT_X509_LOOKUP 4
72 CONSTANT: SSL_ERROR_SYSCALL 5 ! consult errno for details
73 CONSTANT: SSL_ERROR_ZERO_RETURN 6
74 CONSTANT: SSL_ERROR_WANT_CONNECT 7
75 CONSTANT: SSL_ERROR_WANT_ACCEPT 8
77 ! Error messages table
78 : error-messages ( -- hash )
80 { 0 "SSL_ERROR_NONE" }
82 { 2 "SSL_ERROR_WANT_READ" }
83 { 3 "SSL_ERROR_WANT_WRITE" }
84 { 4 "SSL_ERROR_WANT_X509_LOOKUP" }
85 { 5 "SSL_ERROR_SYSCALL" }
86 { 6 "SSL_ERROR_ZERO_RETURN" }
87 { 7 "SSL_ERROR_WANT_CONNECT" }
88 { 8 "SSL_ERROR_WANT_ACCEPT" }
91 TYPEDEF: void* ssl-method
92 TYPEDEF: void* SSL_CTX*
93 TYPEDEF: void* SSL_SESSION*
98 ! ===============================================
100 ! ===============================================
102 TYPEDEF: void* X509_NAME*
106 FUNCTION: int X509_NAME_get_text_by_NID ( X509_NAME* name, int nid, void* buf, int len ) ;
107 FUNCTION: X509_NAME* X509_get_subject_name ( X509* a ) ;
109 ! ===============================================
111 ! ===============================================
113 FUNCTION: char* SSL_get_version ( SSL* ssl ) ;
115 ! Maps OpenSSL errors to strings
116 FUNCTION: void SSL_load_error_strings ( ) ;
118 ! Must be called before any other action takes place
119 FUNCTION: int SSL_library_init ( ) ;
121 ! Sets the default SSL version
122 FUNCTION: ssl-method SSLv2_client_method ( ) ;
124 FUNCTION: ssl-method SSLv23_client_method ( ) ;
126 FUNCTION: ssl-method SSLv23_server_method ( ) ;
128 FUNCTION: ssl-method SSLv23_method ( ) ; ! SSLv3 but can rollback to v2
130 FUNCTION: ssl-method SSLv3_client_method ( ) ;
132 FUNCTION: ssl-method SSLv3_server_method ( ) ;
134 FUNCTION: ssl-method SSLv3_method ( ) ;
136 FUNCTION: ssl-method TLSv1_client_method ( ) ;
138 FUNCTION: ssl-method TLSv1_server_method ( ) ;
140 FUNCTION: ssl-method TLSv1_method ( ) ;
142 ! Creates the context
143 FUNCTION: SSL_CTX* SSL_CTX_new ( ssl-method method ) ;
145 ! Load the certificates and private keys into the SSL_CTX
146 FUNCTION: int SSL_CTX_use_certificate_chain_file ( SSL_CTX* ctx,
147 char* file ) ; ! PEM type
149 FUNCTION: SSL* SSL_new ( SSL_CTX* ctx ) ;
151 FUNCTION: int SSL_set_fd ( SSL* ssl, int fd ) ;
153 FUNCTION: void SSL_set_bio ( SSL* ssl, void* rbio, void* wbio ) ;
155 FUNCTION: int SSL_set_session ( SSL* to, SSL_SESSION* session ) ;
157 FUNCTION: int SSL_get_error ( SSL* ssl, int ret ) ;
159 FUNCTION: void SSL_set_connect_state ( SSL* ssl ) ;
161 FUNCTION: void SSL_set_accept_state ( SSL* ssl ) ;
163 FUNCTION: int SSL_connect ( SSL* ssl ) ;
165 FUNCTION: int SSL_accept ( SSL* ssl ) ;
167 FUNCTION: int SSL_write ( SSL* ssl, void* buf, int num ) ;
169 FUNCTION: int SSL_read ( SSL* ssl, void* buf, int num ) ;
171 FUNCTION: int SSL_shutdown ( SSL* ssl ) ;
173 CONSTANT: SSL_SENT_SHUTDOWN 1
174 CONSTANT: SSL_RECEIVED_SHUTDOWN 2
176 FUNCTION: int SSL_get_shutdown ( SSL* ssl ) ;
178 FUNCTION: int SSL_CTX_set_session_id_context ( SSL_CTX* ctx, char* sid_ctx, uint len ) ;
180 FUNCTION: SSL_SESSION* SSL_get1_session ( SSL* ssl ) ;
182 FUNCTION: void SSL_free ( SSL* ssl ) ;
184 FUNCTION: void SSL_SESSION_free ( SSL_SESSION* ses ) ;
186 FUNCTION: int SSL_want ( SSL* ssl ) ;
188 CONSTANT: SSL_NOTHING 1
189 CONSTANT: SSL_WRITING 2
190 CONSTANT: SSL_READING 3
191 CONSTANT: SSL_X509_LOOKUP 4
193 FUNCTION: long SSL_get_verify_result ( SSL* ssl ) ;
195 FUNCTION: X509* SSL_get_peer_certificate ( SSL* s ) ;
197 FUNCTION: void SSL_CTX_free ( SSL_CTX* ctx ) ;
199 FUNCTION: void RAND_seed ( void* buf, int num ) ;
201 FUNCTION: int SSL_set_cipher_list ( SSL* ssl, char* str ) ;
203 FUNCTION: int SSL_use_RSAPrivateKey_file ( SSL* ssl, char* str ) ;
205 FUNCTION: int SSL_CTX_use_RSAPrivateKey_file ( SSL_CTX* ctx, int type ) ;
207 FUNCTION: int SSL_use_certificate_file ( SSL* ssl,
208 char* str, int type ) ;
210 FUNCTION: int SSL_CTX_load_verify_locations ( SSL_CTX* ctx, char* CAfile,
213 FUNCTION: int SSL_CTX_set_default_verify_paths ( SSL_CTX* ctx ) ;
215 CONSTANT: SSL_VERIFY_NONE 0
216 CONSTANT: SSL_VERIFY_PEER 1
217 CONSTANT: SSL_VERIFY_FAIL_IF_NO_PEER_CERT 2
218 CONSTANT: SSL_VERIFY_CLIENT_ONCE 4
220 FUNCTION: void SSL_CTX_set_verify ( SSL_CTX* ctx, int mode, void* callback ) ;
222 FUNCTION: void SSL_CTX_set_client_CA_list ( SSL_CTX* ctx, SSL* list ) ;
224 FUNCTION: SSL* SSL_load_client_CA_file ( char* file ) ;
226 ! Used to manipulate settings of the SSL_CTX and SSL objects.
227 ! This function should never be called directly
228 FUNCTION: long SSL_CTX_ctrl ( SSL_CTX* ctx, int cmd, long larg, void* parg ) ;
230 FUNCTION: void SSL_CTX_set_default_passwd_cb ( SSL_CTX* ctx, void* cb ) ;
232 FUNCTION: void SSL_CTX_set_default_passwd_cb_userdata ( SSL_CTX* ctx,
235 FUNCTION: int SSL_CTX_use_PrivateKey_file ( SSL_CTX* ctx, char* file,
238 ! Sets the maximum depth for the allowed ctx certificate chain verification
239 FUNCTION: void SSL_CTX_set_verify_depth ( SSL_CTX* ctx, int depth ) ;
241 ! Sets DH parameters to be used to be dh.
242 ! The key is inherited by all ssl objects created from ctx
243 FUNCTION: void SSL_CTX_set_tmp_dh_callback ( SSL_CTX* ctx, void* dh ) ;
245 FUNCTION: void SSL_CTX_set_tmp_rsa_callback ( SSL_CTX* ctx, void* rsa ) ;
247 FUNCTION: void* BIO_f_ssl ( ) ;
249 : SSL_CTX_set_tmp_rsa ( ctx rsa -- n )
250 [ SSL_CTRL_SET_TMP_RSA 0 ] dip SSL_CTX_ctrl ;
252 : SSL_CTX_set_tmp_dh ( ctx dh -- n )
253 [ SSL_CTRL_SET_TMP_DH 0 ] dip SSL_CTX_ctrl ;
255 : SSL_CTX_set_session_cache_mode ( ctx mode -- n )
256 [ SSL_CTRL_SET_SESS_CACHE_MODE ] dip f SSL_CTX_ctrl ;
258 CONSTANT: SSL_SESS_CACHE_OFF HEX: 0000
259 CONSTANT: SSL_SESS_CACHE_CLIENT HEX: 0001
260 CONSTANT: SSL_SESS_CACHE_SERVER HEX: 0002
262 : SSL_SESS_CACHE_BOTH ( -- n )
263 { SSL_SESS_CACHE_CLIENT SSL_SESS_CACHE_SERVER } flags ; inline
265 CONSTANT: SSL_SESS_CACHE_NO_AUTO_CLEAR HEX: 0080
266 CONSTANT: SSL_SESS_CACHE_NO_INTERNAL_LOOKUP HEX: 0100
267 CONSTANT: SSL_SESS_CACHE_NO_INTERNAL_STORE HEX: 0200
269 : SSL_SESS_CACHE_NO_INTERNAL ( -- n )
270 { SSL_SESS_CACHE_NO_INTERNAL_LOOKUP SSL_SESS_CACHE_NO_INTERNAL_STORE } flags ; inline
272 ! ===============================================
274 ! ===============================================
278 SYMBOL: verify-messages
280 H{ } clone verify-messages set-global
282 : verify-message ( n -- word ) verify-messages get-global at ;
285 scan "X509_V_" prepend create-in
287 [ 1quotation (( -- value )) define-inline ]
288 [ verify-messages get set-at ]
294 X509_V_: ERR_UNABLE_TO_GET_ISSUER_CERT 2
295 X509_V_: ERR_UNABLE_TO_GET_CRL 3
296 X509_V_: ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE 4
297 X509_V_: ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE 5
298 X509_V_: ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY 6
299 X509_V_: ERR_CERT_SIGNATURE_FAILURE 7
300 X509_V_: ERR_CRL_SIGNATURE_FAILURE 8
301 X509_V_: ERR_CERT_NOT_YET_VALID 9
302 X509_V_: ERR_CERT_HAS_EXPIRED 10
303 X509_V_: ERR_CRL_NOT_YET_VALID 11
304 X509_V_: ERR_CRL_HAS_EXPIRED 12
305 X509_V_: ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD 13
306 X509_V_: ERR_ERROR_IN_CERT_NOT_AFTER_FIELD 14
307 X509_V_: ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD 15
308 X509_V_: ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD 16
309 X509_V_: ERR_OUT_OF_MEM 17
310 X509_V_: ERR_DEPTH_ZERO_SELF_SIGNED_CERT 18
311 X509_V_: ERR_SELF_SIGNED_CERT_IN_CHAIN 19
312 X509_V_: ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY 20
313 X509_V_: ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE 21
314 X509_V_: ERR_CERT_CHAIN_TOO_LONG 22
315 X509_V_: ERR_CERT_REVOKED 23
316 X509_V_: ERR_INVALID_CA 24
317 X509_V_: ERR_PATH_LENGTH_EXCEEDED 25
318 X509_V_: ERR_INVALID_PURPOSE 26
319 X509_V_: ERR_CERT_UNTRUSTED 27
320 X509_V_: ERR_CERT_REJECTED 28
321 X509_V_: ERR_SUBJECT_ISSUER_MISMATCH 29
322 X509_V_: ERR_AKID_SKID_MISMATCH 30
323 X509_V_: ERR_AKID_ISSUER_SERIAL_MISMATCH 31
324 X509_V_: ERR_KEYUSAGE_NO_CERTSIGN 32
325 X509_V_: ERR_UNABLE_TO_GET_CRL_ISSUER 33
326 X509_V_: ERR_UNHANDLED_CRITICAL_EXTENSION 34
327 X509_V_: ERR_KEYUSAGE_NO_CRL_SIGN 35
328 X509_V_: ERR_UNHANDLED_CRITICAL_CRL_EXTENSION 36
329 X509_V_: ERR_INVALID_NON_CA 37
330 X509_V_: ERR_PROXY_PATH_LENGTH_EXCEEDED 38
331 X509_V_: ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE 39
332 X509_V_: ERR_PROXY_CERTIFICATES_NOT_ALLOWED 40
333 X509_V_: ERR_APPLICATION_VERIFICATION 50
335 ! ===============================================
337 ! ===============================================
339 CONSTANT: NID_commonName 13