chromium/third_party/boringssl/src/ssl/ssl_credential.cc

/* Copyright (c) 2024, Google Inc.
 *
 * Permission to use, copy, modify, and/or distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY
 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION
 * OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN
 * CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. */

#include <openssl/ssl.h>

#include <assert.h>

#include <openssl/span.h>

#include "internal.h"
#include "../crypto/internal.h"


BSSL_NAMESPACE_BEGIN

// new_leafless_chain returns a fresh stack of buffers set to {nullptr}.
static UniquePtr<STACK_OF(CRYPTO_BUFFER)> new_leafless_chain(void) { … }

bool ssl_get_credential_list(SSL_HANDSHAKE *hs, Array<SSL_CREDENTIAL *> *out) { … }

BSSL_NAMESPACE_END

usingnamespacebssl;

static CRYPTO_EX_DATA_CLASS g_ex_data_class = …;

ssl_credential_st::ssl_credential_st(SSLCredentialType type_arg)
    : … { … }

ssl_credential_st::~ssl_credential_st() { … }

static CRYPTO_BUFFER *buffer_up_ref(const CRYPTO_BUFFER *buffer) { … }

UniquePtr<SSL_CREDENTIAL> ssl_credential_st::Dup() const { … }

void ssl_credential_st::ClearCertAndKey() { … }

bool ssl_credential_st::UsesX509() const { … }

bool ssl_credential_st::UsesPrivateKey() const { … }

bool ssl_credential_st::IsComplete() const { … }

bool ssl_credential_st::SetLeafCert(UniquePtr<CRYPTO_BUFFER> leaf,
                                    bool discard_key_on_mismatch) { … }

void ssl_credential_st::ClearIntermediateCerts() { … }

bool ssl_credential_st::AppendIntermediateCert(UniquePtr<CRYPTO_BUFFER> cert) { … }

SSL_CREDENTIAL *SSL_CREDENTIAL_new_x509(void) { … }

SSL_CREDENTIAL *SSL_CREDENTIAL_new_delegated(void) { … }

void SSL_CREDENTIAL_up_ref(SSL_CREDENTIAL *cred) { … }

void SSL_CREDENTIAL_free(SSL_CREDENTIAL *cred) { … }

int SSL_CREDENTIAL_set1_private_key(SSL_CREDENTIAL *cred, EVP_PKEY *key) { … }

int SSL_CREDENTIAL_set_private_key_method(
    SSL_CREDENTIAL *cred, const SSL_PRIVATE_KEY_METHOD *key_method) { … }

int SSL_CREDENTIAL_set1_cert_chain(SSL_CREDENTIAL *cred,
                                   CRYPTO_BUFFER *const *certs,
                                   size_t num_certs) { … }

int SSL_CREDENTIAL_set1_delegated_credential(
    SSL_CREDENTIAL *cred, CRYPTO_BUFFER *dc) { … }

int SSL_CREDENTIAL_set1_ocsp_response(SSL_CREDENTIAL *cred,
                                      CRYPTO_BUFFER *ocsp) { … }

int SSL_CREDENTIAL_set1_signed_cert_timestamp_list(SSL_CREDENTIAL *cred,
                                                   CRYPTO_BUFFER *sct_list) { … }

int SSL_CTX_add1_credential(SSL_CTX *ctx, SSL_CREDENTIAL *cred) { … }

int SSL_add1_credential(SSL *ssl, SSL_CREDENTIAL *cred) { … }

const SSL_CREDENTIAL *SSL_get0_selected_credential(const SSL *ssl) { … }

int SSL_CREDENTIAL_get_ex_new_index(long argl, void *argp,
                                    CRYPTO_EX_unused *unused,
                                    CRYPTO_EX_dup *dup_unused,
                                    CRYPTO_EX_free *free_func) { … }

int SSL_CREDENTIAL_set_ex_data(SSL_CREDENTIAL *cred, int idx, void *arg) { … }

void *SSL_CREDENTIAL_get_ex_data(const SSL_CREDENTIAL *cred, int idx) { … }