mirror of
https://github.com/mollyim/webrtc.git
synced 2025-05-20 00:57:49 +01:00
61c5cc8eb5
OpenSSL implementations are all final implementations of their more abstract SSL variants. This should be both documented and enforced by the use of the final keyword to indicate to future WebRTC contributors that this is the intended depth of inheritance and it shouldn't be extended again. Hopefully this minor change will help keep the code simpler to maintain going forward. Bug: webrtc:9860 Change-Id: Ie22de722214e3b209c3d7727a93ac819c112434e Reviewed-on: https://webrtc-review.googlesource.com/c/108203 Reviewed-by: Karl Wiberg <kwiberg@webrtc.org> Commit-Queue: Benjamin Wright <benwright@webrtc.org> Cr-Commit-Position: refs/heads/master@{#25401}
101 lines
3.5 KiB
C++
101 lines
3.5 KiB
C++
/*
|
|
* Copyright 2004 The WebRTC Project Authors. All rights reserved.
|
|
*
|
|
* Use of this source code is governed by a BSD-style license
|
|
* that can be found in the LICENSE file in the root of the source
|
|
* tree. An additional intellectual property rights grant can be found
|
|
* in the file PATENTS. All contributing project authors may
|
|
* be found in the AUTHORS file in the root of the source tree.
|
|
*/
|
|
|
|
#ifndef RTC_BASE_OPENSSLIDENTITY_H_
|
|
#define RTC_BASE_OPENSSLIDENTITY_H_
|
|
|
|
#include <openssl/ossl_typ.h>
|
|
|
|
#include <ctime>
|
|
#include <memory>
|
|
#include <string>
|
|
|
|
#include "rtc_base/checks.h"
|
|
#include "rtc_base/constructormagic.h"
|
|
#include "rtc_base/opensslcertificate.h"
|
|
#include "rtc_base/sslcertificate.h"
|
|
#include "rtc_base/sslidentity.h"
|
|
|
|
namespace rtc {
|
|
|
|
// OpenSSLKeyPair encapsulates an OpenSSL EVP_PKEY* keypair object,
|
|
// which is reference counted inside the OpenSSL library.
|
|
class OpenSSLKeyPair final {
|
|
public:
|
|
explicit OpenSSLKeyPair(EVP_PKEY* pkey) : pkey_(pkey) {
|
|
RTC_DCHECK(pkey_ != nullptr);
|
|
}
|
|
|
|
static OpenSSLKeyPair* Generate(const KeyParams& key_params);
|
|
// Constructs a key pair from the private key PEM string. This must not result
|
|
// in missing public key parameters. Returns null on error.
|
|
static OpenSSLKeyPair* FromPrivateKeyPEMString(const std::string& pem_string);
|
|
|
|
virtual ~OpenSSLKeyPair();
|
|
|
|
virtual OpenSSLKeyPair* GetReference();
|
|
|
|
EVP_PKEY* pkey() const { return pkey_; }
|
|
std::string PrivateKeyToPEMString() const;
|
|
std::string PublicKeyToPEMString() const;
|
|
bool operator==(const OpenSSLKeyPair& other) const;
|
|
bool operator!=(const OpenSSLKeyPair& other) const;
|
|
|
|
private:
|
|
void AddReference();
|
|
|
|
EVP_PKEY* pkey_;
|
|
|
|
RTC_DISALLOW_COPY_AND_ASSIGN(OpenSSLKeyPair);
|
|
};
|
|
|
|
// Holds a keypair and certificate together, and a method to generate
|
|
// them consistently.
|
|
class OpenSSLIdentity final : public SSLIdentity {
|
|
public:
|
|
static OpenSSLIdentity* GenerateWithExpiration(const std::string& common_name,
|
|
const KeyParams& key_params,
|
|
time_t certificate_lifetime);
|
|
static OpenSSLIdentity* GenerateForTest(const SSLIdentityParams& params);
|
|
static SSLIdentity* FromPEMStrings(const std::string& private_key,
|
|
const std::string& certificate);
|
|
static SSLIdentity* FromPEMChainStrings(const std::string& private_key,
|
|
const std::string& certificate_chain);
|
|
~OpenSSLIdentity() override;
|
|
|
|
const OpenSSLCertificate& certificate() const override;
|
|
const SSLCertChain& cert_chain() const override;
|
|
OpenSSLIdentity* GetReference() const override;
|
|
|
|
// Configure an SSL context object to use our key and certificate.
|
|
bool ConfigureIdentity(SSL_CTX* ctx);
|
|
|
|
std::string PrivateKeyToPEMString() const override;
|
|
std::string PublicKeyToPEMString() const override;
|
|
bool operator==(const OpenSSLIdentity& other) const;
|
|
bool operator!=(const OpenSSLIdentity& other) const;
|
|
|
|
private:
|
|
OpenSSLIdentity(std::unique_ptr<OpenSSLKeyPair> key_pair,
|
|
std::unique_ptr<OpenSSLCertificate> certificate);
|
|
OpenSSLIdentity(std::unique_ptr<OpenSSLKeyPair> key_pair,
|
|
std::unique_ptr<SSLCertChain> cert_chain);
|
|
|
|
static OpenSSLIdentity* GenerateInternal(const SSLIdentityParams& params);
|
|
|
|
std::unique_ptr<OpenSSLKeyPair> key_pair_;
|
|
std::unique_ptr<SSLCertChain> cert_chain_;
|
|
|
|
RTC_DISALLOW_COPY_AND_ASSIGN(OpenSSLIdentity);
|
|
};
|
|
|
|
} // namespace rtc
|
|
|
|
#endif // RTC_BASE_OPENSSLIDENTITY_H_
|