| 480 | 480 |
if (domain) {
|
| 481 | 481 |
size_t len = strlen(domain);
|
| 482 | 482 |
if (len) {
|
| 483 | |
char name[len + 1];
|
|
483 |
char *name = enif_alloc(len + 1);
|
|
484 |
if (!name)
|
|
485 |
return ret;
|
| 484 | 486 |
name[len] = 0;
|
| 485 | 487 |
size_t i = 0;
|
| 486 | 488 |
for (i = 0; i < len; i++)
|
|
| 499 | 501 |
ret = info;
|
| 500 | 502 |
}
|
| 501 | 503 |
}
|
|
504 |
enif_free(name);
|
| 502 | 505 |
}
|
| 503 | 506 |
}
|
| 504 | 507 |
return ret;
|
|
| 678 | 681 |
cert_info_t *info = NULL;
|
| 679 | 682 |
cert_info_t *new_info = NULL;
|
| 680 | 683 |
cert_info_t *old_info = NULL;
|
| 681 | |
char dh_hex[dh_size * 2 + 1];
|
|
684 |
char *dh_hex = enif_alloc(dh_size * 2 + 1);
|
| 682 | 685 |
size_t key_size =
|
| 683 | 686 |
strlen(cert_file) + strlen(key_file) + strlen(ciphers) + 8 +
|
| 684 | 687 |
dh_size * 2 + strlen(dh_file) + strlen(ca_file) + 1;
|
| 685 | |
char key[key_size];
|
|
688 |
char *key = enif_alloc(key_size);
|
|
689 |
|
|
690 |
if (!dh_hex || !key) {
|
|
691 |
enif_free(dh_hex);
|
|
692 |
enif_free(key);
|
|
693 |
return "Memory allocation failed";
|
|
694 |
}
|
|
695 |
|
| 686 | 696 |
sprintf(key, "%s%s%s%08lx%s%s%s",
|
| 687 | 697 |
cert_file, key_file, ciphers,
|
| 688 | 698 |
options, dh_file, ca_file,
|
|
| 730 | 740 |
set_ctx(state, info->ssl_ctx);
|
| 731 | 741 |
enif_rwlock_runlock(certs_map_lock);
|
| 732 | 742 |
}
|
|
743 |
enif_free(key);
|
|
744 |
enif_free(dh_hex);
|
| 733 | 745 |
return ret;
|
| 734 | 746 |
}
|
| 735 | 747 |
|
|
| 940 | 952 |
}
|
| 941 | 953 |
}
|
| 942 | 954 |
}
|
|
955 |
|
|
956 |
#ifndef SSL_OP_NO_RENEGOTIATION
|
|
957 |
// Forbid client-initiated renegotiation for OpenSSL < 1.1.0h
|
|
958 |
if (state->handshakes > 1 && SSL_is_server(state->ssl)) {
|
|
959 |
enif_release_binary(&buf);
|
|
960 |
*ret = ERR_T(enif_make_atom(env, "closed"));
|
|
961 |
return 2;
|
|
962 |
}
|
|
963 |
#endif
|
|
964 |
|
| 943 | 965 |
enif_realloc_binary(&buf, pos);
|
| 944 | 966 |
*ret = enif_make_binary(env, &buf);
|
| 945 | 967 |
return 1;
|
|
| 1222 | 1244 |
if (!enif_inspect_iolist_as_binary(env, argv[0], &domain))
|
| 1223 | 1245 |
return enif_make_badarg(env);
|
| 1224 | 1246 |
|
| 1225 | |
char key[domain.size + 1];
|
|
1247 |
char *key = enif_alloc(domain.size + 1);
|
|
1248 |
if (!key)
|
|
1249 |
return enif_make_atom(env, "false");
|
|
1250 |
|
| 1226 | 1251 |
memcpy(key, domain.data, domain.size);
|
| 1227 | 1252 |
key[domain.size] = 0;
|
| 1228 | 1253 |
enif_rwlock_rwlock(certfiles_map_lock);
|
|
| 1233 | 1258 |
ret = "true";
|
| 1234 | 1259 |
}
|
| 1235 | 1260 |
enif_rwlock_rwunlock(certfiles_map_lock);
|
|
1261 |
enif_free(key);
|
| 1236 | 1262 |
|
| 1237 | 1263 |
return enif_make_atom(env, ret);
|
| 1238 | 1264 |
}
|
|
| 1246 | 1272 |
if (!enif_inspect_iolist_as_binary(env, argv[0], &domain))
|
| 1247 | 1273 |
return enif_make_badarg(env);
|
| 1248 | 1274 |
|
| 1249 | |
char key[domain.size + 1];
|
|
1275 |
char *key = enif_alloc(domain.size + 1);
|
|
1276 |
if (!key)
|
|
1277 |
return enif_make_atom(env, "error");
|
|
1278 |
|
| 1250 | 1279 |
memcpy(key, domain.data, domain.size);
|
| 1251 | 1280 |
key[domain.size] = 0;
|
| 1252 | 1281 |
enif_rwlock_rlock(certfiles_map_lock);
|
|
| 1262 | 1291 |
result = enif_make_atom(env, "error");
|
| 1263 | 1292 |
}
|
| 1264 | 1293 |
enif_rwlock_runlock(certfiles_map_lock);
|
|
1294 |
enif_free(key);
|
| 1265 | 1295 |
|
| 1266 | 1296 |
return result;
|
| 1267 | 1297 |
}
|
|
| 1384 | 1414 |
|
| 1385 | 1415 |
if (ret != 1)
|
| 1386 | 1416 |
return ssl_error(env, "FIPS_mode_set() failed");
|
| 1387 | |
#else
|
|
1417 |
#elif __GNUC__
|
| 1388 | 1418 |
#warning OpenSSL 3 FIPS support not implemented
|
| 1389 | 1419 |
#endif
|
| 1390 | 1420 |
|
|
| 1397 | 1427 |
#if OPENSSL_VERSION_NUMBER < 0x30000000L
|
| 1398 | 1428 |
const char *ret = FIPS_mode() ? "true" : "false";
|
| 1399 | 1429 |
#else
|
|
1430 |
#if __GNUC__
|
| 1400 | 1431 |
#warning OpenSSL 3 FIPS support not implemented
|
|
1432 |
#endif
|
| 1401 | 1433 |
static const char *ret = "false";
|
| 1402 | 1434 |
#endif
|
| 1403 | 1435 |
|