walkero
/
nghttp2
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

nghttpx: Make client serial available in mruby script

This commit is contained in:
Tatsuhiro Tsujikawa 2017-11-16 21:13:56 +09:00
parent cd55ab28ab
commit 4720c5cb3d
2 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
doc/nghttpx.h2r
View File

@ -384,6 +384,11 @@ respectively.
Return the subject name of a client certificate. Return the subject name of a client certificate.
.. rb:attr_reader:: tls_client_serial
Return the serial number of a client certificate in a format
like "ff:ff:ff:ff:ff:ff:ff:ff".
.. rb:attr_reader:: tls_cipher .. rb:attr_reader:: tls_cipher
Return a TLS cipher negotiated in this connection. Return a TLS cipher negotiated in this connection.

26
src/shrpx_mruby_module_env.cc
View File

@ -235,6 +235,30 @@ mrb_value env_get_tls_client_issuer_name(mrb_state *mrb, mrb_value self) {
} }
} // namespace } // namespace
namespace {
mrb_value env_get_tls_client_serial(mrb_state *mrb, mrb_value self) {
auto data = static_cast<MRubyAssocData *>(mrb->ud);
auto downstream = data->downstream;
auto upstream = downstream->get_upstream();
auto handler = upstream->get_client_handler();
auto ssl = handler->get_ssl();
if (!ssl) {
return mrb_str_new_static(mrb, "", 0);
}
auto x = SSL_get_peer_certificate(ssl);
if (!x) {
return mrb_str_new_static(mrb, "", 0);
}
auto &balloc = downstream->get_block_allocator();
auto sn = tls::get_x509_serial(balloc, x);
X509_free(x);
return mrb_str_new(mrb, sn.c_str(), sn.size());
}
} // namespace
namespace { namespace {
mrb_value env_get_tls_cipher(mrb_state *mrb, mrb_value self) { mrb_value env_get_tls_cipher(mrb_state *mrb, mrb_value self) {
auto data = static_cast<MRubyAssocData *>(mrb->ud); auto data = static_cast<MRubyAssocData *>(mrb->ud);
@ -348,6 +372,8 @@ void init_env_class(mrb_state *mrb, RClass *module) {
env_get_tls_client_issuer_name, MRB_ARGS_NONE()); env_get_tls_client_issuer_name, MRB_ARGS_NONE());
mrb_define_method(mrb, env_class, "tls_client_subject_name", mrb_define_method(mrb, env_class, "tls_client_subject_name",
env_get_tls_client_subject_name, MRB_ARGS_NONE()); env_get_tls_client_subject_name, MRB_ARGS_NONE());
mrb_define_method(mrb, env_class, "tls_client_serial",
env_get_tls_client_serial, MRB_ARGS_NONE());
mrb_define_method(mrb, env_class, "tls_cipher", env_get_tls_cipher, mrb_define_method(mrb, env_class, "tls_cipher", env_get_tls_cipher,
MRB_ARGS_NONE()); MRB_ARGS_NONE());
mrb_define_method(mrb, env_class, "tls_protocol", env_get_tls_protocol, mrb_define_method(mrb, env_class, "tls_protocol", env_get_tls_protocol,