walkero
/
nghttp2
1
0
Fork 0
Code Issues Pull Requests Projects Releases 1 Wiki Activity

nghttpx: Add function to get serial number from certificate

This commit is contained in:
Tatsuhiro Tsujikawa 2017-11-16 21:11:38 +09:00
parent d402cfdf16
commit cd55ab28ab
2 changed files with 45 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

40
src/shrpx_tls.cc
View File

@ -1959,6 +1959,46 @@ StringRef get_x509_issuer_name(BlockAllocator &balloc, X509 *x) {
return get_x509_name(balloc, X509_get_issuer_name(x)); return get_x509_name(balloc, X509_get_issuer_name(x));
} }
StringRef get_x509_serial(BlockAllocator &balloc, X509 *x) {
#if OPENSSL_1_1_API
auto sn = X509_get0_serialNumber(x);
uint64_t r;
if (ASN1_INTEGER_get_uint64(&r, sn) != 1) {
return StringRef{};
}
auto iov = make_byte_ref(balloc, 16 + 7 + 1);
auto p = iov.base;
for (int i = 56; i >= 0; i -= 8) {
auto a = r >> i;
*p++ = util::LOWER_XDIGITS[(a >> 4) & 0xf];
*p++ = util::LOWER_XDIGITS[a & 0xf];
*p++ = ':';
}
#else // !OPENSSL_1_1_API
auto sn = X509_get_serialNumber(x);
auto bn = BN_new();
auto bn_d = defer(BN_free, bn);
if (!ASN1_INTEGER_to_BN(sn, bn)) {
return StringRef{};
}
std::array<uint8_t, 8> b;
auto n = BN_bn2bin(bn, b.data());
assert(n == b.size());
auto iov = make_byte_ref(balloc, 16 + 7 + 1);
auto p = iov.base;
for (auto c : b) {
*p++ = util::LOWER_XDIGITS[c >> 4];
*p++ = util::LOWER_XDIGITS[c & 0xf];
*p++ = ':';
}
#endif // !OPENSSL_1_1_API
*--p = '\0';
return StringRef{iov.base, p};
}
} // namespace tls } // namespace tls
} // namespace shrpx } // namespace shrpx

5
src/shrpx_tls.h
View File

@ -284,6 +284,11 @@ StringRef get_x509_subject_name(BlockAllocator &balloc, X509 *x);
// name, it returns an empty string. // name, it returns an empty string.
StringRef get_x509_issuer_name(BlockAllocator &balloc, X509 *x); StringRef get_x509_issuer_name(BlockAllocator &balloc, X509 *x);
// Returns serial number of |x| in format like
// "ff:ff:ff:ff:ff:ff:ff:ff". If this function fails to get serial
// number, it returns an empty string. number
StringRef get_x509_serial(BlockAllocator &balloc, X509 *x);
} // namespace tls } // namespace tls
} // namespace shrpx } // namespace shrpx