mirror of
https://github.com/rn10950/RetroZilla.git
synced 2024-11-11 02:10:17 +01:00
113 lines
2.9 KiB
C
113 lines
2.9 KiB
C
/*
|
|
* Accessor functions for SSLSocket private members.
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, You can obtain one at http://mozilla.org/MPL/2.0/. */
|
|
|
|
#include "cert.h"
|
|
#include "ssl.h"
|
|
#include "certt.h"
|
|
#include "sslimpl.h"
|
|
|
|
/* given PRFileDesc, returns a copy of certificate associated with the socket
|
|
* the caller should delete the cert when done with SSL_DestroyCertificate
|
|
*/
|
|
CERTCertificate *
|
|
SSL_RevealCert(PRFileDesc * fd)
|
|
{
|
|
CERTCertificate * cert = NULL;
|
|
sslSocket * sslsocket = NULL;
|
|
|
|
sslsocket = ssl_FindSocket(fd);
|
|
|
|
/* CERT_DupCertificate increases reference count and returns pointer to
|
|
* the same cert
|
|
*/
|
|
if (sslsocket && sslsocket->sec.peerCert)
|
|
cert = CERT_DupCertificate(sslsocket->sec.peerCert);
|
|
|
|
return cert;
|
|
}
|
|
|
|
/* given PRFileDesc, returns a pointer to PinArg associated with the socket
|
|
*/
|
|
void *
|
|
SSL_RevealPinArg(PRFileDesc * fd)
|
|
{
|
|
sslSocket * sslsocket = NULL;
|
|
void * PinArg = NULL;
|
|
|
|
sslsocket = ssl_FindSocket(fd);
|
|
|
|
/* is pkcs11PinArg part of the sslSocket or sslSecurityInfo ? */
|
|
if (sslsocket)
|
|
PinArg = sslsocket->pkcs11PinArg;
|
|
|
|
return PinArg;
|
|
}
|
|
|
|
|
|
/* given PRFileDesc, returns a pointer to the URL associated with the socket
|
|
* the caller should free url when done
|
|
*/
|
|
char *
|
|
SSL_RevealURL(PRFileDesc * fd)
|
|
{
|
|
sslSocket * sslsocket = NULL;
|
|
char * url = NULL;
|
|
|
|
sslsocket = ssl_FindSocket(fd);
|
|
|
|
if (sslsocket && sslsocket->url)
|
|
url = PL_strdup(sslsocket->url);
|
|
|
|
return url;
|
|
}
|
|
|
|
|
|
/* given PRFileDesc, returns status information related to extensions
|
|
* negotiated with peer during the handshake.
|
|
*/
|
|
|
|
SECStatus
|
|
SSL_HandshakeNegotiatedExtension(PRFileDesc * socket,
|
|
SSLExtensionType extId,
|
|
PRBool *pYes)
|
|
{
|
|
/* some decisions derived from SSL_GetChannelInfo */
|
|
sslSocket * sslsocket = NULL;
|
|
|
|
if (!pYes) {
|
|
PORT_SetError(SEC_ERROR_INVALID_ARGS);
|
|
return SECFailure;
|
|
}
|
|
|
|
sslsocket = ssl_FindSocket(socket);
|
|
if (!sslsocket) {
|
|
SSL_DBG(("%d: SSL[%d]: bad socket in HandshakeNegotiatedExtension",
|
|
SSL_GETPID(), socket));
|
|
return SECFailure;
|
|
}
|
|
|
|
*pYes = PR_FALSE;
|
|
|
|
/* according to public API SSL_GetChannelInfo, this doesn't need a lock */
|
|
if (sslsocket->opt.useSecurity) {
|
|
if (sslsocket->ssl3.initialized) { /* SSL3 and TLS */
|
|
/* now we know this socket went through ssl3_InitState() and
|
|
* ss->xtnData got initialized, which is the only member accessed by
|
|
* ssl3_ExtensionNegotiated();
|
|
* Member xtnData appears to get accessed in functions that handle
|
|
* the handshake (hello messages and extension sending),
|
|
* therefore the handshake lock should be sufficient.
|
|
*/
|
|
ssl_GetSSL3HandshakeLock(sslsocket);
|
|
*pYes = ssl3_ExtensionNegotiated(sslsocket, extId);
|
|
ssl_ReleaseSSL3HandshakeLock(sslsocket);
|
|
}
|
|
}
|
|
|
|
return SECSuccess;
|
|
}
|