1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
/*
* Copyright (C) 2001-2012 Jacek Sieka, arnetheduck on gmail point com
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program. If not, see <https://www.gnu.org/licenses/>.
*/
#pragma once
#include "typedefs.h"
#include "SettingsManager.h"
#include "Exception.h"
#include "Singleton.h"
#include "SSLSocket.h"
#include "SSL.h"
namespace dcpp {
using std::pair;
using std::string;
STANDARD_EXCEPTION(CryptoException);
class CryptoManager : public Singleton<CryptoManager>
{
public:
string makeKey(const string& aLock);
const string& getLock() { return lock; }
const string& getPk() { return pk; }
bool isExtended(const string& aLock) { return strncmp(aLock.c_str(), "EXTENDEDPROTOCOL", 16) == 0; }
void decodeBZ2(const uint8_t* is, size_t sz, string& os);
SSLSocket* getClientSocket(bool allowUntrusted, Socket::Protocol proto);
SSLSocket* getServerSocket(bool allowUntrusted);
void loadCertificates() noexcept;
void generateCertificate();
bool checkCertificate() noexcept;
const ByteVector& getKeyprint() const noexcept;
bool TLSOk() const noexcept;
private:
friend class Singleton<CryptoManager>;
CryptoManager();
virtual ~CryptoManager();
ssl::SSL_CTX clientContext;
ssl::SSL_CTX clientVerContext;
ssl::SSL_CTX serverContext;
ssl::SSL_CTX serverVerContext;
ssl::DH dh;
bool certsLoaded;
ByteVector keyprint;
const string lock;
const string pk;
string keySubst(const uint8_t* aKey, size_t len, size_t n);
bool isExtra(uint8_t b) {
return (b == 0 || b==5 || b==124 || b==96 || b==126 || b==36);
}
void loadKeyprint(const string& file) noexcept;
};
} // namespace dcpp
|
