1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
|
// OpenVPN -- An application to securely tunnel IP networks
// over a single port, with support for SSL/TLS-based
// session authentication and key exchange,
// packet encryption, packet authentication, and
// packet compression.
//
// Copyright (C) 2012- OpenVPN Inc.
//
// SPDX-License-Identifier: MPL-2.0 OR AGPL-3.0-only WITH openvpn3-openssl-exception
//
// Wrap a mbed TLS dhm_context object (Diffie Hellman parameters).
#ifndef OPENVPN_MBEDTLS_PKI_DH_H
#define OPENVPN_MBEDTLS_PKI_DH_H
#include <string>
#include <sstream>
#include <cstring>
#include <mbedtls/x509.h>
#include <openvpn/common/size.hpp>
#include <openvpn/common/exception.hpp>
#include <openvpn/common/rc.hpp>
#include <openvpn/mbedtls/util/error.hpp>
namespace openvpn::MbedTLSPKI {
class DH : public RC<thread_unsafe_refcount>
{
public:
typedef RCPtr<DH> Ptr;
DH()
: dhc(nullptr)
{
}
DH(const std::string &dh_txt, const std::string &title)
: dhc(nullptr)
{
try
{
parse(dh_txt, title);
}
catch (...)
{
dealloc();
throw;
}
}
void parse(const std::string &dh_txt, const std::string &title)
{
alloc();
// dh_txt.length() is increased by 1 as it does not include the NULL-terminator
// which mbedtls_dhm_parse_dhm() expects to see.
const int status = mbedtls_dhm_parse_dhm(dhc,
(const unsigned char *)dh_txt.c_str(),
dh_txt.length() + 1);
if (status < 0)
{
throw MbedTLSException("error parsing " + title + " DH parameters", status);
}
if (status > 0)
{
std::ostringstream os;
os << status << " DH parameters in " << title << " failed to parse";
throw MbedTLSException(os.str());
}
// store PEM data to allow extraction
pem_dhc = dh_txt;
}
std::string extract() const
{
return std::string(pem_dhc);
}
mbedtls_dhm_context *get() const
{
return dhc;
}
~DH()
{
dealloc();
}
private:
void alloc()
{
if (!dhc)
{
dhc = new mbedtls_dhm_context;
mbedtls_dhm_init(dhc);
}
}
void dealloc()
{
if (dhc)
{
mbedtls_dhm_free(dhc);
delete dhc;
dhc = nullptr;
}
}
mbedtls_dhm_context *dhc;
std::string pem_dhc;
};
} // namespace openvpn::MbedTLSPKI
#endif
|
