1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
|
// OpenVPN -- An application to securely tunnel IP networks
// over a single port, with support for SSL/TLS-based
// session authentication and key exchange,
// packet encryption, packet authentication, and
// packet compression.
//
// Copyright (C) 2012- OpenVPN Inc.
//
// SPDX-License-Identifier: MPL-2.0 OR AGPL-3.0-only WITH openvpn3-openssl-exception
//
// Wrap a mbed TLS x509_crl object
#ifndef OPENVPN_MBEDTLS_PKI_X509CRL_H
#define OPENVPN_MBEDTLS_PKI_X509CRL_H
#include <string>
#include <sstream>
#include <cstring>
#include <mbedtls/x509_crl.h>
#include <openvpn/common/size.hpp>
#include <openvpn/common/exception.hpp>
#include <openvpn/common/rc.hpp>
#include <openvpn/mbedtls/util/error.hpp>
namespace openvpn::MbedTLSPKI {
class X509CRL : public RC<thread_unsafe_refcount>
{
public:
typedef RCPtr<X509CRL> Ptr;
X509CRL()
: chain(nullptr)
{
}
X509CRL(const std::string &crl_txt)
: chain(nullptr)
{
try
{
parse(crl_txt);
}
catch (...)
{
dealloc();
throw;
}
}
void parse(const std::string &crl_txt)
{
alloc();
// crl_txt.length() is increased by 1 as it does not include the NULL-terminator
// which mbedtls_x509_crl_parse() expects to see.
const int status = mbedtls_x509_crl_parse(chain,
(const unsigned char *)crl_txt.c_str(),
crl_txt.length() + 1);
if (status < 0)
{
throw MbedTLSException("error parsing CRL", status);
}
pem_chain = crl_txt;
}
std::string extract() const
{
return std::string(pem_chain);
}
mbedtls_x509_crl *get() const
{
return chain;
}
~X509CRL()
{
dealloc();
}
private:
void alloc()
{
if (!chain)
{
chain = new mbedtls_x509_crl;
std::memset(chain, 0, sizeof(mbedtls_x509_crl));
}
}
void dealloc()
{
if (chain)
{
mbedtls_x509_crl_free(chain);
delete chain;
chain = nullptr;
}
}
mbedtls_x509_crl *chain;
std::string pem_chain;
};
} // namespace openvpn::MbedTLSPKI
#endif
|
