// Copyright Joyent, Inc. and other Node contributors.

//

// Permission is hereby granted, free of charge, to any person obtaining a

// copy of this software and associated documentation files (the

// "Software"), to deal in the Software without restriction, including

// without limitation the rights to use, copy, modify, merge, publish,

// distribute, sublicense, and/or sell copies of the Software, and to permit

// persons to whom the Software is furnished to do so, subject to the

// following conditions:

//

// The above copyright notice and this permission notice shall be included

// in all copies or substantial portions of the Software.

//

// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS

// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF

// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN

// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,

// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR

// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE

// USE OR OTHER DEALINGS IN THE SOFTWARE.

#include "node.h"

#include "node_buffer.h"

#include "node_errors.h"

#include "node_constants.h"

#include "node_crypto.h"

#include "node_crypto_bio.h"

#include "node_crypto_groups.h"

#include "node_crypto_clienthello-inl.h"

#include "node_mutex.h"

#include "node_internals.h"

#include "tls_wrap.h" // TLSWrap

#include "async_wrap-inl.h"

#include "env-inl.h"

#include "string_bytes.h"

#include "util-inl.h"

#include "v8.h"

#include <errno.h>

#include <limits.h> // INT_MAX

#include <math.h>

#include <string.h>

#include <algorithm>

#include <memory>

#include <vector>

static const char PUBLIC_KEY_PFX[] = "-----BEGIN PUBLIC KEY-----";

static const int PUBLIC_KEY_PFX_LEN = sizeof(PUBLIC_KEY_PFX) - 1;

static const char PUBRSA_KEY_PFX[] = "-----BEGIN RSA PUBLIC KEY-----";

static const int PUBRSA_KEY_PFX_LEN = sizeof(PUBRSA_KEY_PFX) - 1;

static const char CERTIFICATE_PFX[] = "-----BEGIN CERTIFICATE-----";

static const int CERTIFICATE_PFX_LEN = sizeof(CERTIFICATE_PFX) - 1;

static const int X509_NAME_FLAGS = ASN1_STRFLGS_ESC_CTRL

| ASN1_STRFLGS_UTF8_CONVERT

| XN_FLAG_SEP_MULTILINE

| XN_FLAG_FN_SN;

namespace node {

namespace crypto {

using v8::Array;

using v8::Boolean;

using v8::Context;

using v8::DEFAULT;

using v8::DontDelete;

using v8::EscapableHandleScope;

using v8::Exception;

using v8::External;

using v8::FunctionCallbackInfo;

using v8::FunctionTemplate;

using v8::HandleScope;

using v8::Integer;

using v8::Isolate;

using v8::Local;

using v8::Maybe;

using v8::MaybeLocal;

using v8::Null;

using v8::Object;

using v8::ObjectTemplate;

using v8::PropertyAttribute;

using v8::ReadOnly;

using v8::Signature;

using v8::String;

using v8::Value;

struct StackOfX509Deleter {

void operator()(STACK_OF(X509)* p) const { sk_X509_pop_free(p, X509_free); }

};

using StackOfX509 = std::unique_ptr<STACK_OF(X509), StackOfX509Deleter>;

static const char* const root_certs[] = {

#include "node_root_certs.h" // NOLINT(build/include_order)

};

static const char system_cert_path[] = NODE_OPENSSL_SYSTEM_CERT_PATH;

static std::string extra_root_certs_file; // NOLINT(runtime/string)

static X509_STORE* root_cert_store;

// Just to generate static methods

template void SSLWrap<TLSWrap>::AddMethods(Environment* env,

Local<FunctionTemplate> t);

template void SSLWrap<TLSWrap>::ConfigureSecureContext(SecureContext* sc);

template void SSLWrap<TLSWrap>::SetSNIContext(SecureContext* sc);

template int SSLWrap<TLSWrap>::SetCACerts(SecureContext* sc);

template SSL_SESSION* SSLWrap<TLSWrap>::GetSessionCallback(

SSL* s,

const unsigned char* key,

int len,

int* copy);

template int SSLWrap<TLSWrap>::NewSessionCallback(SSL* s,

SSL_SESSION* sess);

template void SSLWrap<TLSWrap>::OnClientHello(

void* arg,

const ClientHelloParser::ClientHello& hello);

#ifdef NODE__HAVE_TLSEXT_STATUS_CB

template int SSLWrap<TLSWrap>::TLSExtStatusCallback(SSL* s, void* arg);

#endif

template void SSLWrap<TLSWrap>::DestroySSL();

template int SSLWrap<TLSWrap>::SSLCertCallback(SSL* s, void* arg);

template void SSLWrap<TLSWrap>::WaitForCertCb(CertCb cb, void* arg);

#ifdef TLSEXT_TYPE_application_layer_protocol_negotiation

template int SSLWrap<TLSWrap>::SelectALPNCallback(

SSL* s,

const unsigned char** out,

unsigned char* outlen,

const unsigned char* in,

unsigned int inlen,

void* arg);

#endif // TLSEXT_TYPE_application_layer_protocol_negotiation

static int PasswordCallback(char *buf, int size, int rwflag, void *u) {

if (u) {

size_t buflen = static_cast<size_t>(size);

size_t len = strlen(static_cast<const char*>(u));

len = len > buflen ? buflen : len;

memcpy(buf, u, len);

return len;

}

return 0;

}

// Loads OpenSSL engine by engine id and returns it. The loaded engine

// gets a reference so remember the corresponding call to ENGINE_free.

// In case of error the appropriate js exception is scheduled

// and nullptr is returned.

#ifndef OPENSSL_NO_ENGINE

static ENGINE* LoadEngineById(const char* engine_id, char (*errmsg)[1024]) {

MarkPopErrorOnReturn mark_pop_error_on_return;

ENGINE* engine = ENGINE_by_id(engine_id);

if (engine == nullptr) {

// Engine not found, try loading dynamically.

engine = ENGINE_by_id("dynamic");

if (engine != nullptr) {

if (!ENGINE_ctrl_cmd_string(engine, "SO_PATH", engine_id, 0) ||

!ENGINE_ctrl_cmd_string(engine, "LOAD", nullptr, 0)) {

ENGINE_free(engine);

engine = nullptr;

}

}

}

if (engine == nullptr) {

int err = ERR_get_error();

if (err != 0) {

ERR_error_string_n(err, *errmsg, sizeof(*errmsg));

} else {

snprintf(*errmsg, sizeof(*errmsg),

"Engine \"%s\" was not found", engine_id);

}

}

return engine;

}

#endif // !OPENSSL_NO_ENGINE

// This callback is used to avoid the default passphrase callback in OpenSSL

// which will typically prompt for the passphrase. The prompting is designed

// for the OpenSSL CLI, but works poorly for Node.js because it involves

// synchronous interaction with the controlling terminal, something we never

// want, and use this function to avoid it.

static int NoPasswordCallback(char *buf, int size, int rwflag, void *u) {

return 0;

}

void ThrowCryptoError(Environment* env,

unsigned long err, // NOLINT(runtime/int)

const char* default_message = nullptr) {

HandleScope scope(env->isolate());

Local<String> message;

if (err != 0 || default_message == nullptr) {

char errmsg[128] = { 0 };

ERR_error_string_n(err, errmsg, sizeof(errmsg));

message = String::NewFromUtf8(env->isolate(), errmsg,

v8::NewStringType::kNormal)

.ToLocalChecked();

} else {

message = String::NewFromUtf8(env->isolate(), default_message,

v8::NewStringType::kNormal)

.ToLocalChecked();

}

Local<Value> exception_v = Exception::Error(message);

CHECK(!exception_v.IsEmpty());

Local<Object> exception = exception_v.As<Object>();

std::vector<Local<String>> errors;

for (;;) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

if (err == 0) {

break;

}

char tmp_str[256];

ERR_error_string_n(err, tmp_str, sizeof(tmp_str));

errors.push_back(String::NewFromUtf8(env->isolate(), tmp_str,

v8::NewStringType::kNormal)

.ToLocalChecked());

}

// ERR_get_error returns errors in order of most specific to least

// specific. We wish to have the reverse ordering:

// opensslErrorStack: [

// 'error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib',

// 'error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 err'

// ]

if (!errors.empty()) {

std::reverse(errors.begin(), errors.end());

Local<Array> errors_array = Array::New(env->isolate(), errors.size());

for (size_t i = 0; i < errors.size(); i++) {

errors_array->Set(env->context(), i, errors[i]).FromJust();

}

exception->Set(env->context(), env->openssl_error_stack(), errors_array)

.FromJust();

}

env->isolate()->ThrowException(exception);

}

// Ensure that OpenSSL has enough entropy (at least 256 bits) for its PRNG.

// The entropy pool starts out empty and needs to fill up before the PRNG

// can be used securely. Once the pool is filled, it never dries up again;

// its contents is stirred and reused when necessary.

//

// OpenSSL normally fills the pool automatically but not when someone starts

// generating random numbers before the pool is full: in that case OpenSSL

// keeps lowering the entropy estimate to thwart attackers trying to guess

// the initial state of the PRNG.

//

// When that happens, we will have to wait until enough entropy is available.

// That should normally never take longer than a few milliseconds.

//

// OpenSSL draws from /dev/random and /dev/urandom. While /dev/random may

// block pending "true" randomness, /dev/urandom is a CSPRNG that doesn't

// block under normal circumstances.

//

// The only time when /dev/urandom may conceivably block is right after boot,

// when the whole system is still low on entropy. That's not something we can

// do anything about.

inline void CheckEntropy() {

for (;;) {

int status = RAND_status();

CHECK_GE(status, 0); // Cannot fail.

if (status != 0)

break;

// Give up, RAND_poll() not supported.

if (RAND_poll() == 0)

break;

}

}

bool EntropySource(unsigned char* buffer, size_t length) {

// Ensure that OpenSSL's PRNG is properly seeded.

CheckEntropy();

// RAND_bytes() can return 0 to indicate that the entropy data is not truly

// random. That's okay, it's still better than V8's stock source of entropy,

// which is /dev/urandom on UNIX platforms and the current time on Windows.

return RAND_bytes(buffer, length) != -1;

}

void SecureContext::Initialize(Environment* env, Local<Object> target) {

Local<FunctionTemplate> t = env->NewFunctionTemplate(SecureContext::New);

t->InstanceTemplate()->SetInternalFieldCount(1);

Local<String> secureContextString =

FIXED_ONE_BYTE_STRING(env->isolate(), "SecureContext");

t->SetClassName(secureContextString);

env->SetProtoMethod(t, "init", Init);

env->SetProtoMethod(t, "setKey", SetKey);

env->SetProtoMethod(t, "setCert", SetCert);

env->SetProtoMethod(t, "addCACert", AddCACert);

env->SetProtoMethod(t, "addCRL", AddCRL);

env->SetProtoMethod(t, "addRootCerts", AddRootCerts);

env->SetProtoMethod(t, "setCiphers", SetCiphers);

env->SetProtoMethod(t, "setECDHCurve", SetECDHCurve);

env->SetProtoMethod(t, "setDHParam", SetDHParam);

env->SetProtoMethod(t, "setOptions", SetOptions);

env->SetProtoMethod(t, "setSessionIdContext", SetSessionIdContext);

env->SetProtoMethod(t, "setSessionTimeout", SetSessionTimeout);

env->SetProtoMethod(t, "close", Close);

env->SetProtoMethod(t, "loadPKCS12", LoadPKCS12);

#ifndef OPENSSL_NO_ENGINE

env->SetProtoMethod(t, "setClientCertEngine", SetClientCertEngine);

#endif // !OPENSSL_NO_ENGINE

env->SetProtoMethod(t, "getTicketKeys", GetTicketKeys);

env->SetProtoMethod(t, "setTicketKeys", SetTicketKeys);

env->SetProtoMethod(t, "setFreeListLength", SetFreeListLength);

env->SetProtoMethod(t, "enableTicketKeyCallback", EnableTicketKeyCallback);

env->SetProtoMethod(t, "getCertificate", GetCertificate<true>);

env->SetProtoMethod(t, "getIssuer", GetCertificate<false>);

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyReturnIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyReturnIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyHMACIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyHMACIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyAESIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyAESIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyNameIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyNameIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyIVIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyIVIndex));

Local<FunctionTemplate> ctx_getter_templ =

FunctionTemplate::New(env->isolate(),

CtxGetter,

env->as_external(),

Signature::New(env->isolate(), t));

t->PrototypeTemplate()->SetAccessorProperty(

FIXED_ONE_BYTE_STRING(env->isolate(), "_external"),

ctx_getter_templ,

Local<FunctionTemplate>(),

static_cast<PropertyAttribute>(ReadOnly | DontDelete));

target->Set(secureContextString, t->GetFunction());

env->set_secure_context_constructor_template(t);

}

void SecureContext::New(const FunctionCallbackInfo<Value>& args) {

Environment* env = Environment::GetCurrent(args);

new SecureContext(env, args.This());

}

void SecureContext::Init(const FunctionCallbackInfo<Value>& args) {

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

int min_version = 0;

int max_version = 0;

const SSL_METHOD* method = TLS_method();

if (args.Length() == 1 && args[0]->IsString()) {

const node::Utf8Value sslmethod(env->isolate(), args[0]);

// Note that SSLv2 and SSLv3 are disallowed but SSLv23_method and friends

// are still accepted. They are OpenSSL's way of saying that all known

// protocols are supported unless explicitly disabled (which we do below

// for SSLv2 and SSLv3.)

if (strcmp(*sslmethod, "SSLv2_method") == 0) {

return env->ThrowError("SSLv2 methods disabled");

} else if (strcmp(*sslmethod, "SSLv2_server_method") == 0) {

return env->ThrowError("SSLv2 methods disabled");

} else if (strcmp(*sslmethod, "SSLv2_client_method") == 0) {

return env->ThrowError("SSLv2 methods disabled");

} else if (strcmp(*sslmethod, "SSLv3_method") == 0) {

return env->ThrowError("SSLv3 methods disabled");

} else if (strcmp(*sslmethod, "SSLv3_server_method") == 0) {

return env->ThrowError("SSLv3 methods disabled");

} else if (strcmp(*sslmethod, "SSLv3_client_method") == 0) {

return env->ThrowError("SSLv3 methods disabled");

} else if (strcmp(*sslmethod, "SSLv23_method") == 0) {

method = TLS_method();

} else if (strcmp(*sslmethod, "SSLv23_server_method") == 0) {

method = TLS_server_method();

} else if (strcmp(*sslmethod, "SSLv23_client_method") == 0) {

method = TLS_client_method();

} else if (strcmp(*sslmethod, "TLSv1_method") == 0) {

min_version = TLS1_VERSION;

max_version = TLS1_VERSION;

method = TLS_method();

} else if (strcmp(*sslmethod, "TLSv1_server_method") == 0) {

min_version = TLS1_VERSION;

max_version = TLS1_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "TLSv1_client_method") == 0) {

min_version = TLS1_VERSION;

max_version = TLS1_VERSION;

method = TLS_client_method();

} else if (strcmp(*sslmethod, "TLSv1_1_method") == 0) {

min_version = TLS1_1_VERSION;

max_version = TLS1_1_VERSION;

method = TLS_method();

} else if (strcmp(*sslmethod, "TLSv1_1_server_method") == 0) {

min_version = TLS1_1_VERSION;

max_version = TLS1_1_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "TLSv1_1_client_method") == 0) {

min_version = TLS1_1_VERSION;

max_version = TLS1_1_VERSION;

method = TLS_client_method();

} else if (strcmp(*sslmethod, "TLSv1_2_method") == 0) {

min_version = TLS1_2_VERSION;

max_version = TLS1_2_VERSION;

method = TLS_method();

} else if (strcmp(*sslmethod, "TLSv1_2_server_method") == 0) {

min_version = TLS1_2_VERSION;

max_version = TLS1_2_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "TLSv1_2_client_method") == 0) {

min_version = TLS1_2_VERSION;

max_version = TLS1_2_VERSION;

method = TLS_client_method();

} else {

return env->ThrowError("Unknown method");

}

}

sc->ctx_ = SSL_CTX_new(method);

SSL_CTX_set_app_data(sc->ctx_, sc);

// Disable SSLv2 in the case when method == TLS_method() and the

// cipher list contains SSLv2 ciphers (not the default, should be rare.)

// The bundled OpenSSL doesn't have SSLv2 support but the system OpenSSL may.

// SSLv3 is disabled because it's susceptible to downgrade attacks (POODLE.)

SSL_CTX_set_options(sc->ctx_, SSL_OP_NO_SSLv2);

SSL_CTX_set_options(sc->ctx_, SSL_OP_NO_SSLv3);

// SSL session cache configuration

SSL_CTX_set_session_cache_mode(sc->ctx_,

SSL_SESS_CACHE_SERVER |

SSL_SESS_CACHE_NO_INTERNAL |

SSL_SESS_CACHE_NO_AUTO_CLEAR);

SSL_CTX_set_min_proto_version(sc->ctx_, min_version);

SSL_CTX_set_max_proto_version(sc->ctx_, max_version);

// OpenSSL 1.1.0 changed the ticket key size, but the OpenSSL 1.0.x size was

// exposed in the public API. To retain compatibility, install a callback

// which restores the old algorithm.

if (RAND_bytes(sc->ticket_key_name_, sizeof(sc->ticket_key_name_)) <= 0 ||

RAND_bytes(sc->ticket_key_hmac_, sizeof(sc->ticket_key_hmac_)) <= 0 ||

RAND_bytes(sc->ticket_key_aes_, sizeof(sc->ticket_key_aes_)) <= 0) {

return env->ThrowError("Error generating ticket keys");

}

SSL_CTX_set_tlsext_ticket_key_cb(sc->ctx_,

SecureContext::TicketCompatibilityCallback);

}

// Takes a string or buffer and loads it into a BIO.

// Caller responsible for BIO_free_all-ing the returned object.

static BIO* LoadBIO(Environment* env, Local<Value> v) {

HandleScope scope(env->isolate());

if (v->IsString()) {

const node::Utf8Value s(env->isolate(), v);

return NodeBIO::NewFixed(*s, s.length());

}

if (Buffer::HasInstance(v)) {

return NodeBIO::NewFixed(Buffer::Data(v), Buffer::Length(v));

}

return nullptr;

}

void SecureContext::SetKey(const FunctionCallbackInfo<Value>& args) {

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

unsigned int len = args.Length();

if (len < 1) {

return THROW_ERR_MISSING_ARGS(env, "Private key argument is mandatory");

}

if (len > 2) {

return env->ThrowError("Only private key and pass phrase are expected");

}

if (len == 2) {

if (args[1]->IsUndefined() || args[1]->IsNull())

len = 1;

else

THROW_AND_RETURN_IF_NOT_STRING(env, args[1], "Pass phrase");

}

BIO *bio = LoadBIO(env, args[0]);

if (!bio)

return;

node::Utf8Value passphrase(env->isolate(), args[1]);

EVP_PKEY* key = PEM_read_bio_PrivateKey(bio,

nullptr,

PasswordCallback,

len == 1 ? nullptr : *passphrase);

if (!key) {

BIO_free_all(bio);

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

if (!err) {

return env->ThrowError("PEM_read_bio_PrivateKey");

}

return ThrowCryptoError(env, err);

}

int rv = SSL_CTX_use_PrivateKey(sc->ctx_, key);

EVP_PKEY_free(key);

BIO_free_all(bio);

if (!rv) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

if (!err)

return env->ThrowError("SSL_CTX_use_PrivateKey");

return ThrowCryptoError(env, err);

}

}

int SSL_CTX_get_issuer(SSL_CTX* ctx, X509* cert, X509** issuer) {

X509_STORE* store = SSL_CTX_get_cert_store(ctx);

X509_STORE_CTX* store_ctx = X509_STORE_CTX_new();

int ret = store_ctx != nullptr &&

X509_STORE_CTX_init(store_ctx, store, nullptr, nullptr) == 1 &&

X509_STORE_CTX_get1_issuer(issuer, store_ctx, cert) == 1;

X509_STORE_CTX_free(store_ctx);

return ret;

}

int SSL_CTX_use_certificate_chain(SSL_CTX* ctx,

X509* x,

STACK_OF(X509)* extra_certs,

X509** cert,

X509** issuer) {

CHECK_EQ(*issuer, nullptr);

CHECK_EQ(*cert, nullptr);

int ret = SSL_CTX_use_certificate(ctx, x);

if (ret) {

// If we could set up our certificate, now proceed to

// the CA certificates.

int r;

SSL_CTX_clear_extra_chain_certs(ctx);

for (int i = 0; i < sk_X509_num(extra_certs); i++) {

X509* ca = sk_X509_value(extra_certs, i);

// NOTE: Increments reference count on `ca`

r = SSL_CTX_add1_chain_cert(ctx, ca);

if (!r) {

ret = 0;

*issuer = nullptr;

goto end;

}

// Note that we must not free r if it was successfully

// added to the chain (while we must free the main

// certificate, since its reference count is increased

// by SSL_CTX_use_certificate).

// Find issuer

if (*issuer != nullptr || X509_check_issued(ca, x) != X509_V_OK)

continue;

*issuer = ca;

}

}

// Try getting issuer from a cert store

if (ret) {

if (*issuer == nullptr) {

ret = SSL_CTX_get_issuer(ctx, x, issuer);

ret = ret < 0 ? 0 : 1;

// NOTE: get_cert_store doesn't increment reference count,

// no need to free `store`

} else {

// Increment issuer reference count

*issuer = X509_dup(*issuer);

if (*issuer == nullptr) {

ret = 0;

goto end;

}

}

}

end:

if (ret && x != nullptr) {

*cert = X509_dup(x);

if (*cert == nullptr)

ret = 0;

}

return ret;

}

// Read a file that contains our certificate in "PEM" format,

// possibly followed by a sequence of CA certificates that should be

// sent to the peer in the Certificate message.

//

// Taken from OpenSSL - edited for style.

int SSL_CTX_use_certificate_chain(SSL_CTX* ctx,

BIO* in,

X509** cert,

X509** issuer) {

X509* x = nullptr;

// Just to ensure that `ERR_peek_last_error` below will return only errors

// that we are interested in

ERR_clear_error();

x = PEM_read_bio_X509_AUX(in, nullptr, NoPasswordCallback, nullptr);

if (x == nullptr) {

return 0;

}

X509* extra = nullptr;

int ret = 0;

unsigned long err = 0; // NOLINT(runtime/int)

StackOfX509 extra_certs(sk_X509_new_null());

if (!extra_certs)

goto done;

while ((extra = PEM_read_bio_X509(in,

nullptr,

NoPasswordCallback,

nullptr))) {

if (sk_X509_push(extra_certs.get(), extra))

continue;

// Failure, free all certs

goto done;

}

extra = nullptr;

// When the while loop ends, it's usually just EOF.

err = ERR_peek_last_error();

if (ERR_GET_LIB(err) == ERR_LIB_PEM &&

ERR_GET_REASON(err) == PEM_R_NO_START_LINE) {

ERR_clear_error();

} else {

// some real error

goto done;

}

ret = SSL_CTX_use_certificate_chain(ctx, x, extra_certs.get(), cert, issuer);

if (!ret)

goto done;

done:

if (extra != nullptr)

X509_free(extra);

if (x != nullptr)

X509_free(x);

return ret;

}

void SecureContext::SetCert(const FunctionCallbackInfo<Value>& args) {

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

if (args.Length() != 1) {

return THROW_ERR_MISSING_ARGS(env, "Certificate argument is mandatory");

}

BIO* bio = LoadBIO(env, args[0]);

if (!bio)

return;

// Free previous certs

if (sc->issuer_ != nullptr) {

X509_free(sc->issuer_);

sc->issuer_ = nullptr;

}

if (sc->cert_ != nullptr) {

X509_free(sc->cert_);

sc->cert_ = nullptr;

}

int rv = SSL_CTX_use_certificate_chain(sc->ctx_,

bio,

&sc->cert_,

&sc->issuer_);

BIO_free_all(bio);

if (!rv) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

if (!err) {

return env->ThrowError("SSL_CTX_use_certificate_chain");

}

return ThrowCryptoError(env, err);

}

}

static X509_STORE* NewRootCertStore() {

static std::vector<X509*> root_certs_vector;

if (root_certs_vector.empty()) {

for (size_t i = 0; i < arraysize(root_certs); i++) {

BIO* bp = NodeBIO::NewFixed(root_certs[i], strlen(root_certs[i]));

X509 *x509 = PEM_read_bio_X509(bp, nullptr, NoPasswordCallback, nullptr);

BIO_free(bp);

// Parse errors from the built-in roots are fatal.

CHECK_NE(x509, nullptr);

root_certs_vector.push_back(x509);

}

}

X509_STORE* store = X509_STORE_new();

if (*system_cert_path != '\0') {

X509_STORE_load_locations(store, system_cert_path, nullptr);

}

if (ssl_openssl_cert_store) {

X509_STORE_set_default_paths(store);

} else {

for (X509 *cert : root_certs_vector) {

X509_up_ref(cert);

X509_STORE_add_cert(store, cert);

}

}

return store;

}

void SecureContext::AddCACert(const FunctionCallbackInfo<Value>& args) {

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

ClearErrorOnReturn clear_error_on_return;

if (args.Length() != 1) {

return THROW_ERR_MISSING_ARGS(env, "CA certificate argument is mandatory");

}

BIO* bio = LoadBIO(env, args[0]);

if (!bio) {

return;

}

X509_STORE* cert_store = SSL_CTX_get_cert_store(sc->ctx_);

while (X509* x509 =

PEM_read_bio_X509(bio, nullptr, NoPasswordCallback, nullptr)) {

if (cert_store == root_cert_store) {

cert_store = NewRootCertStore();

SSL_CTX_set_cert_store(sc->ctx_, cert_store);

}

X509_STORE_add_cert(cert_store, x509);

SSL_CTX_add_client_CA(sc->ctx_, x509);

X509_free(x509);

}

BIO_free_all(bio);

}

void SecureContext::AddCRL(const FunctionCallbackInfo<Value>& args) {

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

if (args.Length() != 1) {

return THROW_ERR_MISSING_ARGS(env, "CRL argument is mandatory");

}

ClearErrorOnReturn clear_error_on_return;

BIO *bio = LoadBIO(env, args[0]);

if (!bio)

return;

X509_CRL* crl =

PEM_read_bio_X509_CRL(bio, nullptr, NoPasswordCallback, nullptr);

if (crl == nullptr) {

BIO_free_all(bio);

return env->ThrowError("Failed to parse CRL");

}

X509_STORE* cert_store = SSL_CTX_get_cert_store(sc->ctx_);

if (cert_store == root_cert_store) {

cert_store = NewRootCertStore();

SSL_CTX_set_cert_store(sc->ctx_, cert_store);

}

X509_STORE_add_crl(cert_store, crl);

X509_STORE_set_flags(cert_store,

X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL);

BIO_free_all(bio);

X509_CRL_free(crl);

}

void UseExtraCaCerts(const std::string& file) {

extra_root_certs_file = file;

}

static unsigned long AddCertsFromFile( // NOLINT(runtime/int)

X509_STORE* store,

const char* file) {

ERR_clear_error();

MarkPopErrorOnReturn mark_pop_error_on_return;

BIO* bio = BIO_new_file(file, "r");

if (!bio) {

return ERR_get_error();

}

while (X509* x509 =

PEM_read_bio_X509(bio, nullptr, NoPasswordCallback, nullptr)) {

X509_STORE_add_cert(store, x509);

X509_free(x509);

}

BIO_free_all(bio);

unsigned long err = ERR_peek_error(); // NOLINT(runtime/int)

// Ignore error if its EOF/no start line found.

if (ERR_GET_LIB(err) == ERR_LIB_PEM &&

ERR_GET_REASON(err) == PEM_R_NO_START_LINE) {

return 0;

}

return err;

}

void SecureContext::AddRootCerts(const FunctionCallbackInfo<Value>& args) {

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

ClearErrorOnReturn clear_error_on_return;

if (!root_cert_store) {

root_cert_store = NewRootCertStore();

if (!extra_root_certs_file.empty()) {

unsigned long err = AddCertsFromFile( // NOLINT(runtime/int)

root_cert_store,

extra_root_certs_file.c_str());

if (err) {

// We do not call back into JS after this line anyway, so ignoring

// the return value of ProcessEmitWarning does not affect how a

// possible exception would be propagated.

ProcessEmitWarning(sc->env(),

"Ignoring extra certs from `%s`, "

"load failed: %s\n",

extra_root_certs_file.c_str(),

ERR_error_string(err, nullptr));

}

}

}

// Increment reference count so global store is not deleted along with CTX.

X509_STORE_up_ref(root_cert_store);

SSL_CTX_set_cert_store(sc->ctx_, root_cert_store);

}

void SecureContext::SetCiphers(const FunctionCallbackInfo<Value>& args) {

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

ClearErrorOnReturn clear_error_on_return;

if (args.Length() != 1) {

return THROW_ERR_MISSING_ARGS(env, "Ciphers argument is mandatory");

}

THROW_AND_RETURN_IF_NOT_STRING(env, args[0], "Ciphers");

const node::Utf8Value ciphers(args.GetIsolate(), args[0]);

SSL_CTX_set_cipher_list(sc->ctx_, *ciphers);

}

void SecureContext::SetECDHCurve(const FunctionCallbackInfo<Value>& args) {

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

if (args.Length() != 1)

return THROW_ERR_MISSING_ARGS(env, "ECDH curve name argument is mandatory");

THROW_AND_RETURN_IF_NOT_STRING(env, args[0], "ECDH curve name");

node::Utf8Value curve(env->isolate(), args[0]);

if (strcmp(*curve, "auto") == 0)

return;

if (!SSL_CTX_set1_curves_list(sc->ctx_, *curve))

return env->ThrowError("Failed to set ECDH curve");

}

void SecureContext::SetDHParam(const FunctionCallbackInfo<Value>& args) {

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.This());

Environment* env = sc->env();

ClearErrorOnReturn clear_error_on_return;

// Auto DH is not supported in openssl 1.0.1, so dhparam needs

// to be specified explicitly

if (args.Length() != 1)

return THROW_ERR_MISSING_ARGS(env, "DH argument is mandatory");

// Invalid dhparam is silently discarded and DHE is no longer used.

BIO* bio = LoadBIO(env, args[0]);

if (!bio)

return;

DH* dh = PEM_read_bio_DHparams(bio, nullptr, nullptr, nullptr);

BIO_free_all(bio);

if (dh == nullptr)

return;

const BIGNUM* p;

DH_get0_pqg(dh, &p, nullptr, nullptr);

const int size = BN_num_bits(p);

if (size < 1024) {

return THROW_ERR_INVALID_ARG_VALUE(

env, "DH parameter is less than 1024 bits");

} else if (size < 2048) {

args.GetReturnValue().Set(FIXED_ONE_BYTE_STRING(

env->isolate(), "DH parameter is less than 2048 bits"));

}

SSL_CTX_set_options(sc->ctx_, SSL_OP_SINGLE_DH_USE);

int r = SSL_CTX_set_tmp_dh(sc->ctx_, dh);

DH_free(dh);

if (!r)

return env->ThrowTypeError("Error setting temp DH parameter");

}

void SecureContext::SetOptions(const FunctionCallbackInfo<Value>& args) {

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

if (args.Length() != 1 || !args[0]->IntegerValue()) {

return THROW_ERR_INVALID_ARG_TYPE(

sc->env(), "Options must be an integer value");

}

SSL_CTX_set_options(

sc->ctx_,

static_cast<long>(args[0]->IntegerValue())); // NOLINT(runtime/int)

}

void SecureContext::SetSessionIdContext(

const FunctionCallbackInfo<Value>& args) {

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

if (args.Length() != 1) {

return THROW_ERR_MISSING_ARGS(

env, "Session ID context argument is mandatory");

}