Add methods ssl:setVerify(), ssl:getVerify(), ssl:getCertificate() and ssl:setPrivateKey()

Similar to same methods that already exist on ssl.context object

1 files changed, 69 insertions, 0 deletions

diff --git a/src/openssl.c b/src/openssl.c
index a01fde5..b0bc5f6 100644
--- a/src/openssl.c
+++ b/src/openssl.c
@@ -8389,6 +8389,33 @@ static int ssl_getParam(lua_State *L) {
 } /* ssl_getParam() */
 
 
+static int ssl_setVerify(lua_State *L) {
+        SSL *ssl = checksimple(L, 1, SSL_CLASS);
+        int mode = luaL_optinteger(L, 2, -1);
+        int depth = luaL_optinteger(L, 3, -1);
+
+        if (mode != -1)
+                SSL_set_verify(ssl, mode, 0);
+
+        if (depth != -1)
+                SSL_set_verify_depth(ssl, depth);
+
+        lua_pushboolean(L, 1);
+
+        return 1;
+} /* ssl_setVerify() */
+
+
+static int ssl_getVerify(lua_State *L) {
+        SSL *ssl = checksimple(L, 1, SSL_CLASS);
+
+        lua_pushinteger(L, SSL_get_verify_mode(ssl));
+        lua_pushinteger(L, SSL_get_verify_depth(ssl));
+
+        return 2;
+} /* ssl_getVerify() */
+
+
 static int ssl_getVerifyResult(lua_State *L) {
         SSL *ssl = checksimple(L, 1, SSL_CLASS);
         long res = SSL_get_verify_result(ssl);
@@ -8398,6 +8425,44 @@ static int ssl_getVerifyResult(lua_State *L) {
 } /* ssl_getVerifyResult() */
 
 
+static int ssl_setCertificate(lua_State *L) {
+        SSL *ssl = checksimple(L, 1, SSL_CLASS);
+        X509 *crt = X509_dup(checksimple(L, 2, X509_CERT_CLASS));
+        int ok;
+
+        ok = SSL_use_certificate(ssl, crt);
+        X509_free(crt);
+
+        if (!ok)
+                return auxL_error(L, auxL_EOPENSSL, "ssl:setCertificate");
+
+        lua_pushboolean(L, 1);
+
+        return 1;
+} /* ssl_setCertificate() */
+
+
+static int ssl_setPrivateKey(lua_State *L) {
+        SSL *ssl = checksimple(L, 1, SSL_CLASS);
+        EVP_PKEY *key = checksimple(L, 2, PKEY_CLASS);
+        /*
+         * NOTE: No easy way to dup the key, but a shared reference should
+         * be okay as keys are less mutable than certificates.
+         *
+         * FIXME: SSL_use_PrivateKey will return true even if the
+         * EVP_PKEY object has no private key. Instead, we'll just get a
+         * segfault during the SSL handshake. We need to check that a
+         * private key is actually defined in the object.
+         */
+        if (!SSL_use_PrivateKey(ssl, key))
+                return auxL_error(L, auxL_EOPENSSL, "ssl:setPrivateKey");
+
+        lua_pushboolean(L, 1);
+
+        return 1;
+} /* ssl_setPrivateKey() */
+
+
 static int ssl_getPeerCertificate(lua_State *L) {
         SSL *ssl = checksimple(L, 1, SSL_CLASS);
         X509 **x509 = prepsimple(L, X509_CERT_CLASS);
@@ -8694,7 +8759,11 @@ static const auxL_Reg ssl_methods[] = {
         { "clearOptions",     &ssl_clearOptions },
         { "setParam",         &ssl_setParam },
         { "getParam",         &ssl_getParam },
+        { "setVerify",        &ssl_setVerify },
+        { "getVerify",        &ssl_getVerify },
         { "getVerifyResult",  &ssl_getVerifyResult },
+        { "setCertificate",   &ssl_setCertificate },
+        { "setPrivateKey",    &ssl_setPrivateKey },
         { "getPeerCertificate", &ssl_getPeerCertificate },
         { "getPeerChain",     &ssl_getPeerChain },
         { "getCipherInfo",    &ssl_getCipherInfo },