diff options
author | beck <> | 2021-10-28 11:55:43 +0000 |
---|---|---|
committer | beck <> | 2021-10-28 11:55:43 +0000 |
commit | ec2d356d7b85eac502fd0bf0af74ea37d008b0e9 (patch) | |
tree | 1f2e0d435ff5311db6957d62b59e97937f97ecbc /src/lib/libcrypto/ct/ct_log.c | |
parent | f15d6960d6008073b238e45bb377f5a72d1161fc (diff) | |
download | openbsd-ec2d356d7b85eac502fd0bf0af74ea37d008b0e9.tar.gz openbsd-ec2d356d7b85eac502fd0bf0af74ea37d008b0e9.tar.bz2 openbsd-ec2d356d7b85eac502fd0bf0af74ea37d008b0e9.zip |
Mechanical KNF in preparation for changing
Diffstat (limited to 'src/lib/libcrypto/ct/ct_log.c')
-rw-r--r-- | src/lib/libcrypto/ct/ct_log.c | 371 |
1 files changed, 191 insertions, 180 deletions
diff --git a/src/lib/libcrypto/ct/ct_log.c b/src/lib/libcrypto/ct/ct_log.c index c1bca3e141..ee44de2bfc 100644 --- a/src/lib/libcrypto/ct/ct_log.c +++ b/src/lib/libcrypto/ct/ct_log.c | |||
@@ -22,9 +22,9 @@ | |||
22 | * Information about a CT log server. | 22 | * Information about a CT log server. |
23 | */ | 23 | */ |
24 | struct ctlog_st { | 24 | struct ctlog_st { |
25 | char *name; | 25 | char *name; |
26 | uint8_t log_id[CT_V1_HASHLEN]; | 26 | uint8_t log_id[CT_V1_HASHLEN]; |
27 | EVP_PKEY *public_key; | 27 | EVP_PKEY *public_key; |
28 | }; | 28 | }; |
29 | 29 | ||
30 | /* | 30 | /* |
@@ -32,14 +32,14 @@ struct ctlog_st { | |||
32 | * It takes ownership of any CTLOG instances added to it. | 32 | * It takes ownership of any CTLOG instances added to it. |
33 | */ | 33 | */ |
34 | struct ctlog_store_st { | 34 | struct ctlog_store_st { |
35 | STACK_OF(CTLOG) *logs; | 35 | STACK_OF(CTLOG) *logs; |
36 | }; | 36 | }; |
37 | 37 | ||
38 | /* The context when loading a CT log list from a CONF file. */ | 38 | /* The context when loading a CT log list from a CONF file. */ |
39 | typedef struct ctlog_store_load_ctx_st { | 39 | typedef struct ctlog_store_load_ctx_st { |
40 | CTLOG_STORE *log_store; | 40 | CTLOG_STORE *log_store; |
41 | CONF *conf; | 41 | CONF *conf; |
42 | size_t invalid_log_entries; | 42 | size_t invalid_log_entries; |
43 | } CTLOG_STORE_LOAD_CTX; | 43 | } CTLOG_STORE_LOAD_CTX; |
44 | 44 | ||
45 | /* | 45 | /* |
@@ -54,95 +54,101 @@ static CTLOG_STORE_LOAD_CTX *ctlog_store_load_ctx_new(void); | |||
54 | */ | 54 | */ |
55 | static void ctlog_store_load_ctx_free(CTLOG_STORE_LOAD_CTX* ctx); | 55 | static void ctlog_store_load_ctx_free(CTLOG_STORE_LOAD_CTX* ctx); |
56 | 56 | ||
57 | static CTLOG_STORE_LOAD_CTX *ctlog_store_load_ctx_new(void) | 57 | static CTLOG_STORE_LOAD_CTX * |
58 | ctlog_store_load_ctx_new(void) | ||
58 | { | 59 | { |
59 | CTLOG_STORE_LOAD_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx)); | 60 | CTLOG_STORE_LOAD_CTX *ctx = OPENSSL_zalloc(sizeof(*ctx)); |
60 | 61 | ||
61 | if (ctx == NULL) | 62 | if (ctx == NULL) |
62 | CTerr(CT_F_CTLOG_STORE_LOAD_CTX_NEW, ERR_R_MALLOC_FAILURE); | 63 | CTerr(CT_F_CTLOG_STORE_LOAD_CTX_NEW, ERR_R_MALLOC_FAILURE); |
63 | 64 | ||
64 | return ctx; | 65 | return ctx; |
65 | } | 66 | } |
66 | 67 | ||
67 | static void ctlog_store_load_ctx_free(CTLOG_STORE_LOAD_CTX* ctx) | 68 | static void |
69 | ctlog_store_load_ctx_free(CTLOG_STORE_LOAD_CTX* ctx) | ||
68 | { | 70 | { |
69 | OPENSSL_free(ctx); | 71 | OPENSSL_free(ctx); |
70 | } | 72 | } |
71 | 73 | ||
72 | /* Converts a log's public key into a SHA256 log ID */ | 74 | /* Converts a log's public key into a SHA256 log ID */ |
73 | static int ct_v1_log_id_from_pkey(EVP_PKEY *pkey, | 75 | static int |
74 | unsigned char log_id[CT_V1_HASHLEN]) | 76 | ct_v1_log_id_from_pkey(EVP_PKEY *pkey, unsigned char log_id[CT_V1_HASHLEN]) |
75 | { | 77 | { |
76 | int ret = 0; | 78 | int ret = 0; |
77 | unsigned char *pkey_der = NULL; | 79 | unsigned char *pkey_der = NULL; |
78 | int pkey_der_len = i2d_PUBKEY(pkey, &pkey_der); | 80 | int pkey_der_len = i2d_PUBKEY(pkey, &pkey_der); |
79 | 81 | ||
80 | if (pkey_der_len <= 0) { | 82 | if (pkey_der_len <= 0) { |
81 | CTerr(CT_F_CT_V1_LOG_ID_FROM_PKEY, CT_R_LOG_KEY_INVALID); | 83 | CTerr(CT_F_CT_V1_LOG_ID_FROM_PKEY, CT_R_LOG_KEY_INVALID); |
82 | goto err; | 84 | goto err; |
83 | } | 85 | } |
84 | 86 | ||
85 | SHA256(pkey_der, pkey_der_len, log_id); | 87 | SHA256(pkey_der, pkey_der_len, log_id); |
86 | ret = 1; | 88 | ret = 1; |
87 | err: | 89 | err: |
88 | OPENSSL_free(pkey_der); | 90 | OPENSSL_free(pkey_der); |
89 | return ret; | 91 | return ret; |
90 | } | 92 | } |
91 | 93 | ||
92 | CTLOG_STORE *CTLOG_STORE_new(void) | 94 | CTLOG_STORE * |
95 | CTLOG_STORE_new(void) | ||
93 | { | 96 | { |
94 | CTLOG_STORE *ret = OPENSSL_zalloc(sizeof(*ret)); | 97 | CTLOG_STORE *ret = OPENSSL_zalloc(sizeof(*ret)); |
95 | 98 | ||
96 | if (ret == NULL) { | 99 | if (ret == NULL) { |
97 | CTerr(CT_F_CTLOG_STORE_NEW, ERR_R_MALLOC_FAILURE); | 100 | CTerr(CT_F_CTLOG_STORE_NEW, ERR_R_MALLOC_FAILURE); |
98 | return NULL; | 101 | return NULL; |
99 | } | 102 | } |
100 | 103 | ||
101 | ret->logs = sk_CTLOG_new_null(); | 104 | ret->logs = sk_CTLOG_new_null(); |
102 | if (ret->logs == NULL) | 105 | if (ret->logs == NULL) |
103 | goto err; | 106 | goto err; |
104 | 107 | ||
105 | return ret; | 108 | return ret; |
106 | err: | 109 | err: |
107 | OPENSSL_free(ret); | 110 | OPENSSL_free(ret); |
108 | return NULL; | 111 | return NULL; |
109 | } | 112 | } |
110 | 113 | ||
111 | void CTLOG_STORE_free(CTLOG_STORE *store) | 114 | void |
115 | CTLOG_STORE_free(CTLOG_STORE *store) | ||
112 | { | 116 | { |
113 | if (store != NULL) { | 117 | if (store != NULL) { |
114 | sk_CTLOG_pop_free(store->logs, CTLOG_free); | 118 | sk_CTLOG_pop_free(store->logs, CTLOG_free); |
115 | OPENSSL_free(store); | 119 | OPENSSL_free(store); |
116 | } | 120 | } |
117 | } | 121 | } |
118 | 122 | ||
119 | static int ctlog_new_from_conf(CTLOG **ct_log, const CONF *conf, const char *section) | 123 | static int |
124 | ctlog_new_from_conf(CTLOG **ct_log, const CONF *conf, const char *section) | ||
120 | { | 125 | { |
121 | const char *description = NCONF_get_string(conf, section, "description"); | 126 | const char *description = NCONF_get_string(conf, section, "description"); |
122 | char *pkey_base64; | 127 | char *pkey_base64; |
123 | 128 | ||
124 | if (description == NULL) { | 129 | if (description == NULL) { |
125 | CTerr(CT_F_CTLOG_NEW_FROM_CONF, CT_R_LOG_CONF_MISSING_DESCRIPTION); | 130 | CTerr(CT_F_CTLOG_NEW_FROM_CONF, CT_R_LOG_CONF_MISSING_DESCRIPTION); |
126 | return 0; | 131 | return 0; |
127 | } | 132 | } |
128 | 133 | ||
129 | pkey_base64 = NCONF_get_string(conf, section, "key"); | 134 | pkey_base64 = NCONF_get_string(conf, section, "key"); |
130 | if (pkey_base64 == NULL) { | 135 | if (pkey_base64 == NULL) { |
131 | CTerr(CT_F_CTLOG_NEW_FROM_CONF, CT_R_LOG_CONF_MISSING_KEY); | 136 | CTerr(CT_F_CTLOG_NEW_FROM_CONF, CT_R_LOG_CONF_MISSING_KEY); |
132 | return 0; | 137 | return 0; |
133 | } | 138 | } |
134 | 139 | ||
135 | return CTLOG_new_from_base64(ct_log, pkey_base64, description); | 140 | return CTLOG_new_from_base64(ct_log, pkey_base64, description); |
136 | } | 141 | } |
137 | 142 | ||
138 | int CTLOG_STORE_load_default_file(CTLOG_STORE *store) | 143 | int |
144 | CTLOG_STORE_load_default_file(CTLOG_STORE *store) | ||
139 | { | 145 | { |
140 | const char *fpath = ossl_safe_getenv(CTLOG_FILE_EVP); | 146 | const char *fpath = ossl_safe_getenv(CTLOG_FILE_EVP); |
141 | 147 | ||
142 | if (fpath == NULL) | 148 | if (fpath == NULL) |
143 | fpath = CTLOG_FILE; | 149 | fpath = CTLOG_FILE; |
144 | 150 | ||
145 | return CTLOG_STORE_load_file(store, fpath); | 151 | return CTLOG_STORE_load_file(store, fpath); |
146 | } | 152 | } |
147 | 153 | ||
148 | /* | 154 | /* |
@@ -151,82 +157,83 @@ int CTLOG_STORE_load_default_file(CTLOG_STORE *store) | |||
151 | * the following log entries. | 157 | * the following log entries. |
152 | * It may stop parsing and returns -1 on any internal (malloc) error. | 158 | * It may stop parsing and returns -1 on any internal (malloc) error. |
153 | */ | 159 | */ |
154 | static int ctlog_store_load_log(const char *log_name, int log_name_len, | 160 | static int |
155 | void *arg) | 161 | ctlog_store_load_log(const char *log_name, int log_name_len, void *arg) |
156 | { | 162 | { |
157 | CTLOG_STORE_LOAD_CTX *load_ctx = arg; | 163 | CTLOG_STORE_LOAD_CTX *load_ctx = arg; |
158 | CTLOG *ct_log = NULL; | 164 | CTLOG *ct_log = NULL; |
159 | /* log_name may not be null-terminated, so fix that before using it */ | 165 | /* log_name may not be null-terminated, so fix that before using it */ |
160 | char *tmp; | 166 | char *tmp; |
161 | int ret = 0; | 167 | int ret = 0; |
162 | 168 | ||
163 | /* log_name will be NULL for empty list entries */ | 169 | /* log_name will be NULL for empty list entries */ |
164 | if (log_name == NULL) | 170 | if (log_name == NULL) |
165 | return 1; | 171 | return 1; |
166 | 172 | ||
167 | tmp = OPENSSL_strndup(log_name, log_name_len); | 173 | tmp = OPENSSL_strndup(log_name, log_name_len); |
168 | if (tmp == NULL) | 174 | if (tmp == NULL) |
169 | goto mem_err; | 175 | goto mem_err; |
170 | 176 | ||
171 | ret = ctlog_new_from_conf(&ct_log, load_ctx->conf, tmp); | 177 | ret = ctlog_new_from_conf(&ct_log, load_ctx->conf, tmp); |
172 | OPENSSL_free(tmp); | 178 | OPENSSL_free(tmp); |
173 | 179 | ||
174 | if (ret < 0) { | 180 | if (ret < 0) { |
175 | /* Propagate any internal error */ | 181 | /* Propagate any internal error */ |
176 | return ret; | 182 | return ret; |
177 | } | 183 | } |
178 | if (ret == 0) { | 184 | if (ret == 0) { |
179 | /* If we can't load this log, record that fact and skip it */ | 185 | /* If we can't load this log, record that fact and skip it */ |
180 | ++load_ctx->invalid_log_entries; | 186 | ++load_ctx->invalid_log_entries; |
181 | return 1; | 187 | return 1; |
182 | } | 188 | } |
183 | 189 | ||
184 | if (!sk_CTLOG_push(load_ctx->log_store->logs, ct_log)) { | 190 | if (!sk_CTLOG_push(load_ctx->log_store->logs, ct_log)) { |
185 | goto mem_err; | 191 | goto mem_err; |
186 | } | 192 | } |
187 | return 1; | 193 | return 1; |
188 | 194 | ||
189 | mem_err: | 195 | mem_err: |
190 | CTLOG_free(ct_log); | 196 | CTLOG_free(ct_log); |
191 | CTerr(CT_F_CTLOG_STORE_LOAD_LOG, ERR_R_MALLOC_FAILURE); | 197 | CTerr(CT_F_CTLOG_STORE_LOAD_LOG, ERR_R_MALLOC_FAILURE); |
192 | return -1; | 198 | return -1; |
193 | } | 199 | } |
194 | 200 | ||
195 | int CTLOG_STORE_load_file(CTLOG_STORE *store, const char *file) | 201 | int |
202 | CTLOG_STORE_load_file(CTLOG_STORE *store, const char *file) | ||
196 | { | 203 | { |
197 | int ret = 0; | 204 | int ret = 0; |
198 | char *enabled_logs; | 205 | char *enabled_logs; |
199 | CTLOG_STORE_LOAD_CTX* load_ctx = ctlog_store_load_ctx_new(); | 206 | CTLOG_STORE_LOAD_CTX* load_ctx = ctlog_store_load_ctx_new(); |
200 | 207 | ||
201 | if (load_ctx == NULL) | 208 | if (load_ctx == NULL) |
202 | return 0; | 209 | return 0; |
203 | load_ctx->log_store = store; | 210 | load_ctx->log_store = store; |
204 | load_ctx->conf = NCONF_new(NULL); | 211 | load_ctx->conf = NCONF_new(NULL); |
205 | if (load_ctx->conf == NULL) | 212 | if (load_ctx->conf == NULL) |
206 | goto end; | 213 | goto end; |
207 | 214 | ||
208 | if (NCONF_load(load_ctx->conf, file, NULL) <= 0) { | 215 | if (NCONF_load(load_ctx->conf, file, NULL) <= 0) { |
209 | CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID); | 216 | CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID); |
210 | goto end; | 217 | goto end; |
211 | } | 218 | } |
212 | 219 | ||
213 | enabled_logs = NCONF_get_string(load_ctx->conf, NULL, "enabled_logs"); | 220 | enabled_logs = NCONF_get_string(load_ctx->conf, NULL, "enabled_logs"); |
214 | if (enabled_logs == NULL) { | 221 | if (enabled_logs == NULL) { |
215 | CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID); | 222 | CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID); |
216 | goto end; | 223 | goto end; |
217 | } | 224 | } |
218 | 225 | ||
219 | if (!CONF_parse_list(enabled_logs, ',', 1, ctlog_store_load_log, load_ctx) || | 226 | if (!CONF_parse_list(enabled_logs, ',', 1, ctlog_store_load_log, load_ctx) || |
220 | load_ctx->invalid_log_entries > 0) { | 227 | load_ctx->invalid_log_entries > 0) { |
221 | CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID); | 228 | CTerr(CT_F_CTLOG_STORE_LOAD_FILE, CT_R_LOG_CONF_INVALID); |
222 | goto end; | 229 | goto end; |
223 | } | 230 | } |
224 | 231 | ||
225 | ret = 1; | 232 | ret = 1; |
226 | end: | 233 | end: |
227 | NCONF_free(load_ctx->conf); | 234 | NCONF_free(load_ctx->conf); |
228 | ctlog_store_load_ctx_free(load_ctx); | 235 | ctlog_store_load_ctx_free(load_ctx); |
229 | return ret; | 236 | return ret; |
230 | } | 237 | } |
231 | 238 | ||
232 | /* | 239 | /* |
@@ -234,73 +241,77 @@ end: | |||
234 | * Takes ownership of the public key. | 241 | * Takes ownership of the public key. |
235 | * Copies the name. | 242 | * Copies the name. |
236 | */ | 243 | */ |
237 | CTLOG *CTLOG_new(EVP_PKEY *public_key, const char *name) | 244 | CTLOG * |
245 | CTLOG_new(EVP_PKEY *public_key, const char *name) | ||
238 | { | 246 | { |
239 | CTLOG *ret = OPENSSL_zalloc(sizeof(*ret)); | 247 | CTLOG *ret = OPENSSL_zalloc(sizeof(*ret)); |
240 | 248 | ||
241 | if (ret == NULL) { | 249 | if (ret == NULL) { |
242 | CTerr(CT_F_CTLOG_NEW, ERR_R_MALLOC_FAILURE); | 250 | CTerr(CT_F_CTLOG_NEW, ERR_R_MALLOC_FAILURE); |
243 | return NULL; | 251 | return NULL; |
244 | } | 252 | } |
245 | 253 | ||
246 | ret->name = OPENSSL_strdup(name); | 254 | ret->name = OPENSSL_strdup(name); |
247 | if (ret->name == NULL) { | 255 | if (ret->name == NULL) { |
248 | CTerr(CT_F_CTLOG_NEW, ERR_R_MALLOC_FAILURE); | 256 | CTerr(CT_F_CTLOG_NEW, ERR_R_MALLOC_FAILURE); |
249 | goto err; | 257 | goto err; |
250 | } | 258 | } |
251 | 259 | ||
252 | if (ct_v1_log_id_from_pkey(public_key, ret->log_id) != 1) | 260 | if (ct_v1_log_id_from_pkey(public_key, ret->log_id) != 1) |
253 | goto err; | 261 | goto err; |
254 | 262 | ||
255 | ret->public_key = public_key; | 263 | ret->public_key = public_key; |
256 | return ret; | 264 | return ret; |
257 | err: | 265 | err: |
258 | CTLOG_free(ret); | 266 | CTLOG_free(ret); |
259 | return NULL; | 267 | return NULL; |
260 | } | 268 | } |
261 | 269 | ||
262 | /* Frees CT log and associated structures */ | 270 | /* Frees CT log and associated structures */ |
263 | void CTLOG_free(CTLOG *log) | 271 | void |
272 | CTLOG_free(CTLOG *log) | ||
264 | { | 273 | { |
265 | if (log != NULL) { | 274 | if (log != NULL) { |
266 | OPENSSL_free(log->name); | 275 | OPENSSL_free(log->name); |
267 | EVP_PKEY_free(log->public_key); | 276 | EVP_PKEY_free(log->public_key); |
268 | OPENSSL_free(log); | 277 | OPENSSL_free(log); |
269 | } | 278 | } |
270 | } | 279 | } |
271 | 280 | ||
272 | const char *CTLOG_get0_name(const CTLOG *log) | 281 | const char * |
282 | CTLOG_get0_name(const CTLOG *log) | ||
273 | { | 283 | { |
274 | return log->name; | 284 | return log->name; |
275 | } | 285 | } |
276 | 286 | ||
277 | void CTLOG_get0_log_id(const CTLOG *log, const uint8_t **log_id, | 287 | void |
278 | size_t *log_id_len) | 288 | CTLOG_get0_log_id(const CTLOG *log, const uint8_t **log_id, size_t *log_id_len) |
279 | { | 289 | { |
280 | *log_id = log->log_id; | 290 | *log_id = log->log_id; |
281 | *log_id_len = CT_V1_HASHLEN; | 291 | *log_id_len = CT_V1_HASHLEN; |
282 | } | 292 | } |
283 | 293 | ||
284 | EVP_PKEY *CTLOG_get0_public_key(const CTLOG *log) | 294 | EVP_PKEY * |
295 | CTLOG_get0_public_key(const CTLOG *log) | ||
285 | { | 296 | { |
286 | return log->public_key; | 297 | return log->public_key; |
287 | } | 298 | } |
288 | 299 | ||
289 | /* | 300 | /* |
290 | * Given a log ID, finds the matching log. | 301 | * Given a log ID, finds the matching log. |
291 | * Returns NULL if no match found. | 302 | * Returns NULL if no match found. |
292 | */ | 303 | */ |
293 | const CTLOG *CTLOG_STORE_get0_log_by_id(const CTLOG_STORE *store, | 304 | const CTLOG |
294 | const uint8_t *log_id, | 305 | *CTLOG_STORE_get0_log_by_id(const CTLOG_STORE *store, const uint8_t *log_id, |
295 | size_t log_id_len) | 306 | size_t log_id_len) |
296 | { | 307 | { |
297 | int i; | 308 | int i; |
298 | 309 | ||
299 | for (i = 0; i < sk_CTLOG_num(store->logs); ++i) { | 310 | for (i = 0; i < sk_CTLOG_num(store->logs); ++i) { |
300 | const CTLOG *log = sk_CTLOG_value(store->logs, i); | 311 | const CTLOG *log = sk_CTLOG_value(store->logs, i); |
301 | if (memcmp(log->log_id, log_id, log_id_len) == 0) | 312 | if (memcmp(log->log_id, log_id, log_id_len) == 0) |
302 | return log; | 313 | return log; |
303 | } | 314 | } |
304 | 315 | ||
305 | return NULL; | 316 | return NULL; |
306 | } | 317 | } |