const char* passphrase = static_cast<char*>(u);

if (passphrase != nullptr) {

size_t buflen = static_cast<size_t>(size);

size_t len = strlen(passphrase);

if (buflen < len)

return -1;

memcpy(buf, passphrase, len);

return len;

}

return -1;

unsigned long err) { // NOLINT(runtime/int)

if (err == 0) return Just(true); // No decoration necessary.

const char* ls = ERR_lib_error_string(err);

const char* fs = ERR_func_error_string(err);

const char* rs = ERR_reason_error_string(err);

Isolate* isolate = env->isolate();

Local<Context> context = isolate->GetCurrentContext();

if (ls != nullptr) {

if (obj->Set(context, env->library_string(),

OneByteString(isolate, ls)).IsNothing()) {

return Nothing<bool>();

}

}

if (fs != nullptr) {

if (obj->Set(context, env->function_string(),

OneByteString(isolate, fs)).IsNothing()) {

return Nothing<bool>();

}

}

if (rs != nullptr) {

if (obj->Set(context, env->reason_string(),

OneByteString(isolate, rs)).IsNothing()) {

return Nothing<bool>();

}

// SSL has no API to recover the error name from the number, so we

// transform reason strings like "this error" to "ERR_SSL_THIS_ERROR",

// which ends up being close to the original error macro name.

std::string reason(rs);

for (auto& c : reason) {

if (c == ' ')

c = '_';

else

c = ToUpper(c);

}

#define OSSL_ERROR_CODES_MAP(V) \

V(SYS) \

V(BN) \

V(RSA) \

V(DH) \

V(EVP) \

V(BUF) \

V(OBJ) \

V(PEM) \

V(DSA) \

V(X509) \

V(ASN1) \

V(CONF) \

V(CRYPTO) \

V(EC) \

V(SSL) \

V(BIO) \

V(PKCS7) \

V(X509V3) \

V(PKCS12) \

V(RAND) \

V(DSO) \

V(ENGINE) \

V(OCSP) \

V(UI) \

V(COMP) \

V(ECDSA) \

V(ECDH) \

V(OSSL_STORE) \

V(FIPS) \

V(CMS) \

V(TS) \

V(HMAC) \

V(CT) \

V(ASYNC) \

V(KDF) \

V(SM2) \

V(USER) \

#define V(name) case ERR_LIB_##name: lib = #name "_"; break;

const char* lib = "";

const char* prefix = "OSSL_";

switch (ERR_GET_LIB(err)) { OSSL_ERROR_CODES_MAP(V) }

#undef V

#undef OSSL_ERROR_CODES_MAP

// Don't generate codes like "ERR_OSSL_SSL_".

if (lib && strcmp(lib, "SSL_") == 0)

prefix = "";

// All OpenSSL reason strings fit in a single 80-column macro definition,

// all prefix lengths are <= 10, and ERR_OSSL_ is 9, so 128 is more than

// sufficient.

char code[128];

snprintf(code, sizeof(code), "ERR_%s%s%s", prefix, lib, reason.c_str());

if (obj->Set(env->isolate()->GetCurrentContext(),

env->code_string(),

OneByteString(env->isolate(), code)).IsNothing())

return Nothing<bool>();

}

return Just(true);

inline void Capture() {

clear();

while (auto err = ERR_get_error()) {

char buf[256];

ERR_error_string_n(err, buf, sizeof(buf));

push_back(buf);

}

std::reverse(begin(), end());

}

inline MaybeLocal<Value> ToException(

Environment* env,

Local<String> exception_string = Local<String>()) const {

if (exception_string.IsEmpty()) {

CryptoErrorVector copy(*this);

if (copy.empty()) copy.push_back("no error"); // But possibly a bug...

// Use last element as the error message, everything else goes

// into the .opensslErrorStack property on the exception object.

auto exception_string =

String::NewFromUtf8(env->isolate(), copy.back().data(),

NewStringType::kNormal, copy.back().size())

.ToLocalChecked();

copy.pop_back();

return copy.ToException(env, exception_string);

}

Local<Value> exception_v = Exception::Error(exception_string);

CHECK(!exception_v.IsEmpty());

if (!empty()) {

CHECK(exception_v->IsObject());

Local<Object> exception = exception_v.As<Object>();

Maybe<bool> ok = exception->Set(env->context(),

env->openssl_error_stack(),

ToV8Value(env->context(), *this).ToLocalChecked());

if (ok.IsNothing())

return MaybeLocal<Value>();

}

return exception_v;

}

unsigned long err, // NOLINT(runtime/int)

// Default, only used if there is no SSL `err` which can

// be used to create a long-style message string.

const char* message) {

char message_buffer[128] = {0};

if (err != 0 || message == nullptr) {

ERR_error_string_n(err, message_buffer, sizeof(message_buffer));

message = message_buffer;

}

HandleScope scope(env->isolate());

Local<String> exception_string =

String::NewFromUtf8(env->isolate(), message, NewStringType::kNormal)

.ToLocalChecked();

CryptoErrorVector errors;

errors.Capture();

Local<Value> exception;

if (!errors.ToException(env, exception_string).ToLocal(&exception))

return;

Local<Object> obj;

if (!exception->ToObject(env->context()).ToLocal(&obj))

return;

if (error::Decorate(env, obj, err).IsNothing())

return;

env->isolate()->ThrowException(exception);

for (;;) {

int status = RAND_status();

CHECK_GE(status, 0); // Cannot fail.

if (status != 0)

break;

// Give up, RAND_poll() not supported.

if (RAND_poll() == 0)

break;

}

// Ensure that OpenSSL's PRNG is properly seeded.

CheckEntropy();

// RAND_bytes() can return 0 to indicate that the entropy data is not truly

// random. That's okay, it's still better than V8's stock source of entropy,

// which is /dev/urandom on UNIX platforms and the current time on Windows.

return RAND_bytes(buffer, length) != -1;

Local<FunctionTemplate> t = env->NewFunctionTemplate(New);

t->InstanceTemplate()->SetInternalFieldCount(

SecureContext::kInternalFieldCount);

Local<String> secureContextString =

FIXED_ONE_BYTE_STRING(env->isolate(), "SecureContext");

t->SetClassName(secureContextString);

env->SetProtoMethod(t, "init", Init);

env->SetProtoMethod(t, "setKey", SetKey);

#ifndef OPENSSL_NO_ENGINE

env->SetProtoMethod(t, "setEngineKey", SetEngineKey);

#endif // !OPENSSL_NO_ENGINE

env->SetProtoMethod(t, "setCert", SetCert);

env->SetProtoMethod(t, "addCACert", AddCACert);

env->SetProtoMethod(t, "addCRL", AddCRL);

env->SetProtoMethod(t, "addRootCerts", AddRootCerts);

env->SetProtoMethod(t, "setCipherSuites", SetCipherSuites);

env->SetProtoMethod(t, "setCiphers", SetCiphers);

env->SetProtoMethod(t, "setSigalgs", SetSigalgs);

env->SetProtoMethod(t, "setECDHCurve", SetECDHCurve);

env->SetProtoMethod(t, "setDHParam", SetDHParam);

env->SetProtoMethod(t, "setMaxProto", SetMaxProto);

env->SetProtoMethod(t, "setMinProto", SetMinProto);

env->SetProtoMethod(t, "getMaxProto", GetMaxProto);

env->SetProtoMethod(t, "getMinProto", GetMinProto);

env->SetProtoMethod(t, "setOptions", SetOptions);

env->SetProtoMethod(t, "setSessionIdContext", SetSessionIdContext);

env->SetProtoMethod(t, "setSessionTimeout", SetSessionTimeout);

env->SetProtoMethod(t, "close", Close);

env->SetProtoMethod(t, "loadPKCS12", LoadPKCS12);

#ifndef OPENSSL_NO_ENGINE

env->SetProtoMethod(t, "setClientCertEngine", SetClientCertEngine);

#endif // !OPENSSL_NO_ENGINE

env->SetProtoMethodNoSideEffect(t, "getTicketKeys", GetTicketKeys);

env->SetProtoMethod(t, "setTicketKeys", SetTicketKeys);

env->SetProtoMethod(t, "setFreeListLength", SetFreeListLength);

env->SetProtoMethod(t, "enableTicketKeyCallback", EnableTicketKeyCallback);

env->SetProtoMethodNoSideEffect(t, "getCertificate", GetCertificate<true>);

env->SetProtoMethodNoSideEffect(t, "getIssuer", GetCertificate<false>);

#define SET_INTEGER_CONSTANTS(name, value) \

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), name), \

Integer::NewFromUnsigned(env->isolate(), value));

SET_INTEGER_CONSTANTS("kTicketKeyReturnIndex", kTicketKeyReturnIndex);

SET_INTEGER_CONSTANTS("kTicketKeyHMACIndex", kTicketKeyHMACIndex);

SET_INTEGER_CONSTANTS("kTicketKeyAESIndex", kTicketKeyAESIndex);

SET_INTEGER_CONSTANTS("kTicketKeyNameIndex", kTicketKeyNameIndex);

SET_INTEGER_CONSTANTS("kTicketKeyIVIndex", kTicketKeyIVIndex);

#undef SET_INTEGER_CONSTANTS

Local<FunctionTemplate> ctx_getter_templ =

FunctionTemplate::New(env->isolate(),

CtxGetter,

env->as_callback_data(),

Signature::New(env->isolate(), t));

t->PrototypeTemplate()->SetAccessorProperty(

FIXED_ONE_BYTE_STRING(env->isolate(), "_external"),

ctx_getter_templ,

Local<FunctionTemplate>(),

static_cast<PropertyAttribute>(ReadOnly | DontDelete));

target->Set(env->context(), secureContextString,

t->GetFunction(env->context()).ToLocalChecked()).Check();

env->set_secure_context_constructor_template(t);

: BaseObject(env, wrap) {

MakeWeak();

env->isolate()->AdjustAmountOfExternalAllocatedMemory(kExternalSize);

if (ctx_ != nullptr) {

env()->isolate()->AdjustAmountOfExternalAllocatedMemory(-kExternalSize);

}

ctx_.reset();

cert_.reset();

issuer_.reset();

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

CHECK_EQ(args.Length(), 3);

CHECK(args[1]->IsInt32());

CHECK(args[2]->IsInt32());

int min_version = args[1].As<Int32>()->Value();

int max_version = args[2].As<Int32>()->Value();

const SSL_METHOD* method = TLS_method();

if (max_version == 0)

max_version = MAX_SUPPORTED_VERSION;

if (args[0]->IsString()) {

const node::Utf8Value sslmethod(env->isolate(), args[0]);

// Note that SSLv2 and SSLv3 are disallowed but SSLv23_method and friends

// are still accepted. They are OpenSSL's way of saying that all known

// protocols below TLS 1.3 are supported unless explicitly disabled (which

// we do below for SSLv2 and SSLv3.)

if (strcmp(*sslmethod, "SSLv2_method") == 0) {

THROW_ERR_TLS_INVALID_PROTOCOL_METHOD(env, "SSLv2 methods disabled");

return;

} else if (strcmp(*sslmethod, "SSLv2_server_method") == 0) {

THROW_ERR_TLS_INVALID_PROTOCOL_METHOD(env, "SSLv2 methods disabled");

return;

} else if (strcmp(*sslmethod, "SSLv2_client_method") == 0) {

THROW_ERR_TLS_INVALID_PROTOCOL_METHOD(env, "SSLv2 methods disabled");

return;

} else if (strcmp(*sslmethod, "SSLv3_method") == 0) {

THROW_ERR_TLS_INVALID_PROTOCOL_METHOD(env, "SSLv3 methods disabled");

return;

} else if (strcmp(*sslmethod, "SSLv3_server_method") == 0) {

THROW_ERR_TLS_INVALID_PROTOCOL_METHOD(env, "SSLv3 methods disabled");

return;

} else if (strcmp(*sslmethod, "SSLv3_client_method") == 0) {

THROW_ERR_TLS_INVALID_PROTOCOL_METHOD(env, "SSLv3 methods disabled");

return;

} else if (strcmp(*sslmethod, "SSLv23_method") == 0) {

max_version = TLS1_2_VERSION;

} else if (strcmp(*sslmethod, "SSLv23_server_method") == 0) {

max_version = TLS1_2_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "SSLv23_client_method") == 0) {

max_version = TLS1_2_VERSION;

method = TLS_client_method();

} else if (strcmp(*sslmethod, "TLS_method") == 0) {

min_version = 0;

max_version = MAX_SUPPORTED_VERSION;

} else if (strcmp(*sslmethod, "TLS_server_method") == 0) {

min_version = 0;

max_version = MAX_SUPPORTED_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "TLS_client_method") == 0) {

min_version = 0;

max_version = MAX_SUPPORTED_VERSION;

method = TLS_client_method();

} else if (strcmp(*sslmethod, "TLSv1_method") == 0) {

min_version = TLS1_VERSION;

max_version = TLS1_VERSION;

} else if (strcmp(*sslmethod, "TLSv1_server_method") == 0) {

min_version = TLS1_VERSION;

max_version = TLS1_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "TLSv1_client_method") == 0) {

min_version = TLS1_VERSION;

max_version = TLS1_VERSION;

method = TLS_client_method();

} else if (strcmp(*sslmethod, "TLSv1_1_method") == 0) {

min_version = TLS1_1_VERSION;

max_version = TLS1_1_VERSION;

} else if (strcmp(*sslmethod, "TLSv1_1_server_method") == 0) {

min_version = TLS1_1_VERSION;

max_version = TLS1_1_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "TLSv1_1_client_method") == 0) {

min_version = TLS1_1_VERSION;

max_version = TLS1_1_VERSION;

method = TLS_client_method();

} else if (strcmp(*sslmethod, "TLSv1_2_method") == 0) {

min_version = TLS1_2_VERSION;

max_version = TLS1_2_VERSION;

} else if (strcmp(*sslmethod, "TLSv1_2_server_method") == 0) {

min_version = TLS1_2_VERSION;

max_version = TLS1_2_VERSION;

method = TLS_server_method();

} else if (strcmp(*sslmethod, "TLSv1_2_client_method") == 0) {

min_version = TLS1_2_VERSION;

max_version = TLS1_2_VERSION;

method = TLS_client_method();

} else {

const std::string msg("Unknown method: ");

THROW_ERR_TLS_INVALID_PROTOCOL_METHOD(env, (msg + * sslmethod).c_str());

return;

}

}

sc->ctx_.reset(SSL_CTX_new(method));

SSL_CTX_set_app_data(sc->ctx_.get(), sc);

// Disable SSLv2 in the case when method == TLS_method() and the

// cipher list contains SSLv2 ciphers (not the default, should be rare.)

// The bundled OpenSSL doesn't have SSLv2 support but the system OpenSSL may.

// SSLv3 is disabled because it's susceptible to downgrade attacks (POODLE.)

SSL_CTX_set_options(sc->ctx_.get(), SSL_OP_NO_SSLv2);

SSL_CTX_set_options(sc->ctx_.get(), SSL_OP_NO_SSLv3);

// Enable automatic cert chaining. This is enabled by default in OpenSSL, but

// disabled by default in BoringSSL. Enable it explicitly to make the

// behavior match when Node is built with BoringSSL.

SSL_CTX_clear_mode(sc->ctx_.get(), SSL_MODE_NO_AUTO_CHAIN);

// SSL session cache configuration

SSL_CTX_set_session_cache_mode(sc->ctx_.get(),

SSL_SESS_CACHE_CLIENT |

SSL_SESS_CACHE_SERVER |

SSL_SESS_CACHE_NO_INTERNAL |

SSL_SESS_CACHE_NO_AUTO_CLEAR);

SSL_CTX_set_min_proto_version(sc->ctx_.get(), min_version);

SSL_CTX_set_max_proto_version(sc->ctx_.get(), max_version);

// OpenSSL 1.1.0 changed the ticket key size, but the OpenSSL 1.0.x size was

// exposed in the public API. To retain compatibility, install a callback

// which restores the old algorithm.

if (RAND_bytes(sc->ticket_key_name_, sizeof(sc->ticket_key_name_)) <= 0 ||

RAND_bytes(sc->ticket_key_hmac_, sizeof(sc->ticket_key_hmac_)) <= 0 ||

RAND_bytes(sc->ticket_key_aes_, sizeof(sc->ticket_key_aes_)) <= 0) {

return env->ThrowError("Error generating ticket keys");

}

SSL_CTX_set_tlsext_ticket_key_cb(sc->ctx_.get(), TicketCompatibilityCallback);

HandleScope scope(env->isolate());

if (v->IsString()) {

const node::Utf8Value s(env->isolate(), v);

return NodeBIO::NewFixed(*s, s.length());

}

if (v->IsArrayBufferView()) {

ArrayBufferViewContents<char> buf(v.As<ArrayBufferView>());

return NodeBIO::NewFixed(buf.data(), buf.length());

}

return nullptr;

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

unsigned int len = args.Length();

if (len < 1) {

return THROW_ERR_MISSING_ARGS(env, "Private key argument is mandatory");

}

if (len > 2) {

return env->ThrowError("Only private key and pass phrase are expected");

}

if (len == 2) {

if (args[1]->IsUndefined() || args[1]->IsNull())

len = 1;

else

THROW_AND_RETURN_IF_NOT_STRING(env, args[1], "Pass phrase");

}

BIOPointer bio(LoadBIO(env, args[0]));

if (!bio)

return;

node::Utf8Value passphrase(env->isolate(), args[1]);

EVPKeyPointer key(

PEM_read_bio_PrivateKey(bio.get(),

nullptr,

PasswordCallback,

*passphrase));

if (!key) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

return ThrowCryptoError(env, err, "PEM_read_bio_PrivateKey");

}

int rv = SSL_CTX_use_PrivateKey(sc->ctx_.get(), key.get());

if (!rv) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

return ThrowCryptoError(env, err, "SSL_CTX_use_PrivateKey");

}

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

ClearErrorOnReturn clear_error_on_return;

CHECK_EQ(args.Length(), 1);

CHECK(args[0]->IsString());

const node::Utf8Value sigalgs(env->isolate(), args[0]);

int rv = SSL_CTX_set1_sigalgs_list(sc->ctx_.get(), *sigalgs);

if (rv == 0) {

return ThrowCryptoError(env, ERR_get_error());

}

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

CHECK_EQ(args.Length(), 2);

char errmsg[1024];

const node::Utf8Value engine_id(env->isolate(), args[1]);

std::unique_ptr<ENGINE, std::function<void(ENGINE*)>> e =

{ LoadEngineById(*engine_id, &errmsg),

ENGINE_free_fn };

if (e.get() == nullptr) {

return env->ThrowError(errmsg);

}

if (!ENGINE_init(e.get())) {

return env->ThrowError("ENGINE_init");

}

e.get_deleter() = ENGINE_finish_and_free_fn;

const node::Utf8Value key_name(env->isolate(), args[0]);

EVPKeyPointer key(ENGINE_load_private_key(e.get(), *key_name,

nullptr, nullptr));

if (!key) {

return ThrowCryptoError(env, ERR_get_error(), "ENGINE_load_private_key");

}

int rv = SSL_CTX_use_PrivateKey(sc->ctx_.get(), key.get());

if (rv == 0) {

return ThrowCryptoError(env, ERR_get_error(), "SSL_CTX_use_PrivateKey");

}

sc->private_key_engine_ = std::move(e);

BIOPointer&& in,

X509Pointer* cert,

X509Pointer* issuer) {

// Just to ensure that `ERR_peek_last_error` below will return only errors

// that we are interested in

ERR_clear_error();

X509Pointer x(

PEM_read_bio_X509_AUX(in.get(), nullptr, NoPasswordCallback, nullptr));

if (!x)

return 0;

unsigned long err = 0; // NOLINT(runtime/int)

StackOfX509 extra_certs(sk_X509_new_null());

if (!extra_certs)

return 0;

while (X509Pointer extra {PEM_read_bio_X509(in.get(),

nullptr,

NoPasswordCallback,

nullptr)}) {

if (sk_X509_push(extra_certs.get(), extra.get())) {

extra.release();

continue;

}

return 0;

}

// When the while loop ends, it's usually just EOF.

err = ERR_peek_last_error();

if (ERR_GET_LIB(err) == ERR_LIB_PEM &&

ERR_GET_REASON(err) == PEM_R_NO_START_LINE) {

ERR_clear_error();

} else {

// some real error

return 0;

}

return SSL_CTX_use_certificate_chain(ctx,

std::move(x),

extra_certs.get(),

cert,

issuer);

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

if (args.Length() != 1) {

return THROW_ERR_MISSING_ARGS(env, "Certificate argument is mandatory");

}

BIOPointer bio(LoadBIO(env, args[0]));

if (!bio)

return;

sc->cert_.reset();

sc->issuer_.reset();

int rv = SSL_CTX_use_certificate_chain(sc->ctx_.get(),

std::move(bio),

&sc->cert_,

&sc->issuer_);

if (!rv) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

return ThrowCryptoError(env, err, "SSL_CTX_use_certificate_chain");

}

Environment* env = Environment::GetCurrent(args);

Local<Value> result[arraysize(root_certs)];

for (size_t i = 0; i < arraysize(root_certs); i++) {

if (!String::NewFromOneByte(

env->isolate(),

reinterpret_cast<const uint8_t*>(root_certs[i]),

NewStringType::kNormal).ToLocal(&result[i])) {

return;

}

}