#include "node.h"

#include "node_buffer.h"

#include "node_errors.h"

#include "node_constants.h"

#include "node_crypto.h"

#include "node_crypto_bio.h"

#include "node_crypto_groups.h"

#include "node_crypto_clienthello-inl.h"

#include "node_mutex.h"

#include "node_internals.h"

#include "tls_wrap.h" // TLSWrap

#include "async_wrap-inl.h"

#include "env-inl.h"

#include "string_bytes.h"

#include "util-inl.h"

#include "v8.h"

#include <errno.h>

#include <limits.h> // INT_MAX

#include <string.h>

#include <algorithm>

#include <memory>

#include <utility>

#include <vector>

static const int X509_NAME_FLAGS = ASN1_STRFLGS_ESC_CTRL

| ASN1_STRFLGS_UTF8_CONVERT

| XN_FLAG_SEP_MULTILINE

| XN_FLAG_FN_SN;

namespace node {

namespace Buffer {

v8::MaybeLocal<v8::Object> New(Environment* env, unsigned char* udata,

}

} // namespace Buffer

namespace crypto {

using node::THROW_ERR_TLS_INVALID_PROTOCOL_METHOD;

using v8::Array;

using v8::Boolean;

using v8::ConstructorBehavior;

using v8::Context;

using v8::DontDelete;

using v8::EscapableHandleScope;

using v8::Exception;

using v8::External;

using v8::Function;

using v8::FunctionCallback;

using v8::FunctionCallbackInfo;

using v8::FunctionTemplate;

using v8::HandleScope;

using v8::Int32;

using v8::Integer;

using v8::Isolate;

using v8::Just;

using v8::Local;

using v8::Maybe;

using v8::MaybeLocal;

using v8::NewStringType;

using v8::Nothing;

using v8::Null;

using v8::Object;

using v8::PropertyAttribute;

using v8::ReadOnly;

using v8::SideEffectType;

using v8::Signature;

using v8::String;

using v8::Uint32;

using v8::Undefined;

using v8::Value;

#ifdef OPENSSL_NO_OCB

# define IS_OCB_MODE(mode) false

#else

# define IS_OCB_MODE(mode) ((mode) == EVP_CIPH_OCB_MODE)

#endif

struct StackOfX509Deleter {

void operator()(STACK_OF(X509)* p) const { sk_X509_pop_free(p, X509_free); }

};

using StackOfX509 = std::unique_ptr<STACK_OF(X509), StackOfX509Deleter>;

struct StackOfXASN1Deleter {

};

using StackOfASN1 = std::unique_ptr<STACK_OF(ASN1_OBJECT), StackOfXASN1Deleter>;

struct OpenSSLBufferDeleter {

void operator()(char* pointer) const { OPENSSL_free(pointer); }

};

using OpenSSLBuffer = std::unique_ptr<char[], OpenSSLBufferDeleter>;

static const char* const root_certs[] = {

#include "node_root_certs.h" // NOLINT(build/include_order)

};

static const char system_cert_path[] = NODE_OPENSSL_SYSTEM_CERT_PATH;

static X509_STORE* root_cert_store;

static bool extra_root_certs_loaded = false;

template void SSLWrap<TLSWrap>::AddMethods(Environment* env,

Local<FunctionTemplate> t);

template void SSLWrap<TLSWrap>::ConfigureSecureContext(SecureContext* sc);

template void SSLWrap<TLSWrap>::SetSNIContext(SecureContext* sc);

template int SSLWrap<TLSWrap>::SetCACerts(SecureContext* sc);

template SSL_SESSION* SSLWrap<TLSWrap>::GetSessionCallback(

SSL* s,

const unsigned char* key,

int len,

int* copy);

template int SSLWrap<TLSWrap>::NewSessionCallback(SSL* s,

SSL_SESSION* sess);

template void SSLWrap<TLSWrap>::OnClientHello(

void* arg,

const ClientHelloParser::ClientHello& hello);

template int SSLWrap<TLSWrap>::TLSExtStatusCallback(SSL* s, void* arg);

template void SSLWrap<TLSWrap>::DestroySSL();

template int SSLWrap<TLSWrap>::SSLCertCallback(SSL* s, void* arg);

template void SSLWrap<TLSWrap>::WaitForCertCb(CertCb cb, void* arg);

template int SSLWrap<TLSWrap>::SelectALPNCallback(

SSL* s,

const unsigned char** out,

unsigned char* outlen,

const unsigned char* in,

unsigned int inlen,

void* arg);

static int PasswordCallback(char* buf, int size, int rwflag, void* u) {

}

#ifndef OPENSSL_NO_ENGINE

static ENGINE* LoadEngineById(const char* engine_id, char (*errmsg)[1024]) {

MarkPopErrorOnReturn mark_pop_error_on_return;

ENGINE* engine = ENGINE_by_id(engine_id);

if (engine == nullptr) {

// Engine not found, try loading dynamically.

engine = ENGINE_by_id("dynamic");

if (engine != nullptr) {

if (!ENGINE_ctrl_cmd_string(engine, "SO_PATH", engine_id, 0) ||

!ENGINE_ctrl_cmd_string(engine, "LOAD", nullptr, 0)) {

ENGINE_free(engine);

engine = nullptr;

}

}

}

if (engine == nullptr) {

int err = ERR_get_error();

if (err != 0) {

ERR_error_string_n(err, *errmsg, sizeof(*errmsg));

} else {

snprintf(*errmsg, sizeof(*errmsg),

"Engine \"%s\" was not found", engine_id);

}

}

return engine;

}

#endif // !OPENSSL_NO_ENGINE

static int NoPasswordCallback(char* buf, int size, int rwflag, void* u) {

return 0;

}

struct CryptoErrorVector : public std::vector<std::string> {

};

void ThrowCryptoError(Environment* env,

}

inline void CheckEntropy() {

}

bool EntropySource(unsigned char* buffer, size_t length) {

}

void SecureContext::Initialize(Environment* env, Local<Object> target) {

}

void SecureContext::New(const FunctionCallbackInfo<Value>& args) {

Environment* env = Environment::GetCurrent(args);

new SecureContext(env, args.This());

}

void SecureContext::Init(const FunctionCallbackInfo<Value>& args) {

}

static BIOPointer LoadBIO(Environment* env, Local<Value> v) {

}

void SecureContext::SetKey(const FunctionCallbackInfo<Value>& args) {

}

int SSL_CTX_get_issuer(SSL_CTX* ctx, X509* cert, X509** issuer) {

}

int SSL_CTX_use_certificate_chain(SSL_CTX* ctx,

X509Pointer&& x,

STACK_OF(X509)* extra_certs,

X509Pointer* cert,

X509Pointer* issuer_) {

CHECK(!*issuer_);

CHECK(!*cert);

X509* issuer = nullptr;

int ret = SSL_CTX_use_certificate(ctx, x.get());

if (ret) {

// If we could set up our certificate, now proceed to

// the CA certificates.

SSL_CTX_clear_extra_chain_certs(ctx);

for (int i = 0; i < sk_X509_num(extra_certs); i++) {

X509* ca = sk_X509_value(extra_certs, i);

// NOTE: Increments reference count on `ca`

if (!SSL_CTX_add1_chain_cert(ctx, ca)) {

ret = 0;

issuer = nullptr;

break;

}

// Note that we must not free r if it was successfully

// added to the chain (while we must free the main

// certificate, since its reference count is increased

// by SSL_CTX_use_certificate).

// Find issuer

if (issuer != nullptr || X509_check_issued(ca, x.get()) != X509_V_OK)

continue;

issuer = ca;

}

}

// Try getting issuer from a cert store

if (ret) {

if (issuer == nullptr) {

ret = SSL_CTX_get_issuer(ctx, x.get(), &issuer);

ret = ret < 0 ? 0 : 1;

// NOTE: get_cert_store doesn't increment reference count,

// no need to free `store`

} else {

// Increment issuer reference count

issuer = X509_dup(issuer);

if (issuer == nullptr) {

ret = 0;

}

}

}

issuer_->reset(issuer);

if (ret && x != nullptr) {

cert->reset(X509_dup(x.get()));

if (!*cert)

ret = 0;

}

return ret;

}

int SSL_CTX_use_certificate_chain(SSL_CTX* ctx,

}

void SecureContext::SetCert(const FunctionCallbackInfo<Value>& args) {

}

static X509_STORE* NewRootCertStore() {

static std::vector<X509*> root_certs_vector;

static Mutex root_certs_vector_mutex;

Mutex::ScopedLock lock(root_certs_vector_mutex);

if (root_certs_vector.empty()) {

for (size_t i = 0; i < arraysize(root_certs); i++) {

X509* x509 =

PEM_read_bio_X509(NodeBIO::NewFixed(root_certs[i],

strlen(root_certs[i])).get(),

nullptr, // no re-use of X509 structure

NoPasswordCallback,

nullptr); // no callback data

// Parse errors from the built-in roots are fatal.

CHECK_NOT_NULL(x509);

root_certs_vector.push_back(x509);

}

}

X509_STORE* store = X509_STORE_new();

if (*system_cert_path != '\0') {

X509_STORE_load_locations(store, system_cert_path, nullptr);

}

if (per_process::cli_options->ssl_openssl_cert_store) {

X509_STORE_set_default_paths(store);

} else {

for (X509* cert : root_certs_vector) {

X509_up_ref(cert);

X509_STORE_add_cert(store, cert);

}

}

return store;

}

void SecureContext::AddCACert(const FunctionCallbackInfo<Value>& args) {

}

void SecureContext::AddCRL(const FunctionCallbackInfo<Value>& args) {

}

static unsigned long AddCertsFromFile( // NOLINT(runtime/int)

}

void UseExtraCaCerts(const std::string& file) {

}

static void IsExtraRootCertsFileLoaded(

const FunctionCallbackInfo<Value>& args) {

return args.GetReturnValue().Set(extra_root_certs_loaded);

}

void SecureContext::AddRootCerts(const FunctionCallbackInfo<Value>& args) {

}

void SecureContext::SetCiphers(const FunctionCallbackInfo<Value>& args) {

}

void SecureContext::SetECDHCurve(const FunctionCallbackInfo<Value>& args) {

}

void SecureContext::SetDHParam(const FunctionCallbackInfo<Value>& args) {