xref: /freebsd-src/crypto/openssl/util/perl/TLSProxy/CertificateRequest.pm (revision e0c4386e7e71d93b0edc0c8fa156263fc4a8b0b6)
1*e0c4386eSCy Schubert# Copyright 2016 The OpenSSL Project Authors. All Rights Reserved.
2*e0c4386eSCy Schubert#
3*e0c4386eSCy Schubert# Licensed under the Apache License 2.0 (the "License").  You may not use
4*e0c4386eSCy Schubert# this file except in compliance with the License.  You can obtain a copy
5*e0c4386eSCy Schubert# in the file LICENSE in the source distribution or at
6*e0c4386eSCy Schubert# https://www.openssl.org/source/license.html
7*e0c4386eSCy Schubert
8*e0c4386eSCy Schubertuse strict;
9*e0c4386eSCy Schubert
10*e0c4386eSCy Schubertpackage TLSProxy::CertificateRequest;
11*e0c4386eSCy Schubert
12*e0c4386eSCy Schubertuse vars '@ISA';
13*e0c4386eSCy Schubertpush @ISA, 'TLSProxy::Message';
14*e0c4386eSCy Schubert
15*e0c4386eSCy Schubertsub new
16*e0c4386eSCy Schubert{
17*e0c4386eSCy Schubert    my $class = shift;
18*e0c4386eSCy Schubert    my ($server,
19*e0c4386eSCy Schubert        $data,
20*e0c4386eSCy Schubert        $records,
21*e0c4386eSCy Schubert        $startoffset,
22*e0c4386eSCy Schubert        $message_frag_lens) = @_;
23*e0c4386eSCy Schubert
24*e0c4386eSCy Schubert    my $self = $class->SUPER::new(
25*e0c4386eSCy Schubert        $server,
26*e0c4386eSCy Schubert        TLSProxy::Message::MT_CERTIFICATE_REQUEST,
27*e0c4386eSCy Schubert        $data,
28*e0c4386eSCy Schubert        $records,
29*e0c4386eSCy Schubert        $startoffset,
30*e0c4386eSCy Schubert        $message_frag_lens);
31*e0c4386eSCy Schubert
32*e0c4386eSCy Schubert    $self->{extension_data} = "";
33*e0c4386eSCy Schubert
34*e0c4386eSCy Schubert    return $self;
35*e0c4386eSCy Schubert}
36*e0c4386eSCy Schubert
37*e0c4386eSCy Schubertsub parse
38*e0c4386eSCy Schubert{
39*e0c4386eSCy Schubert    my $self = shift;
40*e0c4386eSCy Schubert    my $ptr = 1;
41*e0c4386eSCy Schubert
42*e0c4386eSCy Schubert    if (TLSProxy::Proxy->is_tls13()) {
43*e0c4386eSCy Schubert        my $request_ctx_len = unpack('C', $self->data);
44*e0c4386eSCy Schubert        my $request_ctx = substr($self->data, $ptr, $request_ctx_len);
45*e0c4386eSCy Schubert        $ptr += $request_ctx_len;
46*e0c4386eSCy Schubert
47*e0c4386eSCy Schubert        my $extensions_len = unpack('n', substr($self->data, $ptr));
48*e0c4386eSCy Schubert        $ptr += 2;
49*e0c4386eSCy Schubert        my $extension_data = substr($self->data, $ptr);
50*e0c4386eSCy Schubert        if (length($extension_data) != $extensions_len) {
51*e0c4386eSCy Schubert            die "Invalid extension length\n";
52*e0c4386eSCy Schubert        }
53*e0c4386eSCy Schubert        my %extensions = ();
54*e0c4386eSCy Schubert        while (length($extension_data) >= 4) {
55*e0c4386eSCy Schubert            my ($type, $size) = unpack("nn", $extension_data);
56*e0c4386eSCy Schubert            my $extdata = substr($extension_data, 4, $size);
57*e0c4386eSCy Schubert            $extension_data = substr($extension_data, 4 + $size);
58*e0c4386eSCy Schubert            $extensions{$type} = $extdata;
59*e0c4386eSCy Schubert        }
60*e0c4386eSCy Schubert        $self->extension_data(\%extensions);
61*e0c4386eSCy Schubert
62*e0c4386eSCy Schubert        print "    Extensions Len:".$extensions_len."\n";
63*e0c4386eSCy Schubert    }
64*e0c4386eSCy Schubert    # else parse TLSv1.2 version - we don't support that at the moment
65*e0c4386eSCy Schubert}
66*e0c4386eSCy Schubert
67*e0c4386eSCy Schubert#Reconstruct the on-the-wire message data following changes
68*e0c4386eSCy Schubertsub set_message_contents
69*e0c4386eSCy Schubert{
70*e0c4386eSCy Schubert    my $self = shift;
71*e0c4386eSCy Schubert    my $data;
72*e0c4386eSCy Schubert    my $extensions = "";
73*e0c4386eSCy Schubert
74*e0c4386eSCy Schubert    foreach my $key (keys %{$self->extension_data}) {
75*e0c4386eSCy Schubert        my $extdata = ${$self->extension_data}{$key};
76*e0c4386eSCy Schubert        $extensions .= pack("n", $key);
77*e0c4386eSCy Schubert        $extensions .= pack("n", length($extdata));
78*e0c4386eSCy Schubert        $extensions .= $extdata;
79*e0c4386eSCy Schubert    }
80*e0c4386eSCy Schubert
81*e0c4386eSCy Schubert    $data = pack('n', length($extensions));
82*e0c4386eSCy Schubert    $data .= $extensions;
83*e0c4386eSCy Schubert    $self->data($data);
84*e0c4386eSCy Schubert}
85*e0c4386eSCy Schubert
86*e0c4386eSCy Schubert#Read/write accessors
87*e0c4386eSCy Schubertsub extension_data
88*e0c4386eSCy Schubert{
89*e0c4386eSCy Schubert    my $self = shift;
90*e0c4386eSCy Schubert    if (@_) {
91*e0c4386eSCy Schubert        $self->{extension_data} = shift;
92*e0c4386eSCy Schubert    }
93*e0c4386eSCy Schubert    return $self->{extension_data};
94*e0c4386eSCy Schubert}
95*e0c4386eSCy Schubertsub set_extension
96*e0c4386eSCy Schubert{
97*e0c4386eSCy Schubert    my ($self, $ext_type, $ext_data) = @_;
98*e0c4386eSCy Schubert    $self->{extension_data}{$ext_type} = $ext_data;
99*e0c4386eSCy Schubert}
100*e0c4386eSCy Schubertsub delete_extension
101*e0c4386eSCy Schubert{
102*e0c4386eSCy Schubert    my ($self, $ext_type) = @_;
103*e0c4386eSCy Schubert    delete $self->{extension_data}{$ext_type};
104*e0c4386eSCy Schubert}
105*e0c4386eSCy Schubert1;
106