2000-10-27 05:07:28 +08:00
|
|
|
/*
|
2023-09-07 16:59:15 +08:00
|
|
|
* Copyright 2001-2023 The OpenSSL Project Authors. All Rights Reserved.
|
2017-06-15 22:16:46 +08:00
|
|
|
* Copyright (c) 2002, Oracle and/or its affiliates. All rights reserved
|
2000-10-27 05:07:28 +08:00
|
|
|
*
|
2018-12-06 20:39:00 +08:00
|
|
|
* Licensed under the Apache License 2.0 (the "License"). You may not use
|
2016-05-18 02:52:22 +08:00
|
|
|
* this file except in compliance with the License. You can obtain a copy
|
|
|
|
|
* in the file LICENSE in the source distribution or at
|
|
|
|
|
* https://www.openssl.org/source/license.html
|
2000-10-27 05:07:28 +08:00
|
|
|
*/
|
2016-05-18 02:52:22 +08:00
|
|
|
|
2019-09-28 06:45:57 +08:00
|
|
|
#ifndef OSSL_CRYPTO_ENGINE_ENG_LOCAL_H
|
|
|
|
|
# define OSSL_CRYPTO_ENGINE_ENG_LOCAL_H
|
2000-10-27 05:07:28 +08:00
|
|
|
|
2018-12-13 08:42:07 +08:00
|
|
|
# include <openssl/trace.h>
|
2015-05-14 22:56:48 +08:00
|
|
|
# include "internal/cryptlib.h"
|
2019-09-28 06:45:33 +08:00
|
|
|
# include "crypto/engine.h"
|
2017-08-22 20:35:43 +08:00
|
|
|
# include "internal/thread_once.h"
|
2016-08-27 22:01:08 +08:00
|
|
|
# include "internal/refcount.h"
|
2000-11-03 04:33:04 +08:00
|
|
|
|
2016-03-09 00:44:34 +08:00
|
|
|
extern CRYPTO_RWLOCK *global_engine_lock;
|
|
|
|
|
|
2001-04-27 07:04:30 +08:00
|
|
|
/*
|
2021-05-19 23:09:49 +08:00
|
|
|
* This prints the engine's pointer address, "struct" or "funct" to
|
|
|
|
|
* indicate the reference type, the before and after reference count, and
|
|
|
|
|
* the file:line-number pair. The "ENGINE_REF_PRINT" statements must come
|
2023-06-22 07:24:27 +08:00
|
|
|
* *after* the change.
|
2001-04-27 07:04:30 +08:00
|
|
|
*/
|
2021-05-19 23:09:49 +08:00
|
|
|
# define ENGINE_REF_PRINT(e, isfunct, diff) \
|
2018-12-13 08:42:46 +08:00
|
|
|
OSSL_TRACE6(ENGINE_REF_COUNT, \
|
2021-05-19 23:09:49 +08:00
|
|
|
"engine: %p %s from %d to %d (%s:%d)\n", \
|
2018-12-13 08:42:46 +08:00
|
|
|
(void *)(e), (isfunct ? "funct" : "struct"), \
|
|
|
|
|
((isfunct) \
|
|
|
|
|
? ((e)->funct_ref - (diff)) \
|
2023-06-22 07:24:27 +08:00
|
|
|
: (eng_struct_ref(e) - (diff))), \
|
|
|
|
|
((isfunct) ? (e)->funct_ref : eng_struct_ref(e)), \
|
2018-12-13 08:42:46 +08:00
|
|
|
(OPENSSL_FILE), (OPENSSL_LINE))
|
2001-04-27 07:04:30 +08:00
|
|
|
|
2001-09-26 04:00:51 +08:00
|
|
|
/*
|
|
|
|
|
* Any code that will need cleanup operations should use these functions to
|
2016-04-12 19:20:16 +08:00
|
|
|
* register callbacks. engine_cleanup_int() will call all registered
|
2016-04-04 23:12:39 +08:00
|
|
|
* callbacks in order. NB: both the "add" functions assume the engine lock to
|
|
|
|
|
* already be held (in "write" mode).
|
2001-09-26 04:00:51 +08:00
|
|
|
*/
|
|
|
|
|
typedef void (ENGINE_CLEANUP_CB) (void);
|
2001-10-02 00:26:00 +08:00
|
|
|
typedef struct st_engine_cleanup_item {
|
|
|
|
|
ENGINE_CLEANUP_CB *cb;
|
|
|
|
|
} ENGINE_CLEANUP_ITEM;
|
2015-12-28 08:04:33 +08:00
|
|
|
DEFINE_STACK_OF(ENGINE_CLEANUP_ITEM)
|
2023-09-05 22:59:45 +08:00
|
|
|
int engine_cleanup_add_first(ENGINE_CLEANUP_CB *cb);
|
|
|
|
|
int engine_cleanup_add_last(ENGINE_CLEANUP_CB *cb);
|
2001-09-26 04:00:51 +08:00
|
|
|
|
|
|
|
|
/* We need stacks of ENGINEs for use in eng_table.c */
|
2015-12-28 08:04:33 +08:00
|
|
|
DEFINE_STACK_OF(ENGINE)
|
2001-09-26 04:00:51 +08:00
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* This represents an implementation table. Dependent code should instantiate
|
|
|
|
|
* it as a (ENGINE_TABLE *) pointer value set initially to NULL.
|
|
|
|
|
*/
|
|
|
|
|
typedef struct st_engine_table ENGINE_TABLE;
|
|
|
|
|
int engine_table_register(ENGINE_TABLE **table, ENGINE_CLEANUP_CB *cleanup,
|
|
|
|
|
ENGINE *e, const int *nids, int num_nids,
|
|
|
|
|
int setdefault);
|
|
|
|
|
void engine_table_unregister(ENGINE_TABLE **table, ENGINE *e);
|
|
|
|
|
void engine_table_cleanup(ENGINE_TABLE **table);
|
2021-05-23 03:57:07 +08:00
|
|
|
ENGINE *ossl_engine_table_select(ENGINE_TABLE **table, int nid,
|
|
|
|
|
const char *f, int l);
|
2007-11-22 01:25:58 +08:00
|
|
|
typedef void (engine_table_doall_cb) (int nid, STACK_OF(ENGINE) *sk,
|
|
|
|
|
ENGINE *def, void *arg);
|
|
|
|
|
void engine_table_doall(ENGINE_TABLE *table, engine_table_doall_cb *cb,
|
|
|
|
|
void *arg);
|
2015-01-22 11:40:55 +08:00
|
|
|
|
2001-09-26 04:00:51 +08:00
|
|
|
/*
|
|
|
|
|
* Internal versions of API functions that have control over locking. These
|
|
|
|
|
* are used between C files when functionality needs to be shared but the
|
2016-03-09 00:44:34 +08:00
|
|
|
* caller may already be controlling of the engine lock.
|
2001-09-26 04:00:51 +08:00
|
|
|
*/
|
|
|
|
|
int engine_unlocked_init(ENGINE *e);
|
|
|
|
|
int engine_unlocked_finish(ENGINE *e, int unlock_for_handlers);
|
2016-09-04 03:27:30 +08:00
|
|
|
int engine_free_util(ENGINE *e, int not_locked);
|
2001-08-18 18:22:54 +08:00
|
|
|
|
2001-11-22 17:13:18 +08:00
|
|
|
/*
|
|
|
|
|
* This function will reset all "set"able values in an ENGINE to NULL. This
|
|
|
|
|
* won't touch reference counts or ex_data, but is equivalent to calling all
|
|
|
|
|
* the ENGINE_set_***() functions with a NULL value.
|
|
|
|
|
*/
|
|
|
|
|
void engine_set_all_null(ENGINE *e);
|
|
|
|
|
|
2001-04-18 11:03:16 +08:00
|
|
|
/*
|
|
|
|
|
* NB: Bitwise OR-able values for the "flags" variable in ENGINE are now
|
|
|
|
|
* exposed in engine.h.
|
|
|
|
|
*/
|
2000-10-27 05:07:28 +08:00
|
|
|
|
2006-06-03 01:09:17 +08:00
|
|
|
/* Free up dynamically allocated public key methods associated with ENGINE */
|
|
|
|
|
|
|
|
|
|
void engine_pkey_meths_free(ENGINE *e);
|
2006-06-05 19:52:46 +08:00
|
|
|
void engine_pkey_asn1_meths_free(ENGINE *e);
|
2006-06-03 01:09:17 +08:00
|
|
|
|
2016-03-09 00:44:34 +08:00
|
|
|
/* Once initialisation function */
|
|
|
|
|
extern CRYPTO_ONCE engine_lock_init;
|
2016-07-20 01:42:11 +08:00
|
|
|
DECLARE_RUN_ONCE(do_engine_lock_init)
|
2016-03-09 00:44:34 +08:00
|
|
|
|
2021-11-19 18:33:34 +08:00
|
|
|
typedef void (*ENGINE_DYNAMIC_ID)(void);
|
|
|
|
|
int engine_add_dynamic_id(ENGINE *e, ENGINE_DYNAMIC_ID dynamic_id,
|
|
|
|
|
int not_locked);
|
|
|
|
|
void engine_remove_dynamic_id(ENGINE *e, int not_locked);
|
|
|
|
|
|
2000-10-27 05:07:28 +08:00
|
|
|
/*
|
|
|
|
|
* This is a structure for storing implementations of various crypto
|
|
|
|
|
* algorithms and functions.
|
|
|
|
|
*/
|
2000-11-03 04:33:04 +08:00
|
|
|
struct engine_st {
|
2000-10-27 05:07:28 +08:00
|
|
|
const char *id;
|
|
|
|
|
const char *name;
|
2000-11-07 06:15:50 +08:00
|
|
|
const RSA_METHOD *rsa_meth;
|
2000-11-07 21:54:39 +08:00
|
|
|
const DSA_METHOD *dsa_meth;
|
2000-11-07 22:30:37 +08:00
|
|
|
const DH_METHOD *dh_meth;
|
2015-10-28 20:29:43 +08:00
|
|
|
const EC_KEY_METHOD *ec_meth;
|
2001-04-18 10:01:36 +08:00
|
|
|
const RAND_METHOD *rand_meth;
|
2001-09-26 05:28:40 +08:00
|
|
|
/* Cipher handling is via this callback */
|
|
|
|
|
ENGINE_CIPHERS_PTR ciphers;
|
|
|
|
|
/* Digest handling is via this callback */
|
|
|
|
|
ENGINE_DIGESTS_PTR digests;
|
2006-06-01 19:38:50 +08:00
|
|
|
/* Public key handling via this callback */
|
|
|
|
|
ENGINE_PKEY_METHS_PTR pkey_meths;
|
2006-06-03 01:52:27 +08:00
|
|
|
/* ASN1 public key handling via this callback */
|
|
|
|
|
ENGINE_PKEY_ASN1_METHS_PTR pkey_asn1_meths;
|
2001-09-06 02:32:23 +08:00
|
|
|
ENGINE_GEN_INT_FUNC_PTR destroy;
|
2001-04-18 11:57:05 +08:00
|
|
|
ENGINE_GEN_INT_FUNC_PTR init;
|
|
|
|
|
ENGINE_GEN_INT_FUNC_PTR finish;
|
|
|
|
|
ENGINE_CTRL_FUNC_PTR ctrl;
|
|
|
|
|
ENGINE_LOAD_KEY_PTR load_privkey;
|
|
|
|
|
ENGINE_LOAD_KEY_PTR load_pubkey;
|
2008-06-02 05:10:30 +08:00
|
|
|
ENGINE_SSL_CLIENT_CERT_PTR load_ssl_client_cert;
|
Some BIG tweaks to ENGINE code.
This change adds some new functionality to the ENGINE code and API to
make it possible for ENGINEs to describe and implement their own control
commands that can be interrogated and used by calling applications at
run-time. The source code includes numerous comments explaining how it all
works and some of the finer details. But basically, an ENGINE will normally
declare an array of ENGINE_CMD_DEFN entries in its ENGINE - and the various
new ENGINE_CTRL_*** command types take care of iterating through this list
of definitions, converting command numbers to names, command names to
numbers, getting descriptions, getting input flags, etc. These
administrative commands are handled directly in the base ENGINE code rather
than in each ENGINE's ctrl() handler, unless they specify the
ENGINE_FLAGS_MANUAL_CMD_CTRL flag (ie. if they're doing something clever or
dynamic with the command definitions).
There is also a new function, ENGINE_cmd_is_executable(), that will
determine if an ENGINE control command is of an "executable" type that
can be used in another new function, ENGINE_ctrl_cmd_string(). If not, the
control command is not supposed to be exposed out to user/config level
access - eg. it could involve the exchange of binary data, returning
results to calling code, etc etc. If the command is executable then
ENGINE_ctrl_cmd_string() can be called using a name/arg string pair. The
control command's input flags will be used to determine necessary
conversions before the control command is called, and commands of this
form will always return zero or one (failure or success, respectively).
This is set up so that arbitrary applications can support control commands
in a consistent way so that tweaking particular ENGINE behaviour is
specific to the ENGINE and the host environment, and independant of the
application or OpenSSL.
Some code demonstrating this stuff in action will applied shortly to the
various ENGINE implementations, as well as "openssl engine" support for
executing arbitrary control commands before and/or after initialising
various ENGINEs.
2001-04-19 08:41:55 +08:00
|
|
|
const ENGINE_CMD_DEFN *cmd_defns;
|
2000-10-27 05:07:28 +08:00
|
|
|
int flags;
|
|
|
|
|
/* reference count on the structure itself */
|
2016-08-27 22:01:08 +08:00
|
|
|
CRYPTO_REF_COUNT struct_ref;
|
2000-10-27 05:07:28 +08:00
|
|
|
/*
|
|
|
|
|
* reference count on usability of the engine type. NB: This controls the
|
2016-03-11 04:34:48 +08:00
|
|
|
* loading and initialisation of any functionality required by this
|
2000-10-27 05:07:28 +08:00
|
|
|
* engine, whereas the previous count is simply to cope with
|
|
|
|
|
* (de)allocation of this structure. Hence, running_ref <= struct_ref at
|
|
|
|
|
* all times.
|
|
|
|
|
*/
|
|
|
|
|
int funct_ref;
|
2001-09-26 05:28:40 +08:00
|
|
|
/* A place to store per-ENGINE data */
|
This adds 2 things to the ENGINE code.
* "ex_data" - a CRYPTO_EX_DATA structure in the ENGINE structure itself
that allows an ENGINE to store its own information there rather than in
global variables. It follows the declarations and implementations used
in RSA code, for better or worse. However there's a problem when storing
state with ENGINEs because, unlike related structure types in OpenSSL,
there is no ENGINE-vs-ENGINE_METHOD separation. Because of what ENGINE
is, it has method pointers as its structure elements ... which leads
to;
* ENGINE_FLAGS_BY_ID_COPY - if an ENGINE should not be used just as a
reference to an "implementation" (eg. to get to a hardware device), but
should also be able to maintain state, then this flag can be set by the
ENGINE implementation. The result is that any call to ENGINE_by_id()
will not result in the existing ENGINE being returned (with its
structural reference count incremented) but instead a new copy of the
ENGINE will be returned that can maintain its own state independantly of
any other copies returned in the past or future. Eg. key-generation
might involve a series of ENGINE-specific control commands to set
algorithms, sizes, module-keys, ids, ACLs, etc. A final command could
generate the key. An ENGINE doing this would *have* to declare
ENGINE_FLAGS_BY_ID_COPY so that the state of that process can be
maintained "per-handle" and unaffected by other code having a reference
to the same ENGINE structure.
2001-04-27 03:35:44 +08:00
|
|
|
CRYPTO_EX_DATA ex_data;
|
2000-10-27 05:07:28 +08:00
|
|
|
/* Used to maintain the linked-list of engines. */
|
|
|
|
|
struct engine_st *prev;
|
|
|
|
|
struct engine_st *next;
|
2021-11-19 18:33:34 +08:00
|
|
|
/* Used to maintain the linked-list of dynamic engines. */
|
|
|
|
|
struct engine_st *prev_dyn;
|
|
|
|
|
struct engine_st *next_dyn;
|
|
|
|
|
ENGINE_DYNAMIC_ID dynamic_id;
|
2000-11-03 04:33:04 +08:00
|
|
|
};
|
2000-10-27 05:07:28 +08:00
|
|
|
|
2016-01-11 22:11:13 +08:00
|
|
|
typedef struct st_engine_pile ENGINE_PILE;
|
|
|
|
|
|
2022-03-22 19:52:27 +08:00
|
|
|
DEFINE_LHASH_OF_EX(ENGINE_PILE);
|
2016-01-11 22:11:13 +08:00
|
|
|
|
2023-06-22 07:24:27 +08:00
|
|
|
static ossl_unused ossl_inline int eng_struct_ref(ENGINE *e)
|
|
|
|
|
{
|
|
|
|
|
int res;
|
|
|
|
|
|
|
|
|
|
CRYPTO_GET_REF(&e->struct_ref, &res);
|
|
|
|
|
return res;
|
|
|
|
|
}
|
|
|
|
|
|
2019-09-28 06:45:57 +08:00
|
|
|
#endif /* OSSL_CRYPTO_ENGINE_ENG_LOCAL_H */
|