tlsutils.c File Reference

TLS certificate utilities. More...

#include "tlsutils.h"
#include <string.h>

Include dependency graph for tlsutils.c:

Go to the source code of this file.

Macros
#define	G_LOG_DOMAIN   "libgvm util"
	GLib logging domain.

Functions
gnutls_x509_crt_fmt_t	gvm_x509_format_from_data (const char *cert_data, size_t cert_len)
	Try to determine the format (DER or PEM) of a x509 certificate.
int	gvm_base64_to_gnutls_datum (const char *encoded, gnutls_datum_t *decoded_datum)
	Decode a Base64 string to the contents of a gnutls_datum_t.
void	gvm_x509_cert_list_free (gnutls_x509_crt_t *certs, unsigned int certs_count)
	Frees a list of X509 certificates.
gchar *	gvm_x509_privkey_to_pem (gnutls_x509_privkey_t privkey)
	Export a GnuTLS x509 private key as a PEM formatted string.
gchar *	gvm_x509_cert_list_to_pem (gnutls_x509_crt_t *certs, unsigned int certs_count)
	Export a GnuTLS x509 cerificate list as a PEM formatted string.
gchar *	gvm_x509_crl_to_pem (gnutls_x509_crl_t crl)
	Export a GnuTLS x509 CRL as a PEM formatted string.
int	gvm_pkcs12_to_pem (gnutls_pkcs12_t pkcs12, const char *passphrase, gchar **privkey_out, gchar **cert_chain_out, gchar **extra_certs_out, gchar **crl_out)
	Convert GnuTLS PKCS12 data to a PEM formatted string.

Detailed Description

TLS certificate utilities.

Definition in file tlsutils.c.

Macro Definition Documentation

G_LOG_DOMAIN

#define G_LOG_DOMAIN   "libgvm util"

GLib logging domain.

Definition at line 19 of file tlsutils.c.

Function Documentation

gvm_base64_to_gnutls_datum()

int gvm_base64_to_gnutls_datum	(	const char *	encoded,
		gnutls_datum_t *	decoded_datum )

Decode a Base64 string to the contents of a gnutls_datum_t.

Parameters

[in]	encoded	The Base64 data as a NUL-terminated string
[in,out]	decoded_datum	The datum struct to decode to.

Returns

The return code from gnutls_base64_decode2

Definition at line 48 of file tlsutils.c.

{
  gnutls_datum_t encoded_datum;
  decoded_datum->data = NULL;
  decoded_datum->size = 0;
  encoded_datum.data = (unsigned char *) encoded;
  encoded_datum.size = strlen (encoded);
 
  return gnutls_base64_decode2 (&encoded_datum, decoded_datum);
}

gvm_pkcs12_to_pem()

int gvm_pkcs12_to_pem	(	gnutls_pkcs12_t	pkcs12,
		const char *	passphrase,
		gchar **	privkey_out,
		gchar **	cert_chain_out,
		gchar **	extra_certs_out,
		gchar **	crl_out )

Convert GnuTLS PKCS12 data to a PEM formatted string.

Parameters

[in]	pkcs12	PKCS12 data to get data from
[in]	passphrase	Passphrase to decrypt PKCS12 data
[out]	privkey_out	Optional private key output
[out]	cert_chain_out	Optional certificate chain output
[out]	extra_certs_out	Optional extra certificates output
[out]	crl_out	Optional CRL output

Returns

0 success or a GnuTLS error code if decryption or parsing fails.

Definition at line 175 of file tlsutils.c.

{
  gnutls_x509_privkey_t privkey;
  gnutls_x509_crt_t *chain_certs, *extra_certs;
  gnutls_x509_crl_t crl;
  unsigned int chain_certs_count, extra_certs_count;
  int ret;
 
  if (privkey_out)
    *privkey_out = NULL;
  if (cert_chain_out)
    *cert_chain_out = NULL;
  if (extra_certs_out)
    *extra_certs_out = NULL;
  if (crl_out)
    *crl_out = NULL;
 
  chain_certs = extra_certs = NULL;
 
  gnutls_x509_privkey_init (&privkey);
  gnutls_x509_crl_init (&crl);
  ret = gnutls_pkcs12_simple_parse (pkcs12, passphrase, &privkey, &chain_certs,
                                    &chain_certs_count, &extra_certs,
                                    &extra_certs_count, &crl, 0);
  if (ret != GNUTLS_E_SUCCESS)
    {
      gnutls_x509_privkey_deinit (privkey);
      gnutls_x509_crl_deinit (crl);
      return ret;
    }
 
  if (privkey_out && privkey)
    *privkey_out = gvm_x509_privkey_to_pem (privkey);
 
  gnutls_x509_privkey_deinit (privkey);
 
  if (cert_chain_out && chain_certs_count)
    *cert_chain_out =
      gvm_x509_cert_list_to_pem (chain_certs, chain_certs_count);
 
  if (extra_certs_out && extra_certs_count)
    *extra_certs_out =
      gvm_x509_cert_list_to_pem (extra_certs, extra_certs_count);
 
  if (crl_out && crl)
    *crl_out = gvm_x509_crl_to_pem (crl);
 
  gvm_x509_cert_list_free (chain_certs, chain_certs_count);
  gvm_x509_cert_list_free (extra_certs, extra_certs_count);
  gnutls_x509_crl_deinit (crl);
 
  return GNUTLS_E_SUCCESS;
}

References gvm_x509_cert_list_free(), gvm_x509_cert_list_to_pem(), gvm_x509_crl_to_pem(), and gvm_x509_privkey_to_pem().

Here is the call graph for this function:

gvm_x509_cert_list_free()

void gvm_x509_cert_list_free	(	gnutls_x509_crt_t *	certs,
		unsigned int	certs_count )

Frees a list of X509 certificates.

Parameters

[in]	certs	The cerificate list to free.
[in]	certs_count	The number of certificates in the list.

Definition at line 66 of file tlsutils.c.

{
  if (certs == NULL)
    return;
  for (unsigned int i = 0; i < certs_count; i++)
    gnutls_x509_crt_deinit (certs[i]);
  gnutls_free (certs);
}

Referenced by gvm_pkcs12_to_pem().

Here is the caller graph for this function:

gvm_x509_cert_list_to_pem()

gchar * gvm_x509_cert_list_to_pem	(	gnutls_x509_crt_t *	certs,
		unsigned int	certs_count )

Export a GnuTLS x509 cerificate list as a PEM formatted string.

Parameters

[in]	certs	The array of certificates to export
[in]	certs_count	The number of certificates to export

Returns

The certificates as a PEM string, or NULL on error.

Definition at line 111 of file tlsutils.c.

{
  int ret;
  GString *certs_string = g_string_new ("");
  for (unsigned int i = 0; i < certs_count; i++)
    {
      gnutls_x509_crt_t cert;
      gnutls_datum_t export_datum = {.data = NULL, .size = 0};
 
      cert = certs[i];
      ret = gnutls_x509_crt_export2 (cert, GNUTLS_X509_FMT_PEM, &export_datum);
      if (ret)
        {
          g_warning ("%s: Error exporting certificate: %s", __func__,
                     gnutls_strerror (ret));
        }
      else
        g_string_append_printf (certs_string, "%s\n",
                                (char *) export_datum.data);
      gnutls_free (export_datum.data);
    }
  return g_string_free (certs_string, FALSE);
}

Referenced by gvm_pkcs12_to_pem().

Here is the caller graph for this function:

gvm_x509_crl_to_pem()

gchar * gvm_x509_crl_to_pem

(

gnutls_x509_crl_t

crl

)

Export a GnuTLS x509 CRL as a PEM formatted string.

Parameters

[in]

crl

The certificate revocation list CRL

Returns

The certificates as a PEM string, or NULL on error.

Definition at line 143 of file tlsutils.c.

{
  gchar *crl_str = NULL;
  int ret;
  gnutls_datum_t export_datum = {.data = NULL, .size = 0};
 
  ret = gnutls_x509_crl_export2 (crl, GNUTLS_X509_FMT_PEM, &export_datum);
  if (ret)
    {
      g_warning ("%s: Error exporting CRL: %s", __func__,
                 gnutls_strerror (ret));
    }
  else
    crl_str = g_strdup ((char *) export_datum.data);
 
  gnutls_free (export_datum.data);
  return crl_str;
}

Referenced by gvm_pkcs12_to_pem().

Here is the caller graph for this function:

gvm_x509_format_from_data()

gnutls_x509_crt_fmt_t gvm_x509_format_from_data	(	const char *	cert_data,
		size_t	cert_len )

Try to determine the format (DER or PEM) of a x509 certificate.

Parameters

[in]	cert_data	The certificate data.
[in]	cert_len	Length of the certificate data.

Returns

The GnuTLS x509 certificate type.

Definition at line 30 of file tlsutils.c.

{
  static const gchar *begin_str = "-----BEGIN ";
  if (g_strstr_len (cert_data, cert_len, begin_str))
    return GNUTLS_X509_FMT_PEM;
  else
    return GNUTLS_X509_FMT_DER;
}

gvm_x509_privkey_to_pem()

gchar * gvm_x509_privkey_to_pem

(

gnutls_x509_privkey_t

privkey

)

Export a GnuTLS x509 private key as a PEM formatted string.

Parameters

[in]

privkey

The private key to export.

Returns

The private key as a PEM string, or NULL on error.

Definition at line 83 of file tlsutils.c.

{
  gchar *pem_str = NULL;
  int ret;
  gnutls_datum_t export_datum = {.data = NULL, .size = 0};
 
  ret =
    gnutls_x509_privkey_export2 (privkey, GNUTLS_X509_FMT_PEM, &export_datum);
  if (ret)
    g_warning ("%s: Error exporting private key: %s", __func__,
               gnutls_strerror (ret));
  else
    pem_str = g_strdup ((const char *) export_datum.data);
 
  gnutls_free (export_datum.data);
 
  return pem_str;
}

Referenced by gvm_pkcs12_to_pem().

Here is the caller graph for this function: