64c4f5732d
implement it for nCipher hardware. The interface in itself should be clear enough, but the nCipher implementation is currently not the best when it comes to getting a passphrase from the user. However, getting it better is a little hard until a better user interaction method is create. Also, use the possibility in req, so we can start to create CSR's with keys from the nForce box. WARNING: I've made *no* tests yet, mostly because I didn't implement this on the machine where I have an nForce box to play with. All I know is that it compiles cleanly on Linux...
160 lines
5.7 KiB
C
160 lines
5.7 KiB
C
/* crypto/engine/engine_int.h */
|
|
/* Written by Geoff Thorpe (geoff@geoffthorpe.net) for the OpenSSL
|
|
* project 2000.
|
|
*/
|
|
/* ====================================================================
|
|
* Copyright (c) 1999 The OpenSSL Project. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that the following conditions
|
|
* are met:
|
|
*
|
|
* 1. Redistributions of source code must retain the above copyright
|
|
* notice, this list of conditions and the following disclaimer.
|
|
*
|
|
* 2. Redistributions in binary form must reproduce the above copyright
|
|
* notice, this list of conditions and the following disclaimer in
|
|
* the documentation and/or other materials provided with the
|
|
* distribution.
|
|
*
|
|
* 3. All advertising materials mentioning features or use of this
|
|
* software must display the following acknowledgment:
|
|
* "This product includes software developed by the OpenSSL Project
|
|
* for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
|
|
*
|
|
* 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
|
|
* endorse or promote products derived from this software without
|
|
* prior written permission. For written permission, please contact
|
|
* licensing@OpenSSL.org.
|
|
*
|
|
* 5. Products derived from this software may not be called "OpenSSL"
|
|
* nor may "OpenSSL" appear in their names without prior written
|
|
* permission of the OpenSSL Project.
|
|
*
|
|
* 6. Redistributions of any form whatsoever must retain the following
|
|
* acknowledgment:
|
|
* "This product includes software developed by the OpenSSL Project
|
|
* for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
|
|
*
|
|
* THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
|
|
* EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
|
|
* PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
|
|
* ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
|
* SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
|
|
* NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
|
|
* LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
|
|
* STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
|
|
* ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
|
|
* OF THE POSSIBILITY OF SUCH DAMAGE.
|
|
* ====================================================================
|
|
*
|
|
* This product includes cryptographic software written by Eric Young
|
|
* (eay@cryptsoft.com). This product includes software written by Tim
|
|
* Hudson (tjh@cryptsoft.com).
|
|
*
|
|
*/
|
|
|
|
#ifndef HEADER_ENGINE_INT_H
|
|
#define HEADER_ENGINE_INT_H
|
|
|
|
#include <openssl/rsa.h>
|
|
#include <openssl/dsa.h>
|
|
#include <openssl/dh.h>
|
|
#include <openssl/rand.h>
|
|
#include <openssl/bn.h>
|
|
#include <openssl/evp.h>
|
|
|
|
#ifdef __cplusplus
|
|
extern "C" {
|
|
#endif
|
|
|
|
/* Bitwise OR-able values for the "flags" variable in ENGINE. */
|
|
#define ENGINE_FLAGS_MALLOCED 0x0001
|
|
|
|
#ifndef HEADER_ENGINE_H
|
|
/* Regrettably, we need to reproduce the "BN" function types here
|
|
* because there is no such "BIGNUM_METHOD" as there is with RSA,
|
|
* DSA, etc. We do this so that we don't have a case where engine.h
|
|
* and engine_int.h conflict with each other. */
|
|
typedef int (*BN_MOD_EXP)(BIGNUM *r, BIGNUM *a, const BIGNUM *p,
|
|
const BIGNUM *m, BN_CTX *ctx);
|
|
|
|
/* private key operation for RSA, provided seperately in case other
|
|
* RSA implementations wish to use it. */
|
|
typedef int (*BN_MOD_EXP_CRT)(BIGNUM *r, BIGNUM *a, const BIGNUM *p,
|
|
const BIGNUM *q, const BIGNUM *dmp1, const BIGNUM *dmq1,
|
|
const BIGNUM *iqmp, BN_CTX *ctx);
|
|
|
|
/* Generic function pointer */
|
|
typedef int (*ENGINE_GEN_FUNC_PTR)();
|
|
/* Generic function pointer taking no arguments */
|
|
typedef int (*ENGINE_GEN_INT_FUNC_PTR)(void);
|
|
/* Specific control function pointer */
|
|
typedef int (*ENGINE_CTRL_FUNC_PTR)(int cmd, long i, void *p, void (*f)());
|
|
|
|
#endif
|
|
|
|
/* This is a structure for storing implementations of various crypto
|
|
* algorithms and functions. */
|
|
typedef struct engine_st
|
|
{
|
|
const char *id;
|
|
const char *name;
|
|
RSA_METHOD *rsa_meth;
|
|
DSA_METHOD *dsa_meth;
|
|
DH_METHOD *dh_meth;
|
|
RAND_METHOD *rand_meth;
|
|
BN_MOD_EXP bn_mod_exp;
|
|
BN_MOD_EXP_CRT bn_mod_exp_crt;
|
|
int (*init)(void);
|
|
int (*finish)(void);
|
|
int (*ctrl)(int cmd, long i, void *p, void (*f)());
|
|
EVP_PKEY *(*load_privkey)(const char *key_id, const char *passphrase);
|
|
EVP_PKEY *(*load_pubkey)(const char *key_id, const char *passphrase);
|
|
int flags;
|
|
/* reference count on the structure itself */
|
|
int struct_ref;
|
|
/* reference count on usability of the engine type. NB: This
|
|
* controls the loading and initialisation of any functionlity
|
|
* required by this engine, whereas the previous count is
|
|
* simply to cope with (de)allocation of this structure. Hence,
|
|
* running_ref <= struct_ref at all times. */
|
|
int funct_ref;
|
|
/* Used to maintain the linked-list of engines. */
|
|
struct engine_st *prev;
|
|
struct engine_st *next;
|
|
} ENGINE;
|
|
|
|
/* BUILT-IN ENGINES. (these functions are only ever called once and
|
|
* do not return references - they are purely for bootstrapping). */
|
|
|
|
/* Returns a structure of software only methods (the default). */
|
|
ENGINE *ENGINE_openssl();
|
|
|
|
#ifndef NO_HW
|
|
|
|
#ifndef NO_HW_CSWIFT
|
|
/* Returns a structure of cswift methods ... NB: This can exist and be
|
|
* "used" even on non-cswift systems because the "init" will fail if the
|
|
* card/library are not found. */
|
|
ENGINE *ENGINE_cswift();
|
|
#endif /* !NO_HW_CSWIFT */
|
|
|
|
#ifndef NO_HW_NCIPHER
|
|
ENGINE *ENGINE_ncipher();
|
|
#endif /* !NO_HW_NCIPHER */
|
|
|
|
#ifndef NO_HW_ATALLA
|
|
/* Returns a structure of atalla methods. */
|
|
ENGINE *ENGINE_atalla();
|
|
#endif /* !NO_HW_ATALLA */
|
|
|
|
#endif /* !NO_HW */
|
|
|
|
#ifdef __cplusplus
|
|
}
|
|
#endif
|
|
|
|
#endif /* HEADER_ENGINE_INT_H */
|