2c2e9602b3
* Remove duplications in rdpRsaKey, reuse rdpCertificate for public components * Move all private key and certificate code to certificate.c, remove the tssk_* variables from gcc * Handle update of client and server random keys in wrapping functions * Simplify gcc_write_server_security_data, use certificate.c functions to write the certificate data * Refactor security_establish_keys, use the random values stored in settings directly
76 lines
2.6 KiB
C
76 lines
2.6 KiB
C
/**
|
|
* FreeRDP: A Remote Desktop Protocol Implementation
|
|
* Certificate Handling
|
|
*
|
|
* Copyright 2011 Marc-Andre Moreau <marcandre.moreau@gmail.com>
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#ifndef FREERDP_LIB_CORE_CERTIFICATE_H
|
|
#define FREERDP_LIB_CORE_CERTIFICATE_H
|
|
|
|
#include "rdp.h"
|
|
|
|
#include <freerdp/crypto/ber.h>
|
|
#include <freerdp/crypto/crypto.h>
|
|
|
|
#include <freerdp/settings.h>
|
|
#include <freerdp/log.h>
|
|
#include <freerdp/api.h>
|
|
|
|
#include <winpr/print.h>
|
|
#include <winpr/stream.h>
|
|
|
|
/* Certificate Version */
|
|
#define CERT_CHAIN_VERSION_1 0x00000001
|
|
#define CERT_CHAIN_VERSION_2 0x00000002
|
|
#define CERT_CHAIN_VERSION_MASK 0x7FFFFFFF
|
|
#define CERT_PERMANENTLY_ISSUED 0x00000000
|
|
#define CERT_TEMPORARILY_ISSUED 0x80000000
|
|
|
|
#define SIGNATURE_ALG_RSA 0x00000001
|
|
#define KEY_EXCHANGE_ALG_RSA 0x00000001
|
|
|
|
#define BB_RSA_KEY_BLOB 6
|
|
#define BB_RSA_SIGNATURE_BLOB 8
|
|
|
|
FREERDP_LOCAL BOOL certificate_read_server_certificate(rdpCertificate* certificate,
|
|
const BYTE* server_cert, size_t length);
|
|
FREERDP_LOCAL SSIZE_T certificate_write_server_certificate(const rdpCertificate* certificate,
|
|
UINT32 dwVersion, wStream* s);
|
|
|
|
FREERDP_LOCAL rdpCertificate* certificate_clone(const rdpCertificate* certificate);
|
|
|
|
FREERDP_LOCAL rdpCertificate* certificate_new(void);
|
|
FREERDP_LOCAL rdpCertificate* certificate_new_from_file(const char* file);
|
|
FREERDP_LOCAL rdpCertificate* certificate_new_from_pem(const char* pem);
|
|
FREERDP_LOCAL void certificate_free(rdpCertificate* certificate);
|
|
|
|
FREERDP_LOCAL rdpRsaKey* key_new(const char* keyfile);
|
|
FREERDP_LOCAL rdpRsaKey* key_new_from_content(const char* keycontent, const char* keyfile);
|
|
FREERDP_LOCAL void key_free(rdpRsaKey* key);
|
|
FREERDP_LOCAL rdpRsaKey* key_clone(const rdpRsaKey* key);
|
|
|
|
#define CERTIFICATE_TAG FREERDP_TAG("core.certificate")
|
|
#ifdef WITH_DEBUG_CERTIFICATE
|
|
#define DEBUG_CERTIFICATE(...) WLog_DBG(CERTIFICATE_TAG, __VA_ARGS__)
|
|
#else
|
|
#define DEBUG_CERTIFICATE(...) \
|
|
do \
|
|
{ \
|
|
} while (0)
|
|
#endif
|
|
|
|
#endif /* FREERDP_LIB_CORE_CERTIFICATE_H */
|