Hush Full Node software. We were censored from Github, this is where all development happens now.
https://hush.is
You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
57 lines
2.2 KiB
57 lines
2.2 KiB
// Copyright (c) 2017 The Zen Core developers
|
|
// Copyright (c) 2019-2020 The Hush developers
|
|
// Distributed under the GPLv3 software license, see the accompanying
|
|
// file COPYING or https://www.gnu.org/licenses/gpl-3.0.en.html
|
|
|
|
#ifndef UTILTLS_H
|
|
#define UTILTLS_H
|
|
|
|
#include <boost/filesystem/path.hpp>
|
|
namespace hush {
|
|
|
|
#define TLS_KEY_FILE_NAME "key.pem" // default name of a private key
|
|
#define TLS_CERT_FILE_NAME "cert.pem" // default name of a certificate
|
|
|
|
#define CERT_VALIDITY_DAYS (365 * 10) // period of validity, in days, for a self-signed certificate
|
|
|
|
#define TLS_RSA_KEY_SIZE 2048 // size of a private RSA key, in bits, that will be generated, if no other key is specified
|
|
|
|
typedef enum {credOk, credNonConsistent, credAbsent, credPartiallyAbsent} CredentialsStatus;
|
|
|
|
// Verifies credentials (a private key, a certificate for public key and a correspondence between the private and the public key)
|
|
//
|
|
CredentialsStatus VerifyCredentials(
|
|
const boost::filesystem::path &keyPath,
|
|
const boost::filesystem::path &certPath,
|
|
const std::string &passphrase);
|
|
|
|
// Generates public key pair and the self-signed certificate for it, and then stores them by the specified paths 'keyPath' and 'certPath' respectively.
|
|
//
|
|
bool GenerateCredentials(
|
|
const boost::filesystem::path &keyPath,
|
|
const boost::filesystem::path &certPath,
|
|
const std::string &passphrase);
|
|
|
|
// Checks if certificate of a peer is valid (by internal means of the TLS protocol)
|
|
//
|
|
// Validates peer certificate using a chain of CA certificates.
|
|
// If some of intermediate CA certificates are absent in the trusted certificates store, then validation status will be 'false')
|
|
//
|
|
bool ValidatePeerCertificate(SSL *ssl);
|
|
|
|
// Check if a given context is set up with a cert that can be validated by this context
|
|
//
|
|
bool ValidateCertificate(SSL_CTX *ssl_ctx);
|
|
|
|
// Creates the list of available OpenSSL default directories for trusted certificates storage
|
|
//
|
|
std::vector<boost::filesystem::path> GetDefaultTrustedDirectories();
|
|
|
|
// Loads default root certificates (placed in the 'defaultRootCerts') into the specified context.
|
|
// Returns the number of loaded certificates.
|
|
//
|
|
int LoadDefaultRootCertificates(SSL_CTX *ctx);
|
|
|
|
}
|
|
|
|
#endif // UTILTLS_H
|
|
|