1// Copyright 2015 The Android Open Source Project 2// 3// Licensed under the Apache License, Version 2.0 (the "License"); 4// you may not use this file except in compliance with the License. 5// You may obtain a copy of the License at 6// 7// http://www.apache.org/licenses/LICENSE-2.0 8// 9// Unless required by applicable law or agreed to in writing, software 10// distributed under the License is distributed on an "AS IS" BASIS, 11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12// See the License for the specific language governing permissions and 13// limitations under the License. 14 15#ifndef WEBSERVER_WEBSERVD_UTILS_H_ 16#define WEBSERVER_WEBSERVD_UTILS_H_ 17 18#include <memory> 19#include <string> 20#include <vector> 21#include <openssl/ossl_typ.h> 22 23#include <base/files/file_path.h> 24#include <base/time/time.h> 25#include <brillo/secure_blob.h> 26 27namespace webservd { 28 29using X509Ptr = std::unique_ptr<X509, void(*)(X509*)>; 30 31// Creates a new X509 certificate. 32X509Ptr CreateCertificate(int serial_number, 33 const base::TimeDelta& cert_expiration, 34 const std::string& common_name); 35 36// Generates an RSA public-private key pair of the specified strength. 37std::unique_ptr<RSA, void(*)(RSA*)> GenerateRSAKeyPair(int key_length_bits); 38 39// Serializes a private key from the key pair into a PEM string and returns 40// it as a binary blob. 41brillo::SecureBlob StoreRSAPrivateKey(RSA* rsa_key_pair); 42 43// Checks if the buffer |key| contains a valid RSA private key. 44bool ValidateRSAPrivateKey(const brillo::SecureBlob& key); 45 46// Serializes an X509 certificate using PEM format. 47brillo::Blob StoreCertificate(X509* cert); 48 49// Stores/loads an X509 certificate to/from a file (in PEM format). 50bool StoreCertificate(X509* cert, const base::FilePath& file); 51X509Ptr LoadAndValidateCertificate(const base::FilePath& file); 52 53// Same as openssl x509 -fingerprint -sha256. 54brillo::Blob GetSha256Fingerprint(X509* cert); 55 56// Creates a socket bound to a specified network interface. 57// Returns a socket file descriptor or -1 on error. 58int CreateNetworkInterfaceSocket(const std::string& if_name); 59 60} // namespace webservd 61 62#endif // WEBSERVER_WEBSERVD_UTILS_H_ 63