1// Copyright 2015 The Android Open Source Project
2//
3// Licensed under the Apache License, Version 2.0 (the "License");
4// you may not use this file except in compliance with the License.
5// You may obtain a copy of the License at
6//
7//      http://www.apache.org/licenses/LICENSE-2.0
8//
9// Unless required by applicable law or agreed to in writing, software
10// distributed under the License is distributed on an "AS IS" BASIS,
11// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
12// See the License for the specific language governing permissions and
13// limitations under the License.
14
15#ifndef WEBSERVER_WEBSERVD_UTILS_H_
16#define WEBSERVER_WEBSERVD_UTILS_H_
17
18#include <memory>
19#include <string>
20#include <vector>
21#include <openssl/ossl_typ.h>
22
23#include <base/files/file_path.h>
24#include <base/time/time.h>
25#include <brillo/secure_blob.h>
26
27namespace webservd {
28
29using X509Ptr = std::unique_ptr<X509, void(*)(X509*)>;
30
31// Creates a new X509 certificate.
32X509Ptr CreateCertificate(int serial_number,
33                          const base::TimeDelta& cert_expiration,
34                          const std::string& common_name);
35
36// Generates an RSA public-private key pair of the specified strength.
37std::unique_ptr<RSA, void(*)(RSA*)> GenerateRSAKeyPair(int key_length_bits);
38
39// Serializes a private key from the key pair into a PEM string and returns
40// it as a binary blob.
41brillo::SecureBlob StoreRSAPrivateKey(RSA* rsa_key_pair);
42
43// Checks if the buffer |key| contains a valid RSA private key.
44bool ValidateRSAPrivateKey(const brillo::SecureBlob& key);
45
46// Serializes an X509 certificate using PEM format.
47brillo::Blob StoreCertificate(X509* cert);
48
49// Stores/loads an X509 certificate to/from a file (in PEM format).
50bool StoreCertificate(X509* cert, const base::FilePath& file);
51X509Ptr LoadAndValidateCertificate(const base::FilePath& file);
52
53// Same as openssl x509 -fingerprint -sha256.
54brillo::Blob GetSha256Fingerprint(X509* cert);
55
56// Creates a socket bound to a specified network interface.
57// Returns a socket file descriptor or -1 on error.
58int CreateNetworkInterfaceSocket(const std::string& if_name);
59
60}  // namespace webservd
61
62#endif  // WEBSERVER_WEBSERVD_UTILS_H_
63