Lennart Poettering
9dbabd0a8b
We have these pretty macros, let's use them everywhere (so far we mostly used them for newer additions only). This PR is mostly an excercise in "perl -p -i -e", but there are some special cases: * idn-util.c exposes a function whose prototype in the official library headers is marked with the "const" attribute, and this apparently does not propagate along typeof() correctly and then __builtin_types_compatible_p() fails later because it detects that prototype and original function don't match in prototype. * libbpf removed some symbols in newer versions, hence we need to define some prototypes manually to still be able to build. * libcryptsetup marked a symbol as deprecated we want to use (knowing it is deprecated). By using the macros this is detected by the compiler. We work around it via the usual warning off macros. Note by using these macros we assume that all symbols are known during build time. Which might not be the case. We might need to revert this commit for some symbols if this trips up builds on older distros.
119 lines
4.9 KiB
C
119 lines
4.9 KiB
C
/* SPDX-License-Identifier: LGPL-2.1-or-later */
|
|
#pragma once
|
|
|
|
#if HAVE_OPENSSL
|
|
# include <openssl/evp.h>
|
|
# include <openssl/x509.h>
|
|
#endif
|
|
#include <stdbool.h>
|
|
|
|
#if HAVE_P11KIT
|
|
# include <p11-kit/p11-kit.h>
|
|
# include <p11-kit/uri.h>
|
|
#endif
|
|
|
|
#include "ask-password-api.h"
|
|
#include "dlfcn-util.h"
|
|
#include "macro.h"
|
|
#include "time-util.h"
|
|
|
|
bool pkcs11_uri_valid(const char *uri);
|
|
|
|
#if HAVE_P11KIT
|
|
DLSYM_PROTOTYPE(p11_kit_module_get_name);
|
|
DLSYM_PROTOTYPE(p11_kit_modules_finalize_and_release);
|
|
DLSYM_PROTOTYPE(p11_kit_modules_load_and_initialize);
|
|
DLSYM_PROTOTYPE(p11_kit_strerror);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_format);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_free);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_get_attributes);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_get_attribute);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_set_attribute);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_get_module_info);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_get_slot_info);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_get_token_info);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_match_token_info);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_message);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_new);
|
|
DLSYM_PROTOTYPE(p11_kit_uri_parse);
|
|
|
|
int uri_from_string(const char *p, P11KitUri **ret);
|
|
|
|
P11KitUri *uri_from_module_info(const CK_INFO *info);
|
|
P11KitUri *uri_from_slot_info(const CK_SLOT_INFO *slot_info);
|
|
P11KitUri *uri_from_token_info(const CK_TOKEN_INFO *token_info);
|
|
|
|
DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(P11KitUri*, sym_p11_kit_uri_free, NULL);
|
|
DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(CK_FUNCTION_LIST**, sym_p11_kit_modules_finalize_and_release, NULL);
|
|
|
|
CK_RV pkcs11_get_slot_list_malloc(CK_FUNCTION_LIST *m, CK_SLOT_ID **ret_slotids, CK_ULONG *ret_n_slotids);
|
|
|
|
char *pkcs11_token_label(const CK_TOKEN_INFO *token_info);
|
|
char *pkcs11_token_manufacturer_id(const CK_TOKEN_INFO *token_info);
|
|
char *pkcs11_token_model(const CK_TOKEN_INFO *token_info);
|
|
|
|
int pkcs11_token_login_by_pin(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, const CK_TOKEN_INFO *token_info, const char *token_label, const void *pin, size_t pin_size);
|
|
int pkcs11_token_login(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, CK_SLOT_ID slotid, const CK_TOKEN_INFO *token_info, const char *friendly_name, const char *icon_name, const char *key_name, const char *credential_name, usec_t until, AskPasswordFlags ask_password_flags, char **ret_used_pin);
|
|
|
|
int pkcs11_token_find_related_object(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, CK_OBJECT_HANDLE prototype, CK_OBJECT_CLASS class, CK_OBJECT_HANDLE *ret_object);
|
|
int pkcs11_token_find_x509_certificate(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, P11KitUri *search_uri, CK_OBJECT_HANDLE *ret_object);
|
|
#if HAVE_OPENSSL
|
|
int pkcs11_token_read_public_key(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, EVP_PKEY **ret_pkey);
|
|
int pkcs11_token_read_x509_certificate(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, X509 **ret_cert);
|
|
#endif
|
|
|
|
int pkcs11_token_find_private_key(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, P11KitUri *search_uri, CK_OBJECT_HANDLE *ret_object);
|
|
int pkcs11_token_decrypt_data(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, CK_OBJECT_HANDLE object, const void *encrypted_data, size_t encrypted_data_size, void **ret_decrypted_data, size_t *ret_decrypted_data_size);
|
|
|
|
int pkcs11_token_acquire_rng(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session);
|
|
|
|
typedef int (*pkcs11_find_token_callback_t)(CK_FUNCTION_LIST *m, CK_SESSION_HANDLE session, CK_SLOT_ID slotid, const CK_SLOT_INFO *slot_info, const CK_TOKEN_INFO *token_info, P11KitUri *uri, void *userdata);
|
|
int pkcs11_find_token(const char *pkcs11_uri, pkcs11_find_token_callback_t callback, void *userdata);
|
|
|
|
#if HAVE_OPENSSL
|
|
int pkcs11_acquire_public_key(const char *uri, const char *askpw_friendly_name, const char *askpw_icon, const char *askpw_credential, AskPasswordFlags askpw_flags, EVP_PKEY **ret_pkey, char **ret_pin_used);
|
|
#endif
|
|
|
|
typedef struct {
|
|
const char *friendly_name;
|
|
usec_t until;
|
|
void *encrypted_key;
|
|
size_t encrypted_key_size;
|
|
void *decrypted_key;
|
|
size_t decrypted_key_size;
|
|
bool free_encrypted_key;
|
|
const char *askpw_credential;
|
|
AskPasswordFlags askpw_flags;
|
|
} pkcs11_crypt_device_callback_data;
|
|
|
|
void pkcs11_crypt_device_callback_data_release(pkcs11_crypt_device_callback_data *data);
|
|
|
|
int pkcs11_crypt_device_callback(
|
|
CK_FUNCTION_LIST *m,
|
|
CK_SESSION_HANDLE session,
|
|
CK_SLOT_ID slot_id,
|
|
const CK_SLOT_INFO *slot_info,
|
|
const CK_TOKEN_INFO *token_info,
|
|
P11KitUri *uri,
|
|
void *userdata);
|
|
|
|
int dlopen_p11kit(void);
|
|
|
|
#else
|
|
|
|
static inline int dlopen_p11kit(void) {
|
|
return log_error_errno(SYNTHETIC_ERRNO(EOPNOTSUPP), "p11kit support is not compiled in.");
|
|
}
|
|
|
|
#endif
|
|
|
|
typedef struct {
|
|
const char *friendly_name;
|
|
usec_t until;
|
|
const char *askpw_credential;
|
|
AskPasswordFlags askpw_flags;
|
|
} systemd_pkcs11_plugin_params;
|
|
|
|
int pkcs11_list_tokens(void);
|
|
int pkcs11_find_token_auto(char **ret);
|