Blame view

3rdparty/rabbitmq-c-0.11.0/librabbitmq/amqp_openssl_hostname_validation.h 2.19 KB
09c2d08c   Hu Chunming   arm交付版
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
  #ifndef librabbitmq_amqp_openssl_hostname_validation_h
  #define librabbitmq_amqp_openssl_hostname_validation_h
  
  /*
   * Copyright (C) 2012, iSEC Partners.
   * Copyright (C) 2015 Alan Antonuk.
   *
   * All rights reserved.
   *
   * Permission to use, copy, modify, and distribute this software for any
   * purpose with or without fee is hereby granted, provided that the above
   * copyright notice and this permission notice appear in all copies.
   *
   * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
   * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
   * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OF THIRD PARTY RIGHTS.
   * IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
   * DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
   * OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
   * USE OR OTHER DEALINGS IN THE SOFTWARE.
   *
   * Except as contained in this notice, the name of a copyright holder shall
   * not be used in advertising or otherwise to promote the sale, use or other
   * dealings in this Software without prior written authorization of the
   * copyright holder.
   */
  
  /* Originally from:
   * https://github.com/iSECPartners/ssl-conservatory
   * https://wiki.openssl.org/index.php/Hostname_validation
   */
  
  #include <openssl/ossl_typ.h>
  
  typedef enum {
    AMQP_HVR_MATCH_FOUND,
    AMQP_HVR_MATCH_NOT_FOUND,
    AMQP_HVR_NO_SAN_PRESENT,
    AMQP_HVR_MALFORMED_CERTIFICATE,
    AMQP_HVR_ERROR
  } amqp_hostname_validation_result;
  
  /**
   * Validates the server's identity by looking for the expected hostname in the
   * server's certificate. As described in RFC 6125, it first tries to find a
   * match in the Subject Alternative Name extension. If the extension is not
   * present in the certificate, it checks the Common Name instead.
   *
   * Returns AMQP_HVR_MATCH_FOUND if a match was found.
   * Returns AMQP_HVR_MATCH_NOT_FOUND if no matches were found.
   * Returns AMQP_HVR_MALFORMED_CERTIFICATE if any of the hostnames had a NUL
   * character embedded in it.
   * Returns AMQP_HVR_ERROR if there was an error.
   */
  amqp_hostname_validation_result amqp_ssl_validate_hostname(
      const char *hostname, const X509 *server_cert);
  
  #endif