src/openssl.c: Add sslctx:getCertificate()

1 files changed, 29 insertions, 0 deletions

diff --git a/src/openssl.c b/src/openssl.c
index 860b8a0..4a8649b 100644
--- a/src/openssl.c
+++ b/src/openssl.c
@@ -277,6 +277,10 @@
 #define HAVE_SSL_CTX_GET0_PARAM OPENSSL_PREREQ(1,0,2)
 #endif
 
+#ifndef HAVE_SSL_CTX_GET0_CERTIFICATE
+#define HAVE_SSL_CTX_GET0_CERTIFICATE (OPENSSL_PREREQ(1,0,2) || LIBRESSL_PREREQ(2,7,0))
+#endif
+
 #ifndef HAVE_SSL_CTX_SET_CURVES_LIST
 #define HAVE_SSL_CTX_SET_CURVES_LIST (OPENSSL_PREREQ(1,0,2) || LIBRESSL_PREREQ(2,5,1))
 #endif
@@ -1811,6 +1815,17 @@ static X509_VERIFY_PARAM *compat_SSL_CTX_get0_param(SSL_CTX *ctx) {
 } /* compat_SSL_CTX_get0_param() */
 #endif
 
+#if !HAVE_SSL_CTX_GET0_CERTIFICATE
+#define SSL_CTX_get0_certificate(ctx) compat_SSL_CTX_get0_certificate((ctx))
+
+static X509 *compat_SSL_CTX_get0_certificate(const SSL_CTX *ctx) {
+    if (ctx->cert != NULL)
+        return ctx->cert->key->x509;
+    else
+        return NULL;
+} /* compat_SSL_CTX_get0_certificate() */
+#endif
+
 #if !HAVE_SSL_CTX_SET1_PARAM
 #define SSL_CTX_set1_param(ctx, vpm) compat_SSL_CTX_set1_param((ctx), (vpm))
 
@@ -8493,6 +8508,19 @@ static int sx_setCertificate(lua_State *L) {
 } /* sx_setCertificate() */
 
 
+static int sx_getCertificate(lua_State *L) {
+	SSL_CTX *ctx = checksimple(L, 1, SSL_CTX_CLASS);
+	X509 *x509;
+
+	if (!(x509 = SSL_CTX_get0_certificate(ctx)))
+		return 0;
+
+	xc_dup(L, x509);
+
+	return 1;
+} /* sx_getCertificate() */
+
+
 static int sx_setPrivateKey(lua_State *L) {
 	SSL_CTX *ctx = checksimple(L, 1, SSL_CTX_CLASS);
 	EVP_PKEY *key = checksimple(L, 2, PKEY_CLASS);
@@ -8845,6 +8873,7 @@ static const auxL_Reg sx_methods[] = {
 	{ "setVerify",        &sx_setVerify },
 	{ "getVerify",        &sx_getVerify },
 	{ "setCertificate",   &sx_setCertificate },
+	{ "getCertificate",   &sx_getCertificate },
 	{ "setPrivateKey",    &sx_setPrivateKey },
 	{ "setCipherList",    &sx_setCipherList },
 #if HAVE_SSL_CTX_SET_CURVES_LIST