diff options
| -rw-r--r-- | src/openssl.c | 29 |
1 files changed, 29 insertions, 0 deletions
diff --git a/src/openssl.c b/src/openssl.c index 860b8a0..4a8649b 100644 --- a/src/openssl.c +++ b/src/openssl.c @@ -277,6 +277,10 @@ #define HAVE_SSL_CTX_GET0_PARAM OPENSSL_PREREQ(1,0,2) #endif +#ifndef HAVE_SSL_CTX_GET0_CERTIFICATE +#define HAVE_SSL_CTX_GET0_CERTIFICATE (OPENSSL_PREREQ(1,0,2) || LIBRESSL_PREREQ(2,7,0)) +#endif + #ifndef HAVE_SSL_CTX_SET_CURVES_LIST #define HAVE_SSL_CTX_SET_CURVES_LIST (OPENSSL_PREREQ(1,0,2) || LIBRESSL_PREREQ(2,5,1)) #endif @@ -1811,6 +1815,17 @@ static X509_VERIFY_PARAM *compat_SSL_CTX_get0_param(SSL_CTX *ctx) { } /* compat_SSL_CTX_get0_param() */ #endif +#if !HAVE_SSL_CTX_GET0_CERTIFICATE +#define SSL_CTX_get0_certificate(ctx) compat_SSL_CTX_get0_certificate((ctx)) + +static X509 *compat_SSL_CTX_get0_certificate(const SSL_CTX *ctx) { + if (ctx->cert != NULL) + return ctx->cert->key->x509; + else + return NULL; +} /* compat_SSL_CTX_get0_certificate() */ +#endif + #if !HAVE_SSL_CTX_SET1_PARAM #define SSL_CTX_set1_param(ctx, vpm) compat_SSL_CTX_set1_param((ctx), (vpm)) @@ -8493,6 +8508,19 @@ static int sx_setCertificate(lua_State *L) { } /* sx_setCertificate() */ +static int sx_getCertificate(lua_State *L) { + SSL_CTX *ctx = checksimple(L, 1, SSL_CTX_CLASS); + X509 *x509; + + if (!(x509 = SSL_CTX_get0_certificate(ctx))) + return 0; + + xc_dup(L, x509); + + return 1; +} /* sx_getCertificate() */ + + static int sx_setPrivateKey(lua_State *L) { SSL_CTX *ctx = checksimple(L, 1, SSL_CTX_CLASS); EVP_PKEY *key = checksimple(L, 2, PKEY_CLASS); @@ -8845,6 +8873,7 @@ static const auxL_Reg sx_methods[] = { { "setVerify", &sx_setVerify }, { "getVerify", &sx_getVerify }, { "setCertificate", &sx_setCertificate }, + { "getCertificate", &sx_getCertificate }, { "setPrivateKey", &sx_setPrivateKey }, { "setCipherList", &sx_setCipherList }, #if HAVE_SSL_CTX_SET_CURVES_LIST |