libmongocrypt-helper 1.7.0.0.1001 → 1.7.4.0.1000

data/ext/libmongocrypt/libmongocrypt/kms-message/src/kms_message/kms_request_opt.h

@@ -0,0 +1,80 @@
+/*
+ * Copyright 2018-present MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef KMS_REQUEST_OPT_H
+#define KMS_REQUEST_OPT_H
+
+#include "kms_message_defines.h"
+
+#include <stdbool.h>
+#include <stdlib.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+typedef struct _kms_request_opt_t kms_request_opt_t;
+
+typedef size_t kms_request_provider_t;
+
+#define KMS_REQUEST_PROVIDER_AWS 0
+#define KMS_REQUEST_PROVIDER_AZURE 1
+#define KMS_REQUEST_PROVIDER_GCP 2
+#define KMS_REQUEST_PROVIDER_KMIP 3
+
+KMS_MSG_EXPORT (kms_request_opt_t *)
+kms_request_opt_new (void);
+
+/* The default provider is AWS. This will automatically set extra headers.
+ * Returns false if provider is invalid. */
+KMS_MSG_EXPORT (bool)
+kms_request_opt_set_provider (kms_request_opt_t *opt,
+                              kms_request_provider_t provider);
+KMS_MSG_EXPORT (void)
+kms_request_opt_destroy (kms_request_opt_t *request);
+KMS_MSG_EXPORT (void)
+kms_request_opt_set_connection_close (kms_request_opt_t *opt,
+                                      bool connection_close);
+
+KMS_MSG_EXPORT (void)
+kms_request_opt_set_crypto_hooks (kms_request_opt_t *opt,
+                                  bool (*sha256) (void *ctx,
+                                                  const char *input,
+                                                  size_t len,
+                                                  unsigned char *hash_out),
+                                  bool (*sha256_hmac) (void *ctx,
+                                                       const char *key_input,
+                                                       size_t key_len,
+                                                       const char *input,
+                                                       size_t len,
+                                                       unsigned char *hash_out),
+                                  void *ctx);
+
+KMS_MSG_EXPORT (void)
+kms_request_opt_set_crypto_hook_sign_rsaes_pkcs1_v1_5 (
+   kms_request_opt_t *opt,
+   bool (*sign_rsaes_pkcs1_v1_5) (void *ctx,
+                                  const char *private_key,
+                                  size_t private_key_len,
+                                  const char *input,
+                                  size_t input_len,
+                                  unsigned char *signature_out),
+   void *ctx);
+#ifdef __cplusplus
+} /* extern "C" */
+#endif
+
+#endif /* KMS_REQUEST_OPT_H */

data/ext/libmongocrypt/libmongocrypt/kms-message/src/kms_message/kms_response.h

@@ -0,0 +1,43 @@
+/*
+ * Copyright 2018-present MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef KMS_RESPONSE_H
+#define KMS_RESPONSE_H
+
+#include "kms_message_defines.h"
+
+#include <stddef.h>
+#include <sys/types.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+typedef struct _kms_response_t kms_response_t;
+
+KMS_MSG_EXPORT (int)
+kms_response_get_status (kms_response_t *response);
+KMS_MSG_EXPORT (const char *)
+kms_response_get_body (kms_response_t *response, size_t *len);
+KMS_MSG_EXPORT (void) kms_response_destroy (kms_response_t *response);
+KMS_MSG_EXPORT (const char *)
+kms_response_get_error (const kms_response_t *response);
+
+#ifdef __cplusplus
+} /* extern "C" */
+#endif
+
+#endif /* KMS_RESPONSE_H */

data/ext/libmongocrypt/libmongocrypt/kms-message/src/kms_message/kms_response_parser.h

@@ -0,0 +1,64 @@
+/*
+ * Copyright 2018-present MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef KMS_RESPONSE_PARSER_H
+#define KMS_RESPONSE_PARSER_H
+
+#include "kms_message_defines.h"
+#include "kms_response.h"
+
+#include <sys/types.h>
+#include <stdbool.h>
+#include <stdint.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif
+
+typedef struct _kms_response_parser_t kms_response_parser_t;
+
+KMS_MSG_EXPORT (kms_response_parser_t *)
+kms_response_parser_new (void);
+
+KMS_MSG_EXPORT (int)
+kms_response_parser_wants_bytes (kms_response_parser_t *parser, int32_t max);
+
+KMS_MSG_EXPORT (bool)
+kms_response_parser_feed (kms_response_parser_t *parser,
+                          uint8_t *buf,
+                          uint32_t len);
+
+KMS_MSG_EXPORT (kms_response_t *)
+kms_response_parser_get_response (kms_response_parser_t *parser);
+
+/* kms_response_parser_status returns the HTTP response status if one was
+ * parsed.
+ * - Calling on a KMIP parser is an error.
+ * - Returns an int for the HTTP status or 0 on error. */
+KMS_MSG_EXPORT (int)
+kms_response_parser_status (kms_response_parser_t *parser);
+
+KMS_MSG_EXPORT (const char *)
+kms_response_parser_error (kms_response_parser_t *parser);
+
+KMS_MSG_EXPORT (void)
+kms_response_parser_destroy (kms_response_parser_t *parser);
+
+#ifdef __cplusplus
+} /* extern "C" */
+#endif
+
+#endif /* KMS_RESPONSE_PARSER_H */

data/ext/libmongocrypt/libmongocrypt/kms-message/src/kms_message.c

@@ -0,0 +1,47 @@
+/*
+ * Copyright 2018-present MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"){}
+ *
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include "kms_message/kms_b64.h"
+#include "kms_message/kms_message.h"
+#include "kms_message_private.h"
+#include "kms_crypto.h"
+
+#include <stdarg.h>
+#include <stdio.h>
+
+void
+set_error (char *error, size_t size, const char *fmt, ...)
+{
+   va_list va;
+
+   va_start (va, fmt);
+   (void) vsnprintf (error, size, fmt, va);
+   va_end (va);
+}
+
+int
+kms_message_init (void)
+{
+   kms_message_b64_initialize_rmap ();
+   return kms_crypto_init ();
+}
+
+void
+kms_message_cleanup (void)
+{
+   kms_crypto_cleanup ();
+}

data/ext/libmongocrypt/libmongocrypt/kms-message/src/kms_message_private.h

@@ -0,0 +1,142 @@
+/*
+ * Copyright 2018-present MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef KMS_MESSAGE_PRIVATE_H
+#define KMS_MESSAGE_PRIVATE_H
+
+#include <stdio.h>
+
+#include "kms_message/kms_message.h"
+#include "kms_request_str.h"
+#include "kms_kv_list.h"
+#include "kms_crypto.h"
+#include "kms_kmip_response_parser_private.h"
+
+/* Sadly, Windows does not define SSIZE_MAX. It is defined in bson-compat.h,
+ * but only since 1.22.x, so copy this from bson-compat.h for now. */
+#ifndef SSIZE_MAX
+#define SSIZE_MAX \
+   (ssize_t) (    \
+      (((size_t) 0x01u) << (sizeof (ssize_t) * (size_t) CHAR_BIT - 1u)) - 1u)
+#endif
+
+struct _kms_request_t {
+   char error[512];
+   bool failed;
+   bool finalized;
+   /* Begin: AWS specific */
+   kms_request_str_t *region;
+   kms_request_str_t *service;
+   kms_request_str_t *access_key_id;
+   kms_request_str_t *secret_key;
+   kms_request_str_t *datetime;
+   kms_request_str_t *date;
+   /* End: AWS specific */
+   kms_request_str_t *method;
+   kms_request_str_t *path;
+   kms_request_str_t *query;
+   kms_request_str_t *payload;
+   kms_kv_list_t *query_params;
+   kms_kv_list_t *header_fields;
+   /* turn off for tests only, not in public kms_request_opt_t API */
+   bool auto_content_length;
+   _kms_crypto_t crypto;
+   kms_request_str_t *to_string;
+   kms_request_provider_t provider;
+
+   /* TODO (MONGOCRYPT-342): make a union for each KMS provider type.
+      kms_request_provider_t provider;
+      union {
+         struct {} aws;
+         struct {} azure;
+         struct {} gcp;
+         struct {} kmip;
+      }
+   */
+   struct {
+      uint8_t *data;
+      uint32_t len;
+   } kmip;
+};
+
+struct _kms_response_t {
+   int status;
+   kms_kv_list_t *headers;
+   kms_request_str_t *body;
+
+   /* TODO (MONGOCRYPT-347): make a union for each KMS provider type. */
+   char error[512];
+   bool failed;
+   kms_request_provider_t provider;
+   struct {
+      uint8_t *data;
+      uint32_t len;
+   } kmip;
+};
+
+typedef enum {
+   PARSING_STATUS_LINE,
+   PARSING_HEADER,
+   PARSING_BODY,
+   PARSING_CHUNK_LENGTH,
+   PARSING_CHUNK,
+   PARSING_DONE
+} kms_response_parser_state_t;
+
+struct _kms_response_parser_t {
+   char error[512];
+   bool failed;
+   kms_response_t *response;
+   kms_request_str_t *raw_response;
+   int content_length;
+   int start; /* start of the current thing getting parsed. */
+
+   /* Support two types of HTTP 1.1 responses.
+    * - "Content-Length: x" header is present, indicating the body length.
+    * - "Transfer-Encoding: chunked" header is present, indicating a stream of
+    * chunks.
+    */
+   bool transfer_encoding_chunked;
+   int chunk_size;
+   kms_response_parser_state_t state;
+   /* TODO: MONGOCRYPT-348 reorganize this struct to better separate fields for
+    * HTTP parsing and fields for KMIP parsing. */
+   kms_kmip_response_parser_t *kmip;
+};
+
+#define CHECK_FAILED         \
+   do {                      \
+      if (request->failed) { \
+         return false;       \
+      }                      \
+   } while (0)
+
+void
+set_error (char *error, size_t size, const char *fmt, ...);
+
+#define KMS_ERROR(obj, ...)                                     \
+   do {                                                         \
+      obj->failed = true;                                       \
+      set_error (obj->error, sizeof (obj->error), __VA_ARGS__); \
+   } while (0)
+
+#define KMS_ASSERT(stmt)                      \
+   if (!(stmt)) {                             \
+      fprintf (stderr, "%s failed\n", #stmt); \
+      abort ();                               \
+   }
+
+#endif /* KMS_MESSAGE_PRIVATE_H */

data/ext/libmongocrypt/libmongocrypt/kms-message/src/kms_port.c

@@ -0,0 +1,33 @@
+/*
+ * Copyright 2020-present MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#include "kms_port.h"
+#if defined(_WIN32)
+#include <stdlib.h>
+#include <string.h>
+char * kms_strndup (const char *src, size_t len)
+{
+   char *dst = (char *) malloc (len + 1);
+   if (!dst) {
+      return 0;
+   }
+
+   memcpy (dst, src, len);
+   dst[len] = '\0';
+
+   return dst;
+}
+#endif

data/ext/libmongocrypt/libmongocrypt/kms-message/src/kms_port.h

@@ -0,0 +1,34 @@
+/*
+ * Copyright 2018-present MongoDB, Inc.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License"){}
+ *
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *   http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+#ifndef KMS_PORT_H
+#define KMS_PORT_H
+
+#include <stddef.h>
+
+#if defined(_WIN32)
+#define kms_strcasecmp _stricmp
+char *
+kms_strndup (const char *src, size_t len);
+#else
+#include <strings.h>
+
+#define kms_strndup strndup
+#define kms_strcasecmp strcasecmp
+#endif
+
+#endif /* KMS_PORT_H */