redcar 0.3.2dev → 0.3.3

data/lib/openssl/src/java/org/jruby/ext/openssl/X509Store.java

@@ -0,0 +1,282 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2006 Ola Bini <ola@ologix.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl;
+
+import java.io.BufferedReader;
+import java.io.FileNotFoundException;
+import java.io.FileReader;
+import java.io.IOException;
+
+import java.io.Reader;
+import org.jruby.Ruby;
+import org.jruby.RubyClass;
+import org.jruby.RubyFixnum;
+import org.jruby.RubyHash;
+import org.jruby.RubyModule;
+import org.jruby.RubyNumeric;
+import org.jruby.RubyObject;
+import org.jruby.RubyString;
+import org.jruby.anno.JRubyMethod;
+import org.jruby.exceptions.RaiseException;
+import org.jruby.ext.openssl.x509store.PEMInputOutput;
+import org.jruby.ext.openssl.x509store.X509AuxCertificate;
+import org.jruby.ext.openssl.x509store.Store;
+import org.jruby.ext.openssl.x509store.StoreContext;
+import org.jruby.ext.openssl.x509store.X509Utils;
+import org.jruby.runtime.Block;
+import org.jruby.runtime.ObjectAllocator;
+import org.jruby.runtime.builtin.IRubyObject;
+
+/**
+ * @author <a href="mailto:ola.bini@ki.se">Ola Bini</a>
+ */
+public class X509Store extends RubyObject {
+    private static ObjectAllocator X509STORE_ALLOCATOR = new ObjectAllocator() {
+        public IRubyObject allocate(Ruby runtime, RubyClass klass) {
+            return new X509Store(runtime, klass);
+        }
+    };
+    
+    public static void createX509Store(Ruby runtime, RubyModule mX509) {
+        RubyClass cX509Store = mX509.defineClassUnder("Store",runtime.getObject(),X509STORE_ALLOCATOR);
+        RubyClass openSSLError = runtime.getModule("OpenSSL").getClass("OpenSSLError");
+        mX509.defineClassUnder("StoreError",openSSLError,openSSLError.getAllocator());
+        cX509Store.attr_accessor(runtime.getCurrentContext(), new IRubyObject[]{runtime.newSymbol("verify_callback"),runtime.newSymbol("error"),
+                                                                                runtime.newSymbol("error_string"),runtime.newSymbol("chain")});
+
+        cX509Store.defineAnnotatedMethods(X509Store.class);
+
+        X509StoreCtx.createX509StoreCtx(runtime, mX509);
+    }
+
+    private RubyClass cStoreError;
+    private RubyClass cStoreContext;
+
+    public X509Store(Ruby runtime, RubyClass type) {
+        super(runtime,type);
+        store = new Store();
+        cStoreError = (RubyClass)(((RubyModule)(runtime.getModule("OpenSSL").getConstant("X509"))).getConstant("StoreError"));
+        cStoreContext = (RubyClass)(((RubyModule)(runtime.getModule("OpenSSL").getConstant("X509"))).getConstant("StoreContext"));
+    }
+
+    private Store store;
+
+    Store getStore() {
+        return store;
+    }
+
+    private void raise(String msg) {
+        throw new RaiseException(getRuntime(),cStoreError, msg, true);
+    }
+
+    @JRubyMethod(name="initialize", rest=true, frame=true)
+    public IRubyObject _initialize(IRubyObject[] args, Block block) throws Exception {
+        store.setVerifyCallbackFunction(ossl_verify_cb);
+        this.set_verify_callback(getRuntime().getNil());
+        this.setInstanceVariable("@flags",RubyFixnum.zero(getRuntime()));
+        this.setInstanceVariable("@purpose",RubyFixnum.zero(getRuntime()));
+        this.setInstanceVariable("@trust",RubyFixnum.zero(getRuntime()));
+        
+        this.setInstanceVariable("@error",getRuntime().getNil());
+        this.setInstanceVariable("@error_string",getRuntime().getNil());
+        this.setInstanceVariable("@chain",getRuntime().getNil());
+        this.setInstanceVariable("@time",getRuntime().getNil());
+        return this;
+    }
+
+    @JRubyMethod(name="verify_callback=")
+    public IRubyObject set_verify_callback(IRubyObject cb) {
+        store.setExtraData(1, cb);
+        this.setInstanceVariable("@verify_callback", cb);
+        return cb;
+    }
+
+    @JRubyMethod(name="flags=")
+    public IRubyObject set_flags(IRubyObject arg) {
+        store.setFlags(RubyNumeric.fix2long(arg));
+        return arg;
+    }
+
+    @JRubyMethod(name="purpose=")
+    public IRubyObject set_purpose(IRubyObject arg) throws Exception {
+        store.setPurpose(RubyNumeric.fix2int(arg));
+        return arg;
+    }
+
+    @JRubyMethod(name="trust=")
+    public IRubyObject set_trust(IRubyObject arg) {
+        store.setTrust(RubyNumeric.fix2int(arg));
+        return arg;
+    }
+
+    @JRubyMethod(name="time=")
+    public IRubyObject set_time(IRubyObject arg) {
+        setInstanceVariable("@time",arg);
+        return arg;
+    }
+
+    @JRubyMethod
+    public IRubyObject add_path(IRubyObject arg) {
+        getRuntime().getWarnings().warn("unimplemented method called: Store#add_path");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod
+    public IRubyObject add_file(IRubyObject arg) {
+        String path = arg.toString();
+        FileReader in = null;
+        try {
+            in = new FileReader(path);
+            Reader r = new BufferedReader(in);
+            for (;;) {
+                Object o = PEMInputOutput.readPEM(r, null);
+                if (o == null) {
+                    break;
+                }
+                if (o instanceof X509AuxCertificate && store.addCertificate((X509AuxCertificate) o) != 1) {
+                    raise("can't store certificate");
+                } else if (o instanceof X509CRL && store.addCRL((java.security.cert.CRL) o) != 1) {
+                    raise("can't store crl");
+                }
+            }
+        }
+        catch (FileNotFoundException e) {
+            raise("file not found: "+ e.getMessage());
+        }
+        catch (IOException e) {
+            raise("error while reading file: "+ e.getMessage());
+        }
+        finally {
+            if (in != null) {
+                try { in.close(); } catch(Exception e) {}
+            }
+        }
+        return this;
+    }
+
+    @JRubyMethod
+    public IRubyObject set_default_paths() {
+        try {
+            RubyHash env = (RubyHash)getRuntime().getObject().fastGetConstant("ENV");
+            String file = (String)env.get(getRuntime().newString(X509Utils.getDefaultCertificateFileEnvironment()));
+            store.loadLocations(file, null);
+            String path = (String)env.get(getRuntime().newString(X509Utils.getDefaultCertificateDirectoryEnvironment()));
+            store.loadLocations(null, path);
+        }
+        catch(Exception e) {
+            raise("setting default path failed: " + e.getMessage());
+        }
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod
+    public IRubyObject add_cert(IRubyObject _cert) {
+        X509AuxCertificate cert = (_cert instanceof X509Cert) ? ((X509Cert)_cert).getAuxCert() : (X509AuxCertificate)null;
+        if(store.addCertificate(cert) != 1) {
+            raise(null);
+        }
+        return this;
+    }
+
+    @JRubyMethod
+    public IRubyObject add_crl(IRubyObject arg) {
+        java.security.cert.X509CRL crl = (arg instanceof X509CRL) ? ((X509CRL)arg).getCRL() : null;
+        if(store.addCRL(crl) != 1) {
+            raise(null);
+        }
+        return this;
+    }
+
+    @JRubyMethod(rest=true, frame=true)
+    public IRubyObject verify(IRubyObject[] args, Block block) throws Exception {
+        IRubyObject cert, chain;
+        if(org.jruby.runtime.Arity.checkArgumentCount(getRuntime(),args,1,2) == 2) {
+            chain = args[1];
+        } else {
+            chain = getRuntime().getNil();
+        }
+        cert = args[0];
+        IRubyObject proc, result;
+        X509StoreCtx ctx = (X509StoreCtx)cStoreContext.callMethod(getRuntime().getCurrentContext(),"new",new IRubyObject[]{this,cert,chain});
+        if (block.isGiven()) {
+            proc = getRuntime().newProc(Block.Type.PROC, block);
+        } else {
+            proc = getInstanceVariable("@verify_callback");
+        }
+        ctx.setInstanceVariable("@verify_callback",proc);
+        result = ctx.callMethod(getRuntime().getCurrentContext(),"verify");
+        this.setInstanceVariable("@error",ctx.error());
+        this.setInstanceVariable("@error_string",ctx.error_string());
+        this.setInstanceVariable("@chain",ctx.chain());
+        return result;
+    }
+
+    private final static Store.VerifyCallbackFunction ossl_verify_cb = new Store.VerifyCallbackFunction() {
+            public int call(Object a1, Object a2) throws Exception {
+                StoreContext ctx = (StoreContext)a2;
+                int ok = ((Integer)a1).intValue();
+                IRubyObject proc = (IRubyObject)ctx.getExtraData(1);
+                if(null == proc) {
+                    proc = (IRubyObject)ctx.ctx.getExtraData(0);
+                }
+                if(null == proc) {
+                    return ok;
+                }
+                if(!proc.isNil()) {
+                    System.err.println("WARNING: unimplemented method called: ossl_verify_cb");
+                    System.err.println("GOJS");
+                }
+
+                /*
+    if (!NIL_P(proc)) {
+	rctx = rb_protect((VALUE(*)(VALUE))ossl_x509stctx_new,
+			  (VALUE)ctx, &state);
+	ret = Qfalse;
+	if (!state) {
+	    args.proc = proc;
+	    args.preverify_ok = ok ? Qtrue : Qfalse;
+	    args.store_ctx = rctx;
+	    ret = rb_ensure(ossl_call_verify_cb_proc, (VALUE)&args,
+			    ossl_x509stctx_clear_ptr, rctx);
+	}
+	if (ret == Qtrue) {
+	    X509_STORE_CTX_set_error(ctx, X509_V_OK);
+	    ok = 1;
+	}
+	else{
+	    if (X509_STORE_CTX_get_error(ctx) == X509_V_OK) {
+		X509_STORE_CTX_set_error(ctx, X509_V_ERR_CERT_REJECTED);
+	    }
+	    ok = 0;
+	}
+    }
+                */
+                return ok;
+            }
+        };
+}// X509Store

data/lib/openssl/src/java/org/jruby/ext/openssl/X509StoreCtx.java

@@ -0,0 +1,206 @@
+/***** BEGIN LICENSE BLOCK *****
+ * Version: CPL 1.0/GPL 2.0/LGPL 2.1
+ *
+ * The contents of this file are subject to the Common Public
+ * License Version 1.0 (the "License"); you may not use this file
+ * except in compliance with the License. You may obtain a copy of
+ * the License at http://www.eclipse.org/legal/cpl-v10.html
+ *
+ * Software distributed under the License is distributed on an "AS
+ * IS" basis, WITHOUT WARRANTY OF ANY KIND, either express or
+ * implied. See the License for the specific language governing
+ * rights and limitations under the License.
+ *
+ * Copyright (C) 2006, 2007 Ola Bini <ola@ologix.com>
+ * 
+ * Alternatively, the contents of this file may be used under the terms of
+ * either of the GNU General Public License Version 2 or later (the "GPL"),
+ * or the GNU Lesser General Public License Version 2.1 or later (the "LGPL"),
+ * in which case the provisions of the GPL or the LGPL are applicable instead
+ * of those above. If you wish to allow use of your version of this file only
+ * under the terms of either the GPL or the LGPL, and not to allow others to
+ * use your version of this file under the terms of the CPL, indicate your
+ * decision by deleting the provisions above and replace them with the notice
+ * and other provisions required by the GPL or the LGPL. If you do not delete
+ * the provisions above, a recipient may use your version of this file under
+ * the terms of any one of the CPL, the GPL or the LGPL.
+ ***** END LICENSE BLOCK *****/
+package org.jruby.ext.openssl;
+
+import java.util.ArrayList;
+import java.util.Iterator;
+import java.util.List;
+
+import org.jruby.Ruby;
+import org.jruby.RubyArray;
+import org.jruby.RubyClass;
+import org.jruby.RubyModule;
+import org.jruby.RubyObject;
+import org.jruby.RubyObjectAdapter;
+import org.jruby.RubyString;
+import org.jruby.RubyTime;
+import org.jruby.anno.JRubyMethod;
+import org.jruby.exceptions.RaiseException;
+import org.jruby.ext.openssl.x509store.X509AuxCertificate;
+import org.jruby.ext.openssl.x509store.Store;
+import org.jruby.ext.openssl.x509store.StoreContext;
+import org.jruby.javasupport.JavaEmbedUtils;
+import org.jruby.runtime.Block;
+import org.jruby.runtime.ObjectAllocator;
+import org.jruby.runtime.builtin.IRubyObject;
+
+/**
+ * @author <a href="mailto:ola.bini@ki.se">Ola Bini</a>
+ */
+public class X509StoreCtx extends RubyObject {
+    private static ObjectAllocator X509STORECTX_ALLOCATOR = new ObjectAllocator() {
+        public IRubyObject allocate(Ruby runtime, RubyClass klass) {
+            return new X509StoreCtx(runtime, klass);
+        }
+    };
+
+    private static RubyObjectAdapter api = JavaEmbedUtils.newObjectAdapter();
+    
+    public static void createX509StoreCtx(Ruby runtime, RubyModule mX509) {
+        RubyClass cX509StoreContext = mX509.defineClassUnder("StoreContext",runtime.getObject(),X509STORECTX_ALLOCATOR);
+        cX509StoreContext.defineAnnotatedMethods(X509StoreCtx.class);
+    }
+
+    private StoreContext ctx;
+    private RubyClass cStoreError;
+    private RubyClass cX509Cert;
+
+    public X509StoreCtx(Ruby runtime, RubyClass type) {
+        super(runtime,type);
+        ctx = new StoreContext();
+        cStoreError = (RubyClass)(((RubyModule)(runtime.getModule("OpenSSL").getConstant("X509"))).getConstant("StoreError")); 
+        cX509Cert = (RubyClass)(((RubyModule)(runtime.getModule("OpenSSL").getConstant("X509"))).getConstant("Certificate"));
+   }
+
+    private void raise(String msg) {
+        throw new RaiseException(getRuntime(),cStoreError, msg, true);
+    }
+
+    @JRubyMethod(name="initialize", rest=true, frame=true)
+    public IRubyObject _initialize(IRubyObject[] args, Block block) throws Exception {
+        IRubyObject store;
+        IRubyObject cert = getRuntime().getNil();
+        IRubyObject chain = getRuntime().getNil();
+        Store x509st;
+        X509AuxCertificate x509 = null;
+        List<X509AuxCertificate> x509s = new ArrayList<X509AuxCertificate>();
+
+        if(org.jruby.runtime.Arity.checkArgumentCount(getRuntime(),args,1,3) > 1) {
+            cert = args[1];
+        }
+        if(args.length > 2) {
+            chain = args[2];
+        }
+        store = args[0];
+        x509st = ((X509Store)store).getStore();
+        if(!cert.isNil()) {
+            x509 = ((X509Cert)cert).getAuxCert();
+        }
+        if(!chain.isNil()) {
+            x509s = new ArrayList<X509AuxCertificate>();
+            for(Iterator iter = ((RubyArray)chain).getList().iterator();iter.hasNext();) {
+                x509s.add(((X509Cert)iter.next()).getAuxCert());
+            }
+        }
+        if(ctx.init(x509st,x509,x509s) != 1) {
+            raise(null);
+        }
+        IRubyObject t = api.getInstanceVariable(store,"@time");
+        if(!t.isNil()) {
+            set_time(t);
+        }
+        api.setInstanceVariable(this, "@verify_callback", api.getInstanceVariable(store, "@verify_callback"));
+        api.setInstanceVariable(this, "@cert", cert);
+        return this;
+    }
+
+    @JRubyMethod
+    public IRubyObject verify() throws Exception {
+        ctx.setExtraData(1,getInstanceVariable("@verify_callback"));
+        int result = ctx.verifyCertificate();
+        return result != 0 ? getRuntime().getTrue() : getRuntime().getFalse();
+    }
+
+    @JRubyMethod
+    public IRubyObject chain() throws Exception {
+        List<X509AuxCertificate> chain = ctx.getChain();
+        if(chain == null) {
+            return getRuntime().getNil();
+        }
+        List<IRubyObject> ary = new ArrayList<IRubyObject>();
+        for(X509AuxCertificate x509 : chain) {
+            ary.add(cX509Cert.callMethod(getRuntime().getCurrentContext(),"new",RubyString.newString(getRuntime(), x509.getEncoded())));
+        }
+        return getRuntime().newArray(ary);
+   }
+
+    @JRubyMethod
+    public IRubyObject error() {
+        return getRuntime().newFixnum(ctx.getError());
+    }
+
+    @JRubyMethod(name="error=")
+    public IRubyObject set_error(IRubyObject arg) {
+        System.err.println("WARNING: unimplemented method called: StoreContext#set_error");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod
+    public IRubyObject error_string() {
+        int err = ctx.getError();
+        return getRuntime().newString(org.jruby.ext.openssl.x509store.X509Utils.verifyCertificateErrorString(err));
+    }
+
+    @JRubyMethod
+    public IRubyObject error_depth() {
+        System.err.println("WARNING: unimplemented method called: StoreContext#error_depth");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod
+    public IRubyObject current_cert() {
+        System.err.println("WARNING: unimplemented method called: StoreContext#current_cert");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod
+    public IRubyObject current_crl() {
+        System.err.println("WARNING: unimplemented method called: StoreContext#current_crl");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod
+    public IRubyObject cleanup() {
+        System.err.println("WARNING: unimplemented method called: StoreContext#cleanup");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod(name="flags=")
+    public IRubyObject set_flags(IRubyObject arg) {
+        System.err.println("WARNING: unimplemented method called: StoreContext#set_flags");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod(name="purpose=")
+    public IRubyObject set_purpose(IRubyObject arg) {
+        System.err.println("WARNING: unimplemented method called: StoreContext#set_purpose");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod(name="trust=")
+    public IRubyObject set_trust(IRubyObject arg) {
+        System.err.println("WARNING: unimplemented method called: StoreContext#set_trust");
+        return getRuntime().getNil();
+    }
+
+    @JRubyMethod(name="time=")
+    public IRubyObject set_time(IRubyObject arg) {
+        ctx.setTime(0,((RubyTime)arg).getJavaDate());
+        return arg;
+    }
+}// X509StoreCtx