rho-tau-extensions 5.5.17

data/libs/openssl-edge/openssl/digest.rb

@@ -0,0 +1,61 @@
+=begin
+= $RCSfile$ -- Ruby-space predefined Digest subclasses
+
+= Info
+  'OpenSSL for Ruby 2' project
+  Copyright (C) 2002  Michal Rokos <m.rokos@sh.cvut.cz>
+  All rights reserved.
+
+= Licence
+  This program is licenced under the same licence as Ruby.
+  (See the file 'LICENCE'.)
+
+= Version
+  $Id: digest.rb 26743 2010-02-23 17:33:39Z knu $
+=end
+
+##
+# Should we care what if somebody require this file directly?
+#require 'openssl'
+
+module OpenSSL
+  class Digest
+
+    alg = %w(DSS DSS1 MD2 MD4 MD5 MDC2 RIPEMD160 SHA SHA1)
+    if OPENSSL_VERSION_NUMBER > 0x00908000
+      alg += %w(SHA224 SHA256 SHA384 SHA512)
+    end
+
+    def self.digest(name, data)
+        super(data, name)
+    end
+
+    alg.each{|name|
+      klass = Class.new(Digest){
+        define_method(:initialize){|*data|
+          if data.length > 1
+            raise ArgumentError,
+              "wrong number of arguments (#{data.length} for 1)"
+          end
+          super(name, data.first)
+        }
+      }
+      singleton = (class << klass; self; end)
+      singleton.class_eval{
+        define_method(:digest){|data| Digest.digest(name, data) }
+        define_method(:hexdigest){|data| Digest.hexdigest(name, data) }
+      }
+      const_set(name, klass)
+    }
+
+    # This class is only provided for backwards compatibility.  Use OpenSSL::Digest in the future.
+    class Digest < Digest
+      def initialize(*args)
+        # add warning
+        super(*args)
+      end
+    end
+
+  end # Digest
+end # OpenSSL
+

data/libs/openssl-edge/openssl/ssl-internal.rb

@@ -0,0 +1,180 @@
+=begin
+= $RCSfile$ -- Ruby-space definitions that completes C-space funcs for SSL
+
+= Info
+  'OpenSSL for Ruby 2' project
+  Copyright (C) 2001 GOTOU YUUZOU <gotoyuzo@notwork.org>
+  All rights reserved.
+
+= Licence
+  This program is licenced under the same licence as Ruby.
+  (See the file 'LICENCE'.)
+
+= Version
+  $Id: ssl-internal.rb 25189 2009-10-02 12:04:37Z akr $
+=end
+
+require "openssl/buffering"
+
+module OpenSSL
+  module SSL
+    class SSLContext
+      DEFAULT_PARAMS = {
+        :ssl_version => "SSLv23",
+        :verify_mode => OpenSSL::SSL::VERIFY_PEER,
+        :ciphers => "ALL:!ADH:!EXPORT:!SSLv2:RC4+RSA:+HIGH:+MEDIUM:+LOW",
+        :options => OpenSSL::SSL::OP_ALL,
+      }
+
+      DEFAULT_CERT_STORE = OpenSSL::X509::Store.new
+      DEFAULT_CERT_STORE.set_default_paths
+      if defined?(OpenSSL::X509::V_FLAG_CRL_CHECK_ALL)
+        DEFAULT_CERT_STORE.flags = OpenSSL::X509::V_FLAG_CRL_CHECK_ALL
+      end
+
+      def set_params(params={})
+        params = DEFAULT_PARAMS.merge(params)
+        params.each{|name, value| self.__send__("#{name}=", value) }
+        if self.verify_mode != OpenSSL::SSL::VERIFY_NONE
+          unless self.ca_file or self.ca_path or self.cert_store
+            self.cert_store = DEFAULT_CERT_STORE
+          end
+        end
+        return params
+      end
+    end
+
+    module SocketForwarder
+      def addr
+        to_io.addr
+      end
+
+      def peeraddr
+        to_io.peeraddr
+      end
+
+      def setsockopt(level, optname, optval)
+        to_io.setsockopt(level, optname, optval)
+      end
+
+      def getsockopt(level, optname)
+        to_io.getsockopt(level, optname)
+      end
+
+      def fcntl(*args)
+        require "fcntl"
+        to_io.fcntl(*args)
+      end
+
+      def closed?
+        to_io.closed?
+      end
+
+      def do_not_reverse_lookup=(flag)
+        to_io.do_not_reverse_lookup = flag
+      end
+    end
+
+    module Nonblock
+      def initialize(*args)
+        require "fcntl"
+        flag = File::NONBLOCK
+        if (System::get_property('platform') != 'WINDOWS_DESKTOP') && !Rho::System.isRhoSimulator
+          flag |= @io.fcntl(Fcntl::F_GETFL) if defined?(Fcntl::F_GETFL)
+        end
+        @io.fcntl(Fcntl::F_SETFL, flag)
+        super
+      end
+    end
+
+    def verify_certificate_identity(cert, hostname)
+      should_verify_common_name = true
+      cert.extensions.each{|ext|
+        next if ext.oid != "subjectAltName"
+        ext.value.split(/,\s+/).each{|general_name|
+          if /\ADNS:(.*)/ =~ general_name
+            should_verify_common_name = false
+            reg = Regexp.escape($1).gsub(/\\\*/, "[^.]+")
+            return true if /\A#{reg}\z/i =~ hostname
+          elsif /\AIP Address:(.*)/ =~ general_name
+            should_verify_common_name = false
+            return true if $1 == hostname
+          end
+        }
+      }
+      if should_verify_common_name
+        cert.subject.to_a.each{|oid, value|
+          if oid == "CN"
+            reg = Regexp.escape(value).gsub(/\\\*/, "[^.]+")
+            return true if /\A#{reg}\z/i =~ hostname
+          end
+        }
+      end
+      return false
+    end
+    module_function :verify_certificate_identity
+
+    class SSLSocket
+      include Buffering
+      include SocketForwarder
+      include Nonblock
+
+      def post_connection_check(hostname)
+        unless OpenSSL::SSL.verify_certificate_identity(peer_cert, hostname)
+          raise SSLError, "hostname was not match with the server certificate"
+        end
+        return true
+      end
+
+      def session
+        SSL::Session.new(self)
+      rescue SSL::Session::SessionError
+        nil
+      end
+    end
+
+    class SSLServer
+      include SocketForwarder
+      attr_accessor :start_immediately
+
+      def initialize(svr, ctx)
+        @svr = svr
+        @ctx = ctx
+        unless ctx.session_id_context
+          session_id = OpenSSL::Digest::MD5.hexdigest($0)
+          @ctx.session_id_context = session_id
+        end
+        @start_immediately = true
+      end
+
+      def to_io
+        @svr
+      end
+
+      def listen(backlog=5)
+        @svr.listen(backlog)
+      end
+
+      def shutdown(how=Socket::SHUT_RDWR)
+        @svr.shutdown(how)
+      end
+
+      def accept
+        sock = @svr.accept
+        begin
+          ssl = OpenSSL::SSL::SSLSocket.new(sock, @ctx)
+          ssl.sync_close = true
+          ssl.accept if @start_immediately
+          ssl
+        rescue SSLError => ex
+          sock.close
+          raise ex
+        end
+      end
+
+      def close
+        @svr.close
+      end
+    end
+  end
+end

data/libs/openssl-edge/openssl/ssl.rb

@@ -0,0 +1 @@
+require 'openssl'

data/libs/openssl-edge/openssl/x509-internal.rb

@@ -0,0 +1,153 @@
+=begin
+= $RCSfile$ -- Ruby-space definitions that completes C-space funcs for X509 and subclasses
+
+= Info
+  'OpenSSL for Ruby 2' project
+  Copyright (C) 2002  Michal Rokos <m.rokos@sh.cvut.cz>
+  All rights reserved.
+
+= Licence
+  This program is licenced under the same licence as Ruby.
+  (See the file 'LICENCE'.)
+
+= Version
+  $Id: x509-internal.rb 27967 2010-05-23 08:48:44Z nobu $
+=end
+
+module OpenSSL
+  module X509
+    class ExtensionFactory
+      def create_extension(*arg)
+        if arg.size > 1
+          create_ext(*arg)
+        else
+          send("create_ext_from_"+arg[0].class.name.downcase, arg[0])
+        end
+      end
+
+      def create_ext_from_array(ary)
+        raise ExtensionError, "unexpected array form" if ary.size > 3
+        create_ext(ary[0], ary[1], ary[2])
+      end
+
+      def create_ext_from_string(str) # "oid = critical, value"
+        oid, value = str.split(/=/, 2)
+        oid.strip!
+        value.strip!
+        create_ext(oid, value)
+      end
+
+      def create_ext_from_hash(hash)
+        create_ext(hash["oid"], hash["value"], hash["critical"])
+      end
+    end
+
+    class Extension
+      def to_s # "oid = critical, value"
+        str = self.oid
+        str << " = "
+        str << "critical, " if self.critical?
+        str << self.value.gsub(/\n/, ", ")
+      end
+
+      def to_h # {"oid"=>sn|ln, "value"=>value, "critical"=>true|false}
+        {"oid"=>self.oid,"value"=>self.value,"critical"=>self.critical?}
+      end
+
+      def to_a
+        [ self.oid, self.value, self.critical? ]
+      end
+    end
+
+    class Name
+      module RFC2253DN
+        Special = ',=+<>#;'
+        HexChar = /[0-9a-fA-F]/
+        HexPair = /#{HexChar}#{HexChar}/
+        HexString = /#{HexPair}+/
+        Pair = /\\(?:[#{Special}]|\\|"|#{HexPair})/
+        StringChar = /[^#{Special}\\"]/
+        QuoteChar = /[^\\"]/
+        AttributeType = /[a-zA-Z][0-9a-zA-Z]*|[0-9]+(?:\.[0-9]+)*/
+        AttributeValue = /
+          (?!["#])((?:#{StringChar}|#{Pair})*)|
+          \#(#{HexString})|
+          "((?:#{QuoteChar}|#{Pair})*)"
+        /x
+        TypeAndValue = /\A(#{AttributeType})=#{AttributeValue}/
+
+        module_function
+
+        def expand_pair(str)
+          return nil unless str
+          return str.gsub(Pair){
+            pair = $&
+            case pair.size
+            when 2 then pair[1,1]
+            when 3 then Integer("0x#{pair[1,2]}").chr
+            else raise OpenSSL::X509::NameError, "invalid pair: #{str}"
+            end
+          }
+        end
+
+        def expand_hexstring(str)
+          return nil unless str
+          der = str.gsub(HexPair){$&.to_i(16).chr }
+          a1 = OpenSSL::ASN1.decode(der)
+          return a1.value, a1.tag
+        end
+
+        def expand_value(str1, str2, str3)
+          value = expand_pair(str1)
+          value, tag = expand_hexstring(str2) unless value
+          value = expand_pair(str3) unless value
+          return value, tag
+        end
+
+        def scan(dn)
+          str = dn
+          ary = []
+          while true
+            if md = TypeAndValue.match(str)
+              matched = md.to_s
+              remain = md.post_match
+              type = md[1]
+              value, tag = expand_value(md[2], md[3], md[4]) rescue nil
+              if value
+                type_and_value = [type, value]
+                type_and_value.push(tag) if tag
+                ary.unshift(type_and_value)
+                if remain.length > 2 && remain[0] == ?,
+                  str = remain[1..-1]
+                  next
+                elsif remain.length > 2 && remain[0] == ?+
+                  raise OpenSSL::X509::NameError,
+                    "multi-valued RDN is not supported: #{dn}"
+                elsif remain.empty?
+                  break
+                end
+              end
+            end
+            msg_dn = dn[0, dn.length - str.length] + " =>" + str
+            raise OpenSSL::X509::NameError, "malformed RDN: #{msg_dn}"
+          end
+          return ary
+        end
+      end
+
+      class << self
+        def parse_rfc2253(str, template=OBJECT_TYPE_TEMPLATE)
+          ary = OpenSSL::X509::Name::RFC2253DN.scan(str)
+          self.new(ary, template)
+        end
+
+        def parse_openssl(str, template=OBJECT_TYPE_TEMPLATE)
+          ary = str.scan(/\s*([^\/,]+)\s*/).collect{|i| i[0].split("=", 2) }
+          self.new(ary, template)
+        end
+
+        alias parse parse_openssl
+      end
+    end
+  end
+end

data/libs/openssl-edge/openssl/x509.rb

@@ -0,0 +1 @@
+require 'openssl'

data/libs/openssl.so-edge.rb

@@ -0,0 +1,2 @@
+require 'openssl.so-edge/openssl.so'
+$app_config['extpaths'] << File.dirname(__FILE__)

data/libs/openssl.so-edge/ext.yml

@@ -0,0 +1,8 @@
+win32:
+  libraries: [ "libeay32", "ssleay32" ]
+wm:
+  libraries: [ "libopenssl", "crypt32" ]
+iphone:
+  libraries: [ "openssl.so" ]
+android:
+  exttype: prebuilt

data/libs/openssl.so-edge/ext/Rakefile

@@ -0,0 +1,140 @@
+require 'fileutils'
+
+def build_extension(name, arch)
+
+  mkdir_p $targetdir unless File.exist? $targetdir
+
+  if $platform == 'android'
+=begin
+    #cp_r File.join($rootdir, "lib/extensions/openssl.so/ext/android/libs/armeabi/libopenssl.so"), $targetdir
+    objects = []
+    mkdir_p $tempdir unless File.exists? $tempdir
+
+    Dir.glob("sources/**/*.c").each do |f|
+
+      toskip = [ "ncbc_enc.c" ]
+
+      if toskip.include? File.basename(f)
+        next
+      end
+
+      if File.basename(f).match(/^LPdir/)
+        next
+      end
+
+      objname = File.join( $tempdir, File.basename( f.gsub(/\.c$/, '.o') ) )
+      objects << ('"'+objname+'"')
+    	
+      args = []
+      
+      args << "-DOPENSSL_SMALL_FOOTPRINT"
+      args << "-DOPENSSL_NO_RC5"
+      args << "-DOPENSSL_NO_MD2"
+      args << "-DOPENSSL_NO_KRB5"
+      args << "-DOPENSSL_NO_JPAKE"
+      args << "-DOPENSSL_NO_DYNAMIC_ENGINE"
+  
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/include\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/apps\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/engines\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/ssl\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto/asn1\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto/evp\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto/rsa\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto/modes\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto/dsa\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto/asn1\""
+      args << "-I\"#{$rootdir}/lib/extensions/openssl.so/ext/sources/crypto/ccgost\""
+  
+      args << "-I\"#{$rootdir}/platform/shared/ruby/android\""
+      args << "-I\"#{$rootdir}/platform/shared/ruby/generated\""
+
+      cc_compile f, $tempdir, args or exit 1
+    end
+
+    cc_ar ('"'+File.join( $targetdir, 'lib' + name + '.a' )+'"'), Dir.glob($tempdir + "/**/*.o").collect{|x| '"'+x+'"'} or exit 1
+=end
+  elsif ($platform == 'iphone') or ($platform == 'osx')
+
+  elsif $platform == 'wm'
+
+    cp_r File.join($rootdir, "lib/extensions/openssl.so/ext/wm/lib/libopenssl.lib"), $targetdir
+
+  elsif $platform == 'win32'
+    libs_subdir = ($qmake_spec =~ /msvc2008/) ? 'msvc2008/' : ''
+    cp_r File.join($rootdir, "lib/extensions/openssl.so/ext/win32/#{libs_subdir}lib/libeay32.lib"), $targetdir
+    cp_r File.join($rootdir, "lib/extensions/openssl.so/ext/win32/#{libs_subdir}lib/ssleay32.lib"), $targetdir
+  end
+end
+
+namespace "build" do
+  task :config do
+    $platform = ENV['RHO_PLATFORM']
+
+    $targetdir = ENV['TARGET_TEMP_DIR']
+    raise "TARGET_TEMP_DIR is not set" if $targetdir.nil?
+    $tempdir = ENV['TEMP_FILES_DIR']
+    raise "TEMP_FILES_DIR is not set" if $tempdir.nil?
+    $rootdir = ENV['RHO_ROOT']
+    raise "RHO_ROOT is not set" if $rootdir.nil?
+
+    if $platform == 'android'
+      require File.join($rootdir, 'platform/android/build/androidcommon.rb')
+
+      setup_ndk(ENV['ANDROID_NDK'],ENV['ANDROID_API_LEVEL'])
+
+    elsif $platform == 'iphone'
+      $bindir = ENV['PLATFORM_DEVELOPER_BIN_DIR']
+      raise "PLATFORM_DEVELOPER_BIN_DIR is not set" if $bindir.nil?
+      $sdkroot = ENV['SDKROOT']
+      raise "SDKROOT is not set" if $sdkroot.nil?
+      $arch = ENV['ARCHS']
+      raise "ARCHS is not set" if $arch.nil?
+      $gccbin = $bindir + '/gcc'
+      $arbin = $bindir + '/ar'
+      
+      $xcodebuild = ENV['XCODEBUILD']	
+      raise "XCODEBUILD is not set" if $xcodebuild.nil?
+    
+      $configuration = ENV['CONFIGURATION']	
+      raise "CONFIGURATION is not set" if $configuration.nil?
+
+      $sdk = ENV['SDK_NAME']	
+      raise "SDK_NAME is not set" if $sdk.nil?
+
+    elsif $platform == 'osx'
+      $bindir = ENV['PLATFORM_DEVELOPER_BIN_DIR']
+      raise "PLATFORM_DEVELOPER_BIN_DIR is not set" if $bindir.nil?
+      $arch = ENV['ARCHS']
+      raise "ARCHS is not set" if $arch.nil?
+      $gccbin = $bindir + '/gcc'
+      $arbin = $bindir + '/ar'
+
+      $xcodebuild = ENV['XCODEBUILD']
+      raise "XCODEBUILD is not set" if $xcodebuild.nil?
+
+    elsif $platform == 'wm'
+      $vcbuild = ENV['VCBUILD']
+      raise "VCBUILD is not set" if $vcbuild.nil?
+      $sdk = ENV['SDK']
+      raise "SDK is not set" if $sdk.nil?
+
+    elsif $platform == 'win32'
+      $vcbuild = ENV['VCBUILD']
+      raise "VCBUILD is not set" if $vcbuild.nil?
+      $sdk = ENV['SDK']
+      raise "SDK is not set" if $sdk.nil?
+      $qmake_spec = ENV['RHO_QMAKE_SPEC']
+      raise "RHO_QMAKE_SPEC is not set" if $qmake_spec.nil?
+
+    end
+  end
+
+  task :all => :config do
+    build_extension('openssl.so', $arch)
+  end
+end
+
+task :default => "build:all"