@annadata/capacitor-mqtt-quic 0.1.6 → 0.1.7

package/android/install/wolfssl-android/arm64-v8a/share/doc/wolfssl/taoCert.txt

@@ -0,0 +1,176 @@
+
+***** Create a self signed cert ************
+
+1) openssl genrsa 1024 > client-key.pem
+
+2) openssl req -new -x509 -nodes -sha1 -days 1000 -key client-key.pem > client-cert.pem
+
+3) note md5 would be -md5
+
+-- adding metadata to beginning
+
+3) openssl x509 -in client-cert.pem -text > tmp.pem
+
+4) mv tmp.pem client-cert.pem
+
+
+***** Create a CA, signing authority **********
+
+same as self signed, use ca prefix instead of client
+
+
+***** Create a cert signed by CA **************
+
+1) openssl req -newkey rsa:1024 -sha1 -days 1000 -nodes -keyout server-key.pem > server-req.pem
+
+* note if using existing key do: -new -key keyName
+
+2) copy ca-key.pem ca-cert.srl   (why ????)
+
+3) openssl x509 -req -in server-req.pem -days 1000 -sha1 -CA ca-cert.pem -CAkey ca-key.pem -set_serial 01 > server-cert.pem
+
+
+***** Adding Subject Key ID and Authentication Key ID extensions to a cert *****
+
+Create a config file for OpenSSL with the example contents:
+
+    [skidakid]
+    subjectKeyIdentifier=hash
+    authorityKeyIdentifier=keyid
+
+Add to the openssl command for creating a cert signed by a CA step 3 the
+following options:
+
+    -extfile <file.cnf> -extensions skidakid
+
+anywhere before the redirect. This will add the cert's public key hash as the
+Subject Key Identifier, and the signer's SKID as the Authentication Key ID.
+
+
+***** To create a dsa cert ********************
+
+1) openssl dsaparam 512 > dsa512.param       # creates group params
+
+2) openssl gendsa dsa512.param > dsa512.pem  # creates private key
+
+3) openssl req -new -x509 -nodes -days 1000 -key dsa512.pem > dsa-cert.pem 
+
+
+
+
+***** To convert from PEM to DER **************
+
+a) openssl x509 -in cert.pem -inform PEM -out cert.der -outform DER
+
+to convert rsa private PEM to DER :
+
+b) openssl rsa -in key.pem -outform DER -out key.der
+
+
+**** To encrypt rsa key already in pem **********
+
+a) openssl rsa <server-key.pem.bak -des >server-keyEnc.pem
+
+note location of des, pass = yassl123
+
+
+*** To make a public key from a private key ******
+
+
+openssl rsa -in 1024rsa.priv -pubout -out 1024rsa.pub
+
+
+**** To convert to pkcs8 *******
+
+openssl pkcs8 -nocrypt -topk8 -in server-key.pem -out server-keyPkcs8.pem
+
+
+**** To convert to pkcs8 encrypted *******
+
+openssl pkcs8 -topk8 -in server-key.pem -out server-keyPkcs8Enc.pem
+
+passwd: yassl123
+
+to use PKCS#5 v2 instead of v1.5 which is default add
+
+-v2 des3       # file Pkcs8Enc2
+
+to use PKCS#12 instead use -v1 which a 12 algo like
+
+-v1 PBE-SHA1-3DES   # file Pkcs8Enc12 , see man pkcs8 for more info
+-v1 PBE-SHA1-RC4-128   # no longer file Pkcs8Enc12, arc4 now off by default
+
+
+**** To convert from pkcs8 to traditional ****
+
+openssl pkcs8 -nocrypt -in server-keyPkcs8.pem -out server-key.pem
+
+
+*** DH parameters ***
+
+openssl dhparam 2048 > dh2048.param
+
+to add metadata
+
+openssl dhparam -in dh2048.param -text > dh2048.pem
+
+**** ECC ******
+
+1) make a key
+
+    to see types available do
+        openssl ecparam -list_curves
+
+    make a new key
+        openssl ecparam -genkey -text -name secp256r1 -out ecc-key.pem
+
+    convert to compressed
+        openssl ec -in ecc-key.pem -conv_form compressed -out ecc-key-comp.pem 
+
+*** CRL ***
+
+1) create a crl
+
+a) openssl ca -gencrl -crldays 120 -out crl.pem -keyfile ./ca-key.pem -cert ./ca-cert.pem
+
+Error No ./CA root/index.txt so:
+
+b) touch ./CA root/index.txt
+
+a) again
+
+Error No ./CA root/crlnumber so:
+
+c) touch ./CA root/crlnumber
+
+a) again
+
+Error unable to load CRL number
+
+d) add '01' to crlnumber file
+
+a) again
+
+2)  view crl file
+
+openssl crl -in crl.pem -text
+
+3) revoke
+
+openssl ca -revoke server-cert.pem -keyfile ./ca-key.pem -cert ./ca-cert.pem
+
+Then regenerate crl with a)
+
+4) verify
+
+openssl verify -CAfile ./ca-cert.pem  ./server-cert.pem
+
+OK
+
+Make file with both ca and crl
+
+cat ca-cert.pem crl.pem > ca-crl.pem
+
+openssl verify -CAfile ./ca-crl.pem -crl_check ./ca-cert.pem
+
+revoked

package/android/install/wolfssl-android/armeabi-v7a/bin/wolfssl-config

@@ -0,0 +1,117 @@
+#! /bin/sh
+ 
+package="wolfssl"
+version="5.8.4"
+libs="-lwolfssl"
+ 
+prefix="/Users/annadata/Project_A/capacitor-mqtt-quic/android/install/wolfssl-android/armeabi-v7a"
+exec_prefix="${prefix}"
+bindir="${exec_prefix}/bin"
+sbindir="${exec_prefix}/sbin"
+libexecdir="${exec_prefix}/libexec"
+datadir="${datarootdir}"
+sysconfdir="${prefix}/etc"
+sharedstatedir="${prefix}/com"
+localstatedir="${prefix}/var"
+libdir="${exec_prefix}/lib"
+infodir="${datarootdir}/info"
+mandir="${datarootdir}/man"
+includedir="${prefix}/include"
+target="armv7a-unknown-linux-androideabi"
+host="armv7a-unknown-linux-androideabi"
+build="aarch64-apple-darwin25.2.0"
+ 
+if test "$#" -eq 0; then
+   cat <<EOF
+Usage: $package-config OPTIONS
+Options:
+  --prefix=DIR) : \$prefix
+  --package) : \$package
+  --version) : \$version
+  --cflags) : -I\$includedir
+  --libs) : -L\$libdir -l\$package
+  --help) print all the options (not just these)
+EOF
+fi
+ 
+o=""
+h=""
+for i in "$@"; do
+  case $i in
+  --prefix=*) prefix=`echo $i | sed -e "s/--prefix=//"` ;;
+  --prefix)    o="$o $prefix" ;;
+  --package)   o="$o $package" ;;
+  --version)   o="$o $version" ;;
+  --cflags) if test "_$includedir" != "_/usr/include"
+          then o="$o -I$includedir" ; fi
+  ;;
+  --libs)      o="$o -L$libdir $libs" ;;
+  --exec_prefix|--eprefix) o="$o $exec_prefix" ;;
+  --bindir)                o="$o $bindir" ;;
+  --sbindir)               o="$o $sbindir" ;;
+  --libexecdir)            o="$o $libexecdir" ;;
+  --datadir)               o="$o $datadir" ;;
+  --datainc)               o="$o -I$datadir" ;;
+  --datalib)               o="$o -L$datadir" ;;
+  --sysconfdir)            o="$o $sysconfdir" ;;
+  --sharedstatedir)        o="$o $sharedstatedir" ;;
+  --localstatedir)         o="$o $localstatedir" ;;
+  --libdir)                o="$o $libdir" ;;
+  --libadd)                o="$o -L$libdir" ;;
+  --infodir)               o="$o $infodir" ;;
+  --mandir)                o="$o $mandir" ;;
+  --target)                o="$o $target" ;;
+  --host)                  o="$o $host" ;;
+  --build)                 o="$o $build" ;;
+  --data)                  o="$o -I$datadir/$package" ;;
+  --pkgdatadir)            o="$o $datadir/$package" ;;
+  --pkgdatainc)            o="$o -I$datadir/$package" ;;
+  --pkgdatalib)            o="$o -L$datadir/$package" ;;
+  --pkglibdir)             o="$o $libdir/$package" ;;
+  --pkglibinc)             o="$o -I$libinc/$package" ;;
+  --pkglibadd)             o="$o -L$libadd/$package" ;;
+  --pkgincludedir)         o="$o $includedir/$package" ;;
+  --help) h="1" ;;
+  -?//*|-?/*//*|-?./*//*|//*|/*//*|./*//*) 
+       v=`echo $i | sed -e s://:\$:g`
+       v=`eval "echo $v"` 
+       o="$o $v" ;; 
+  esac
+done
+ 
+o=`eval "echo $o"`
+o=`eval "echo $o"`
+eval "echo $o"
+ 
+if test ! -z "$h" ; then 
+cat <<EOF
+  --prefix=xxx)      (what is that for anyway?)
+  --prefix)         \$prefix        $prefix
+  --package)        \$package       $package
+  --version)        \$version       $version
+  --cflags)         -I\$includedir    unless it is /usr/include
+  --libs)           -L\$libdir -l\$PACKAGE \$LIBS
+  --exec_prefix) or... 
+  --eprefix)        \$exec_prefix   $exec_prefix
+  --bindir)         \$bindir        $bindir
+  --sbindir)        \$sbindir       $sbindir
+  --libexecdir)     \$libexecdir    $libexecdir
+  --datadir)        \$datadir       $datadir
+  --sysconfdir)     \$sysconfdir    $sysconfdir
+  --sharedstatedir) \$sharedstatedir$sharedstatedir
+  --localstatedir)  \$localstatedir $localstatedir
+  --libdir)         \$libdir        $libdir
+  --infodir)        \$infodir       $infodir
+  --mandir)         \$mandir        $mandir
+  --target)         \$target        $target
+  --host)           \$host          $host
+  --build)          \$build         $build
+  --data)           -I\$datadir/\$package
+  --pkgdatadir)     \$datadir/\$package
+  --pkglibdir)      \$libdir/\$package
+  --pkgincludedir)  \$includedir/\$package
+  --help)           generated by ax_create_generic_config.m4
+  -I//varname and other inc-targets like --pkgdatainc supported
+  -L//varname and other lib-targets, e.g. --pkgdatalib or --libadd
+EOF
+fi

package/android/install/wolfssl-android/armeabi-v7a/include/wolfssl/callbacks.h

@@ -0,0 +1,93 @@
+/* callbacks.h
+ *
+ * Copyright (C) 2006-2025 wolfSSL Inc.
+ *
+ * This file is part of wolfSSL.
+ *
+ * wolfSSL is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * wolfSSL is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1335, USA
+ */
+
+
+
+#ifndef WOLFSSL_CALLBACKS_H
+#define WOLFSSL_CALLBACKS_H
+
+#include <wolfssl/wolfcrypt/wc_port.h>
+
+#ifdef __cplusplus
+    extern "C" {
+#endif
+
+
+enum { /* CALLBACK CONSTANTS */
+    MAX_PACKETNAME_SZ     =  24,
+    MAX_CIPHERNAME_SZ     =  24,
+    MAX_TIMEOUT_NAME_SZ   =  24,
+    MAX_PACKETS_HANDSHAKE =  14,       /* 12 for client auth plus 2 alerts */
+    MAX_VALUE_SZ          = 128        /* all handshake packets but Cert should
+                                          fit here  */
+};
+
+struct WOLFSSL;
+
+typedef struct handShakeInfo_st {
+    struct WOLFSSL* ssl;
+    char   cipherName[MAX_CIPHERNAME_SZ + 1];    /* negotiated cipher */
+    char   packetNames[MAX_PACKETS_HANDSHAKE][MAX_PACKETNAME_SZ + 1];
+                                                 /* SSL packet names  */
+    int    numberPackets;                        /* actual # of packets */
+    int    negotiationError;                     /* cipher/parameter err */
+} HandShakeInfo;
+
+
+#if defined(HAVE_SYS_TIME_H) && !defined(NO_TIMEVAL)
+    typedef struct timeval WOLFSSL_TIMEVAL;
+#else /* HAVE_SYS_TIME_H */
+    /* Define the timeval explicitly. */
+    typedef struct {
+        long tv_sec;  /* Seconds. */
+        long tv_usec; /* Microseconds. */
+    } WOLFSSL_TIMEVAL;
+#endif /* HAVE_SYS_TIME_H */
+#if !defined(NO_OLD_TIMEVAL_NAME)
+    #define Timeval WOLFSSL_TIMEVAL
+#endif
+
+typedef struct packetInfo_st {
+    char           packetName[MAX_PACKETNAME_SZ + 1]; /* SSL packet name */
+    WOLFSSL_TIMEVAL timestamp;                       /* when it occurred    */
+    unsigned char  value[MAX_VALUE_SZ];             /* if fits, it's here */
+    unsigned char* bufferValue;                     /* otherwise here (non 0) */
+    int            valueSz;                         /* sz of value or buffer */
+} PacketInfo;
+
+
+typedef struct timeoutInfo_st {
+    char       timeoutName[MAX_TIMEOUT_NAME_SZ + 1]; /* timeout Name */
+    int        flags;                              /* for future use */
+    int        numberPackets;                      /* actual # of packets */
+    PacketInfo packets[MAX_PACKETS_HANDSHAKE];     /* list of all packets  */
+    WOLFSSL_TIMEVAL timeoutValue;                  /* timer that caused it */
+} TimeoutInfo;
+
+
+
+#ifdef __cplusplus
+    }  /* extern "C" */
+#endif
+
+
+#endif /* WOLFSSL_CALLBACKS_H */
+