@encharm/cws 4.4.0 → 4.5.1

package/src/headers/16/crypto/crypto_cipher.h

@@ -1,286 +0,0 @@
-#ifndef SRC_CRYPTO_CRYPTO_CIPHER_H_
-#define SRC_CRYPTO_CRYPTO_CIPHER_H_
-
-#if defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-
-#include "crypto/crypto_keys.h"
-#include "crypto/crypto_util.h"
-#include "allocated_buffer-inl.h"
-#include "base_object.h"
-#include "env.h"
-#include "memory_tracker.h"
-#include "v8.h"
-
-#include <string>
-
-namespace node {
-namespace crypto {
-class CipherBase : public BaseObject {
- public:
-  static void GetSSLCiphers(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void GetCiphers(const v8::FunctionCallbackInfo<v8::Value>& args);
-
-  static void Initialize(Environment* env, v8::Local<v8::Object> target);
-
-  void MemoryInfo(MemoryTracker* tracker) const override;
-  SET_MEMORY_INFO_NAME(CipherBase)
-  SET_SELF_SIZE(CipherBase)
-
- protected:
-  enum CipherKind {
-    kCipher,
-    kDecipher
-  };
-  enum UpdateResult {
-    kSuccess,
-    kErrorMessageSize,
-    kErrorState
-  };
-  enum AuthTagState {
-    kAuthTagUnknown,
-    kAuthTagKnown,
-    kAuthTagPassedToOpenSSL
-  };
-  static const unsigned kNoAuthTagLength = static_cast<unsigned>(-1);
-
-  void CommonInit(const char* cipher_type,
-                  const EVP_CIPHER* cipher,
-                  const unsigned char* key,
-                  int key_len,
-                  const unsigned char* iv,
-                  int iv_len,
-                  unsigned int auth_tag_len);
-  void Init(const char* cipher_type,
-            const ArrayBufferOrViewContents<unsigned char>& key_buf,
-            unsigned int auth_tag_len);
-  void InitIv(const char* cipher_type,
-              const ByteSource& key_buf,
-              const ArrayBufferOrViewContents<unsigned char>& iv_buf,
-              unsigned int auth_tag_len);
-  bool InitAuthenticated(const char* cipher_type, int iv_len,
-                         unsigned int auth_tag_len);
-  bool CheckCCMMessageLength(int message_len);
-  UpdateResult Update(const char* data, size_t len, AllocatedBuffer* out);
-  bool Final(AllocatedBuffer* out);
-  bool SetAutoPadding(bool auto_padding);
-
-  bool IsAuthenticatedMode() const;
-  bool SetAAD(
-      const ArrayBufferOrViewContents<unsigned char>& data,
-      int plaintext_len);
-  bool MaybePassAuthTagToOpenSSL();
-
-  static void New(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void Init(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void InitIv(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void Update(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void Final(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void SetAutoPadding(const v8::FunctionCallbackInfo<v8::Value>& args);
-
-  static void GetAuthTag(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void SetAuthTag(const v8::FunctionCallbackInfo<v8::Value>& args);
-  static void SetAAD(const v8::FunctionCallbackInfo<v8::Value>& args);
-
-  CipherBase(Environment* env, v8::Local<v8::Object> wrap, CipherKind kind);
-
- private:
-  DeleteFnPtr<EVP_CIPHER_CTX, EVP_CIPHER_CTX_free> ctx_;
-  const CipherKind kind_;
-  AuthTagState auth_tag_state_;
-  unsigned int auth_tag_len_;
-  char auth_tag_[EVP_GCM_TLS_TAG_LEN];
-  bool pending_auth_failed_;
-  int max_message_size_;
-};
-
-class PublicKeyCipher {
- public:
-  typedef int (*EVP_PKEY_cipher_init_t)(EVP_PKEY_CTX* ctx);
-  typedef int (*EVP_PKEY_cipher_t)(EVP_PKEY_CTX* ctx,
-                                   unsigned char* out, size_t* outlen,
-                                   const unsigned char* in, size_t inlen);
-
-  enum Operation {
-    kPublic,
-    kPrivate
-  };
-
-  template <Operation operation,
-            EVP_PKEY_cipher_init_t EVP_PKEY_cipher_init,
-            EVP_PKEY_cipher_t EVP_PKEY_cipher>
-  static bool Cipher(Environment* env,
-                     const ManagedEVPPKey& pkey,
-                     int padding,
-                     const EVP_MD* digest,
-                     const ArrayBufferOrViewContents<unsigned char>& oaep_label,
-                     const ArrayBufferOrViewContents<unsigned char>& data,
-                     AllocatedBuffer* out);
-
-  template <Operation operation,
-            EVP_PKEY_cipher_init_t EVP_PKEY_cipher_init,
-            EVP_PKEY_cipher_t EVP_PKEY_cipher>
-  static void Cipher(const v8::FunctionCallbackInfo<v8::Value>& args);
-};
-
-enum WebCryptoCipherMode {
-  kWebCryptoCipherEncrypt,
-  kWebCryptoCipherDecrypt
-};
-
-enum class WebCryptoCipherStatus {
-  OK,
-  INVALID_KEY_TYPE,
-  FAILED
-};
-
-// CipherJob is a base implementation class for implementations of
-// one-shot sync and async ciphers. It has been added primarily to
-// support the AES and RSA ciphers underlying the WebCrypt API.
-//
-// See the crypto_aes and crypto_rsa headers for examples of how to
-// use CipherJob.
-template <typename CipherTraits>
-class CipherJob final : public CryptoJob<CipherTraits> {
- public:
-  using AdditionalParams = typename CipherTraits::AdditionalParameters;
-
-  static void New(const v8::FunctionCallbackInfo<v8::Value>& args) {
-    Environment* env = Environment::GetCurrent(args);
-    CHECK(args.IsConstructCall());
-
-    CryptoJobMode mode = GetCryptoJobMode(args[0]);
-
-    CHECK(args[1]->IsUint32());  // Cipher Mode
-
-    uint32_t cmode = args[1].As<v8::Uint32>()->Value();
-    CHECK_LE(cmode, WebCryptoCipherMode::kWebCryptoCipherDecrypt);
-    WebCryptoCipherMode cipher_mode = static_cast<WebCryptoCipherMode>(cmode);
-
-    CHECK(args[2]->IsObject());  // KeyObject
-    KeyObjectHandle* key;
-    ASSIGN_OR_RETURN_UNWRAP(&key, args[2]);
-    CHECK_NOT_NULL(key);
-
-    ArrayBufferOrViewContents<char> data(args[3]);  // data to operate on
-    if (!data.CheckSizeInt32())
-      return THROW_ERR_OUT_OF_RANGE(env, "data is too large");
-
-    AdditionalParams params;
-    if (CipherTraits::AdditionalConfig(mode, args, 4, cipher_mode, &params)
-            .IsNothing()) {
-      // The CipherTraits::AdditionalConfig is responsible for
-      // calling an appropriate THROW_CRYPTO_* variant reporting
-      // whatever error caused initialization to fail.
-      return;
-    }
-
-    new CipherJob<CipherTraits>(
-        env,
-        args.This(),
-        mode,
-        key,
-        cipher_mode,
-        data,
-        std::move(params));
-  }
-
-  static void Initialize(
-      Environment* env,
-      v8::Local<v8::Object> target) {
-    CryptoJob<CipherTraits>::Initialize(New, env, target);
-  }
-
-  CipherJob(
-      Environment* env,
-      v8::Local<v8::Object> object,
-      CryptoJobMode mode,
-      KeyObjectHandle* key,
-      WebCryptoCipherMode cipher_mode,
-      const ArrayBufferOrViewContents<char>& data,
-      AdditionalParams&& params)
-      : CryptoJob<CipherTraits>(
-            env,
-            object,
-            AsyncWrap::PROVIDER_CIPHERREQUEST,
-            mode,
-            std::move(params)),
-        key_(key->Data()),
-        cipher_mode_(cipher_mode),
-        in_(mode == kCryptoJobAsync
-            ? data.ToCopy()
-            : data.ToByteSource()) {}
-
-  std::shared_ptr<KeyObjectData> key() const { return key_; }
-
-  WebCryptoCipherMode cipher_mode() const { return cipher_mode_; }
-
-  void DoThreadPoolWork() override {
-    const WebCryptoCipherStatus status =
-        CipherTraits::DoCipher(
-            AsyncWrap::env(),
-            key(),
-            cipher_mode_,
-            *CryptoJob<CipherTraits>::params(),
-            in_,
-            &out_);
-    if (status == WebCryptoCipherStatus::OK) {
-      // Success!
-      return;
-    }
-    CryptoErrorStore* errors = CryptoJob<CipherTraits>::errors();
-    errors->Capture();
-    if (errors->Empty()) {
-      switch (status) {
-        case WebCryptoCipherStatus::OK:
-          UNREACHABLE();
-          break;
-        case WebCryptoCipherStatus::INVALID_KEY_TYPE:
-          errors->Insert(NodeCryptoError::INVALID_KEY_TYPE);
-          break;
-        case WebCryptoCipherStatus::FAILED:
-          errors->Insert(NodeCryptoError::CIPHER_JOB_FAILED);
-          break;
-      }
-    }
-  }
-
-  v8::Maybe<bool> ToResult(
-      v8::Local<v8::Value>* err,
-      v8::Local<v8::Value>* result) override {
-    Environment* env = AsyncWrap::env();
-    CryptoErrorStore* errors = CryptoJob<CipherTraits>::errors();
-
-    if (errors->Empty())
-      errors->Capture();
-
-    if (out_.size() > 0 || errors->Empty()) {
-      CHECK(errors->Empty());
-      *err = v8::Undefined(env->isolate());
-      *result = out_.ToArrayBuffer(env);
-      return v8::Just(!result->IsEmpty());
-    }
-
-    *result = v8::Undefined(env->isolate());
-    return v8::Just(errors->ToException(env).ToLocal(err));
-  }
-
-  SET_SELF_SIZE(CipherJob)
-  void MemoryInfo(MemoryTracker* tracker) const override {
-    if (CryptoJob<CipherTraits>::mode() == kCryptoJobAsync)
-      tracker->TrackFieldWithSize("in", in_.size());
-    tracker->TrackFieldWithSize("out", out_.size());
-    CryptoJob<CipherTraits>::MemoryInfo(tracker);
-  }
-
- private:
-  std::shared_ptr<KeyObjectData> key_;
-  WebCryptoCipherMode cipher_mode_;
-  ByteSource in_;
-  ByteSource out_;
-};
-
-}  // namespace crypto
-}  // namespace node
-
-#endif  // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-#endif  // SRC_CRYPTO_CRYPTO_CIPHER_H_

package/src/headers/16/crypto/crypto_clienthello-inl.h

@@ -1,90 +0,0 @@
-// Copyright Joyent, Inc. and other Node contributors.
-//
-// Permission is hereby granted, free of charge, to any person obtaining a
-// copy of this software and associated documentation files (the
-// "Software"), to deal in the Software without restriction, including
-// without limitation the rights to use, copy, modify, merge, publish,
-// distribute, sublicense, and/or sell copies of the Software, and to permit
-// persons to whom the Software is furnished to do so, subject to the
-// following conditions:
-//
-// The above copyright notice and this permission notice shall be included
-// in all copies or substantial portions of the Software.
-//
-// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
-// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
-// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
-// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
-// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
-// USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-#ifndef SRC_CRYPTO_CRYPTO_CLIENTHELLO_INL_H_
-#define SRC_CRYPTO_CRYPTO_CLIENTHELLO_INL_H_
-
-#if defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-
-#include "crypto/crypto_clienthello.h"
-#include "util.h"
-
-namespace node {
-namespace crypto {
-inline ClientHelloParser::ClientHelloParser()
-    : state_(kEnded),
-      onhello_cb_(nullptr),
-      onend_cb_(nullptr),
-      cb_arg_(nullptr) {
-  Reset();
-}
-
-inline void ClientHelloParser::Reset() {
-  frame_len_ = 0;
-  body_offset_ = 0;
-  extension_offset_ = 0;
-  session_size_ = 0;
-  session_id_ = nullptr;
-  tls_ticket_size_ = -1;
-  tls_ticket_ = nullptr;
-  servername_size_ = 0;
-  servername_ = nullptr;
-}
-
-inline void ClientHelloParser::Start(ClientHelloParser::OnHelloCb onhello_cb,
-                                     ClientHelloParser::OnEndCb onend_cb,
-                                     void* onend_arg) {
-  if (!IsEnded())
-    return;
-  Reset();
-
-  CHECK_NOT_NULL(onhello_cb);
-
-  state_ = kWaiting;
-  onhello_cb_ = onhello_cb;
-  onend_cb_ = onend_cb;
-  cb_arg_ = onend_arg;
-}
-
-inline void ClientHelloParser::End() {
-  if (state_ == kEnded)
-    return;
-  state_ = kEnded;
-  if (onend_cb_ != nullptr) {
-    onend_cb_(cb_arg_);
-    onend_cb_ = nullptr;
-  }
-}
-
-inline bool ClientHelloParser::IsEnded() const {
-  return state_ == kEnded;
-}
-
-inline bool ClientHelloParser::IsPaused() const {
-  return state_ == kPaused;
-}
-
-}  // namespace crypto
-}  // namespace node
-
-#endif  // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-
-#endif  // SRC_CRYPTO_CRYPTO_CLIENTHELLO_INL_H_

package/src/headers/16/crypto/crypto_clienthello.h

@@ -1,131 +0,0 @@
-// Copyright Joyent, Inc. and other Node contributors.
-//
-// Permission is hereby granted, free of charge, to any person obtaining a
-// copy of this software and associated documentation files (the
-// "Software"), to deal in the Software without restriction, including
-// without limitation the rights to use, copy, modify, merge, publish,
-// distribute, sublicense, and/or sell copies of the Software, and to permit
-// persons to whom the Software is furnished to do so, subject to the
-// following conditions:
-//
-// The above copyright notice and this permission notice shall be included
-// in all copies or substantial portions of the Software.
-//
-// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
-// OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-// MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN
-// NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM,
-// DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR
-// OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE
-// USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-#ifndef SRC_CRYPTO_CRYPTO_CLIENTHELLO_H_
-#define SRC_CRYPTO_CRYPTO_CLIENTHELLO_H_
-
-#if defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-
-#include <cstddef>  // size_t
-#include <cstdint>
-
-namespace node {
-namespace crypto {
-// Parse the client hello so we can do async session resumption. OpenSSL's
-// session resumption uses synchronous callbacks, see SSL_CTX_sess_set_get_cb
-// and get_session_cb.
-//
-// TLS1.3 handshakes masquerade as TLS1.2 session resumption, and to do this,
-// they always include a session_id in the ClientHello, making up a bogus value
-// if necessary. The parser can't know if its a bogus id, and will cause a
-// 'newSession' event to be emitted. This should do no harm, the id won't be
-// found, and the handshake will continue.
-class ClientHelloParser {
- public:
-  inline ClientHelloParser();
-
-  class ClientHello {
-   public:
-    inline uint8_t session_size() const { return session_size_; }
-    inline const uint8_t* session_id() const { return session_id_; }
-    inline bool has_ticket() const { return has_ticket_; }
-    inline uint8_t servername_size() const { return servername_size_; }
-    inline const uint8_t* servername() const { return servername_; }
-
-   private:
-    uint8_t session_size_;
-    const uint8_t* session_id_;
-    bool has_ticket_;
-    uint8_t servername_size_;
-    const uint8_t* servername_;
-
-    friend class ClientHelloParser;
-  };
-
-  typedef void (*OnHelloCb)(void* arg, const ClientHello& hello);
-  typedef void (*OnEndCb)(void* arg);
-
-  void Parse(const uint8_t* data, size_t avail);
-
-  inline void Reset();
-  inline void Start(OnHelloCb onhello_cb, OnEndCb onend_cb, void* onend_arg);
-  inline void End();
-  inline bool IsPaused() const;
-  inline bool IsEnded() const;
-
- private:
-  static const size_t kMaxTLSFrameLen = 16 * 1024 + 5;
-  static const size_t kMaxSSLExFrameLen = 32 * 1024;
-  static const uint8_t kServernameHostname = 0;
-  static const size_t kMinStatusRequestSize = 5;
-
-  enum ParseState {
-    kWaiting,
-    kTLSHeader,
-    kPaused,
-    kEnded
-  };
-
-  enum FrameType {
-    kChangeCipherSpec = 20,
-    kAlert = 21,
-    kHandshake = 22,
-    kApplicationData = 23,
-    kOther = 255
-  };
-
-  enum HandshakeType {
-    kClientHello = 1
-  };
-
-  enum ExtensionType {
-    kServerName = 0,
-    kTLSSessionTicket = 35
-  };
-
-  bool ParseRecordHeader(const uint8_t* data, size_t avail);
-  void ParseHeader(const uint8_t* data, size_t avail);
-  void ParseExtension(const uint16_t type,
-                      const uint8_t* data,
-                      size_t len);
-  bool ParseTLSClientHello(const uint8_t* data, size_t avail);
-
-  ParseState state_;
-  OnHelloCb onhello_cb_;
-  OnEndCb onend_cb_;
-  void* cb_arg_;
-  size_t frame_len_ = 0;
-  size_t body_offset_ = 0;
-  size_t extension_offset_ = 0;
-  uint8_t session_size_ = 0;
-  const uint8_t* session_id_ = nullptr;
-  uint16_t servername_size_ = 0;
-  const uint8_t* servername_ = nullptr;
-  uint16_t tls_ticket_size_ = -1;
-  const uint8_t* tls_ticket_ = nullptr;
-};
-
-}  // namespace crypto
-}  // namespace node
-
-#endif  // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-
-#endif  // SRC_CRYPTO_CRYPTO_CLIENTHELLO_H_

package/src/headers/16/crypto/crypto_common.h

@@ -1,187 +0,0 @@
-#ifndef SRC_CRYPTO_CRYPTO_COMMON_H_
-#define SRC_CRYPTO_CRYPTO_COMMON_H_
-
-#if defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-
-#include "node_crypto.h"
-#include "v8.h"
-#include <openssl/ssl.h>
-#include <openssl/x509v3.h>
-
-#include <string>
-#include <unordered_map>
-
-namespace node {
-namespace crypto {
-
-struct StackOfX509Deleter {
-  void operator()(STACK_OF(X509)* p) const { sk_X509_pop_free(p, X509_free); }
-};
-using StackOfX509 = std::unique_ptr<STACK_OF(X509), StackOfX509Deleter>;
-
-struct StackOfXASN1Deleter {
-  void operator()(STACK_OF(ASN1_OBJECT)* p) const {
-    sk_ASN1_OBJECT_pop_free(p, ASN1_OBJECT_free);
-  }
-};
-using StackOfASN1 = std::unique_ptr<STACK_OF(ASN1_OBJECT), StackOfXASN1Deleter>;
-
-int SSL_CTX_get_issuer(SSL_CTX* ctx, X509* cert, X509** issuer);
-
-void LogSecret(
-    const SSLPointer& ssl,
-    const char* name,
-    const unsigned char* secret,
-    size_t secretlen);
-
-bool SetALPN(const SSLPointer& ssl, const std::string& alpn);
-
-bool SetALPN(const SSLPointer& ssl, v8::Local<v8::Value> alpn);
-
-v8::MaybeLocal<v8::Value> GetSSLOCSPResponse(
-    Environment* env,
-    SSL* ssl,
-    v8::Local<v8::Value> default_value);
-
-bool SetTLSSession(
-    const SSLPointer& ssl,
-    const unsigned char* buf,
-    size_t length);
-
-bool SetTLSSession(
-    const SSLPointer& ssl,
-    const SSLSessionPointer& session);
-
-SSLSessionPointer GetTLSSession(v8::Local<v8::Value> val);
-
-SSLSessionPointer GetTLSSession(const unsigned char* buf, size_t length);
-
-std::unordered_multimap<std::string, std::string>
-GetCertificateAltNames(X509* cert);
-
-std::string GetCertificateCN(X509* cert);
-
-long VerifyPeerCertificate(  // NOLINT(runtime/int)
-    const SSLPointer& ssl,
-    long def = X509_V_ERR_UNSPECIFIED);  // NOLINT(runtime/int)
-
-int UseSNIContext(const SSLPointer& ssl, BaseObjectPtr<SecureContext> context);
-
-const char* GetClientHelloALPN(const SSLPointer& ssl);
-
-const char* GetClientHelloServerName(const SSLPointer& ssl);
-
-const char* GetServerName(SSL* ssl);
-
-v8::MaybeLocal<v8::Array> GetClientHelloCiphers(
-    Environment* env,
-    const SSLPointer& ssl);
-
-bool SetGroups(SecureContext* sc, const char* groups);
-
-const char* X509ErrorCode(long err);  // NOLINT(runtime/int)
-
-v8::MaybeLocal<v8::Value> GetValidationErrorReason(Environment* env, int err);
-
-v8::MaybeLocal<v8::Value> GetValidationErrorCode(Environment* env, int err);
-
-v8::MaybeLocal<v8::Value> GetCert(Environment* env, const SSLPointer& ssl);
-
-v8::MaybeLocal<v8::Value> GetCipherName(
-    Environment* env,
-    const SSLPointer& ssl);
-
-v8::MaybeLocal<v8::Value> GetCipherStandardName(
-    Environment* env,
-    const SSLPointer& ssl);
-
-v8::MaybeLocal<v8::Value> GetCipherVersion(
-    Environment* env,
-    const SSLPointer& ssl);
-
-v8::MaybeLocal<v8::Object> GetCipherInfo(
-    Environment* env,
-    const SSLPointer& ssl);
-
-v8::MaybeLocal<v8::Object> GetEphemeralKey(
-    Environment* env,
-    const SSLPointer& ssl);
-
-v8::MaybeLocal<v8::Value> GetPeerCert(
-    Environment* env,
-    const SSLPointer& ssl,
-    bool abbreviated = false,
-    bool is_server = false);
-
-v8::MaybeLocal<v8::Object> ECPointToBuffer(
-    Environment* env,
-    const EC_GROUP* group,
-    const EC_POINT* point,
-    point_conversion_form_t form,
-    const char** error);
-
-v8::MaybeLocal<v8::Object> X509ToObject(
-    Environment* env,
-    X509* cert);
-
-v8::MaybeLocal<v8::Value> GetValidTo(
-    Environment* env,
-    X509* cert,
-    const BIOPointer& bio);
-
-v8::MaybeLocal<v8::Value> GetValidFrom(
-    Environment* env,
-    X509* cert,
-    const BIOPointer& bio);
-
-v8::MaybeLocal<v8::Value> GetFingerprintDigest(
-    Environment* env,
-    const EVP_MD* method,
-    X509* cert);
-
-v8::MaybeLocal<v8::Value> GetKeyUsage(Environment* env, X509* cert);
-
-v8::MaybeLocal<v8::Value> GetSerialNumber(Environment* env, X509* cert);
-
-v8::MaybeLocal<v8::Object> GetRawDERCertificate(Environment* env, X509* cert);
-
-v8::Local<v8::Value> ToV8Value(Environment* env, const BIOPointer& bio);
-bool SafeX509ExtPrint(const BIOPointer& out, X509_EXTENSION* ext);
-
-v8::MaybeLocal<v8::Value> GetSubject(
-    Environment* env,
-    const BIOPointer& bio,
-    X509* cert);
-
-v8::MaybeLocal<v8::Value> GetIssuerString(
-    Environment* env,
-    const BIOPointer& bio,
-    X509* cert);
-
-template <int nid>
-v8::MaybeLocal<v8::Value> GetInfoString(
-    Environment* env,
-    const BIOPointer& bio,
-    X509* cert) {
-  int index = X509_get_ext_by_NID(cert, nid, -1);
-  if (index < 0)
-    return Undefined(env->isolate());
-
-  X509_EXTENSION* ext = X509_get_ext(cert, index);
-  CHECK_NOT_NULL(ext);
-
-  if (!SafeX509ExtPrint(bio, ext) &&
-      X509V3_EXT_print(bio.get(), ext, 0, 0) != 1) {
-    USE(BIO_reset(bio.get()));
-    return v8::Null(env->isolate());
-  }
-
-  return ToV8Value(env, bio);
-}
-
-}  // namespace crypto
-}  // namespace node
-
-#endif  // defined(NODE_WANT_INTERNALS) && NODE_WANT_INTERNALS
-
-#endif  // SRC_CRYPTO_CRYPTO_COMMON_H_