mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-01-30 14:01:55 +08:00
Code Issues Packages Projects Releases Wiki Activity

Rewrite some code

Browse Source 
Rewrite the -req-nodes flag from CA.pl (idea from Andy)
Rewrite ERR_string_error_n

Reviewed-by: Andy Polyakov <appro@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/4478)
This commit is contained in:
Rich Salz 2017-10-06 11:06:12 -04:00
parent 6447e8184c
commit fa4dd546c5
3 changed files with 25 additions and 41 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGES
View File

@ -9,6 +9,10 @@
Changes between 1.1.0f and 1.1.1 [xx XXX xxxx] Changes between 1.1.0f and 1.1.1 [xx XXX xxxx]
*) Reimplement -newreq-nodes and ERR_error_string_n; the
original author does not agree with the license change.
[Rich Salz]
*) Add ARIA AEAD TLS support. *) Add ARIA AEAD TLS support.
[Jon Spillett] [Jon Spillett]

8
apps/CA.pl.in
View File

@ -127,13 +127,9 @@ if ($WHAT eq '-newcert' ) {
# create a pre-certificate # create a pre-certificate
$RET = run("$REQ -x509 -precert -keyout $NEWKEY -out $NEWCERT $DAYS"); $RET = run("$REQ -x509 -precert -keyout $NEWKEY -out $NEWCERT $DAYS");
print "Pre-cert is in $NEWCERT, private key is in $NEWKEY\n" if $RET == 0; print "Pre-cert is in $NEWCERT, private key is in $NEWKEY\n" if $RET == 0;
} elsif ($WHAT eq '-newreq' ) { } elsif ($WHAT =~ /\-newreq(\-nodes)?/ ) {
# create a certificate request # create a certificate request
$RET = run("$REQ -new -keyout $NEWKEY -out $NEWREQ $DAYS $EXTRA{req}"); $RET = run("$REQ -new $1 -keyout $NEWKEY -out $NEWREQ $DAYS $EXTRA{req}");
print "Request is in $NEWREQ, private key is in $NEWKEY\n" if $RET == 0;
} elsif ($WHAT eq '-newreq-nodes' ) {
# create a certificate request
$RET = run("$REQ -new -nodes -keyout $NEWKEY -out $NEWREQ $DAYS $EXTRA{req}");
print "Request is in $NEWREQ, private key is in $NEWKEY\n" if $RET == 0; print "Request is in $NEWREQ, private key is in $NEWKEY\n" if $RET == 0;
} elsif ($WHAT eq '-newca' ) { } elsif ($WHAT eq '-newca' ) {
# create the directory hierarchy # create the directory hierarchy

54
crypto/err/err.c
View File

@ -542,45 +542,30 @@ void ERR_error_string_n(unsigned long e, char *buf, size_t len)
return; return;
l = ERR_GET_LIB(e); l = ERR_GET_LIB(e);
f = ERR_GET_FUNC(e);
r = ERR_GET_REASON(e);
ls = ERR_lib_error_string(e); ls = ERR_lib_error_string(e);
fs = ERR_func_error_string(e); if (ls == NULL) {
rs = ERR_reason_error_string(e);
if (ls == NULL)
BIO_snprintf(lsbuf, sizeof(lsbuf), "lib(%lu)", l); BIO_snprintf(lsbuf, sizeof(lsbuf), "lib(%lu)", l);
if (fs == NULL) ls = lsbuf;
}
fs = ERR_func_error_string(e);
f = ERR_GET_FUNC(e);
if (fs == NULL) {
BIO_snprintf(fsbuf, sizeof(fsbuf), "func(%lu)", f); BIO_snprintf(fsbuf, sizeof(fsbuf), "func(%lu)", f);
if (rs == NULL) fs = fsbuf;
}
rs = ERR_reason_error_string(e);
r = ERR_GET_REASON(e);
if (rs == NULL) {
BIO_snprintf(rsbuf, sizeof(rsbuf), "reason(%lu)", r); BIO_snprintf(rsbuf, sizeof(rsbuf), "reason(%lu)", r);
rs = rsbuf;
}
BIO_snprintf(buf, len, "error:%08lX:%s:%s:%s", e, ls ? ls : lsbuf, BIO_snprintf(buf, len, "error:%08lX:%s:%s:%s", e, ls, fs, rs);
fs ? fs : fsbuf, rs ? rs : rsbuf);
if (strlen(buf) == len - 1) { if (strlen(buf) == len - 1) {
/* /* Didn't fit; use a minimal format. */
* output may be truncated; make sure we always have 5 BIO_snprintf(buf, len, "err:%lx:%lx:%lx:%lx", e, l, f, r);
* colon-separated fields, i.e. 4 colons ...
*/
#define NUM_COLONS 4
if (len > NUM_COLONS) { /* ... if possible */
int i;
char *s = buf;
for (i = 0; i < NUM_COLONS; i++) {
char *colon = strchr(s, ':');
if (colon == NULL || colon > &buf[len - 1] - NUM_COLONS + i) {
/*
* set colon no. i at last possible position (buf[len-1]
* is the terminating 0)
*/
colon = &buf[len - 1] - NUM_COLONS + i;
*colon = ':';
}
s = colon + 1;
}
}
} }
} }
@ -594,8 +579,7 @@ char *ERR_error_string(unsigned long e, char *ret)
if (ret == NULL) if (ret == NULL)
ret = buf; ret = buf;
ERR_error_string_n(e, ret, 256); ERR_error_string_n(e, ret, (int)sizeof(buf));
return ret; return ret;
} }