]> git.ipfire.org Git - thirdparty/systemd.git/blame - src/shared/openssl-util.h
openssl: supress warnings about functions deprecated by openssl 3.0
[thirdparty/systemd.git] / src / shared / openssl-util.h
CommitLineData
db9ecf05 1/* SPDX-License-Identifier: LGPL-2.1-or-later */
3f637019
LP
2#pragma once
3
f2d5df8a
LP
4#include "macro.h"
5
b012a1f4 6#if HAVE_OPENSSL
c2fa92e7 7# include <openssl/bio.h>
57633d23
ZJS
8# include <openssl/bn.h>
9# include <openssl/err.h>
4ef65db3 10# include <openssl/evp.h>
c2fa92e7
LP
11# include <openssl/pkcs7.h>
12# include <openssl/ssl.h>
13# include <openssl/x509v3.h>
3f637019 14
fd421c4a
ZJS
15DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(X509*, X509_free, NULL);
16DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(X509_NAME*, X509_NAME_free, NULL);
17DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(EVP_PKEY_CTX*, EVP_PKEY_CTX_free, NULL);
57633d23 18DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(EVP_PKEY*, EVP_PKEY_free, NULL);
fd421c4a 19DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(EVP_CIPHER_CTX*, EVP_CIPHER_CTX_free, NULL);
57633d23
ZJS
20DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(EC_POINT*, EC_POINT_free, NULL);
21DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(EC_GROUP*, EC_GROUP_free, NULL);
22DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(BIGNUM*, BN_free, NULL);
23DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(BN_CTX*, BN_CTX_free, NULL);
24DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(ECDSA_SIG*, ECDSA_SIG_free, NULL);
c2fa92e7
LP
25DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(PKCS7*, PKCS7_free, NULL);
26DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(SSL*, SSL_free, NULL);
27DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(BIO*, BIO_free, NULL);
18f568b8 28DEFINE_TRIVIAL_CLEANUP_FUNC_FULL(EVP_MD_CTX*, EVP_MD_CTX_free, NULL);
c2fa92e7
LP
29
30static inline void sk_X509_free_allp(STACK_OF(X509) **sk) {
31 if (!sk || !*sk)
32 return;
33
34 sk_X509_pop_free(*sk, X509_free);
35}
b012a1f4 36
fc169a6f
KK
37int openssl_hash(const EVP_MD *alg, const void *msg, size_t msg_len, uint8_t *ret_hash, size_t *ret_hash_len);
38
f2d5df8a
LP
39int rsa_encrypt_bytes(EVP_PKEY *pkey, const void *decrypted_key, size_t decrypted_key_size, void **ret_encrypt_key, size_t *ret_encrypt_key_size);
40
d041e4fc 41int rsa_pkey_to_suitable_key_size(EVP_PKEY *pkey, size_t *ret_suitable_key_size);
57633d23
ZJS
42#endif
43
44#if PREFER_OPENSSL
45/* The openssl definition */
46typedef const EVP_MD* hash_md_t;
47typedef const EVP_MD* hash_algorithm_t;
48typedef int elliptic_curve_t;
49typedef EVP_MD_CTX* hash_context_t;
50# define OPENSSL_OR_GCRYPT(a, b) (a)
51
52#elif HAVE_GCRYPT
53
54# include <gcrypt.h>
d041e4fc 55
57633d23
ZJS
56/* The gcrypt definition */
57typedef int hash_md_t;
58typedef const char* hash_algorithm_t;
59typedef const char* elliptic_curve_t;
60typedef gcry_md_hd_t hash_context_t;
61# define OPENSSL_OR_GCRYPT(a, b) (b)
b012a1f4 62#endif
7e8facb3
ZJS
63
64#if PREFER_OPENSSL
65int string_hashsum(const char *s, size_t len, hash_algorithm_t md_algorithm, char **ret);
66
67static inline int string_hashsum_sha224(const char *s, size_t len, char **ret) {
68 return string_hashsum(s, len, EVP_sha224(), ret);
69}
70
71static inline int string_hashsum_sha256(const char *s, size_t len, char **ret) {
72 return string_hashsum(s, len, EVP_sha256(), ret);
73}
74#endif