]>
Commit | Line | Data |
---|---|---|
b1322259 | 1 | /* |
b0edda11 | 2 | * Copyright 2001-2018 The OpenSSL Project Authors. All Rights Reserved. |
b6d1e52d | 3 | * |
3c120f91 | 4 | * Licensed under the Apache License 2.0 (the "License"). You may not use |
b1322259 RS |
5 | * this file except in compliance with the License. You can obtain a copy |
6 | * in the file LICENSE in the source distribution or at | |
7 | * https://www.openssl.org/source/license.html | |
b6d1e52d GT |
8 | */ |
9 | ||
b39fc560 | 10 | #include "internal/cryptlib.h" |
b6d1e52d | 11 | #include <openssl/evp.h> |
3a87a9b9 | 12 | #include <openssl/lhash.h> |
f272be67 | 13 | #include <openssl/trace.h> |
706457b7 | 14 | #include "eng_local.h" |
b6d1e52d | 15 | |
b6d1e52d | 16 | /* The type of the items in the table */ |
e6b5c341 | 17 | struct st_engine_pile { |
0f113f3e MC |
18 | /* The 'nid' of this algorithm/mode */ |
19 | int nid; | |
20 | /* ENGINEs that implement this algorithm/mode. */ | |
21 | STACK_OF(ENGINE) *sk; | |
22 | /* The default ENGINE to perform this algorithm/mode. */ | |
23 | ENGINE *funct; | |
24 | /* | |
25 | * Zero if 'sk' is newer than the cached 'funct', non-zero otherwise | |
26 | */ | |
27 | int uptodate; | |
e6b5c341 | 28 | }; |
3c1d6bbc | 29 | |
706457b7 | 30 | /* The type exposed in eng_local.h */ |
0f113f3e MC |
31 | struct st_engine_table { |
32 | LHASH_OF(ENGINE_PILE) piles; | |
33 | }; /* ENGINE_TABLE */ | |
b6d1e52d | 34 | |
0f113f3e MC |
35 | typedef struct st_engine_pile_doall { |
36 | engine_table_doall_cb *cb; | |
37 | void *arg; | |
38 | } ENGINE_PILE_DOALL; | |
2f0550c4 | 39 | |
340f5856 | 40 | /* Global flags (ENGINE_TABLE_FLAG_***). */ |
b6d1e52d GT |
41 | static unsigned int table_flags = 0; |
42 | ||
43 | /* API function manipulating 'table_flags' */ | |
44 | unsigned int ENGINE_get_table_flags(void) | |
0f113f3e MC |
45 | { |
46 | return table_flags; | |
47 | } | |
3c1d6bbc | 48 | |
b6d1e52d | 49 | void ENGINE_set_table_flags(unsigned int flags) |
0f113f3e MC |
50 | { |
51 | table_flags = flags; | |
52 | } | |
b6d1e52d GT |
53 | |
54 | /* Internal functions for the "piles" hash table */ | |
55 | static unsigned long engine_pile_hash(const ENGINE_PILE *c) | |
0f113f3e MC |
56 | { |
57 | return c->nid; | |
58 | } | |
3c1d6bbc | 59 | |
b6d1e52d | 60 | static int engine_pile_cmp(const ENGINE_PILE *a, const ENGINE_PILE *b) |
0f113f3e MC |
61 | { |
62 | return a->nid - b->nid; | |
63 | } | |
64 | ||
b6d1e52d | 65 | static int int_table_check(ENGINE_TABLE **t, int create) |
0f113f3e MC |
66 | { |
67 | LHASH_OF(ENGINE_PILE) *lh; | |
3c1d6bbc | 68 | |
0f113f3e MC |
69 | if (*t) |
70 | return 1; | |
71 | if (!create) | |
72 | return 0; | |
62d0577e | 73 | if ((lh = lh_ENGINE_PILE_new(engine_pile_hash, engine_pile_cmp)) == NULL) |
0f113f3e MC |
74 | return 0; |
75 | *t = (ENGINE_TABLE *)lh; | |
76 | return 1; | |
77 | } | |
b6d1e52d | 78 | |
0f113f3e | 79 | /* |
706457b7 | 80 | * Privately exposed (via eng_local.h) functions for adding and/or removing |
0f113f3e MC |
81 | * ENGINEs from the implementation table |
82 | */ | |
752f2b67 | 83 | int engine_table_register(ENGINE_TABLE **table, ENGINE_CLEANUP_CB *cleanup, |
0f113f3e MC |
84 | ENGINE *e, const int *nids, int num_nids, |
85 | int setdefault) | |
86 | { | |
87 | int ret = 0, added = 0; | |
88 | ENGINE_PILE tmplate, *fnd; | |
40e068d5 | 89 | CRYPTO_THREAD_write_lock(global_engine_lock); |
0f113f3e MC |
90 | if (!(*table)) |
91 | added = 1; | |
92 | if (!int_table_check(table, 1)) | |
93 | goto end; | |
94 | if (added) | |
95 | /* The cleanup callback needs to be added */ | |
96 | engine_cleanup_add_first(cleanup); | |
97 | while (num_nids--) { | |
98 | tmplate.nid = *nids; | |
99 | fnd = lh_ENGINE_PILE_retrieve(&(*table)->piles, &tmplate); | |
100 | if (!fnd) { | |
b4faea50 | 101 | fnd = OPENSSL_malloc(sizeof(*fnd)); |
90945fa3 | 102 | if (fnd == NULL) |
0f113f3e MC |
103 | goto end; |
104 | fnd->uptodate = 1; | |
105 | fnd->nid = *nids; | |
106 | fnd->sk = sk_ENGINE_new_null(); | |
107 | if (!fnd->sk) { | |
108 | OPENSSL_free(fnd); | |
109 | goto end; | |
110 | } | |
111 | fnd->funct = NULL; | |
112 | (void)lh_ENGINE_PILE_insert(&(*table)->piles, fnd); | |
55a7f77d BE |
113 | if (lh_ENGINE_PILE_retrieve(&(*table)->piles, &tmplate) != fnd) { |
114 | sk_ENGINE_free(fnd->sk); | |
115 | OPENSSL_free(fnd); | |
116 | goto end; | |
117 | } | |
0f113f3e | 118 | } |
0d4fb843 | 119 | /* A registration shouldn't add duplicate entries */ |
0f113f3e MC |
120 | (void)sk_ENGINE_delete_ptr(fnd->sk, e); |
121 | /* | |
122 | * if 'setdefault', this ENGINE goes to the head of the list | |
123 | */ | |
124 | if (!sk_ENGINE_push(fnd->sk, e)) | |
125 | goto end; | |
126 | /* "touch" this ENGINE_PILE */ | |
127 | fnd->uptodate = 0; | |
128 | if (setdefault) { | |
129 | if (!engine_unlocked_init(e)) { | |
130 | ENGINEerr(ENGINE_F_ENGINE_TABLE_REGISTER, | |
131 | ENGINE_R_INIT_FAILED); | |
132 | goto end; | |
133 | } | |
134 | if (fnd->funct) | |
135 | engine_unlocked_finish(fnd->funct, 0); | |
136 | fnd->funct = e; | |
137 | fnd->uptodate = 1; | |
138 | } | |
139 | nids++; | |
140 | } | |
141 | ret = 1; | |
142 | end: | |
40e068d5 | 143 | CRYPTO_THREAD_unlock(global_engine_lock); |
0f113f3e MC |
144 | return ret; |
145 | } | |
146 | ||
2a056de8 | 147 | static void int_unregister_cb(ENGINE_PILE *pile, ENGINE *e) |
0f113f3e MC |
148 | { |
149 | int n; | |
150 | /* Iterate the 'c->sk' stack removing any occurrence of 'e' */ | |
151 | while ((n = sk_ENGINE_find(pile->sk, e)) >= 0) { | |
152 | (void)sk_ENGINE_delete(pile->sk, n); | |
153 | pile->uptodate = 0; | |
154 | } | |
155 | if (pile->funct == e) { | |
156 | engine_unlocked_finish(e, 0); | |
157 | pile->funct = NULL; | |
158 | } | |
159 | } | |
160 | ||
2a056de8 | 161 | IMPLEMENT_LHASH_DOALL_ARG(ENGINE_PILE, ENGINE); |
3c1d6bbc | 162 | |
b6d1e52d | 163 | void engine_table_unregister(ENGINE_TABLE **table, ENGINE *e) |
0f113f3e | 164 | { |
40e068d5 | 165 | CRYPTO_THREAD_write_lock(global_engine_lock); |
0f113f3e | 166 | if (int_table_check(table, 0)) |
2a056de8 | 167 | lh_ENGINE_PILE_doall_ENGINE(&(*table)->piles, int_unregister_cb, e); |
40e068d5 | 168 | CRYPTO_THREAD_unlock(global_engine_lock); |
0f113f3e | 169 | } |
b6d1e52d | 170 | |
3c1d6bbc | 171 | static void int_cleanup_cb_doall(ENGINE_PILE *p) |
0f113f3e | 172 | { |
12a765a5 | 173 | if (p == NULL) |
efa7dd64 | 174 | return; |
0f113f3e MC |
175 | sk_ENGINE_free(p->sk); |
176 | if (p->funct) | |
177 | engine_unlocked_finish(p->funct, 0); | |
178 | OPENSSL_free(p); | |
179 | } | |
180 | ||
b6d1e52d | 181 | void engine_table_cleanup(ENGINE_TABLE **table) |
0f113f3e | 182 | { |
40e068d5 | 183 | CRYPTO_THREAD_write_lock(global_engine_lock); |
0f113f3e | 184 | if (*table) { |
63c75cd6 | 185 | lh_ENGINE_PILE_doall(&(*table)->piles, int_cleanup_cb_doall); |
0f113f3e MC |
186 | lh_ENGINE_PILE_free(&(*table)->piles); |
187 | *table = NULL; | |
188 | } | |
40e068d5 | 189 | CRYPTO_THREAD_unlock(global_engine_lock); |
0f113f3e | 190 | } |
b6d1e52d | 191 | |
340f5856 | 192 | /* return a functional reference for a given 'nid' */ |
f272be67 | 193 | ENGINE *engine_table_select_int(ENGINE_TABLE **table, int nid, const char *f, |
0f113f3e | 194 | int l) |
0f113f3e MC |
195 | { |
196 | ENGINE *ret = NULL; | |
197 | ENGINE_PILE tmplate, *fnd = NULL; | |
198 | int initres, loop = 0; | |
b6d1e52d | 199 | |
29dc6e00 MC |
200 | /* Load the config before trying to check if engines are available */ |
201 | OPENSSL_init_crypto(OPENSSL_INIT_LOAD_CONFIG, NULL); | |
202 | ||
0f113f3e | 203 | if (!(*table)) { |
f272be67 RL |
204 | OSSL_TRACE3(ENGINE_TABLE, |
205 | "%s:%d, nid=%d, nothing registered!\n", | |
206 | f, l, nid); | |
0f113f3e MC |
207 | return NULL; |
208 | } | |
209 | ERR_set_mark(); | |
40e068d5 | 210 | CRYPTO_THREAD_write_lock(global_engine_lock); |
0f113f3e MC |
211 | /* |
212 | * Check again inside the lock otherwise we could race against cleanup | |
f272be67 | 213 | * operations. But don't worry about a debug printout |
0f113f3e MC |
214 | */ |
215 | if (!int_table_check(table, 0)) | |
216 | goto end; | |
217 | tmplate.nid = nid; | |
218 | fnd = lh_ENGINE_PILE_retrieve(&(*table)->piles, &tmplate); | |
219 | if (!fnd) | |
220 | goto end; | |
221 | if (fnd->funct && engine_unlocked_init(fnd->funct)) { | |
f272be67 RL |
222 | OSSL_TRACE4(ENGINE_TABLE, |
223 | "%s:%d, nid=%d, using ENGINE '%s' cached\n", | |
224 | f, l, nid, fnd->funct->id); | |
0f113f3e MC |
225 | ret = fnd->funct; |
226 | goto end; | |
227 | } | |
228 | if (fnd->uptodate) { | |
229 | ret = fnd->funct; | |
230 | goto end; | |
231 | } | |
232 | trynext: | |
233 | ret = sk_ENGINE_value(fnd->sk, loop++); | |
234 | if (!ret) { | |
f272be67 RL |
235 | OSSL_TRACE3(ENGINE_TABLE, |
236 | "%s:%d, nid=%d, " | |
237 | "no registered implementations would initialise\n", | |
238 | f, l, nid); | |
0f113f3e MC |
239 | goto end; |
240 | } | |
241 | /* Try to initialise the ENGINE? */ | |
242 | if ((ret->funct_ref > 0) || !(table_flags & ENGINE_TABLE_FLAG_NOINIT)) | |
243 | initres = engine_unlocked_init(ret); | |
244 | else | |
245 | initres = 0; | |
246 | if (initres) { | |
247 | /* Update 'funct' */ | |
248 | if ((fnd->funct != ret) && engine_unlocked_init(ret)) { | |
249 | /* If there was a previous default we release it. */ | |
250 | if (fnd->funct) | |
251 | engine_unlocked_finish(fnd->funct, 0); | |
252 | fnd->funct = ret; | |
f272be67 RL |
253 | OSSL_TRACE4(ENGINE_TABLE, |
254 | "%s:%d, nid=%d, setting default to '%s'\n", | |
255 | f, l, nid, ret->id); | |
0f113f3e | 256 | } |
f272be67 RL |
257 | OSSL_TRACE4(ENGINE_TABLE, |
258 | "%s:%d, nid=%d, using newly initialised '%s'\n", | |
259 | f, l, nid, ret->id); | |
0f113f3e MC |
260 | goto end; |
261 | } | |
262 | goto trynext; | |
263 | end: | |
264 | /* | |
265 | * If it failed, it is unlikely to succeed again until some future | |
266 | * registrations have taken place. In all cases, we cache. | |
267 | */ | |
268 | if (fnd) | |
269 | fnd->uptodate = 1; | |
0f113f3e | 270 | if (ret) |
f272be67 RL |
271 | OSSL_TRACE4(ENGINE_TABLE, |
272 | "%s:%d, nid=%d, caching ENGINE '%s'\n", | |
273 | f, l, nid, ret->id); | |
0f113f3e | 274 | else |
f272be67 RL |
275 | OSSL_TRACE3(ENGINE_TABLE, |
276 | "%s:%d, nid=%d, caching 'no matching ENGINE'\n", | |
277 | f, l, nid); | |
40e068d5 | 278 | CRYPTO_THREAD_unlock(global_engine_lock); |
0f113f3e MC |
279 | /* |
280 | * Whatever happened, any failed init()s are not failures in this | |
281 | * context, so clear our error state. | |
282 | */ | |
283 | ERR_pop_to_mark(); | |
284 | return ret; | |
285 | } | |
2f0550c4 DSH |
286 | |
287 | /* Table enumeration */ | |
288 | ||
2a056de8 | 289 | static void int_dall(const ENGINE_PILE *pile, ENGINE_PILE_DOALL *dall) |
0f113f3e MC |
290 | { |
291 | dall->cb(pile->nid, pile->sk, pile->funct, dall->arg); | |
292 | } | |
293 | ||
2a056de8 | 294 | IMPLEMENT_LHASH_DOALL_ARG_CONST(ENGINE_PILE, ENGINE_PILE_DOALL); |
2f0550c4 | 295 | |
2f0550c4 | 296 | void engine_table_doall(ENGINE_TABLE *table, engine_table_doall_cb *cb, |
0f113f3e MC |
297 | void *arg) |
298 | { | |
299 | ENGINE_PILE_DOALL dall; | |
300 | dall.cb = cb; | |
301 | dall.arg = arg; | |
302 | if (table) | |
2a056de8 | 303 | lh_ENGINE_PILE_doall_ENGINE_PILE_DOALL(&table->piles, int_dall, &dall); |
0f113f3e | 304 | } |