mirror of
https://github.com/curl/curl.git
synced 2026-04-14 15:01:47 +03:00
e0dd6eb4a4
- examples: sync debug output printf masks. - INSTALL-CMAKE.md: tidy up section for some options. - curl_sha512_256: delete comment suggesting an optimization. - vtls/keylog: scope a variable. - vtls/openssl: make a source code URL a permalink. - vtls/schannel: drop redundant parentheses. - test1119.pl: robustify `$1` -> `$s`. - sync arg names in comments to match the code. - tidy up and minor fixes to comments. - fix formatting/indenting/comment/newline/include nits. - move `UNITTEST` protos next to definitions, sync their argument names. - make variables static. - add parentheses to Perl `open()` calls. - drop unnecessary double quotes in Perl. - clang-format. Closes #21000
142 lines
3.8 KiB
C
142 lines
3.8 KiB
C
/***************************************************************************
|
|
* _ _ ____ _
|
|
* Project ___| | | | _ \| |
|
|
* / __| | | | |_) | |
|
|
* | (__| |_| | _ <| |___
|
|
* \___|\___/|_| \_\_____|
|
|
*
|
|
* Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
*
|
|
* This software is licensed as described in the file COPYING, which
|
|
* you should have received as part of this distribution. The terms
|
|
* are also available at https://curl.se/docs/copyright.html.
|
|
*
|
|
* You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
* copies of the Software, and permit persons to whom the Software is
|
|
* furnished to do so, under the terms of the COPYING file.
|
|
*
|
|
* This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
* KIND, either express or implied.
|
|
*
|
|
* SPDX-License-Identifier: curl
|
|
*
|
|
***************************************************************************/
|
|
#include "curl_setup.h"
|
|
|
|
#if defined(USE_OPENSSL) || defined(USE_GNUTLS) || defined(USE_WOLFSSL) || \
|
|
defined(USE_RUSTLS)
|
|
|
|
#include "vtls/keylog.h"
|
|
#include "escape.h"
|
|
#include "curlx/fopen.h"
|
|
|
|
/* The fp for the open SSLKEYLOGFILE, or NULL if not open */
|
|
static FILE *keylog_file_fp;
|
|
|
|
void Curl_tls_keylog_open(void)
|
|
{
|
|
if(!keylog_file_fp) {
|
|
char *keylog_file_name = curl_getenv("SSLKEYLOGFILE");
|
|
if(keylog_file_name) {
|
|
keylog_file_fp = curlx_fopen(keylog_file_name, FOPEN_APPENDTEXT);
|
|
if(keylog_file_fp) {
|
|
#ifdef _WIN32
|
|
if(setvbuf(keylog_file_fp, NULL, _IONBF, 0))
|
|
#else
|
|
if(setvbuf(keylog_file_fp, NULL, _IOLBF, 4096))
|
|
#endif
|
|
{
|
|
curlx_fclose(keylog_file_fp);
|
|
keylog_file_fp = NULL;
|
|
}
|
|
}
|
|
curlx_safefree(keylog_file_name);
|
|
}
|
|
}
|
|
}
|
|
|
|
void Curl_tls_keylog_close(void)
|
|
{
|
|
if(keylog_file_fp) {
|
|
curlx_fclose(keylog_file_fp);
|
|
keylog_file_fp = NULL;
|
|
}
|
|
}
|
|
|
|
bool Curl_tls_keylog_enabled(void)
|
|
{
|
|
return keylog_file_fp != NULL;
|
|
}
|
|
|
|
bool Curl_tls_keylog_write_line(const char *line)
|
|
{
|
|
/* The current maximum valid keylog line length LF and NUL is 195. */
|
|
size_t linelen;
|
|
char buf[256];
|
|
|
|
if(!keylog_file_fp || !line) {
|
|
return FALSE;
|
|
}
|
|
|
|
linelen = strlen(line);
|
|
if(linelen == 0 || linelen > sizeof(buf) - 2) {
|
|
/* Empty line or too big to fit in an LF and NUL. */
|
|
return FALSE;
|
|
}
|
|
|
|
memcpy(buf, line, linelen);
|
|
if(line[linelen - 1] != '\n') {
|
|
buf[linelen++] = '\n';
|
|
}
|
|
buf[linelen] = '\0';
|
|
|
|
/* Using fputs here instead of fprintf since libcurl's fprintf replacement
|
|
may not be thread-safe. */
|
|
fputs(buf, keylog_file_fp);
|
|
return TRUE;
|
|
}
|
|
|
|
bool Curl_tls_keylog_write(const char *label,
|
|
const unsigned char client_random[CLIENT_RANDOM_SIZE],
|
|
const unsigned char *secret, size_t secretlen)
|
|
{
|
|
size_t pos, i;
|
|
unsigned char line[KEYLOG_LABEL_MAXLEN + 1 +
|
|
(2 * CLIENT_RANDOM_SIZE) + 1 +
|
|
(2 * SECRET_MAXLEN) + 1 + 1];
|
|
|
|
if(!keylog_file_fp) {
|
|
return FALSE;
|
|
}
|
|
|
|
pos = strlen(label);
|
|
if(pos > KEYLOG_LABEL_MAXLEN || !secretlen || secretlen > SECRET_MAXLEN) {
|
|
/* Should never happen - sanity check anyway. */
|
|
return FALSE;
|
|
}
|
|
|
|
memcpy(line, label, pos);
|
|
line[pos++] = ' ';
|
|
|
|
/* Client Random */
|
|
for(i = 0; i < CLIENT_RANDOM_SIZE; i++) {
|
|
Curl_hexbyte(&line[pos], client_random[i]);
|
|
pos += 2;
|
|
}
|
|
line[pos++] = ' ';
|
|
|
|
/* Secret */
|
|
for(i = 0; i < secretlen; i++) {
|
|
Curl_hexbyte(&line[pos], secret[i]);
|
|
pos += 2;
|
|
}
|
|
line[pos++] = '\n';
|
|
line[pos] = '\0';
|
|
|
|
/* Using fputs here instead of fprintf since libcurl's fprintf replacement
|
|
may not be thread-safe. */
|
|
fputs((char *)line, keylog_file_fp);
|
|
return TRUE;
|
|
}
|
|
|
|
#endif /* TLS backend */
|