J Reece Wilson
7a0593adeb
[+] AuCrypto::CA::INewCertificateStore [+] AuCrypto::CA::IPinCertificate [+] AuCrypto::CA::PinAlwaysFail [+] AuCrypto::CA::PinAlwaysPass [+] AuCrypto::CA::PinCheckOS [+] AuCrypto::CA::PinCheckDefault [+] AuCrypto::CA::PinCheckBuiltin [+] AuCrypto::CA::PinCheckGlobal [+] AuCrypto::CA::PinCheckTwoAnd [+] AuCrypto::CA::PinCheckTwoOr [+] AuCrypto::CA::SetGlobalTLSPinner [*] Minor AuCrypto::X509 decoder work [*] AuCrypto::X509: transition to memory views (x509 is bytebuffer era and earlier code, beri early) [+] AuCrypto::IPrivateKeyProvider [+] AuCrypto::IPrivateKeyPair [+] AuCrypto::PrivateKeyPair [+] AuCrypto::ImportPrivateKeyPair [*] Refactor: AuCrypto::X509::GenerateCertificate(...) [+] AuCrypto::X509::NewChainFromOneDer [+] AuCrypto::X509::NewChainFromManyDer [+] AuCrypto::X509::NewChainFromManyDerInStream [+] AuCrypto::X509::NewChainFromOnePem [+] AuCrypto::X509::NewChainFromManyPem [+] AuCrypto::X509::NewChainFromManyPemInStream [*] Fix TLS code that was abandoned since its introduction with the net code. mbedtls is a hairbrained mess. so many *blocking* github issues starting after 2017. so little progress. [+] AuIO::TLS::TLSMeta::pKeyPairProvider [+] AuIO::TLS::TLSServer::bAllowSNIToFallBackDefault [+] AuIO::TLS::TLSServer::bAllowSNILessUseDefaultCert
47 lines
1.2 KiB
C++
Executable File
47 lines
1.2 KiB
C++
Executable File
/***
|
|
Copyright (C) 2024 Jamie Reece Wilson (a/k/a "Reece"). All rights reserved.
|
|
|
|
File: AuPinGlobal.cpp
|
|
Date: 2024-10-14
|
|
Author: Reece
|
|
***/
|
|
#include <Source/RuntimeInternal.hpp>
|
|
#include "AuPinGlobal.hpp"
|
|
|
|
namespace Aurora::Crypto::CA
|
|
{
|
|
static AuSPtr<IPinCertificate> gDefaultPinner;
|
|
static GlobalPinner gGlobalPinner;
|
|
static AuRWLock gRWPinnerLock;
|
|
|
|
bool GlobalPinner::CheckCertificate(const AuSPtr<X509::ICertificateChain> &pChain,
|
|
const AuMemoryViewRead &derCertificate)
|
|
{
|
|
AU_LOCK_GUARD(gRWPinnerLock->AsReadable());
|
|
|
|
if (gDefaultPinner)
|
|
{
|
|
return gDefaultPinner->CheckCertificate(pChain, derCertificate);
|
|
}
|
|
else
|
|
{
|
|
return PinCheckDefaultNew()->CheckCertificate(pChain, derCertificate);
|
|
}
|
|
}
|
|
|
|
AUKN_SYM IPinCertificate *PinCheckGlobalNew()
|
|
{
|
|
return &gGlobalPinner;
|
|
}
|
|
|
|
AUKN_SYM void PinCheckGlobalRelease(IPinCertificate *pHandle)
|
|
{
|
|
// Singleton NOP
|
|
}
|
|
|
|
AUKN_SYM void SetGlobalTLSPinner(const AuSPtr<IPinCertificate> &pNewDefault)
|
|
{
|
|
AU_LOCK_GUARD(gRWPinnerLock->AsWritable());
|
|
gDefaultPinner = pNewDefault;
|
|
}
|
|
} |