blob: 77e7995e427e6bb06e31792eb37ba949d7e08409 [file] [log] [blame]
// Copyright 2015 The Chromium OS Authors. All rights reserved.
// Use of this source code is governed by a BSD-style license that can be
// found in the LICENSE file.
#include <memory>
#include <string>
#include <vector>
#include <openssl/ossl_typ.h>
#include <base/files/file_path.h>
#include <base/time/time.h>
#include <brillo/secure_blob.h>
namespace webservd {
using X509Ptr = std::unique_ptr<X509, void (*)(X509*)>;
// Creates a new X509 certificate.
X509Ptr CreateCertificate(int serial_number,
const base::TimeDelta& cert_expiration,
const std::string& common_name);
// Generates an RSA public-private key pair of the specified strength.
std::unique_ptr<RSA, void (*)(RSA*)> GenerateRSAKeyPair(int key_length_bits);
// Serializes a private key from the key pair into a PEM string and returns
// it as a binary blob.
brillo::SecureBlob StoreRSAPrivateKey(RSA* rsa_key_pair);
// Checks if the buffer |key| contains a valid RSA private key.
bool ValidateRSAPrivateKey(const brillo::SecureBlob& key);
// Serializes an X509 certificate using PEM format.
brillo::Blob StoreCertificate(X509* cert);
// Stores/loads an X509 certificate to/from a file (in PEM format).
bool StoreCertificate(X509* cert, const base::FilePath& file);
X509Ptr LoadAndValidateCertificate(const base::FilePath& file);
// Same as openssl x509 -fingerprint -sha256.
brillo::Blob GetSha256Fingerprint(X509* cert);
// Creates a socket bound to a specified network interface.
// Returns a socket file descriptor or -1 on error.
int CreateNetworkInterfaceSocket(const std::string& if_name);
} // namespace webservd