1 files changed, 94 insertions, 0 deletions
diff --git a/server/resty/openssl/include/asn1.lua b/server/resty/openssl/include/asn1.lua
new file mode 100644
index 0000000..ba59ebc
--- /dev/null
+++ b/server/resty/openssl/include/asn1.lua
@@ -0,0 +1,94 @@
+local ffi = require "ffi"
+local C = ffi.C
+
+require "resty.openssl.include.ossl_typ"
+local OPENSSL_3X = require("resty.openssl.version").OPENSSL_3X
+
+ffi.cdef [[
+  typedef struct ASN1_VALUE_st ASN1_VALUE;
+
+  typedef struct asn1_type_st ASN1_TYPE;
+
+  ASN1_IA5STRING *ASN1_IA5STRING_new();
+
+  int ASN1_STRING_type(const ASN1_STRING *x);
+  ASN1_STRING *ASN1_STRING_type_new(int type);
+  int ASN1_STRING_set(ASN1_STRING *str, const void *data, int len);
+
+  ASN1_INTEGER *BN_to_ASN1_INTEGER(const BIGNUM *bn, ASN1_INTEGER *ai);
+  BIGNUM *ASN1_INTEGER_to_BN(const ASN1_INTEGER *ai, BIGNUM *bn);
+
+  typedef int time_t;
+  ASN1_TIME *ASN1_TIME_set(ASN1_TIME *s, time_t t);
+
+  int ASN1_INTEGER_set(ASN1_INTEGER *a, long v);
+  long ASN1_INTEGER_get(const ASN1_INTEGER *a);
+  int ASN1_ENUMERATED_set(ASN1_ENUMERATED *a, long v);
+
+  int ASN1_STRING_print(BIO *bp, const ASN1_STRING *v);
+
+  int ASN1_STRING_length(const ASN1_STRING *x);
+]]
+
+local function declare_asn1_functions(typ, has_ex)
+  local t = {}
+  for i=1, 7 do
+    t[i] = typ
+  end
+
+  ffi.cdef(string.format([[
+    %s *%s_new(void);
+    void %s_free(%s *a);
+    %s *%s_dup(%s *a);
+  ]], unpack(t)))
+
+  if OPENSSL_3X and has_ex then
+    ffi.cdef(string.format([[
+      %s *%s_new_ex(OSSL_LIB_CTX *libctx, const char *propq);
+    ]], typ, typ))
+  end
+end
+
+declare_asn1_functions("ASN1_INTEGER")
+declare_asn1_functions("ASN1_OBJECT")
+declare_asn1_functions("ASN1_STRING")
+declare_asn1_functions("ASN1_ENUMERATED")
+
+local OPENSSL_10 = require("resty.openssl.version").OPENSSL_10
+local OPENSSL_11_OR_LATER = require("resty.openssl.version").OPENSSL_11_OR_LATER
+local BORINGSSL_110 = require("resty.openssl.version").BORINGSSL_110
+
+local ASN1_STRING_get0_data
+if OPENSSL_11_OR_LATER then
+  ffi.cdef[[
+    const unsigned char *ASN1_STRING_get0_data(const ASN1_STRING *x);
+  ]]
+  ASN1_STRING_get0_data = C.ASN1_STRING_get0_data
+elseif OPENSSL_10 then
+  ffi.cdef[[
+    unsigned char *ASN1_STRING_data(ASN1_STRING *x);
+    typedef struct ASN1_ENCODING_st {
+      unsigned char *enc;         /* DER encoding */
+      long len;                   /* Length of encoding */
+      int modified;               /* set to 1 if 'enc' is invalid */
+    } ASN1_ENCODING;
+  ]]
+  ASN1_STRING_get0_data = C.ASN1_STRING_data
+end
+
+if BORINGSSL_110 then
+  ffi.cdef [[
+    // required by resty/openssl/include/x509/crl.lua
+    typedef struct ASN1_ENCODING_st {
+      unsigned char *enc;         /* DER encoding */
+      long len;                   /* Length of encoding */
+      int modified;               /* set to 1 if 'enc' is invalid */
+    } ASN1_ENCODING;
+  ]]
+end
+
+return {
+  ASN1_STRING_get0_data = ASN1_STRING_get0_data,
+  declare_asn1_functions = declare_asn1_functions,
+  has_new_ex = true,
+}