1 files changed, 84 insertions, 0 deletions
diff --git a/server/resty/openssl/x509/extensions.lua b/server/resty/openssl/x509/extensions.lua
new file mode 100644
index 0000000..3b64b8a
--- /dev/null
+++ b/server/resty/openssl/x509/extensions.lua
@@ -0,0 +1,84 @@
+local ffi = require "ffi"
+local C = ffi.C
+local ffi_gc = ffi.gc
+
+local stack_lib = require "resty.openssl.stack"
+local extension_lib = require "resty.openssl.x509.extension"
+local format_error = require("resty.openssl.err").format_error
+
+local _M = {}
+
+local stack_ptr_ct = ffi.typeof("OPENSSL_STACK*")
+
+local STACK = "X509_EXTENSION"
+local new = stack_lib.new_of(STACK)
+local add = stack_lib.add_of(STACK)
+local dup = stack_lib.dup_of(STACK)
+local mt = stack_lib.mt_of(STACK, extension_lib.dup, _M)
+
+function _M.new()
+  local raw = new()
+
+  local self = setmetatable({
+    stack_of = STACK,
+    ctx = raw,
+  }, mt)
+
+  return self, nil
+end
+
+function _M.istype(l)
+  return l and l.ctx and ffi.istype(stack_ptr_ct, l.ctx)
+            and l.stack_of and l.stack_of == STACK
+end
+
+function _M.dup(ctx)
+  if ctx == nil or not ffi.istype(stack_ptr_ct, ctx) then
+    return nil, "x509.extensions.dup: expect a stack ctx at #1, got " .. type(ctx)
+  end
+
+  local dup_ctx = dup(ctx)
+
+  return setmetatable({
+    ctx = dup_ctx,
+    -- don't let lua gc the original stack to keep its elements
+    _dupped_from = ctx,
+    _is_shallow_copy = true,
+    _elem_refs = {},
+    _elem_refs_idx = 1,
+  }, mt), nil
+end
+
+function _M:add(extension)
+  if not extension_lib.istype(extension) then
+    return nil, "expect a x509.extension instance at #1"
+  end
+
+  local dup = C.X509_EXTENSION_dup(extension.ctx)
+  if dup == nil then
+    return nil, format_error("extensions:add: X509_EXTENSION_dup")
+  end
+
+  local _, err = add(self.ctx, dup)
+  if err then
+    C.X509_EXTENSION_free(dup)
+    return nil, err
+  end
+
+  -- if the stack is duplicated, the gc handler is not pop_free
+  -- handle the gc by ourselves
+  if self._is_shallow_copy then
+    ffi_gc(dup, C.X509_EXTENSION_free)
+    self._elem_refs[self._elem_refs_idx] = dup
+    self._elem_refs_idx = self._elem_refs_idx + 1
+  end
+
+  return true
+end
+
+_M.all = stack_lib.all_func(mt)
+_M.each = mt.__ipairs
+_M.index = mt.__index
+_M.count = mt.__len
+
+return _M