diff options
| author | Steven Fackler <[email protected]> | 2016-10-30 10:18:09 -0700 |
|---|---|---|
| committer | GitHub <[email protected]> | 2016-10-30 10:18:09 -0700 |
| commit | a8d328d0b494c2aab8e80f7c1b907a32c7baaeb8 (patch) | |
| tree | 469c8a353b972ae937f893958c39faa3f5531792 /openssl/src/verify.rs | |
| parent | Remove private field in ParsedPkcs12 (diff) | |
| parent | Pull Curl's CA list for Windows tests (diff) | |
| download | rust-openssl-a8d328d0b494c2aab8e80f7c1b907a32c7baaeb8.tar.xz rust-openssl-a8d328d0b494c2aab8e80f7c1b907a32c7baaeb8.zip | |
Merge pull request #496 from sfackler/connectors
Implement Connector types
Diffstat (limited to 'openssl/src/verify.rs')
| -rw-r--r-- | openssl/src/verify.rs | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/openssl/src/verify.rs b/openssl/src/verify.rs new file mode 100644 index 00000000..ceb3a6c8 --- /dev/null +++ b/openssl/src/verify.rs @@ -0,0 +1,47 @@ +use libc::c_uint; +use ffi; + +use cvt; +use error::ErrorStack; +use opaque::Opaque; + +bitflags! { + pub flags X509CheckFlags: c_uint { + const X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT = ffi::X509_CHECK_FLAG_ALWAYS_CHECK_SUBJECT, + const X509_CHECK_FLAG_NO_WILDCARDS = ffi::X509_CHECK_FLAG_NO_WILDCARDS, + const X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS = ffi::X509_CHECK_FLAG_NO_PARTIAL_WILDCARDS, + const X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS = ffi::X509_CHECK_FLAG_MULTI_LABEL_WILDCARDS, + const X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS + = ffi::X509_CHECK_FLAG_SINGLE_LABEL_SUBDOMAINS, + /// Requires the `v110` feature and OpenSSL 1.1.0. + #[cfg(all(feature = "v110", ossl110))] + const X509_CHECK_FLAG_NEVER_CHECK_SUBJECT = ffi::X509_CHECK_FLAG_NEVER_CHECK_SUBJECT, + } +} + +pub struct X509VerifyParamRef(Opaque); + +impl X509VerifyParamRef { + pub unsafe fn from_ptr_mut<'a>(ptr: *mut ffi::X509_VERIFY_PARAM) -> &'a mut X509VerifyParamRef { + &mut *(ptr as *mut _) + } + + pub fn as_ptr(&self) -> *mut ffi::X509_VERIFY_PARAM { + self as *const _ as *mut _ + } + + pub fn set_hostflags(&mut self, hostflags: X509CheckFlags) { + unsafe { + ffi::X509_VERIFY_PARAM_set_hostflags(self.as_ptr(), hostflags.bits); + } + } + + pub fn set_host(&mut self, host: &str) -> Result<(), ErrorStack> { + unsafe { + cvt(ffi::X509_VERIFY_PARAM_set1_host(self.as_ptr(), + host.as_ptr() as *const _, + host.len())) + .map(|_| ()) + } + } +} |