php_openssl.h 5.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150
  1. /*
  2. +----------------------------------------------------------------------+
  3. | Copyright (c) The PHP Group |
  4. +----------------------------------------------------------------------+
  5. | This source file is subject to version 3.01 of the PHP license, |
  6. | that is bundled with this package in the file LICENSE, and is |
  7. | available through the world-wide-web at the following url: |
  8. | https://www.php.net/license/3_01.txt |
  9. | If you did not receive a copy of the PHP license and are unable to |
  10. | obtain it through the world-wide-web, please send a note to |
  11. | license@php.net so we can mail you a copy immediately. |
  12. +----------------------------------------------------------------------+
  13. | Authors: Stig Venaas <venaas@php.net> |
  14. | Wez Furlong <wez@thebrainroom.com |
  15. +----------------------------------------------------------------------+
  16. */
  17. #ifndef PHP_OPENSSL_H
  18. #define PHP_OPENSSL_H
  19. /* HAVE_OPENSSL would include SSL MySQL stuff */
  20. #ifdef HAVE_OPENSSL_EXT
  21. extern zend_module_entry openssl_module_entry;
  22. #define phpext_openssl_ptr &openssl_module_entry
  23. #include "php_version.h"
  24. #define PHP_OPENSSL_VERSION PHP_VERSION
  25. #include <openssl/opensslv.h>
  26. #if defined(LIBRESSL_VERSION_NUMBER)
  27. /* LibreSSL version check */
  28. #if LIBRESSL_VERSION_NUMBER < 0x20700000L
  29. #define PHP_OPENSSL_API_VERSION 0x10001
  30. #else
  31. #define PHP_OPENSSL_API_VERSION 0x10100
  32. #endif
  33. #else
  34. /* OpenSSL version check */
  35. #if OPENSSL_VERSION_NUMBER < 0x10100000L
  36. #define PHP_OPENSSL_API_VERSION 0x10002
  37. #elif OPENSSL_VERSION_NUMBER < 0x30000000L
  38. #define PHP_OPENSSL_API_VERSION 0x10100
  39. #else
  40. #define PHP_OPENSSL_API_VERSION 0x30000
  41. #endif
  42. #endif
  43. #define OPENSSL_RAW_DATA 1
  44. #define OPENSSL_ZERO_PADDING 2
  45. #define OPENSSL_DONT_ZERO_PAD_KEY 4
  46. #define OPENSSL_ERROR_X509_PRIVATE_KEY_VALUES_MISMATCH 0x0B080074
  47. /* Used for client-initiated handshake renegotiation DoS protection*/
  48. #define OPENSSL_DEFAULT_RENEG_LIMIT 2
  49. #define OPENSSL_DEFAULT_RENEG_WINDOW 300
  50. #define OPENSSL_DEFAULT_STREAM_VERIFY_DEPTH 9
  51. #define OPENSSL_DEFAULT_STREAM_CIPHERS "ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:" \
  52. "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:" \
  53. "DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:" \
  54. "ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:" \
  55. "ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:" \
  56. "DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:" \
  57. "AES256-GCM-SHA384:AES128:AES256:HIGH:!SSLv2:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!RC4:!ADH"
  58. #include <openssl/err.h>
  59. #ifdef PHP_WIN32
  60. # define PHP_OPENSSL_API __declspec(dllexport)
  61. #elif defined(__GNUC__) && __GNUC__ >= 4
  62. # define PHP_OPENSSL_API __attribute__((visibility("default")))
  63. #else
  64. # define PHP_OPENSSL_API
  65. #endif
  66. struct php_openssl_errors {
  67. int buffer[ERR_NUM_ERRORS];
  68. int top;
  69. int bottom;
  70. };
  71. ZEND_BEGIN_MODULE_GLOBALS(openssl)
  72. struct php_openssl_errors *errors;
  73. ZEND_END_MODULE_GLOBALS(openssl)
  74. #define OPENSSL_G(v) ZEND_MODULE_GLOBALS_ACCESSOR(openssl, v)
  75. #if defined(ZTS) && defined(COMPILE_DL_OPENSSL)
  76. ZEND_TSRMLS_CACHE_EXTERN();
  77. #endif
  78. php_stream_transport_factory_func php_openssl_ssl_socket_factory;
  79. void php_openssl_store_errors(void);
  80. PHP_OPENSSL_API zend_long php_openssl_cipher_iv_length(const char *method);
  81. PHP_OPENSSL_API zend_string* php_openssl_random_pseudo_bytes(zend_long length);
  82. PHP_OPENSSL_API zend_string* php_openssl_encrypt(
  83. const char *data, size_t data_len,
  84. const char *method, size_t method_len,
  85. const char *password, size_t password_len,
  86. zend_long options,
  87. const char *iv, size_t iv_len,
  88. zval *tag, zend_long tag_len,
  89. const char *aad, size_t aad_len);
  90. PHP_OPENSSL_API zend_string* php_openssl_decrypt(
  91. const char *data, size_t data_len,
  92. const char *method, size_t method_len,
  93. const char *password, size_t password_len,
  94. zend_long options,
  95. const char *iv, size_t iv_len,
  96. const char *tag, zend_long tag_len,
  97. const char *aad, size_t aad_len);
  98. /* OpenSSLCertificate class */
  99. typedef struct _php_openssl_certificate_object {
  100. X509 *x509;
  101. zend_object std;
  102. } php_openssl_certificate_object;
  103. extern zend_class_entry *php_openssl_certificate_ce;
  104. static inline php_openssl_certificate_object *php_openssl_certificate_from_obj(zend_object *obj) {
  105. return (php_openssl_certificate_object *)((char *)(obj) - XtOffsetOf(php_openssl_certificate_object, std));
  106. }
  107. #define Z_OPENSSL_CERTIFICATE_P(zv) php_openssl_certificate_from_obj(Z_OBJ_P(zv))
  108. PHP_MINIT_FUNCTION(openssl);
  109. PHP_MSHUTDOWN_FUNCTION(openssl);
  110. PHP_MINFO_FUNCTION(openssl);
  111. PHP_GINIT_FUNCTION(openssl);
  112. PHP_GSHUTDOWN_FUNCTION(openssl);
  113. #ifdef PHP_WIN32
  114. #define PHP_OPENSSL_BIO_MODE_R(flags) (((flags) & PKCS7_BINARY) ? "rb" : "r")
  115. #define PHP_OPENSSL_BIO_MODE_W(flags) (((flags) & PKCS7_BINARY) ? "wb" : "w")
  116. #else
  117. #define PHP_OPENSSL_BIO_MODE_R(flags) "r"
  118. #define PHP_OPENSSL_BIO_MODE_W(flags) "w"
  119. #endif
  120. #else
  121. #define phpext_openssl_ptr NULL
  122. #endif
  123. #endif