13 #define WrapX509Store(klass, obj, st) do { \
15 ossl_raise(rb_eRuntimeError, "STORE wasn't initialized!"); \
17 (obj) = Data_Wrap_Struct((klass), 0, X509_STORE_free, (st)); \
19 #define GetX509Store(obj, st) do { \
20 Data_Get_Struct((obj), X509_STORE, (st)); \
22 ossl_raise(rb_eRuntimeError, "STORE wasn't initialized!"); \
25 #define SafeGetX509Store(obj, st) do { \
26 OSSL_Check_Kind((obj), cX509Store); \
27 GetX509Store((obj), (st)); \
30 #define WrapX509StCtx(klass, obj, ctx) do { \
32 ossl_raise(rb_eRuntimeError, "STORE_CTX wasn't initialized!"); \
34 (obj) = Data_Wrap_Struct((klass), 0, ossl_x509stctx_free, (ctx)); \
36 #define GetX509StCtx(obj, ctx) do { \
37 Data_Get_Struct((obj), X509_STORE_CTX, (ctx)); \
39 ossl_raise(rb_eRuntimeError, "STORE_CTX is out of scope!"); \
42 #define SafeGetX509StCtx(obj, storep) do { \
43 OSSL_Check_Kind((obj), cX509StoreContext); \
44 GetX509Store((obj), (ctx)); \
83 CRYPTO_add(&store->references, 1, CRYPTO_LOCK_X509_STORE);
97 if((store = X509_STORE_new()) ==
NULL){
133 store->ex_data.sk =
NULL;
137 #if (OPENSSL_VERSION_NUMBER < 0x00907000L)
155 #if (OPENSSL_VERSION_NUMBER >= 0x00907000L)
160 X509_STORE_set_flags(store, f);
171 #if (OPENSSL_VERSION_NUMBER >= 0x00907000L)
176 X509_STORE_set_purpose(store, p);
187 #if (OPENSSL_VERSION_NUMBER >= 0x00907000L)
192 X509_STORE_set_trust(store, t);
219 lookup = X509_STORE_add_lookup(store, X509_LOOKUP_file());
221 if(X509_LOOKUP_load_file(lookup, path, X509_FILETYPE_PEM) != 1){
240 lookup = X509_STORE_add_lookup(store, X509_LOOKUP_hash_dir());
242 if(X509_LOOKUP_add_dir(lookup, path, X509_FILETYPE_PEM) != 1){
255 if (X509_STORE_set_default_paths(store) != 1){
270 if (X509_STORE_add_cert(store, cert) != 1){
285 if (X509_STORE_add_crl(store, crl) != 1){
306 rb_iv_set(ctx,
"@verify_callback", proc);
347 sk_X509_pop_free(ctx->untrusted, X509_free);
349 X509_free(ctx->cert);
350 X509_STORE_CTX_free(ctx);
359 if((ctx = X509_STORE_CTX_new()) ==
NULL){
375 VALUE store, cert, chain, t;
385 if(!
NIL_P(chain)) x509s = ossl_x509_ary2sk(chain);
386 #if (OPENSSL_VERSION_NUMBER >= 0x00907000L)
387 if(X509_STORE_CTX_init(ctx, x509st, x509, x509s) != 1){
388 sk_X509_pop_free(x509s, X509_free);
392 X509_STORE_CTX_init(ctx, x509st, x509, x509s);
413 (
void*)
rb_iv_get(
self,
"@verify_callback"));
414 result = X509_verify_cert(ctx);
429 if((chain = X509_STORE_CTX_get_chain(ctx)) ==
NULL){
432 if((num = sk_X509_num(chain)) < 0){
437 for(i = 0; i < num; i++) {
438 x509 = sk_X509_value(chain, i);
452 return INT2FIX(X509_STORE_CTX_get_error(ctx));
461 X509_STORE_CTX_set_error(ctx,
NUM2INT(err));
473 err = X509_STORE_CTX_get_error(ctx);
475 return rb_str_new2(X509_verify_cert_error_string(err));
485 return INT2FIX(X509_STORE_CTX_get_error_depth(ctx));
501 #if (OPENSSL_VERSION_NUMBER >= 0x00907000L)
505 if(!ctx->current_crl)
return Qnil;
516 X509_STORE_CTX *store;
520 X509_STORE_CTX_set_flags(store, f);
528 X509_STORE_CTX *store;
532 X509_STORE_CTX_set_purpose(store, p);
540 X509_STORE_CTX *store;
544 X509_STORE_CTX_set_trust(store, t);
556 X509_STORE_CTX *store;
561 X509_STORE_CTX_set_time(store, 0, t);