Files
strongswan-ext/src/libstrongswan/plugins/curl/curl_plugin.c
T
Martin Willi a336aefa89 curl: For SSL features, depend on thread-safety provided by our crypto plugins
To use SSL in curl, we need to initialize the SSL library in a thread-safe
manner and provide the appropriate callbacks. As we already do that in our
crypto plugins using these libraries, we depend on these features.

This implies that we need the same plugin enabled (openssl, gcrypt) as the
curl backend is configured to use to fetch from HTTPS URIs.
2014-09-24 17:35:16 +02:00

198 lines
4.1 KiB
C

/*
* Copyright (C) 2008 Martin Willi
* Hochschule fuer Technik Rapperswil
*
* This program is free software; you can redistribute it and/or modify it
* under the terms of the GNU General Public License as published by the
* Free Software Foundation; either version 2 of the License, or (at your
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
*
* This program is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
* for more details.
*/
#include "curl_plugin.h"
#include <library.h>
#include <utils/debug.h>
#include "curl_fetcher.h"
#include <curl/curl.h>
typedef struct private_curl_plugin_t private_curl_plugin_t;
/**
* private data of curl_plugin
*/
struct private_curl_plugin_t {
/**
* public functions
*/
curl_plugin_t public;
/**
* Supported features, CURL protocols + 1
*/
plugin_feature_t *features;
/**
* Number of supported features
*/
int count;
};
/**
* Append a feature to supported feature list
*/
static void add_feature(private_curl_plugin_t *this, plugin_feature_t f)
{
this->features = realloc(this->features, ++this->count * sizeof(f));
this->features[this->count - 1] = f;
}
/**
* Try to add a feature, and the appropriate SSL dependencies
*/
static void add_feature_with_ssl(private_curl_plugin_t *this, const char *ssl,
char *proto, plugin_feature_t f)
{
/* http://curl.haxx.se/libcurl/c/libcurl-tutorial.html#Multi-threading */
if (strpfx(ssl, "OpenSSL"))
{
add_feature(this, f);
add_feature(this, PLUGIN_DEPENDS(CUSTOM, "openssl-threading"));
}
else if (strpfx(ssl, "GnuTLS"))
{
add_feature(this, f);
add_feature(this, PLUGIN_DEPENDS(CUSTOM, "gcrypt-threading"));
}
else if (strpfx(ssl, "NSS"))
{
add_feature(this, f);
}
else
{
DBG1(DBG_LIB, "curl SSL backend '%s' not supported, %s disabled",
ssl, proto);
}
}
/**
* Get supported protocols, build plugin feature set
*/
static bool query_protocols(private_curl_plugin_t *this)
{
struct {
/* protocol we are interested in, suffixed with "://" */
char *name;
/* require SSL library initialization? */
bool ssl;
} protos[] = {
{ "file://", FALSE, },
{ "http://", FALSE, },
{ "https://", TRUE, },
{ "ftp://", FALSE, },
};
curl_version_info_data *info;
char *name;
int i, j;
add_feature(this, PLUGIN_REGISTER(FETCHER, curl_fetcher_create));
info = curl_version_info(CURLVERSION_NOW);
for (i = 0; info->protocols[i]; i++)
{
for (j = 0; j < countof(protos); j++)
{
name = protos[j].name;
if (strlen(info->protocols[i]) == strlen(name) - strlen("://"))
{
if (strneq(info->protocols[i], name,
strlen(name) - strlen("://")))
{
if (protos[j].ssl)
{
add_feature_with_ssl(this, info->ssl_version, name,
PLUGIN_PROVIDE(FETCHER, name));
}
else
{
add_feature(this, PLUGIN_PROVIDE(FETCHER, name));
}
}
}
}
}
return this->count > 1;
}
METHOD(plugin_t, get_name, char*,
private_curl_plugin_t *this)
{
return "curl";
}
METHOD(plugin_t, get_features, int,
private_curl_plugin_t *this, plugin_feature_t *features[])
{
*features = this->features;
return this->count;
}
METHOD(plugin_t, destroy, void,
private_curl_plugin_t *this)
{
curl_global_cleanup();
free(this->features);
free(this);
}
/*
* see header file
*/
plugin_t *curl_plugin_create()
{
CURLcode res;
private_curl_plugin_t *this;
INIT(this,
.public = {
.plugin = {
.get_name = _get_name,
.get_features = _get_features,
.destroy = _destroy,
},
},
);
res = curl_global_init(CURL_GLOBAL_SSL);
if (res != CURLE_OK)
{
/* no SSL support? Try without */
res = curl_global_init(CURL_GLOBAL_NOTHING);
}
if (res != CURLE_OK)
{
DBG1(DBG_LIB, "global libcurl initializing failed: %s",
curl_easy_strerror(res));
destroy(this);
return NULL;
}
if (!query_protocols(this))
{
DBG1(DBG_LIB, "no usable CURL protocols found, curl disabled");
destroy(this);
return NULL;
}
return &this->public.plugin;
}