ssl_init.cpp

Go to the documentation of this file.

/*****************************************************************************\
*                                                                             *
*  Name   : SSL initialization helper                                         *
*  Author : Chris Koeritz                                                     *
*                                                                             *
*******************************************************************************
* Copyright (c) 2005-$now By Author.  This program is free software; you can  *
* redistribute it and/or modify it under the terms of the GNU General Public  *
* License as published by the Free Software Foundation; either version 2 of   *
* the License or (at your option) any later version.  This is online at:      *
*     http://www.fsf.org/copyleft/gpl.html                                    *
* Please send any updates to: fred@gruntose.com                               *
\*****************************************************************************/
 
#include "ssl_init.h"
 
#include <basis/functions.h>
#include <basis/mutex.h>
#include <loggers/program_wide_logger.h>
#include <structures/static_memory_gremlin.h>
 
#include <openssl/crypto.h>
#include <openssl/err.h>
#include <openssl/provider.h>
#include <openssl/rand.h>
 
using namespace basis;
using namespace loggers;
using namespace mathematics;
using namespace structures;
 
namespace crypto {
 
//#define DEBUG_SSL
  // uncomment to cause more debugging information to be generated, plus
  // more checking to be performed in the SSL support.
 
#ifdef DEBUG_SSL
  #undef LOG
  #define LOG(s) CLASS_EMERGENCY_LOG(program_wide_logger::get(), s)
#else
  #undef LOG
  #define LOG(s)
#endif
 
const int SEED_SIZE = 100;
  // the size of the random seed that we'll use.
 
// our global initialization object.
SAFE_STATIC_CONST(ssl_init, static_ssl_initializer, )
 
ssl_init::ssl_init()
: c_rando()
{
  FUNCDEF("ctor");
 
  // new code needed because blowfish is considered legacy code now.  ugh.
  OSSL_PROVIDER *legacy_provider = OSSL_PROVIDER_load(NULL_POINTER, "legacy");
  // also load the default provider or the standard, still accepted, algorithms will not be available.
  OSSL_PROVIDER *default_provider = OSSL_PROVIDER_load(NULL, "default");
//hmmm: do we need to clean up these providers?
 
#ifdef DEBUG_SSL
  LOG("prior to crypto debug init");
  CRYPTO_malloc_debug_init();
  LOG("prior to dbg set options");
  CRYPTO_dbg_set_options(V_CRYPTO_MDEBUG_ALL);
  LOG("prior to mem ctrl");
  CRYPTO_mem_ctrl(CRYPTO_MEM_CHECK_ON);
#endif
  LOG("prior to rand seed");
  RAND_seed(random_bytes(SEED_SIZE).observe(), SEED_SIZE);
  LOG("after rand seed");
}
 
ssl_init::~ssl_init()
{
  FUNCDEF("destructor");
  LOG("prior to crypto cleanup");
  CRYPTO_cleanup_all_ex_data();
 
//hmmm: deprecated
//  LOG("prior to err remove state");
//  ERR_remove_thread_state(NULL);
 
 
//THIS HAD TO be removed in most recent openssl; does it exist?
//  LOG("prior to mem leaks fp");
//  CRYPTO_mem_leaks_fp(stderr);
//  LOG("after mem leaks fp");
}
 
const chaos &ssl_init::randomizer() const { return c_rando; }
 
byte_array ssl_init::random_bytes(int length) const
{
  byte_array seed;
  for (int i = 0; i < length; i++)
    seed += abyte(c_rando.inclusive(0, 255));
  return seed;
}
 
} //namespace.