Thanks to visit codestin.com
Credit goes to github.com

Skip to content

add support of mbedTLS #3462

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
wants to merge 10 commits into from
Closed

add support of mbedTLS #3462

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
30ff088
mbedtls cmake config
wildart Oct 9, 2015
ccbd58b
define mbedtls global configuration
wildart Oct 9, 2015
322f06d
added certificate location setup
wildart Oct 9, 2015
b79ecc4
introduced GIT_MBEDTLS symbol
wildart Oct 9, 2015
f7bb614
added git_mbedtls_stream_new
wildart Oct 9, 2015
f160f49
fixed typos in cmake module
wildart Oct 10, 2015
87411f7
added certificates loading
wildart Oct 10, 2015
c5f5a25
proper certificate verification & cleanup of `git_mbedtls_stream_new`
wildart Oct 10, 2015
00e5422
use libmbedcrypto for SHA1
wildart Oct 11, 2015
14f537f
added new CI configuration for mbedtls
wildart Oct 11, 2015
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
define mbedtls global configuration
  • Loading branch information
@wildart
wildart committed Oct 9, 2015
commit ccbd58b78180ca9fd519a75d1a8268bff1b29eca
63 changes: 63 additions & 0 deletions src/global.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,6 +28,23 @@ static git_mutex *openssl_locks;
# endif
#endif

#ifdef GIT_MBEDTLS
#include "mbedtls/config.h"
#include "mbedtls/platform.h"
#include "mbedtls/net.h"
#include "mbedtls/debug.h"
#include "mbedtls/ssl.h"
#include "mbedtls/entropy.h"
#include "mbedtls/ctr_drbg.h"
#include "mbedtls/error.h"
#include "mbedtls/certs.h"
mbedtls_ssl_config *git__ssl_conf;
mbedtls_entropy_context *mbedtls_entropy;
# ifdef GIT_THREADS
static git_mutex *mbedtls_locks;
# endif
#endif

static git_global_shutdown_fn git__shutdown_callbacks[MAX_SHUTDOWN_CB];
static git_atomic git__n_shutdown_callbacks;
static git_atomic git__n_inits;
Expand Down Expand Up @@ -117,6 +134,40 @@ static void init_ssl(void)
git__ssl_ctx = NULL;
}
#endif

#ifdef GIT_MBEDTLS
int ret = 0;
mbedtls_ctr_drbg_context *ctr_drbg = NULL;
mbedtls_x509_crt *cacert = NULL;

// Seeding the random number generator
mbedtls_entropy_init(mbedtls_entropy);
mbedtls_ctr_drbg_init(ctr_drbg);
if (!ret && ( ret = mbedtls_ctr_drbg_seed(ctr_drbg,
mbedtls_entropy_func,
mbedtls_entropy, NULL, 0) ) != 0) {
mbedtls_ctr_drbg_free(ctr_drbg);
}

// Configure TLSv1
if (!ret) {
mbedtls_ssl_config_init(git__ssl_conf);
if ( (ret = mbedtls_ssl_config_defaults(git__ssl_conf,
MBEDTLS_SSL_IS_CLIENT,
MBEDTLS_SSL_TRANSPORT_STREAM,
MBEDTLS_SSL_PRESET_DEFAULT ) ) != 0) {
mbedtls_ssl_config_free(git__ssl_conf);
git__ssl_conf = NULL;
} else {
mbedtls_ssl_conf_authmode(git__ssl_conf, MBEDTLS_SSL_VERIFY_NONE);
mbedtls_ssl_conf_rng(git__ssl_conf, mbedtls_ctr_drbg_random, ctr_drbg);

// Do not load certificates, initialize later through settings
mbedtls_x509_crt_init(cacert);
mbedtls_ssl_conf_ca_chain(git__ssl_conf, cacert, NULL);
}
}
#endif
}

/**
Expand All @@ -131,6 +182,18 @@ static void uninit_ssl(void)
git__ssl_ctx = NULL;
}
#endif
#ifdef GIT_MBEDTLS
if (git__ssl_conf) {
mbedtls_x509_crt_free(git__ssl_conf->ca_chain);
mbedtls_ctr_drbg_free(git__ssl_conf->p_rng);
mbedtls_ssl_config_free(git__ssl_conf);
git__ssl_conf = NULL;
}
if (mbedtls_entropy) {
mbedtls_entropy_free(mbedtls_entropy);
mbedtls_entropy = NULL;
}
#endif
}

int git_openssl_set_locking(void)
Expand Down
5 changes: 5 additions & 0 deletions src/global.h
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -23,6 +23,11 @@ typedef struct {
extern SSL_CTX *git__ssl_ctx;
#endif

#ifdef GIT_MBEDTLS
#include "mbedtls/ssl.h"
extern mbedtls_ssl_config *git__ssl_conf;
#endif

git_global_st *git__global_state(void);

extern git_mutex git__mwindow_mutex;
Expand Down