dane.h

Jenkins

dane.h

Absolute File Name:

/home/opencoverage/opencoverage/guest-scripts/openssl/src/include/internal/dane.h

Line	Source	Count
1	/*	-
2	* Copyright 2015-2016 The OpenSSL Project Authors. All Rights Reserved.	-
3	*	-
4	* Licensed under the OpenSSL license (the "License"). You may not use	-
5	* this file except in compliance with the License. You can obtain a copy	-
6	* in the file LICENSE in the source distribution or at	-
7	* https://www.openssl.org/source/license.html	-
8	*/	-
9		-
10	#ifndef HEADER_INTERNAL_DANE_H	-
11	#define HEADER_INTERNAL_DANE_H	-
12		-
13	#include <openssl/safestack.h>	-
14		-
15	/*-	-
16	* Certificate usages:	-
17	* https://tools.ietf.org/html/rfc6698#section-2.1.1	-
18	*/	-
19	#define DANETLS_USAGE_PKIX_TA 0	-
20	#define DANETLS_USAGE_PKIX_EE 1	-
21	#define DANETLS_USAGE_DANE_TA 2	-
22	#define DANETLS_USAGE_DANE_EE 3	-
23	#define DANETLS_USAGE_LAST DANETLS_USAGE_DANE_EE	-
24		-
25	/*-	-
26	* Selectors:	-
27	* https://tools.ietf.org/html/rfc6698#section-2.1.2	-
28	*/	-
29	#define DANETLS_SELECTOR_CERT 0	-
30	#define DANETLS_SELECTOR_SPKI 1	-
31	#define DANETLS_SELECTOR_LAST DANETLS_SELECTOR_SPKI	-
32		-
33	/*-	-
34	* Matching types:	-
35	* https://tools.ietf.org/html/rfc6698#section-2.1.3	-
36	*/	-
37	#define DANETLS_MATCHING_FULL 0	-
38	#define DANETLS_MATCHING_2256 1	-
39	#define DANETLS_MATCHING_2512 2	-
40	#define DANETLS_MATCHING_LAST DANETLS_MATCHING_2512	-
41		-
42	typedef struct danetls_record_st {	-
43	uint8_t usage;	-
44	uint8_t selector;	-
45	uint8_t mtype;	-
46	unsigned char *data;	-
47	size_t dlen;	-
48	EVP_PKEY *spki;	-
49	} danetls_record;	-
50		-
51	DEFINE_STACK_OF(danetls_record) never executed: `end of block` never executed: `end of block` executed 8254 times by 2 tests: `end of block` Executed by: libssl.so.1.1 tls13encryptiontest never executed: `end of block` executed 3073 times by 2 tests: `return OPENSSL_sk_num((const OPENSSL_STACK )sk);` Executed by: libcrypto.so.1.1 libssl.so.1.1 executed 65 times by 2 tests: `return (danetls_record )OPENSSL_sk_value((const OPENSSL_STACK )sk, idx);` Executed by: libcrypto.so.1.1 libssl.so.1.1 never executed: `return (struct stack_st_danetls_record )OPENSSL_sk_new((OPENSSL_sk_compfunc)compare);` executed 49 times by 1 test: `return (struct stack_st_danetls_record )OPENSSL_sk_new_null();` Executed by: libssl.so.1.1 never executed: `return (struct stack_st_danetls_record )OPENSSL_sk_new_reserve((OPENSSL_sk_compfunc)compare, n);` never executed: `return OPENSSL_sk_reserve((OPENSSL_STACK )sk, n);` never executed: `return (danetls_record )OPENSSL_sk_delete((OPENSSL_STACK )sk, i);` never executed: `return (danetls_record )OPENSSL_sk_delete_ptr((OPENSSL_STACK )sk, (const void )ptr);` never executed: `return OPENSSL_sk_push((OPENSSL_STACK )sk, (const void )ptr);` never executed: `return OPENSSL_sk_unshift((OPENSSL_STACK )sk, (const void )ptr);` never executed: `return (danetls_record )OPENSSL_sk_pop((OPENSSL_STACK )sk);` never executed: `return (danetls_record )OPENSSL_sk_shift((OPENSSL_STACK )sk);` executed 50 times by 1 test: `return OPENSSL_sk_insert((OPENSSL_STACK )sk, (const void )ptr, idx);` Executed by: libssl.so.1.1 never executed: `return (danetls_record )OPENSSL_sk_set((OPENSSL_STACK )sk, idx, (const void )ptr);` never executed: `return OPENSSL_sk_find((OPENSSL_STACK )sk, (const void )ptr);` never executed: `return OPENSSL_sk_find_ex((OPENSSL_STACK )sk, (const void )ptr);` never executed: `return OPENSSL_sk_is_sorted((const OPENSSL_STACK )sk);` never executed: `return (struct stack_st_danetls_record )OPENSSL_sk_dup((const OPENSSL_STACK )sk);` never executed: `return (struct stack_st_danetls_record )OPENSSL_sk_deep_copy((const OPENSSL_STACK )sk, (OPENSSL_sk_copyfunc)copyfunc, (OPENSSL_sk_freefunc)freefunc);` never executed: `return (sk_danetls_record_compfunc)OPENSSL_sk_set_cmp_func((OPENSSL_STACK *)sk, (OPENSSL_sk_compfunc)compare);`	0-8254
52		-
53	/*	-
54	* Shared DANE context	-
55	*/	-
56	struct dane_ctx_st {	-
57	const EVP_MD *mdevp; / mtype -> digest */	-
58	uint8_t mdord; / mtype -> preference */	-
59	uint8_t mdmax; /* highest supported mtype */	-
60	unsigned long flags; /* feature bitmask */	-
61	};	-
62		-
63	/*	-
64	* Per connection DANE state	-
65	*/	-
66	struct ssl_dane_st {	-
67	struct dane_ctx_st *dctx;	-
68	STACK_OF(danetls_record) *trecs;	-
69	STACK_OF(X509) certs; / DANE-TA(2) Cert(0) Full(0) certs */	-
70	danetls_record mtlsa; / Matching TLSA record */	-
71	X509 mcert; / DANE matched cert */	-
72	uint32_t umask; /* Usages present */	-
73	int mdpth; /* Depth of matched cert */	-
74	int pdpth; /* Depth of PKIX trust */	-
75	unsigned long flags; /* feature bitmask */	-
76	};	-
77		-
78	#define DANETLS_ENABLED(dane) \	-
79	((dane) != NULL && sk_danetls_record_num((dane)->trecs) > 0)	-
80		-
81	#define DANETLS_USAGE_BIT(u) (((uint32_t)1) << u)	-
82		-
83	#define DANETLS_PKIX_TA_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_PKIX_TA))	-
84	#define DANETLS_PKIX_EE_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_PKIX_EE))	-
85	#define DANETLS_DANE_TA_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_DANE_TA))	-
86	#define DANETLS_DANE_EE_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_DANE_EE))	-
87		-
88	#define DANETLS_PKIX_MASK (DANETLS_PKIX_TA_MASK \| DANETLS_PKIX_EE_MASK)	-
89	#define DANETLS_DANE_MASK (DANETLS_DANE_TA_MASK \| DANETLS_DANE_EE_MASK)	-
90	#define DANETLS_TA_MASK (DANETLS_PKIX_TA_MASK \| DANETLS_DANE_TA_MASK)	-
91	#define DANETLS_EE_MASK (DANETLS_PKIX_EE_MASK \| DANETLS_DANE_EE_MASK)	-
92		-
93	#define DANETLS_HAS_PKIX(dane) ((dane) && ((dane)->umask & DANETLS_PKIX_MASK))	-
94	#define DANETLS_HAS_DANE(dane) ((dane) && ((dane)->umask & DANETLS_DANE_MASK))	-
95	#define DANETLS_HAS_TA(dane) ((dane) && ((dane)->umask & DANETLS_TA_MASK))	-
96	#define DANETLS_HAS_EE(dane) ((dane) && ((dane)->umask & DANETLS_EE_MASK))	-
97		-
98	#define DANETLS_HAS_PKIX_TA(dane) ((dane)&&((dane)->umask & DANETLS_PKIX_TA_MASK))	-
99	#define DANETLS_HAS_PKIX_EE(dane) ((dane)&&((dane)->umask & DANETLS_PKIX_EE_MASK))	-
100	#define DANETLS_HAS_DANE_TA(dane) ((dane)&&((dane)->umask & DANETLS_DANE_TA_MASK))	-
101	#define DANETLS_HAS_DANE_EE(dane) ((dane)&&((dane)->umask & DANETLS_DANE_EE_MASK))	-
102		-
103	#endif /* HEADER_INTERNAL_DANE_H */	-

Line

Source

Count

* Licensed under the OpenSSL license (the "License"). You may not use

* this file except in compliance with the License. You can obtain a copy

* in the file LICENSE in the source distribution or at

* https://www.openssl.org/source/license.html

#ifndef HEADER_INTERNAL_DANE_H

#define HEADER_INTERNAL_DANE_H

#include <openssl/safestack.h>

/*-

* Certificate usages:

* https://tools.ietf.org/html/rfc6698#section-2.1.1

#define DANETLS_USAGE_PKIX_TA 0

#define DANETLS_USAGE_PKIX_EE 1

#define DANETLS_USAGE_DANE_TA 2

#define DANETLS_USAGE_DANE_EE 3

#define DANETLS_USAGE_LAST DANETLS_USAGE_DANE_EE

/*-

* Selectors:

* https://tools.ietf.org/html/rfc6698#section-2.1.2

#define DANETLS_SELECTOR_CERT 0

#define DANETLS_SELECTOR_SPKI 1

#define DANETLS_SELECTOR_LAST DANETLS_SELECTOR_SPKI

/*-

* Matching types:

* https://tools.ietf.org/html/rfc6698#section-2.1.3

#define DANETLS_MATCHING_FULL 0

#define DANETLS_MATCHING_2256 1

#define DANETLS_MATCHING_2512 2

#define DANETLS_MATCHING_LAST DANETLS_MATCHING_2512

typedef struct danetls_record_st {

uint8_t usage;

uint8_t selector;

uint8_t mtype;

unsigned char *data;

size_t dlen;

EVP_PKEY *spki;

} danetls_record;

DEFINE_STACK_OF(danetls_record)

never executed: end of block

executed 8254 times by 2 tests: end of block

Executed by:

libssl.so.1.1
tls13encryptiontest

never executed: end of block

executed 3073 times by 2 tests: return OPENSSL_sk_num((const OPENSSL_STACK *)sk);

Executed by:

libcrypto.so.1.1
libssl.so.1.1

executed 65 times by 2 tests: return (danetls_record *)OPENSSL_sk_value((const OPENSSL_STACK *)sk, idx);

Executed by:

libcrypto.so.1.1
libssl.so.1.1

never executed: return (struct stack_st_danetls_record *)OPENSSL_sk_new((OPENSSL_sk_compfunc)compare);

executed 49 times by 1 test: return (struct stack_st_danetls_record *)OPENSSL_sk_new_null();

Executed by:

libssl.so.1.1

never executed: return (struct stack_st_danetls_record *)OPENSSL_sk_new_reserve((OPENSSL_sk_compfunc)compare, n);

never executed: return OPENSSL_sk_reserve((OPENSSL_STACK *)sk, n);

never executed: return (danetls_record *)OPENSSL_sk_delete((OPENSSL_STACK *)sk, i);

never executed: return (danetls_record *)OPENSSL_sk_delete_ptr((OPENSSL_STACK *)sk, (const void *)ptr);

never executed: return OPENSSL_sk_push((OPENSSL_STACK *)sk, (const void *)ptr);

never executed: return OPENSSL_sk_unshift((OPENSSL_STACK *)sk, (const void *)ptr);

never executed: return (danetls_record *)OPENSSL_sk_pop((OPENSSL_STACK *)sk);

never executed: return (danetls_record *)OPENSSL_sk_shift((OPENSSL_STACK *)sk);

executed 50 times by 1 test: return OPENSSL_sk_insert((OPENSSL_STACK *)sk, (const void *)ptr, idx);

Executed by:

libssl.so.1.1

never executed: return (danetls_record *)OPENSSL_sk_set((OPENSSL_STACK *)sk, idx, (const void *)ptr);

never executed: return OPENSSL_sk_find((OPENSSL_STACK *)sk, (const void *)ptr);

never executed: return OPENSSL_sk_find_ex((OPENSSL_STACK *)sk, (const void *)ptr);

never executed: return OPENSSL_sk_is_sorted((const OPENSSL_STACK *)sk);

never executed: return (struct stack_st_danetls_record *)OPENSSL_sk_dup((const OPENSSL_STACK *)sk);

never executed:

return (struct stack_st_danetls_record *)OPENSSL_sk_deep_copy((const OPENSSL_STACK *)sk, (OPENSSL_sk_copyfunc)copyfunc, (OPENSSL_sk_freefunc)freefunc);

never executed: return (sk_danetls_record_compfunc)OPENSSL_sk_set_cmp_func((OPENSSL_STACK *)sk, (OPENSSL_sk_compfunc)compare);

0-8254

* Shared DANE context

struct dane_ctx_st {

const EVP_MD **mdevp; /* mtype -> digest */

uint8_t *mdord; /* mtype -> preference */

uint8_t mdmax; /* highest supported mtype */

unsigned long flags; /* feature bitmask */

};

* Per connection DANE state

struct ssl_dane_st {

struct dane_ctx_st *dctx;

STACK_OF(danetls_record) *trecs;

STACK_OF(X509) *certs; /* DANE-TA(2) Cert(0) Full(0) certs */

danetls_record *mtlsa; /* Matching TLSA record */

X509 *mcert; /* DANE matched cert */

uint32_t umask; /* Usages present */

int mdpth; /* Depth of matched cert */

int pdpth; /* Depth of PKIX trust */

unsigned long flags; /* feature bitmask */

};

#define DANETLS_ENABLED(dane) \

((dane) != NULL && sk_danetls_record_num((dane)->trecs) > 0)

#define DANETLS_USAGE_BIT(u) (((uint32_t)1) << u)

#define DANETLS_PKIX_TA_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_PKIX_TA))

#define DANETLS_PKIX_EE_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_PKIX_EE))

#define DANETLS_DANE_TA_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_DANE_TA))

#define DANETLS_DANE_EE_MASK (DANETLS_USAGE_BIT(DANETLS_USAGE_DANE_EE))

#define DANETLS_PKIX_MASK (DANETLS_PKIX_TA_MASK | DANETLS_PKIX_EE_MASK)

#define DANETLS_DANE_MASK (DANETLS_DANE_TA_MASK | DANETLS_DANE_EE_MASK)

#define DANETLS_TA_MASK (DANETLS_PKIX_TA_MASK | DANETLS_DANE_TA_MASK)

#define DANETLS_EE_MASK (DANETLS_PKIX_EE_MASK | DANETLS_DANE_EE_MASK)

#define DANETLS_HAS_PKIX(dane) ((dane) && ((dane)->umask & DANETLS_PKIX_MASK))

#define DANETLS_HAS_DANE(dane) ((dane) && ((dane)->umask & DANETLS_DANE_MASK))

#define DANETLS_HAS_TA(dane) ((dane) && ((dane)->umask & DANETLS_TA_MASK))

#define DANETLS_HAS_EE(dane) ((dane) && ((dane)->umask & DANETLS_EE_MASK))

#define DANETLS_HAS_PKIX_TA(dane) ((dane)&&((dane)->umask & DANETLS_PKIX_TA_MASK))

#define DANETLS_HAS_PKIX_EE(dane) ((dane)&&((dane)->umask & DANETLS_PKIX_EE_MASK))

100

#define DANETLS_HAS_DANE_TA(dane) ((dane)&&((dane)->umask & DANETLS_DANE_TA_MASK))

101

#define DANETLS_HAS_DANE_EE(dane) ((dane)&&((dane)->umask & DANETLS_DANE_EE_MASK))

102

103

#endif /* HEADER_INTERNAL_DANE_H */

Generated by Squish Coco 4.2.2