static_assert(sizeof(uv_thread_t) <= sizeof(void*),

"uv_thread_t does not fit in a pointer");

CRYPTO_THREADID_set_pointer(tid, reinterpret_cast<void*>(uv_thread_self()));

CHECK(!(mode & CRYPTO_LOCK) ^ !(mode & CRYPTO_UNLOCK));

CHECK(!(mode & CRYPTO_READ) ^ !(mode & CRYPTO_WRITE));

auto mutex = &mutexes[n];

if (mode & CRYPTO_LOCK)

mutex->Lock();

else

mutex->Unlock();

if (u) {

size_t buflen = static_cast<size_t>(size);

size_t len = strlen(static_cast<const char*>(u));

len = len > buflen ? buflen : len;

memcpy(buf, u, len);

return len;

}

return 0;

unsigned long err, // NOLINT(runtime/int)

const char* default_message = nullptr) {

HandleScope scope(env->isolate());

Local<String> message;

if (err != 0 || default_message == nullptr) {

char errmsg[128] = { 0 };

ERR_error_string_n(err, errmsg, sizeof(errmsg));

message = String::NewFromUtf8(env->isolate(), errmsg,

v8::NewStringType::kNormal)

.ToLocalChecked();

} else {

message = String::NewFromUtf8(env->isolate(), default_message,

v8::NewStringType::kNormal)

.ToLocalChecked();

}

Local<Value> exception_v = Exception::Error(message);

CHECK(!exception_v.IsEmpty());

Local<Object> exception = exception_v.As<Object>();

ERR_STATE* es = ERR_get_state();

if (es->bottom != es->top) {

Local<Array> error_stack = Array::New(env->isolate());

int top = es->top;

// Build the error_stack array to be added to opensslErrorStack property.

for (unsigned int i = 0; es->bottom != es->top;) {

unsigned long err_buf = es->err_buffer[es->top]; // NOLINT(runtime/int)

// Only add error string if there is valid err_buffer.

if (err_buf) {

char tmp_str[256];

ERR_error_string_n(err_buf, tmp_str, sizeof(tmp_str));

error_stack->Set(env->context(), i,

String::NewFromUtf8(env->isolate(), tmp_str,

v8::NewStringType::kNormal)

.ToLocalChecked()).FromJust();

// Only increment if we added to error_stack.

i++;

}

// Since the ERR_STATE is a ring buffer, we need to use modular

// arithmetic to loop back around in the case where bottom is after top.

// Using ERR_NUM_ERRORS macro defined in openssl.

es->top = (((es->top - 1) % ERR_NUM_ERRORS) + ERR_NUM_ERRORS) %

ERR_NUM_ERRORS;

}

// Restore top.

es->top = top;

// Add the opensslErrorStack property to the exception object.

// The new property will look like the following:

// opensslErrorStack: [

// 'error:0906700D:PEM routines:PEM_ASN1_read_bio:ASN1 lib',

// 'error:0D07803A:asn1 encoding routines:ASN1_ITEM_EX_D2I:nested asn1 err'

// ]

exception->Set(env->context(), env->openssl_error_stack(), error_stack)

.FromJust();

}

env->isolate()->ThrowException(exception);

for (;;) {

int status = RAND_status();

CHECK_GE(status, 0); // Cannot fail.

if (status != 0)

break;

// Give up, RAND_poll() not supported.

if (RAND_poll() == 0)

break;

}

// Ensure that OpenSSL's PRNG is properly seeded.

CheckEntropy();

// RAND_bytes() can return 0 to indicate that the entropy data is not truly

// random. That's okay, it's still better than V8's stock source of entropy,

// which is /dev/urandom on UNIX platforms and the current time on Windows.

return RAND_bytes(buffer, length) != -1;

Local<FunctionTemplate> t = env->NewFunctionTemplate(SecureContext::New);

t->InstanceTemplate()->SetInternalFieldCount(1);

Local<String> secureContextString =

FIXED_ONE_BYTE_STRING(env->isolate(), "SecureContext");

t->SetClassName(secureContextString);

env->SetProtoMethod(t, "init", SecureContext::Init);

env->SetProtoMethod(t, "setKey", SecureContext::SetKey);

env->SetProtoMethod(t, "setCert", SecureContext::SetCert);

env->SetProtoMethod(t, "addCACert", SecureContext::AddCACert);

env->SetProtoMethod(t, "addCRL", SecureContext::AddCRL);

env->SetProtoMethod(t, "addRootCerts", SecureContext::AddRootCerts);

env->SetProtoMethod(t, "setCiphers", SecureContext::SetCiphers);

env->SetProtoMethod(t, "setECDHCurve", SecureContext::SetECDHCurve);

env->SetProtoMethod(t, "setDHParam", SecureContext::SetDHParam);

env->SetProtoMethod(t, "setOptions", SecureContext::SetOptions);

env->SetProtoMethod(t, "setSessionIdContext",

SecureContext::SetSessionIdContext);

env->SetProtoMethod(t, "setSessionTimeout",

SecureContext::SetSessionTimeout);

env->SetProtoMethod(t, "close", SecureContext::Close);

env->SetProtoMethod(t, "loadPKCS12", SecureContext::LoadPKCS12);

env->SetProtoMethod(t, "getTicketKeys", SecureContext::GetTicketKeys);

env->SetProtoMethod(t, "setTicketKeys", SecureContext::SetTicketKeys);

env->SetProtoMethod(t, "setFreeListLength", SecureContext::SetFreeListLength);

env->SetProtoMethod(t,

"enableTicketKeyCallback",

SecureContext::EnableTicketKeyCallback);

env->SetProtoMethod(t, "getCertificate", SecureContext::GetCertificate<true>);

env->SetProtoMethod(t, "getIssuer", SecureContext::GetCertificate<false>);

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyReturnIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyReturnIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyHMACIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyHMACIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyAESIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyAESIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyNameIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyNameIndex));

t->Set(FIXED_ONE_BYTE_STRING(env->isolate(), "kTicketKeyIVIndex"),

Integer::NewFromUnsigned(env->isolate(), kTicketKeyIVIndex));

t->PrototypeTemplate()->SetAccessor(

FIXED_ONE_BYTE_STRING(env->isolate(), "_external"),

CtxGetter,

nullptr,

env->as_external(),

DEFAULT,

static_cast<PropertyAttribute>(ReadOnly | DontDelete),

AccessorSignature::New(env->isolate(), t));

target->Set(secureContextString, t->GetFunction());

env->set_secure_context_constructor_template(t);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

const SSL_METHOD* method = SSLv23_method();

if (args.Length() == 1 && args[0]->IsString()) {

const node::Utf8Value sslmethod(env->isolate(), args[0]);

// Note that SSLv2 and SSLv3 are disallowed but SSLv2_method and friends

// are still accepted. They are OpenSSL's way of saying that all known

// protocols are supported unless explicitly disabled (which we do below

// for SSLv2 and SSLv3.)

if (strcmp(*sslmethod, "SSLv2_method") == 0) {

return env->ThrowError("SSLv2 methods disabled");

} else if (strcmp(*sslmethod, "SSLv2_server_method") == 0) {

return env->ThrowError("SSLv2 methods disabled");

} else if (strcmp(*sslmethod, "SSLv2_client_method") == 0) {

return env->ThrowError("SSLv2 methods disabled");

} else if (strcmp(*sslmethod, "SSLv3_method") == 0) {

return env->ThrowError("SSLv3 methods disabled");

} else if (strcmp(*sslmethod, "SSLv3_server_method") == 0) {

return env->ThrowError("SSLv3 methods disabled");

} else if (strcmp(*sslmethod, "SSLv3_client_method") == 0) {

return env->ThrowError("SSLv3 methods disabled");

} else if (strcmp(*sslmethod, "SSLv23_method") == 0) {

method = SSLv23_method();

} else if (strcmp(*sslmethod, "SSLv23_server_method") == 0) {

method = SSLv23_server_method();

} else if (strcmp(*sslmethod, "SSLv23_client_method") == 0) {

method = SSLv23_client_method();

} else if (strcmp(*sslmethod, "TLSv1_method") == 0) {

method = TLSv1_method();

} else if (strcmp(*sslmethod, "TLSv1_server_method") == 0) {

method = TLSv1_server_method();

} else if (strcmp(*sslmethod, "TLSv1_client_method") == 0) {

method = TLSv1_client_method();

} else if (strcmp(*sslmethod, "TLSv1_1_method") == 0) {

method = TLSv1_1_method();

} else if (strcmp(*sslmethod, "TLSv1_1_server_method") == 0) {

method = TLSv1_1_server_method();

} else if (strcmp(*sslmethod, "TLSv1_1_client_method") == 0) {

method = TLSv1_1_client_method();

} else if (strcmp(*sslmethod, "TLSv1_2_method") == 0) {

method = TLSv1_2_method();

} else if (strcmp(*sslmethod, "TLSv1_2_server_method") == 0) {

method = TLSv1_2_server_method();

} else if (strcmp(*sslmethod, "TLSv1_2_client_method") == 0) {

method = TLSv1_2_client_method();

} else {

return env->ThrowError("Unknown method");

}

}

sc->ctx_ = SSL_CTX_new(method);

SSL_CTX_set_app_data(sc->ctx_, sc);

// Disable SSLv2 in the case when method == SSLv23_method() and the

// cipher list contains SSLv2 ciphers (not the default, should be rare.)

// The bundled OpenSSL doesn't have SSLv2 support but the system OpenSSL may.

// SSLv3 is disabled because it's susceptible to downgrade attacks (POODLE.)

SSL_CTX_set_options(sc->ctx_, SSL_OP_NO_SSLv2);

SSL_CTX_set_options(sc->ctx_, SSL_OP_NO_SSLv3);

// SSL session cache configuration

SSL_CTX_set_session_cache_mode(sc->ctx_,

SSL_SESS_CACHE_SERVER |

SSL_SESS_CACHE_NO_INTERNAL |

SSL_SESS_CACHE_NO_AUTO_CLEAR);

SSL_CTX_sess_set_get_cb(sc->ctx_, SSLWrap<Connection>::GetSessionCallback);

SSL_CTX_sess_set_new_cb(sc->ctx_, SSLWrap<Connection>::NewSessionCallback);

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

unsigned int len = args.Length();

if (len < 1) {

return env->ThrowError("Private key argument is mandatory");

}

if (len > 2) {

return env->ThrowError("Only private key and pass phrase are expected");

}

if (len == 2) {

if (args[1]->IsUndefined() || args[1]->IsNull())

len = 1;

else

THROW_AND_RETURN_IF_NOT_STRING(args[1], "Pass phrase");

}

BIO *bio = LoadBIO(env, args[0]);

if (!bio)

return;

node::Utf8Value passphrase(env->isolate(), args[1]);

EVP_PKEY* key = PEM_read_bio_PrivateKey(bio,

nullptr,

PasswordCallback,

len == 1 ? nullptr : *passphrase);

if (!key) {

BIO_free_all(bio);

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

if (!err) {

return env->ThrowError("PEM_read_bio_PrivateKey");

}

return ThrowCryptoError(env, err);

}

int rv = SSL_CTX_use_PrivateKey(sc->ctx_, key);

EVP_PKEY_free(key);

BIO_free_all(bio);

if (!rv) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

if (!err)

return env->ThrowError("SSL_CTX_use_PrivateKey");

return ThrowCryptoError(env, err);

}

int ret;

X509_STORE* store = SSL_CTX_get_cert_store(ctx);

X509_STORE_CTX store_ctx;

ret = X509_STORE_CTX_init(&store_ctx, store, nullptr, nullptr);

if (!ret)

goto end;

ret = X509_STORE_CTX_get1_issuer(issuer, &store_ctx, cert);

X509_STORE_CTX_cleanup(&store_ctx);

end:

return ret;

BIO* in,

X509** cert,

X509** issuer) {

X509* x = nullptr;

// Just to ensure that `ERR_peek_last_error` below will return only errors

// that we are interested in

ERR_clear_error();

x = PEM_read_bio_X509_AUX(in, nullptr, NoPasswordCallback, nullptr);

if (x == nullptr) {

SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_CHAIN_FILE, ERR_R_PEM_LIB);

return 0;

}

X509* extra = nullptr;

int ret = 0;

unsigned long err = 0; // NOLINT(runtime/int)

// Read extra certs

STACK_OF(X509)* extra_certs = sk_X509_new_null();

if (extra_certs == nullptr) {

SSLerr(SSL_F_SSL_CTX_USE_CERTIFICATE_CHAIN_FILE, ERR_R_MALLOC_FAILURE);

goto done;

}

while ((extra = PEM_read_bio_X509(in,

nullptr,

NoPasswordCallback,

nullptr))) {

if (sk_X509_push(extra_certs, extra))

continue;

// Failure, free all certs

goto done;

}

extra = nullptr;

// When the while loop ends, it's usually just EOF.

err = ERR_peek_last_error();

if (ERR_GET_LIB(err) == ERR_LIB_PEM &&

ERR_GET_REASON(err) == PEM_R_NO_START_LINE) {

ERR_clear_error();

} else {

// some real error

goto done;

}

ret = SSL_CTX_use_certificate_chain(ctx, x, extra_certs, cert, issuer);

if (!ret)

goto done;

done:

if (extra_certs != nullptr)

sk_X509_pop_free(extra_certs, X509_free);

if (extra != nullptr)

X509_free(extra);

if (x != nullptr)

X509_free(x);

return ret;

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

if (args.Length() != 1) {

return env->ThrowTypeError("Certificate argument is mandatory");

}

BIO* bio = LoadBIO(env, args[0]);

if (!bio)

return;

// Free previous certs

if (sc->issuer_ != nullptr) {

X509_free(sc->issuer_);

sc->issuer_ = nullptr;

}

if (sc->cert_ != nullptr) {

X509_free(sc->cert_);

sc->cert_ = nullptr;

}

int rv = SSL_CTX_use_certificate_chain(sc->ctx_,

bio,

&sc->cert_,

&sc->issuer_);

BIO_free_all(bio);

if (!rv) {

unsigned long err = ERR_get_error(); // NOLINT(runtime/int)

if (!err) {

return env->ThrowError("SSL_CTX_use_certificate_chain");

}

return ThrowCryptoError(env, err);

}

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

ClearErrorOnReturn clear_error_on_return;

if (args.Length() != 1) {

return env->ThrowTypeError("CA certificate argument is mandatory");

}

BIO* bio = LoadBIO(env, args[0]);

if (!bio) {

return;

}

X509_STORE* cert_store = SSL_CTX_get_cert_store(sc->ctx_);

while (X509* x509 =

PEM_read_bio_X509(bio, nullptr, NoPasswordCallback, nullptr)) {

if (cert_store == root_cert_store) {

cert_store = NewRootCertStore();

SSL_CTX_set_cert_store(sc->ctx_, cert_store);

}

X509_STORE_add_cert(cert_store, x509);

SSL_CTX_add_client_CA(sc->ctx_, x509);

X509_free(x509);

}

BIO_free_all(bio);

Environment* env = Environment::GetCurrent(args);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

if (args.Length() != 1) {

return env->ThrowTypeError("CRL argument is mandatory");

}

ClearErrorOnReturn clear_error_on_return;

BIO *bio = LoadBIO(env, args[0]);

if (!bio)

return;

X509_CRL* crl =

PEM_read_bio_X509_CRL(bio, nullptr, NoPasswordCallback, nullptr);

if (crl == nullptr) {

BIO_free_all(bio);

return env->ThrowError("Failed to parse CRL");

}

X509_STORE* cert_store = SSL_CTX_get_cert_store(sc->ctx_);

if (cert_store == root_cert_store) {

cert_store = NewRootCertStore();

SSL_CTX_set_cert_store(sc->ctx_, cert_store);

}

X509_STORE_add_crl(cert_store, crl);

X509_STORE_set_flags(cert_store,

X509_V_FLAG_CRL_CHECK | X509_V_FLAG_CRL_CHECK_ALL);

BIO_free_all(bio);

X509_CRL_free(crl);

X509_STORE* store,

const char* file) {

ERR_clear_error();

MarkPopErrorOnReturn mark_pop_error_on_return;

BIO* bio = BIO_new_file(file, "r");

if (!bio) {

return ERR_get_error();

}

while (X509* x509 =

PEM_read_bio_X509(bio, nullptr, NoPasswordCallback, nullptr)) {

X509_STORE_add_cert(store, x509);

X509_free(x509);

}

BIO_free_all(bio);

unsigned long err = ERR_peek_error(); // NOLINT(runtime/int)

// Ignore error if its EOF/no start line found.

if (ERR_GET_LIB(err) == ERR_LIB_PEM &&

ERR_GET_REASON(err) == PEM_R_NO_START_LINE) {

return 0;

}

return err;

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

ClearErrorOnReturn clear_error_on_return;

if (!root_cert_store) {

root_cert_store = NewRootCertStore();

if (!extra_root_certs_file.empty()) {

unsigned long err = AddCertsFromFile( // NOLINT(runtime/int)

root_cert_store,

extra_root_certs_file.c_str());

if (err) {

ProcessEmitWarning(sc->env(),

"Ignoring extra certs from `%s`, load failed: %s\n",

extra_root_certs_file.c_str(),

ERR_error_string(err, nullptr));

}

}

}

// Increment reference count so global store is not deleted along with CTX.

X509_STORE_up_ref(root_cert_store);

SSL_CTX_set_cert_store(sc->ctx_, root_cert_store);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

ClearErrorOnReturn clear_error_on_return;

if (args.Length() != 1) {

return env->ThrowTypeError("Ciphers argument is mandatory");

}

THROW_AND_RETURN_IF_NOT_STRING(args[0], "Ciphers");

const node::Utf8Value ciphers(args.GetIsolate(), args[0]);

SSL_CTX_set_cipher_list(sc->ctx_, *ciphers);

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.Holder());

Environment* env = sc->env();

if (args.Length() != 1)

return env->ThrowTypeError("ECDH curve name argument is mandatory");

THROW_AND_RETURN_IF_NOT_STRING(args[0], "ECDH curve name");

node::Utf8Value curve(env->isolate(), args[0]);

SSL_CTX_set_options(sc->ctx_, SSL_OP_SINGLE_ECDH_USE);

SSL_CTX_set_ecdh_auto(sc->ctx_, 1);

if (strcmp(*curve, "auto") == 0)

return;

if (!SSL_CTX_set1_curves_list(sc->ctx_, *curve))

return env->ThrowError("Failed to set ECDH curve");

SecureContext* sc;

ASSIGN_OR_RETURN_UNWRAP(&sc, args.This());

Environment* env = sc->env();

ClearErrorOnReturn clear_error_on_return;

// Auto DH is not supported in openssl 1.0.1, so dhparam needs

// to be specified explicitly

if (args.Length() != 1)

return env->ThrowTypeError("DH argument is mandatory");

// Invalid dhparam is silently discarded and DHE is no longer used.

BIO* bio = LoadBIO(env, args[0]);

if (!bio)

return;

DH* dh = PEM_read_bio_DHparams(bio, nullptr, nullptr, nullptr);

BIO_free_all(bio);

if (dh == nullptr)

return;