mirror of
https://github.com/ossrs/srs.git
synced 2025-03-09 15:49:59 +00:00
Support openssl 1.0 and 1.1, RSA and ECDSA
This commit is contained in:
winlin
parent
81bb8747f2
commit
862c211acd
1 changed files with 159 additions and 82 deletions
|
|
@ -30,6 +30,7 @@ using namespace std;
|
||||||
#include <srs_kernel_log.hpp>
|
#include <srs_kernel_log.hpp>
|
||||||
|
|
||||||
#include <srtp2/srtp.h>
|
#include <srtp2/srtp.h>
|
||||||
|
#include <openssl/ssl.h>
|
||||||
|
|
||||||
SrsDtls* SrsDtls::_instance = NULL;
|
SrsDtls* SrsDtls::_instance = NULL;
|
||||||
|
|
||||||
|
|
@ -67,100 +68,176 @@ static int verify_callback(int preverify_ok, X509_STORE_CTX *ctx)
|
||||||
|
|
||||||
void SrsDtls::init()
|
void SrsDtls::init()
|
||||||
{
|
{
|
||||||
// srtp init first
|
// Initialize SRTP first.
|
||||||
srs_assert(srtp_init() == 0);
|
srs_assert(srtp_init() == 0);
|
||||||
|
|
||||||
// init dtls context
|
#if OPENSSL_VERSION_NUMBER < 0x10100000L // v1.1.x
|
||||||
EVP_PKEY* dtls_private_key = EVP_PKEY_new();
|
// Initialize SSL library by registering algorithms
|
||||||
srs_assert(dtls_private_key);
|
// The SSL_library_init() and OpenSSL_add_ssl_algorithms() functions were deprecated in OpenSSL 1.1.0 by OPENSSL_init_ssl().
|
||||||
|
// @see https://www.openssl.org/docs/man1.1.0/man3/OpenSSL_add_ssl_algorithms.html
|
||||||
|
// @see https://web.archive.org/web/20150806185102/http://sctp.fh-muenster.de:80/dtls/dtls_udp_echo.c
|
||||||
|
OpenSSL_add_ssl_algorithms();
|
||||||
|
#endif
|
||||||
|
|
||||||
RSA* rsa = RSA_new();
|
#if OPENSSL_VERSION_NUMBER < 0x10002000L // v1.0.2
|
||||||
srs_assert(rsa);
|
dtls_ctx = SSL_CTX_new(DTLSv1_method());
|
||||||
|
#else
|
||||||
|
//dtls_ctx = SSL_CTX_new(DTLS_method());
|
||||||
|
dtls_ctx = SSL_CTX_new(DTLSv1_method());
|
||||||
|
//dtls_ctx = SSL_CTX_new(DTLSv1_2_method());
|
||||||
|
#endif
|
||||||
|
|
||||||
BIGNUM* exponent = BN_new();
|
// Create keys by RSA or ECDSA.
|
||||||
srs_assert(exponent);
|
EVP_PKEY* dtls_pkey = EVP_PKEY_new();
|
||||||
|
srs_assert(dtls_pkey);
|
||||||
|
if (false) { // By RSA
|
||||||
|
RSA* rsa = RSA_new();
|
||||||
|
srs_assert(rsa);
|
||||||
|
|
||||||
BN_set_word(exponent, RSA_F4);
|
// Initialize the big-number for private key.
|
||||||
|
BIGNUM* exponent = BN_new();
|
||||||
|
srs_assert(exponent);
|
||||||
|
BN_set_word(exponent, RSA_F4);
|
||||||
|
|
||||||
const std::string& aor = "www.hw.com";
|
// Generates a key pair and stores it in the RSA structure provided in rsa.
|
||||||
int expire_day = 365;
|
// @see https://www.openssl.org/docs/man1.0.2/man3/RSA_generate_key_ex.html
|
||||||
int private_key_len = 1024;
|
int key_bits = 1024;
|
||||||
|
RSA_generate_key_ex(rsa, key_bits, exponent, NULL);
|
||||||
|
|
||||||
RSA_generate_key_ex(rsa, private_key_len, exponent, NULL);
|
// @see https://www.openssl.org/docs/man1.1.0/man3/EVP_PKEY_type.html
|
||||||
|
srs_assert(EVP_PKEY_set1_RSA(dtls_pkey, rsa) == 1);
|
||||||
|
|
||||||
srs_assert(EVP_PKEY_set1_RSA(dtls_private_key, rsa) == 1);
|
RSA_free(rsa);
|
||||||
|
BN_free(exponent);
|
||||||
|
}
|
||||||
|
if (true) { // By ECDSA, https://stackoverflow.com/a/6006898
|
||||||
|
EC_KEY* eckey = EC_KEY_new();
|
||||||
|
srs_assert(eckey);
|
||||||
|
|
||||||
X509* dtls_cert = X509_new();
|
#if OPENSSL_VERSION_NUMBER >= 0x10002000L // v1.0.2
|
||||||
srs_assert(dtls_cert);
|
// For ECDSA, we could set the curves list.
|
||||||
|
// @see https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set1_curves_list.html
|
||||||
|
SSL_CTX_set1_curves_list(dtls_ctx, "P-521:P-384:P-256");
|
||||||
|
#endif
|
||||||
|
// Should use the curves in ClientHello.supported_groups
|
||||||
|
// For example:
|
||||||
|
// Supported Group: x25519 (0x001d)
|
||||||
|
// Supported Group: secp256r1 (0x0017)
|
||||||
|
// Supported Group: secp384r1 (0x0018)
|
||||||
|
// @remark The curve NID_secp256k1 is not secp256r1, k1 != r1.
|
||||||
|
// TODO: FIXME: Parse ClientHello and choose the curve.
|
||||||
|
// Note that secp256r1 in openssl is called NID_X9_62_prime256v1, not NID_secp256k1
|
||||||
|
// @see https://stackoverflow.com/questions/41950056/openssl1-1-0-b-is-not-support-secp256r1openssl-ecparam-list-curves
|
||||||
|
EC_GROUP* ecgroup = EC_GROUP_new_by_curve_name(NID_X9_62_prime256v1);
|
||||||
|
//EC_GROUP* ecgroup = EC_GROUP_new_by_curve_name(NID_secp384r1);
|
||||||
|
srs_assert(ecgroup);
|
||||||
|
#if OPENSSL_VERSION_NUMBER < 0x10100000L // v1.1.x
|
||||||
|
// For openssl 1.0, we must set the group parameters, so that cert is ok.
|
||||||
|
// @see https://github.com/monero-project/monero/blob/master/contrib/epee/src/net_ssl.cpp#L225
|
||||||
|
EC_GROUP_set_asn1_flag(ecgroup, OPENSSL_EC_NAMED_CURVE);
|
||||||
|
#endif
|
||||||
|
|
||||||
X509_NAME* subject = X509_NAME_new();
|
srs_assert(EC_KEY_set_group(eckey, ecgroup) == 1);
|
||||||
srs_assert(subject);
|
srs_assert(EC_KEY_generate_key(eckey) == 1);
|
||||||
|
|
||||||
int serial = rand();
|
// For openssl <1.1, we must set the ECDH manually.
|
||||||
ASN1_INTEGER_set(X509_get_serialNumber(dtls_cert), serial);
|
// @see https://stackoverrun.com/cn/q/10791887
|
||||||
|
#if OPENSSL_VERSION_NUMBER < 0x10100000L // v1.1.x
|
||||||
|
#if OPENSSL_VERSION_NUMBER < 0x10002000L // v1.0.2
|
||||||
|
SSL_CTX_set_tmp_ecdh(dtls_ctx, eckey);
|
||||||
|
#else
|
||||||
|
SSL_CTX_set_ecdh_auto(dtls_ctx, 1);
|
||||||
|
#endif
|
||||||
|
#endif
|
||||||
|
// @see https://www.openssl.org/docs/man1.1.0/man3/EVP_PKEY_type.html
|
||||||
|
srs_assert(EVP_PKEY_set1_EC_KEY(dtls_pkey, eckey) == 1);
|
||||||
|
|
||||||
X509_NAME_add_entry_by_txt(subject, "CN", MBSTRING_ASC, (unsigned char *) aor.data(), aor.size(), -1, 0);
|
EC_GROUP_free(ecgroup);
|
||||||
|
EC_KEY_free(eckey);
|
||||||
X509_set_issuer_name(dtls_cert, subject);
|
|
||||||
X509_set_subject_name(dtls_cert, subject);
|
|
||||||
|
|
||||||
const long cert_duration = 60*60*24*expire_day;
|
|
||||||
|
|
||||||
X509_gmtime_adj(X509_get_notBefore(dtls_cert), 0);
|
|
||||||
X509_gmtime_adj(X509_get_notAfter(dtls_cert), cert_duration);
|
|
||||||
|
|
||||||
srs_assert(X509_set_pubkey(dtls_cert, dtls_private_key) == 1);
|
|
||||||
|
|
||||||
srs_assert(X509_sign(dtls_cert, dtls_private_key, EVP_sha1()) != 0);
|
|
||||||
|
|
||||||
// cleanup
|
|
||||||
RSA_free(rsa);
|
|
||||||
BN_free(exponent);
|
|
||||||
X509_NAME_free(subject);
|
|
||||||
|
|
||||||
dtls_ctx = SSL_CTX_new(DTLS_method());
|
|
||||||
srs_assert(SSL_CTX_use_certificate(dtls_ctx, dtls_cert) == 1);
|
|
||||||
|
|
||||||
srs_assert(SSL_CTX_use_PrivateKey(dtls_ctx, dtls_private_key) == 1);
|
|
||||||
srs_assert(SSL_CTX_set_cipher_list(dtls_ctx, "ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH") == 1);
|
|
||||||
|
|
||||||
// TODO: Maybe we can use SRTP-GCM in future.
|
|
||||||
// @see https://bugs.chromium.org/p/chromium/issues/detail?id=713701
|
|
||||||
// @see https://groups.google.com/forum/#!topic/discuss-webrtc/PvCbWSetVAQ
|
|
||||||
srs_assert(SSL_CTX_set_tlsext_use_srtp(dtls_ctx, "SRTP_AES128_CM_SHA1_80") == 0);
|
|
||||||
|
|
||||||
// Server will send Certificate Request.
|
|
||||||
// @see https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_verify.html
|
|
||||||
// TODO: FIXME: Config it, default to off to make the packet smaller.
|
|
||||||
SSL_CTX_set_verify(dtls_ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, verify_callback);
|
|
||||||
|
|
||||||
// The depth count is "level 0:peer certificate", "level 1: CA certificate",
|
|
||||||
// "level 2: higher level CA certificate", and so on.
|
|
||||||
// @see https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_verify.html
|
|
||||||
SSL_CTX_set_verify_depth (dtls_ctx, 4);
|
|
||||||
|
|
||||||
SSL_CTX_set_read_ahead(dtls_ctx, 1);
|
|
||||||
|
|
||||||
// dtls fingerprint
|
|
||||||
char fp[100] = {0};
|
|
||||||
char *p = fp;
|
|
||||||
unsigned char md[EVP_MAX_MD_SIZE];
|
|
||||||
unsigned int n = 0;
|
|
||||||
|
|
||||||
// TODO: FIXME: Unused variable.
|
|
||||||
/*int r = */X509_digest(dtls_cert, EVP_sha256(), md, &n);
|
|
||||||
|
|
||||||
for (unsigned int i = 0; i < n; i++, ++p) {
|
|
||||||
sprintf(p, "%02X", md[i]);
|
|
||||||
p += 2;
|
|
||||||
|
|
||||||
if(i < (n-1)) {
|
|
||||||
*p = ':';
|
|
||||||
} else {
|
|
||||||
*p = '\0';
|
|
||||||
}
|
|
||||||
}
|
}
|
||||||
|
|
||||||
fingerprint.assign(fp, strlen(fp));
|
// Create certificate, from previous generated pkey.
|
||||||
srs_trace("fingerprint=%s", fingerprint.c_str());
|
// TODO: Support ECDSA certificate.
|
||||||
|
X509* dtls_cert = X509_new();
|
||||||
|
srs_assert(dtls_cert);
|
||||||
|
if (true) {
|
||||||
|
X509_NAME* subject = X509_NAME_new();
|
||||||
|
srs_assert(subject);
|
||||||
|
|
||||||
|
int serial = rand();
|
||||||
|
ASN1_INTEGER_set(X509_get_serialNumber(dtls_cert), serial);
|
||||||
|
|
||||||
|
const std::string& aor = "ossrs.net";
|
||||||
|
X509_NAME_add_entry_by_txt(subject, "CN", MBSTRING_ASC, (unsigned char *) aor.data(), aor.size(), -1, 0);
|
||||||
|
|
||||||
|
X509_set_issuer_name(dtls_cert, subject);
|
||||||
|
X509_set_subject_name(dtls_cert, subject);
|
||||||
|
|
||||||
|
int expire_day = 365;
|
||||||
|
const long cert_duration = 60*60*24*expire_day;
|
||||||
|
|
||||||
|
X509_gmtime_adj(X509_get_notBefore(dtls_cert), 0);
|
||||||
|
X509_gmtime_adj(X509_get_notAfter(dtls_cert), cert_duration);
|
||||||
|
|
||||||
|
X509_set_version(dtls_cert, 2);
|
||||||
|
srs_assert(X509_set_pubkey(dtls_cert, dtls_pkey) == 1);
|
||||||
|
srs_assert(X509_sign(dtls_cert, dtls_pkey, EVP_sha1()) != 0);
|
||||||
|
|
||||||
|
X509_NAME_free(subject);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Setup DTLS context.
|
||||||
|
if (true) {
|
||||||
|
// We use "ALL", while you can use "DEFAULT" means "ALL:!EXPORT:!LOW:!aNULL:!eNULL:!SSLv2"
|
||||||
|
// @see https://www.openssl.org/docs/man1.0.2/man1/ciphers.html
|
||||||
|
srs_assert(SSL_CTX_set_cipher_list(dtls_ctx, "ALL") == 1);
|
||||||
|
|
||||||
|
// Setup the certificate.
|
||||||
|
srs_assert(SSL_CTX_use_certificate(dtls_ctx, dtls_cert) == 1);
|
||||||
|
srs_assert(SSL_CTX_use_PrivateKey(dtls_ctx, dtls_pkey) == 1);
|
||||||
|
|
||||||
|
// Server will send Certificate Request.
|
||||||
|
// @see https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_verify.html
|
||||||
|
// TODO: FIXME: Config it, default to off to make the packet smaller.
|
||||||
|
SSL_CTX_set_verify(dtls_ctx, SSL_VERIFY_PEER | SSL_VERIFY_CLIENT_ONCE, verify_callback);
|
||||||
|
// The depth count is "level 0:peer certificate", "level 1: CA certificate",
|
||||||
|
// "level 2: higher level CA certificate", and so on.
|
||||||
|
// @see https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_verify.html
|
||||||
|
SSL_CTX_set_verify_depth(dtls_ctx, 4);
|
||||||
|
|
||||||
|
// Whether we should read as many input bytes as possible (for non-blocking reads) or not.
|
||||||
|
// @see https://www.openssl.org/docs/man1.0.2/man3/SSL_CTX_set_read_ahead.html
|
||||||
|
SSL_CTX_set_read_ahead(dtls_ctx, 1);
|
||||||
|
|
||||||
|
// TODO: Maybe we can use SRTP-GCM in future.
|
||||||
|
// @see https://bugs.chromium.org/p/chromium/issues/detail?id=713701
|
||||||
|
// @see https://groups.google.com/forum/#!topic/discuss-webrtc/PvCbWSetVAQ
|
||||||
|
// @remark Only support SRTP_AES128_CM_SHA1_80, please read ssl/d1_srtp.c
|
||||||
|
srs_assert(SSL_CTX_set_tlsext_use_srtp(dtls_ctx, "SRTP_AES128_CM_SHA1_80") == 0);
|
||||||
|
}
|
||||||
|
|
||||||
|
// Show DTLS fingerprint
|
||||||
|
if (true) {
|
||||||
|
char fp[100] = {0};
|
||||||
|
char *p = fp;
|
||||||
|
unsigned char md[EVP_MAX_MD_SIZE];
|
||||||
|
unsigned int n = 0;
|
||||||
|
|
||||||
|
// TODO: FIXME: Unused variable.
|
||||||
|
/*int r = */X509_digest(dtls_cert, EVP_sha256(), md, &n);
|
||||||
|
|
||||||
|
for (unsigned int i = 0; i < n; i++, ++p) {
|
||||||
|
sprintf(p, "%02X", md[i]);
|
||||||
|
p += 2;
|
||||||
|
|
||||||
|
if(i < (n-1)) {
|
||||||
|
*p = ':';
|
||||||
|
} else {
|
||||||
|
*p = '\0';
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
fingerprint.assign(fp, strlen(fp));
|
||||||
|
srs_trace("fingerprint=%s", fingerprint.c_str());
|
||||||
|
}
|
||||||
}
|
}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue