1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
|
/*
* Copyright (C) 2019 Red Hat, Inc.
*
* Author: Nikos Mavrogiannopoulos
*
* This file is part of GnuTLS.
*
* The GnuTLS is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public License
* as published by the Free Software Foundation; either version 2.1 of
* the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful, but
* WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public License
* along with this program. If not, see <https://www.gnu.org/licenses/>
*
*/
#include "gnutls_int.h"
#include <algorithms.h>
#include "errors.h"
#include <x509/common.h>
#include "c-strcase.h"
#include "profiles.h"
typedef struct {
const char *name;
gnutls_certificate_verification_profiles_t profile;
gnutls_sec_param_t sec_param;
} gnutls_profile_entry;
static const gnutls_profile_entry profiles[] = {
{"Very weak", GNUTLS_PROFILE_VERY_WEAK, GNUTLS_SEC_PARAM_VERY_WEAK},
{"Low", GNUTLS_PROFILE_LOW, GNUTLS_SEC_PARAM_LOW},
{"Legacy", GNUTLS_PROFILE_LEGACY, GNUTLS_SEC_PARAM_LEGACY},
{"Medium", GNUTLS_PROFILE_MEDIUM, GNUTLS_SEC_PARAM_MEDIUM},
{"High", GNUTLS_PROFILE_HIGH, GNUTLS_SEC_PARAM_HIGH},
{"Ultra", GNUTLS_PROFILE_ULTRA, GNUTLS_SEC_PARAM_ULTRA},
{"Future", GNUTLS_PROFILE_FUTURE, GNUTLS_SEC_PARAM_FUTURE},
{"SuiteB128", GNUTLS_PROFILE_SUITEB128, GNUTLS_SEC_PARAM_HIGH},
{"SuiteB192", GNUTLS_PROFILE_SUITEB192, GNUTLS_SEC_PARAM_ULTRA},
{NULL, 0, 0}
};
gnutls_sec_param_t _gnutls_profile_to_sec_level(gnutls_certificate_verification_profiles_t profile)
{
const gnutls_profile_entry *p;
for(p = profiles; p->name != NULL; p++) {
if (profile == p->profile)
return p->sec_param;
}
return GNUTLS_SEC_PARAM_UNKNOWN;
}
gnutls_certificate_verification_profiles_t _gnutls_profile_get_id(const char *name)
{
const gnutls_profile_entry *p;
if (name == NULL)
return GNUTLS_PROFILE_UNKNOWN;
for(p = profiles; p->name != NULL; p++) {
if (c_strcasecmp(p->name, name) == 0)
return p->profile;
}
return GNUTLS_PROFILE_UNKNOWN;
}
|
