support TLS; change some API

1 files changed, 94 insertions, 0 deletions

diff --git a/crypto.go b/crypto.go
new file mode 100644
index 0000000..528be5c
--- /dev/null
+++ b/crypto.go
@@ -0,0 +1,94 @@
+package salticidae
+
+// #include <stdlib.h>
+// #include "salticidae/crypto.h"
+import "C"
+import "runtime"
+
+// The C pointer type for a X509 handle.
+type CX509 = *C.x509_t
+type x509 struct { inner CX509 }
+// The handle for a X509 certificate.
+type X509 = *x509
+
+func NewX509FromPemFile(fname string, passwd *string, err *Error) X509 {
+    fname_c_str := C.CString(fname)
+    passwd_c_str := (*C.char)(nil)
+    if passwd != nil {
+        passwd_c_str = C.CString(*passwd)
+    }
+    res := &x509{ inner: C.x509_new_from_pem_file(fname_c_str, passwd_c_str, err) }
+    if res != nil {
+        runtime.SetFinalizer(res, func(self X509) { self.free() })
+    }
+    C.free(rawptr_t(fname_c_str))
+    if passwd_c_str != nil {
+        C.free(rawptr_t(passwd_c_str))
+    }
+    return res
+}
+
+func NewX509FromDer(der ByteArray, err *Error) X509 {
+    res := &x509{ inner: C.x509_new_from_der(der.inner, err) }
+    if res != nil {
+        runtime.SetFinalizer(res, func(self X509) { self.free() })
+    }
+    return res
+}
+
+func (self X509) free() { C.x509_free(self.inner) }
+func (self X509) GetPubKey() PKey {
+    res := &pKey{ inner: C.x509_get_pubkey(self.inner) }
+    runtime.SetFinalizer(res, func(self PKey) { self.free() })
+    return res
+}
+
+func (self X509) GetDer() ByteArray {
+    res := &byteArray{ inner: C.x509_get_der(self.inner) }
+    runtime.SetFinalizer(res, func(self ByteArray) { self.free() })
+    return res
+}
+
+// The C pointer type for a PKey handle.
+type CPKey = *C.pkey_t
+type pKey struct { inner CPKey }
+// The handle for an OpenSSL EVP_PKEY.
+type PKey = *pKey
+
+func NewPrivKeyFromPemFile(fname string, passwd *string, err *Error) PKey {
+    fname_c_str := C.CString(fname)
+    passwd_c_str := (*C.char)(nil)
+    if passwd != nil {
+        passwd_c_str = C.CString(*passwd)
+    }
+    res := &pKey{ inner: C.pkey_new_privkey_from_pem_file(fname_c_str, passwd_c_str, err) }
+    if res != nil {
+        runtime.SetFinalizer(res, func(self PKey) { self.free() })
+    }
+    C.free(rawptr_t(fname_c_str))
+    if passwd_c_str != nil {
+        C.free(rawptr_t(passwd_c_str))
+    }
+    return res
+}
+
+func NewPrivKeyFromDer(der ByteArray, err *Error) PKey {
+    res := &pKey{ inner: C.pkey_new_privkey_from_der(der.inner, err) }
+    if res != nil {
+        runtime.SetFinalizer(res, func(self PKey) { self.free() })
+    }
+    return res
+}
+
+func (self PKey) free() { C.pkey_free(self.inner) }
+func (self PKey) GetPubKeyDer() ByteArray {
+    res := &byteArray{ inner: C.pkey_get_pubkey_der(self.inner) }
+    runtime.SetFinalizer(res, func(self ByteArray) { self.free() })
+    return res
+}
+
+func (self PKey) GetPrivKeyDer() ByteArray {
+    res := &byteArray{ inner: C.pkey_get_privkey_der(self.inner) }
+    runtime.SetFinalizer(res, func(self ByteArray) { self.free() })
+    return res
+}