Merge commit '86cc97e55fe346502462284d2e636a2b3708163e' as 'Sources/OpenVPN3'

2026-04-24 00:00:05 +08:00 · 2020-02-24 14:43:11 +03:00
parent 133b3756e6 86cc97e55f
commit 32f1555929
655 changed files with 146468 additions and 0 deletions
@@ -0,0 +1,46 @@
+//    OpenVPN -- An application to securely tunnel IP networks
+//               over a single port, with support for SSL/TLS-based
+//               session authentication and key exchange,
+//               packet encryption, packet authentication, and
+//               packet compression.
+//
+//    Copyright (C) 2012-2017 OpenVPN Inc.
+//
+//    This program is free software: you can redistribute it and/or modify
+//    it under the terms of the GNU Affero General Public License Version 3
+//    as published by the Free Software Foundation.
+//
+//    This program is distributed in the hope that it will be useful,
+//    but WITHOUT ANY WARRANTY; without even the implied warranty of
+//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//    GNU Affero General Public License for more details.
+//
+//    You should have received a copy of the GNU Affero General Public License
+//    along with this program in the COPYING file.
+//    If not, see <http://www.gnu.org/licenses/>.
+
+#pragma once
+
+#include <string>
+
+#ifdef USE_OPENSSL
+#include <openvpn/openssl/util/init.hpp>
+#endif
+
+namespace openvpn {
+
+  // process-wide initialization for crypto subsystem
+  class crypto_init
+  {
+#if defined(OPENSSL_NEEDS_INIT)
+    openssl_init openssl_init_;
+#endif
+    /*
+     * We add a dummy member so this class does not count as trivial
+     * class. Otherwise it will trigger:
+     *  warning: private field 'crypto_init_' is not used [-Wunused-private-field]
+     */
+    std::string dummy;
+  };
+
+}
@@ -0,0 +1,55 @@
+//    OpenVPN -- An application to securely tunnel IP networks
+//               over a single port, with support for SSL/TLS-based
+//               session authentication and key exchange,
+//               packet encryption, packet authentication, and
+//               packet compression.
+//
+//    Copyright (C) 2012-2017 OpenVPN Inc.
+//
+//    This program is free software: you can redistribute it and/or modify
+//    it under the terms of the GNU Affero General Public License Version 3
+//    as published by the Free Software Foundation.
+//
+//    This program is distributed in the hope that it will be useful,
+//    but WITHOUT ANY WARRANTY; without even the implied warranty of
+//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//    GNU Affero General Public License for more details.
+//
+//    You should have received a copy of the GNU Affero General Public License
+//    along with this program in the COPYING file.
+//    If not, see <http://www.gnu.org/licenses/>.
+
+// process-wide initialization for underlying cryptographic engines
+
+#ifndef OPENVPN_INIT_ENGINEINIT_H
+#define OPENVPN_INIT_ENGINEINIT_H
+
+#include <string>
+
+#include <openvpn/common/arch.hpp>
+
+#if defined(USE_OPENSSL)
+#include <openvpn/openssl/util/engine.hpp>
+#include <openvpn/openssl/ssl/sslctx.hpp>
+#endif
+
+#if defined(USE_MINICRYPTO) && (defined(OPENVPN_ARCH_x86_64) || defined(OPENVPN_ARCH_i386))
+extern "C" {
+  void OPENSSL_cpuid_setup();
+}
+#endif
+
+namespace openvpn {
+
+  inline void init_openssl(const std::string& engine)
+  {
+#if defined(USE_OPENSSL)
+    openssl_setup_engine(engine);
+    OpenSSLContext::SSL::init_static();
+#elif defined(USE_MINICRYPTO) && (defined(OPENVPN_ARCH_x86_64) || defined(OPENVPN_ARCH_i386))
+    OPENSSL_cpuid_setup();
+#endif
+  }
+
+}
+#endif
@@ -0,0 +1,92 @@
+//    OpenVPN -- An application to securely tunnel IP networks
+//               over a single port, with support for SSL/TLS-based
+//               session authentication and key exchange,
+//               packet encryption, packet authentication, and
+//               packet compression.
+//
+//    Copyright (C) 2012-2017 OpenVPN Inc.
+//
+//    This program is free software: you can redistribute it and/or modify
+//    it under the terms of the GNU Affero General Public License Version 3
+//    as published by the Free Software Foundation.
+//
+//    This program is distributed in the hope that it will be useful,
+//    but WITHOUT ANY WARRANTY; without even the implied warranty of
+//    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+//    GNU Affero General Public License for more details.
+//
+//    You should have received a copy of the GNU Affero General Public License
+//    along with this program in the COPYING file.
+//    If not, see <http://www.gnu.org/licenses/>.
+
+// Process-wide static initialization
+
+#ifndef OPENVPN_INIT_INITPROCESS_H
+#define OPENVPN_INIT_INITPROCESS_H
+
+#include <thread>
+#include <mutex>
+
+#include <openvpn/common/size.hpp>
+#include <openvpn/common/base64.hpp>
+#include <openvpn/common/extern.hpp>
+#include <openvpn/time/time.hpp>
+#include <openvpn/compress/compress.hpp>
+#include <openvpn/init/cryptoinit.hpp>
+#include <openvpn/init/engineinit.hpp>
+
+namespace openvpn {
+  namespace InitProcess {
+
+    class Init
+    {
+    public:
+      Init()
+      {
+	// initialize time base
+	Time::reset_base();
+
+	// initialize compression
+	CompressContext::init_static();
+
+	// init OpenSSL if included
+	init_openssl("auto");
+
+	base64_init_static();
+      }
+
+      ~Init()
+      {
+	base64_uninit_static();
+      }
+
+    private:
+      // SSL library init happens when instantiated
+      crypto_init crypto_init_;
+    };
+
+    // process-wide singular instance
+    OPENVPN_EXTERN Init* the_instance; // GLOBAL
+    OPENVPN_EXTERN std::mutex the_instance_mutex; // GLOBAL
+
+    inline void init()
+    {
+      std::lock_guard<std::mutex> lock(the_instance_mutex);
+      if (!the_instance)
+	the_instance = new Init();
+    }
+
+    inline void uninit()
+    {
+      std::lock_guard<std::mutex> lock(the_instance_mutex);
+      if (the_instance)
+	{
+	  delete the_instance;
+	  the_instance = nullptr;
+	}
+    }
+
+  }
+}
+
+#endif