status-im
/
nim-webrtc
mirror of https://github.com/status-im/nim-webrtc.git
2
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add getter for local and remote dtls certificate

This commit is contained in:
Ludovic Chenut 2023-10-13 15:34:30 +02:00
parent ba11da6f20
commit a3f68f1745
No known key found for this signature in database
GPG Key ID: D9A59B1907F1D50C
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
webrtc/dtls/dtls.nim
View File

@ -54,6 +54,9 @@ type
ctr_drbg: mbedtls_ctr_drbg_context ctr_drbg: mbedtls_ctr_drbg_context
entropy: mbedtls_entropy_context entropy: mbedtls_entropy_context
localCert: seq[byte]
remoteCert: seq[byte]
proc dtlsSend*(ctx: pointer, buf: ptr byte, len: uint): cint {.cdecl.} = proc dtlsSend*(ctx: pointer, buf: ptr byte, len: uint): cint {.cdecl.} =
var self = cast[DtlsConn](ctx) var self = cast[DtlsConn](ctx)
var toWrite = newSeq[byte](len) var toWrite = newSeq[byte](len)
@ -163,8 +166,15 @@ proc serverHandshake(self: DtlsConn) {.async.} =
continue continue
elif res != 0: elif res != 0:
raise newException(DtlsError, $(res.mbedtls_high_level_strerr())) raise newException(DtlsError, $(res.mbedtls_high_level_strerr()))
let remoteCert = self.ssl.mbedtls_ssl_get_peer_cert()[]
res.remoteCert = newSeq[byte](srvcert.raw.len)
copyMem(addr res.remoteCert[0], srvcert.raw.p, srvcert.raw.len)
proc remoteAddress*(conn: DtlsConn): TransportAddress = conn.raddr proc localCertificate*(conn: DtlsConn): seq[byte] =
conn.localCert
proc remoteCertificate*(conn: DtlsConn): seq[byte] =
conn.remoteCert
proc accept*(self: Dtls): Future[DtlsConn] {.async.} = proc accept*(self: Dtls): Future[DtlsConn] {.async.} =
var var
@ -184,6 +194,8 @@ proc accept*(self: Dtls): Future[DtlsConn] {.async.} =
var pkey = res.ctr_drbg.generateKey() var pkey = res.ctr_drbg.generateKey()
var srvcert = res.ctr_drbg.generateCertificate(pkey) var srvcert = res.ctr_drbg.generateCertificate(pkey)
res.localCert = newSeq[byte](srvcert.raw.len)
copyMem(addr res.localCert[0], srvcert.raw.p, srvcert.raw.len)
mb_ssl_config_defaults(res.config, mb_ssl_config_defaults(res.config,
MBEDTLS_SSL_IS_SERVER, MBEDTLS_SSL_IS_SERVER,