Add TLS-SRP (RFC 5054) support

net/third_party/nss/ssl/sslauth.c

 /* ***** BEGIN LICENSE BLOCK *****
  * Version: MPL 1.1/GPL 2.0/LGPL 2.1
  *
  * The contents of this file are subject to the Mozilla Public License Version
  * 1.1 (the "License"); you may not use this file except in compliance with
  * the License. You may obtain a copy of the License at
  * http://www.mozilla.org/MPL/
  *
  * Software distributed under the License is distributed on an "AS IS" basis,
  * WITHOUT WARRANTY OF ANY KIND, either express or implied. See the License
@@ skipping 273 matching lines @@
     if (!ss) {
         SSL_DBG(("%d: SSL[%d]: bad socket in GetClientAuthDataHook",
                  SSL_GETPID(), s));
         return SECFailure;
     }
 
     ss->pkcs11PinArg = arg;
     return SECSuccess;
 }
 
+/* register callback function to provide the user password */
+SECStatus
+SSL_UserPasswdHook(PRFileDesc *s, SSLUserPasswdCB func, void *arg)
+{
+    sslSocket *ss;
+
+    ss = ssl_FindSocket(s);
+    if (!ss) {
+        SSL_DBG(("%d: SSL[%d]: bad socket in UserPasswdHook",
+                 SSL_GETPID(), s));
+        return SECFailure;
+    }
+
+    ss->getUserPasswd = func;
+    ss->getUserPasswdArg = arg;
+    return SECSuccess;
+}
+
+/* used by client to provide user credentials non-interactively */
+SECStatus
+SSL_SetUserLogin(PRFileDesc *s, const char *user, const char *passwd)
+{
+    sslSocket *ss = NULL;
+    int len;
+
+    ss = ssl_FindSocket(s);
+    if (!ss) {
+        SSL_DBG(("%d: SSL[%d]: bad socket in GetClientAuthDataHook",
+                 SSL_GETPID(), s));
+        return SECFailure;
+    }
+
+    if (user) {
+        len = PORT_Strlen(user);
+        if (len > MAX_SRP_USERNAME_LENGTH)
+            len = MAX_SRP_USERNAME_LENGTH;
+        ss->sec.userName = SECITEM_AllocItem(NULL, NULL, len);
+        if (!ss->sec.userName) {
+            PORT_SetError(SEC_ERROR_NO_MEMORY);
+            return SECFailure;
+        }
+        PORT_Memcpy(ss->sec.userName->data, user, ss->sec.userName->len);
+    }
+
+    if (passwd) {
+        len = PORT_Strlen(passwd);
+        ss->sec.userPasswd = SECITEM_AllocItem(NULL, NULL, len);
+        if (!ss->sec.userPasswd) {
+            PORT_SetError(SEC_ERROR_NO_MEMORY);
+            return SECFailure;
+        }
+        PORT_Memcpy(ss->sec.userPasswd->data, passwd, ss->sec.userPasswd->len);
+    }
+
+    return SECSuccess;
+}
+
+/* register callback function to provide SRP user authentication params */
+SECStatus
+SSL_GetSRPParamsHook(PRFileDesc *s, SSLGetSRPParamsCB func, void *arg)
+{
+    sslSocket *ss;
+
+    ss = ssl_FindSocket(s);
+    if (!ss) {
+        SSL_DBG(("%d: SSL[%d]: bad socket in GetClientAuthDataHook",
+                 SSL_GETPID(), s));
+        return SECFailure;
+    }
+
+    ss->getSRPParams = func;
+    ss->getSRPParamsArg = arg;
+    return SECSuccess;
+}
 
 /* This is the "default" authCert callback function.  It is called when a 
  * certificate message is received from the peer and the local application
  * has not registered an authCert callback function.
  */
 SECStatus
 SSL_AuthCertificate(void *arg, PRFileDesc *fd, PRBool checkSig, PRBool isServer)
 {
     SECStatus          rv;
     CERTCertDBHandle * handle;
@@ skipping 25 matching lines @@
     hostname = ss->url;
     if (hostname && hostname[0])
         rv = CERT_VerifyCertName(ss->sec.peerCert, hostname);
     else 
         rv = SECFailure;
     if (rv != SECSuccess)
         PORT_SetError(SSL_ERROR_BAD_CERT_DOMAIN);
 
     return rv;
 }