i2pd-sys 0.0.4

/*
* Copyright (c) 2013-2025, The PurpleI2P Project
*
* This file is part of Purple i2pd project and licensed under BSD3
*
* See full license text in LICENSE file at top of project tree
*/

#include <string.h>
#include <openssl/ssl.h>
#include "Crypto.h"
#include "FS.h"
#include "Log.h"
#include "Family.h"
#include "Config.h"

namespace i2p
{
namespace data
{
	Families::Families ()
	{
	}

	Families::~Families ()
	{
		for (auto it : m_SigningKeys)
			if (it.second.first) EVP_PKEY_free (it.second.first);
	}

	void Families::LoadCertificate (const std::string& filename)
	{
		SSL_CTX * ctx = SSL_CTX_new (TLS_method ());
		int ret = SSL_CTX_use_certificate_file (ctx, filename.c_str (), SSL_FILETYPE_PEM);
		if (ret)
		{
			SSL * ssl = SSL_new (ctx);
			X509 * cert = SSL_get_certificate (ssl);
			if (cert)
			{
				std::shared_ptr<i2p::crypto::Verifier> verifier;
				// extract issuer name
				char name[100];
				X509_NAME_oneline (X509_get_issuer_name(cert), name, 100);
				char * cn = strstr (name, "CN=");
				if (cn)
				{
					cn += 3;
					char * family = strstr (cn, ".family");
					if (family) family[0] = 0;
					auto pkey = X509_get_pubkey (cert);
					if (pkey)
					{	
						int curve = 0;
#if (OPENSSL_VERSION_NUMBER >= 0x030000000) // since 3.0.0
						char groupName[20];
						if (EVP_PKEY_get_group_name(pkey, groupName, sizeof(groupName), NULL) == 1)
							curve = OBJ_txt2nid (groupName);
						else
							curve = -1;
#endif						
						if (!curve || curve == NID_X9_62_prime256v1)
						{	
							if (!m_SigningKeys.emplace (cn, std::make_pair(pkey, (int)m_SigningKeys.size () + 1)).second)
							{
								EVP_PKEY_free (pkey);
								LogPrint (eLogError, "Family: Duplicated family name ", cn);
							}
						}
						else
							LogPrint (eLogWarning, "Family: elliptic curve ", curve, " is not supported");
					}	
				}
			}
			SSL_free (ssl);
		}
		else
			LogPrint (eLogError, "Family: Can't open certificate file ", filename);
		SSL_CTX_free (ctx);
	}

	void Families::LoadCertificates ()
	{
		std::string certDir = i2p::fs::GetCertsDir() + i2p::fs::dirSep + "family";

		std::vector<std::string> files;
		int numCertificates = 0;

		if (!i2p::fs::ReadDir(certDir, files)) {
			LogPrint(eLogWarning, "Family: Can't load family certificates from ", certDir);
			return;
		}

		for (const std::string & file : files) {
			if (file.compare(file.size() - 4, 4, ".crt") != 0) {
				LogPrint(eLogWarning, "Family: ignoring file ", file);
				continue;
			}
			LoadCertificate (file);
			numCertificates++;
		}
		LogPrint (eLogInfo, "Family: ", numCertificates, " certificates loaded");
	}

	bool Families::VerifyFamily (const std::string& family, const IdentHash& ident,
		std::string_view signature, const char * key) const
	{
		uint8_t buf[100], signatureBuf[64];
		size_t len = family.length ();
		if (len + 32 > 100)
		{
			LogPrint (eLogError, "Family: ", family, " is too long");
			return false;
		}
		auto it = m_SigningKeys.find (family);
		if (it != m_SigningKeys.end () && it->second.first)
		{	
			memcpy (buf, family.c_str (), len);
			memcpy (buf + len, (const uint8_t *)ident, 32);
			len += 32;
			auto signatureBufLen = Base64ToByteStream (signature, signatureBuf, 64);
			if (signatureBufLen == 64)
			{
				ECDSA_SIG * sig = ECDSA_SIG_new();
				ECDSA_SIG_set0 (sig, BN_bin2bn (signatureBuf, 32, NULL), BN_bin2bn (signatureBuf + 32, 32, NULL));
				uint8_t sign[72];
				uint8_t * s = sign;
				auto l = i2d_ECDSA_SIG (sig, &s);
				ECDSA_SIG_free(sig);
				EVP_MD_CTX * ctx = EVP_MD_CTX_create ();
				EVP_DigestVerifyInit (ctx, NULL, EVP_sha256(), NULL, it->second.first);
				auto ret = EVP_DigestVerify (ctx, sign, l, buf, len) == 1;
				EVP_MD_CTX_destroy (ctx);
				return ret;
			}	
		}	
		// TODO: process key
		return true;
	}

	FamilyID Families::GetFamilyID (const std::string& family) const
	{
		auto it = m_SigningKeys.find (family);
		if (it != m_SigningKeys.end ())
			return it->second.second;
		return 0;
	}

	std::string CreateFamilySignature (const std::string& family, const IdentHash& ident)
	{
		auto filename = i2p::fs::DataDirPath("family", (family + ".key"));
		std::string sig;
		SSL_CTX * ctx = SSL_CTX_new (TLS_method ());
		int ret = SSL_CTX_use_PrivateKey_file (ctx, filename.c_str (), SSL_FILETYPE_PEM);
		if (ret)
		{
			SSL * ssl = SSL_new (ctx);
			EVP_PKEY * pkey = SSL_get_privatekey (ssl);
			int curve = 0;
#if (OPENSSL_VERSION_NUMBER >= 0x030000000) // since 3.0.0
			char groupName[20];
			if (EVP_PKEY_get_group_name(pkey, groupName, sizeof(groupName), NULL) == 1)
				curve = OBJ_txt2nid (groupName);
			else
				curve = -1;
#endif	
			if (!curve || curve == NID_X9_62_prime256v1)
			{
				uint8_t buf[100], sign[72], signature[64];
				size_t len = family.length ();
				memcpy (buf, family.c_str (), len);
				memcpy (buf + len, (const uint8_t *)ident, 32);
				len += 32;

				size_t l = 72;
				EVP_MD_CTX * mdctx = EVP_MD_CTX_create ();
				EVP_DigestSignInit (mdctx, NULL, EVP_sha256(), NULL, pkey);
				EVP_DigestSign (mdctx, sign, &l, buf, len);
				EVP_MD_CTX_destroy (mdctx);

				const uint8_t * s1 = sign;
				ECDSA_SIG * sig1 = d2i_ECDSA_SIG (NULL, &s1, l);
				const BIGNUM * r, * s;
				ECDSA_SIG_get0 (sig1, &r, &s);
				i2p::crypto::bn2buf (r, signature, 32);
				i2p::crypto::bn2buf (s, signature + 32, 32);
				ECDSA_SIG_free(sig1);
				sig = ByteStreamToBase64 (signature, 64);
			}	
			else
				LogPrint (eLogWarning, "Family: elliptic curve ", curve, " is not supported");

			SSL_free (ssl);
		}
		else
			LogPrint (eLogError, "Family: Can't open keys file: ", filename);
		SSL_CTX_free (ctx);
		return sig;
	}
}
}