openwrt-packages-dist/net/transmission/patches/010-add-mbedtls-support.patch

From bad7f584eb11076ae37fd51cdb21842935c6ea57 Mon Sep 17 00:00:00 2001
From: Mike Gelfand <mikedld@mikedld.com>
Date: Wed, 26 Oct 2016 20:37:10 +0300
Subject: [PATCH] Add support for mbedtls (formely polarssl)

---
 cmake/FindPolarSSL.cmake                |  37 +++++++----
 configure.ac                            |  28 ++++----
 libtransmission/CMakeLists.txt          |   4 ++
 libtransmission/Makefile.am             |   3 +
 libtransmission/crypto-utils-polarssl.c | 112 +++++++++++++++++++-------------
 5 files changed, 115 insertions(+), 69 deletions(-)

diff --git a/cmake/FindPolarSSL.cmake b/cmake/FindPolarSSL.cmake
index 0a958e0..e4e1ac6 100644
--- a/cmake/FindPolarSSL.cmake
+++ b/cmake/FindPolarSSL.cmake
@@ -8,21 +8,36 @@ if(POLARSSL_PREFER_STATIC_LIB)
 endif()
 
 if(UNIX)
-  find_package(PkgConfig QUIET)
-  pkg_check_modules(_POLARSSL QUIET polarssl)
+    find_package(PkgConfig QUIET)
+    pkg_check_modules(_MBEDTLS QUIET mbedtls)
 endif()
 
-find_path(POLARSSL_INCLUDE_DIR NAMES polarssl/version.h HINTS ${_POLARSSL_INCLUDEDIR})
-find_library(POLARSSL_LIBRARY NAMES polarssl HINTS ${_POLARSSL_LIBDIR})
+find_path(MBEDTLS_INCLUDE_DIR NAMES mbedtls/version.h HINTS ${_MBEDTLS_INCLUDEDIR})
+find_library(MBEDTLS_LIBRARY NAMES mbedtls HINTS ${_MBEDTLS_LIBDIR})
+if(MBEDTLS_INCLUDE_DIR AND MBEDTLS_LIBRARY)
+    set(POLARSSL_INCLUDE_DIR ${MBEDTLS_INCLUDE_DIR})
+    set(POLARSSL_LIBRARY ${MBEDTLS_LIBRARY})
+    set(POLARSSL_VERSION ${_MBEDTLS_VERSION})
+    set(POLARSSL_IS_MBEDTLS ON)
+else()
+    if(UNIX)
+        pkg_check_modules(_POLARSSL QUIET polarssl)
+    endif()
+
+    find_path(POLARSSL_INCLUDE_DIR NAMES polarssl/version.h HINTS ${_POLARSSL_INCLUDEDIR})
+    find_library(POLARSSL_LIBRARY NAMES polarssl HINTS ${_POLARSSL_LIBDIR})
+    set(POLARSSL_VERSION ${_POLARSSL_VERSION})
+    set(POLARSSL_IS_MBEDTLS OFF)
+endif()
 
-if(POLARSSL_INCLUDE_DIR)
-    if(_POLARSSL_VERSION)
-        set(POLARSSL_VERSION ${_POLARSSL_VERSION})
+if(NOT POLARSSL_VERSION AND POLARSSL_INCLUDE_DIR)
+    if(POLARSSL_IS_MBEDTLS)
+        file(STRINGS "${POLARSSL_INCLUDE_DIR}/mbedtls/version.h" POLARSSL_VERSION_STR REGEX "^#define[\t ]+MBEDTLS_VERSION_STRING[\t ]+\"[^\"]+\"")
     else()
         file(STRINGS "${POLARSSL_INCLUDE_DIR}/polarssl/version.h" POLARSSL_VERSION_STR REGEX "^#define[\t ]+POLARSSL_VERSION_STRING[\t ]+\"[^\"]+\"")
-        if(POLARSSL_VERSION_STR MATCHES "\"([^\"]+)\"")
-            set(POLARSSL_VERSION "${CMAKE_MATCH_1}")
-        endif()
+    endif()
+    if(POLARSSL_VERSION_STR MATCHES "\"([^\"]+)\"")
+        set(POLARSSL_VERSION "${CMAKE_MATCH_1}")
     endif()
 endif()
 
@@ -39,7 +54,7 @@ find_package_handle_standard_args(PolarSSL
         POLARSSL_VERSION
 )
 
-mark_as_advanced(POLARSSL_INCLUDE_DIR POLARSSL_LIBRARY)
+mark_as_advanced(MBEDTLS_INCLUDE_DIR MBEDTLS_LIBRARY POLARSSL_INCLUDE_DIR POLARSSL_LIBRARY)
 
 if(POLARSSL_PREFER_STATIC_LIB)
     set(CMAKE_FIND_LIBRARY_SUFFIXES ${POLARSSL_ORIG_CMAKE_FIND_LIBRARY_SUFFIXES})
diff --git a/configure.ac b/configure.ac
index aff673b..cb026df 100644
--- a/configure.ac
+++ b/configure.ac
@@ -149,23 +149,26 @@ AS_IF([test "x$want_crypto" = "xauto" -o "x$want_crypto" = "xcyassl"], [
     )
 ])
 AS_IF([test "x$want_crypto" = "xauto" -o "x$want_crypto" = "xpolarssl"], [
-    AC_CHECK_HEADER([polarssl/version.h],
-        [AC_EGREP_CPP([version_ok], [#include <polarssl/version.h>
-                                     #if defined (POLARSSL_VERSION_NUMBER) && POLARSSL_VERSION_NUMBER >= $POLARSSL_MINIMUM
-                                     version_ok
-                                     #endif],
-            [AC_CHECK_LIB([polarssl], [dhm_calc_secret],
-                [want_crypto="polarssl"; CRYPTO_PKG="polarssl"; CRYPTO_CFLAGS=""; CRYPTO_LIBS="-lpolarssl"],
+    PKG_CHECK_MODULES(MBEDTLS, [mbedtls >= $POLARSSL_MINIMUM],
+        [want_crypto="polarssl"; CRYPTO_PKG="polarssl"; CRYPTO_CFLAGS="$MBEDTLS_CFLAGS"; CRYPTO_LIBS="$MBEDTLS_LIBS"; POLARSSL_IS_MBEDTLS=yes],
+        [AC_CHECK_HEADER([polarssl/version.h],
+            [AC_EGREP_CPP([version_ok], [#include <polarssl/version.h>
+                                         #if defined (POLARSSL_VERSION_NUMBER) && POLARSSL_VERSION_NUMBER >= $POLARSSL_MINIMUM
+                                         version_ok
+                                         #endif],
+                [AC_CHECK_LIB([polarssl], [dhm_calc_secret],
+                    [want_crypto="polarssl"; CRYPTO_PKG="polarssl"; CRYPTO_CFLAGS=""; CRYPTO_LIBS="-lpolarssl"],
+                    [AS_IF([test "x$want_crypto" = "xpolarssl"],
+                        [AC_MSG_ERROR([PolarSSL support requested, but library not found.])]
+                    )]
+                )],
                 [AS_IF([test "x$want_crypto" = "xpolarssl"],
-                    [AC_MSG_ERROR([PolarSSL support requested, but library not found.])]
+                    [AC_MSG_ERROR([PolarSSL support requested, but version not suitable.])]
                 )]
             )],
             [AS_IF([test "x$want_crypto" = "xpolarssl"],
-                [AC_MSG_ERROR([PolarSSL support requested, but version not suitable.])]
+                [AC_MSG_ERROR([PolarSSL support requested, but headers not found.])]
             )]
-        )],
-        [AS_IF([test "x$want_crypto" = "xpolarssl"],
-            [AC_MSG_ERROR([PolarSSL support requested, but headers not found.])]
         )]
     )
 ])
@@ -180,6 +183,7 @@ AS_IF([test "x$CRYPTO_PKG" = "x"], [
 AM_CONDITIONAL([CRYPTO_USE_OPENSSL],[test "x$CRYPTO_PKG" = "xopenssl"])
 AM_CONDITIONAL([CRYPTO_USE_CYASSL],[test "x$CRYPTO_PKG" = "xcyassl"])
 AM_CONDITIONAL([CRYPTO_USE_POLARSSL],[test "x$CRYPTO_PKG" = "xpolarssl"])
+AM_CONDITIONAL([POLARSSL_IS_MBEDTLS],[test "x$POLARSSL_IS_MBEDTLS" = "xyes"])
 AC_SUBST(CRYPTO_PKG)
 AC_SUBST(CRYPTO_CFLAGS)
 AC_SUBST(CRYPTO_LIBS)
diff --git a/libtransmission/CMakeLists.txt b/libtransmission/CMakeLists.txt
index 4865dee..b5230b9 100644
--- a/libtransmission/CMakeLists.txt
+++ b/libtransmission/CMakeLists.txt
@@ -194,6 +194,10 @@ if(USE_SYSTEM_B64)
     add_definitions(-DUSE_SYSTEM_B64)
 endif()
 
+if(POLARSSL_IS_MBEDTLS)
+    add_definitions(-DPOLARSSL_IS_MBEDTLS)
+endif()
+
 include_directories(
     ${PROJECT_SOURCE_DIR}
     ${PROJECT_BINARY_DIR}
diff --git a/libtransmission/Makefile.am b/libtransmission/Makefile.am
index f91769a..4d7e85a 100644
--- a/libtransmission/Makefile.am
+++ b/libtransmission/Makefile.am
@@ -102,6 +102,9 @@ libtransmission_a_SOURCES += crypto-utils-cyassl.c
 endif
 if CRYPTO_USE_POLARSSL
 libtransmission_a_SOURCES += crypto-utils-polarssl.c
+if POLARSSL_IS_MBEDTLS
+AM_CPPFLAGS += -DPOLARSSL_IS_MBEDTLS
+endif
 endif
 
 noinst_HEADERS = \
diff --git a/libtransmission/crypto-utils-polarssl.c b/libtransmission/crypto-utils-polarssl.c
index 1c59a7f..e98c13d 100644
--- a/libtransmission/crypto-utils-polarssl.c
+++ b/libtransmission/crypto-utils-polarssl.c
@@ -1,5 +1,5 @@
 /*
- * This file Copyright (C) 2014-2015 Mnemosyne LLC
+ * This file Copyright (C) 2014-2016 Mnemosyne LLC
  *
  * It may be used under the GNU GPL versions 2 or 3
  * or any future license endorsed by Mnemosyne LLC.
@@ -7,15 +7,25 @@
  * $Id$
  */
 
+#if defined (POLARSSL_IS_MBEDTLS)
+ #define API_HEADER(x) <mbedtls/x>
+ #define API(x) mbedtls_##x
+ #define API_VERSION_NUMBER MBEDTLS_VERSION_NUMBER
+#else
+ #define API_HEADER(x) <polarssl/x>
+ #define API(x) x
+ #define API_VERSION_NUMBER POLARSSL_VERSION_NUMBER
+#endif
+
 #include <assert.h>
 
-#include <polarssl/arc4.h>
-#include <polarssl/base64.h>
-#include <polarssl/ctr_drbg.h>
-#include <polarssl/dhm.h>
-#include <polarssl/error.h>
-#include <polarssl/sha1.h>
-#include <polarssl/version.h>
+#include API_HEADER (arc4.h)
+#include API_HEADER (base64.h)
+#include API_HEADER (ctr_drbg.h)
+#include API_HEADER (dhm.h)
+#include API_HEADER (error.h)
+#include API_HEADER (sha1.h)
+#include API_HEADER (version.h)
 
 #include "transmission.h"
 #include "crypto-utils.h"
@@ -41,7 +51,9 @@ log_polarssl_error (int          error_code,
     {
       char error_message[256];
 
-#if POLARSSL_VERSION_NUMBER >= 0x01030000
+#if defined (POLARSSL_IS_MBEDTLS)
+      mbedtls_strerror (error_code, error_message, sizeof (error_message));
+#elif API_VERSION_NUMBER >= 0x01030000
       polarssl_strerror (error_code, error_message, sizeof (error_message));
 #else
       error_strerror (error_code, error_message, sizeof (error_message));
@@ -51,7 +63,7 @@ log_polarssl_error (int          error_code,
     }
 }
 
-#define log_error(error_code) log_polarssl_error(error_code, __FILE__, __LINE__)
+#define log_error(error_code) log_polarssl_error ((error_code), __FILE__, __LINE__)
 
 static bool
 check_polarssl_result (int          result,
@@ -83,15 +95,20 @@ my_rand (void * context UNUSED, unsigned char * buffer, size_t buffer_size)
   return 0;
 }
 
-static ctr_drbg_context *
+static API (ctr_drbg_context) *
 get_rng (void)
 {
-  static ctr_drbg_context rng;
+  static API (ctr_drbg_context) rng;
   static bool rng_initialized = false;
 
   if (!rng_initialized)
     {
-      if (!check_result (ctr_drbg_init (&rng, &my_rand, NULL, NULL, 0)))
+#if API_VERSION_NUMBER >= 0x02000000
+      API (ctr_drbg_init) (&rng);
+      if (!check_result (API (ctr_drbg_seed) (&rng, &my_rand, NULL, NULL, 0)))
+#else
+      if (!check_result (API (ctr_drbg_init) (&rng, &my_rand, NULL, NULL, 0)))
+#endif
         return NULL;
       rng_initialized = true;
     }
@@ -117,13 +134,13 @@ get_rng_lock (void)
 tr_sha1_ctx_t
 tr_sha1_init (void)
 {
-  sha1_context * handle = tr_new0 (sha1_context, 1);
+  API (sha1_context) * handle = tr_new0 (API (sha1_context), 1);
 
-#if POLARSSL_VERSION_NUMBER >= 0x01030800
-  sha1_init (handle);
+#if API_VERSION_NUMBER >= 0x01030800
+  API (sha1_init) (handle);
 #endif
 
-  sha1_starts (handle);
+  API (sha1_starts) (handle);
   return handle;
 }
 
@@ -139,7 +156,7 @@ tr_sha1_update (tr_sha1_ctx_t   handle,
 
   assert (data != NULL);
 
-  sha1_update (handle, data, data_length);
+  API (sha1_update) (handle, data, data_length);
   return true;
 }
 
@@ -151,11 +168,11 @@ tr_sha1_final (tr_sha1_ctx_t   handle,
     {
       assert (handle != NULL);
 
-      sha1_finish (handle, hash);
+      API (sha1_finish) (handle, hash);
     }
 
-#if POLARSSL_VERSION_NUMBER >= 0x01030800
-  sha1_free (handle);
+#if API_VERSION_NUMBER >= 0x01030800
+  API (sha1_free) (handle);
 #endif
 
   tr_free (handle);
@@ -169,10 +186,10 @@ tr_sha1_final (tr_sha1_ctx_t   handle,
 tr_rc4_ctx_t
 tr_rc4_new (void)
 {
-  arc4_context * handle = tr_new0 (arc4_context, 1);
+  API (arc4_context) * handle = tr_new0 (API (arc4_context), 1);
 
-#if POLARSSL_VERSION_NUMBER >= 0x01030800
-  arc4_init (handle);
+#if API_VERSION_NUMBER >= 0x01030800
+  API (arc4_init) (handle);
 #endif
 
   return handle;
@@ -181,8 +198,8 @@ tr_rc4_new (void)
 void
 tr_rc4_free (tr_rc4_ctx_t handle)
 {
-#if POLARSSL_VERSION_NUMBER >= 0x01030800
-  arc4_free (handle);
+#if API_VERSION_NUMBER >= 0x01030800
+  API (arc4_free) (handle);
 #endif
 
   tr_free (handle);
@@ -196,7 +213,7 @@ tr_rc4_set_key (tr_rc4_ctx_t    handle,
   assert (handle != NULL);
   assert (key != NULL);
 
-  arc4_setup (handle, key, key_length);
+  API (arc4_setup) (handle, key, key_length);
 }
 
 void
@@ -213,7 +230,7 @@ tr_rc4_process (tr_rc4_ctx_t   handle,
   assert (input != NULL);
   assert (output != NULL);
 
-  arc4_crypt (handle, length, input, output);
+  API (arc4_crypt) (handle, length, input, output);
 }
 
 /***
@@ -226,19 +243,19 @@ tr_dh_new (const uint8_t * prime_num,
            const uint8_t * generator_num,
            size_t          generator_num_length)
 {
-  dhm_context * handle = tr_new0 (dhm_context, 1);
+  API (dhm_context) * handle = tr_new0 (API (dhm_context), 1);
 
   assert (prime_num != NULL);
   assert (generator_num != NULL);
 
-#if POLARSSL_VERSION_NUMBER >= 0x01030800
-  dhm_init (handle);
+#if API_VERSION_NUMBER >= 0x01030800
+  API (dhm_init) (handle);
 #endif
 
-  if (!check_result (mpi_read_binary (&handle->P, prime_num, prime_num_length)) ||
-      !check_result (mpi_read_binary (&handle->G, generator_num, generator_num_length)))
+  if (!check_result (API (mpi_read_binary) (&handle->P, prime_num, prime_num_length)) ||
+      !check_result (API (mpi_read_binary) (&handle->G, generator_num, generator_num_length)))
     {
-      dhm_free (handle);
+      API (dhm_free) (handle);
       return NULL;
     }
 
@@ -253,7 +270,7 @@ tr_dh_free (tr_dh_ctx_t handle)
   if (handle == NULL)
     return;
 
-  dhm_free (handle);
+  API (dhm_free) (handle);
 }
 
 bool
@@ -262,7 +279,7 @@ tr_dh_make_key (tr_dh_ctx_t   raw_handle,
                 uint8_t     * public_key,
                 size_t      * public_key_length)
 {
-  dhm_context * handle = raw_handle;
+  API (dhm_context) * handle = raw_handle;
 
   assert (handle != NULL);
   assert (public_key != NULL);
@@ -270,8 +287,8 @@ tr_dh_make_key (tr_dh_ctx_t   raw_handle,
   if (public_key_length != NULL)
     *public_key_length = handle->len;
 
-  return check_result (dhm_make_public (handle, private_key_length, public_key,
-                                        handle->len, my_rand, NULL));
+  return check_result (API (dhm_make_public) (handle, private_key_length, public_key,
+                                                      handle->len, my_rand, NULL));
 }
 
 tr_dh_secret_t
@@ -279,26 +296,29 @@ tr_dh_agree (tr_dh_ctx_t     raw_handle,
              const uint8_t * other_public_key,
              size_t          other_public_key_length)
 {
-  dhm_context * handle = raw_handle;
+  API (dhm_context) * handle = raw_handle;
   struct tr_dh_secret * ret;
   size_t secret_key_length;
 
   assert (handle != NULL);
   assert (other_public_key != NULL);
 
-  if (!check_result (dhm_read_public (handle, other_public_key,
-                                      other_public_key_length)))
+  if (!check_result (API (dhm_read_public )(handle, other_public_key,
+                                                    other_public_key_length)))
     return NULL;
 
   ret = tr_dh_secret_new (handle->len);
 
   secret_key_length = handle->len;
 
-#if POLARSSL_VERSION_NUMBER >= 0x01030000
-  if (!check_result (dhm_calc_secret (handle, ret->key,
-                                      &secret_key_length, my_rand, NULL)))
+#if API_VERSION_NUMBER >= 0x02000000
+  if (!check_result (API (dhm_calc_secret) (handle, ret->key, secret_key_length,
+                                                    &secret_key_length, my_rand, NULL)))
+#elif API_VERSION_NUMBER >= 0x01030000
+  if (!check_result (API (dhm_calc_secret) (handle, ret->key,
+                                                    &secret_key_length, my_rand, NULL)))
 #else
-  if (!check_result (dhm_calc_secret (handle, ret->key, &secret_key_length)))
+  if (!check_result (API (dhm_calc_secret) (handle, ret->key, &secret_key_length)))
 #endif
     {
       tr_dh_secret_free (ret);
@@ -324,7 +344,7 @@ tr_rand_buffer (void   * buffer,
   assert (buffer != NULL);
 
   tr_lockLock (rng_lock);
-  ret = check_result (ctr_drbg_random (get_rng (), buffer, length));
+  ret = check_result (API (ctr_drbg_random) (get_rng (), buffer, length));
   tr_lockUnlock (rng_lock);
 
   return ret;
-- 
2.7.4