op public repos

Blame

Date:: Wed Aug 23 17:38:49 2023 UTC
Message:: bundle libtls gmid (like all other daemons that want to do privsep crypto) has a very close relationship with libtls and need to stay in sync with it. OpenBSD' libtls was recently changed to use OpenSSL' EC_KEY_METHOD instead of the older ECDSA_METHOD, on the gmid side we have to do the same otherwise failures happens at runtime. In a similar manner, privsep crypto is silently broken in the current libretls (next version should fix it.) The proper solution would be to complete the signer APIs so that applications don't need to dive into the library' internals, but that's a mid-term goal, for the immediate bundling the 'little' libtls is the lesser evil. The configure script has gained a new (undocumented for the time being) flag `--with-libtls=bundled|system' to control which libtls to use. It defaults to `bundled' except for OpenBSD where it uses the `system' one. Note that OpenBSD versions before 7.3 (inclusive) ought to use --with-libtls=bundled too since they still do ECDSA_METHOD.
Actions:: History | Blob | Raw File

 1 f9ab77a8 2023-08-23 op /*	$OpenBSD: arc4random_linux.h,v 1.12 2019/07/11 10:37:28 inoguchi Exp $	*/
 2 f9ab77a8 2023-08-23 op 
 3 f9ab77a8 2023-08-23 op /*
 4 f9ab77a8 2023-08-23 op  * Copyright (c) 1996, David Mazieres <dm@uun.org>
 5 f9ab77a8 2023-08-23 op  * Copyright (c) 2008, Damien Miller <djm@openbsd.org>
 6 f9ab77a8 2023-08-23 op  * Copyright (c) 2013, Markus Friedl <markus@openbsd.org>
 7 f9ab77a8 2023-08-23 op  * Copyright (c) 2014, Theo de Raadt <deraadt@openbsd.org>
 8 f9ab77a8 2023-08-23 op  *
 9 f9ab77a8 2023-08-23 op  * Permission to use, copy, modify, and distribute this software for any
10 f9ab77a8 2023-08-23 op  * purpose with or without fee is hereby granted, provided that the above
11 f9ab77a8 2023-08-23 op  * copyright notice and this permission notice appear in all copies.
12 f9ab77a8 2023-08-23 op  *
13 f9ab77a8 2023-08-23 op  * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
14 f9ab77a8 2023-08-23 op  * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
15 f9ab77a8 2023-08-23 op  * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
16 f9ab77a8 2023-08-23 op  * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
17 f9ab77a8 2023-08-23 op  * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
18 f9ab77a8 2023-08-23 op  * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
19 f9ab77a8 2023-08-23 op  * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 f9ab77a8 2023-08-23 op  */
21 f9ab77a8 2023-08-23 op 
22 f9ab77a8 2023-08-23 op /*
23 f9ab77a8 2023-08-23 op  * Stub functions for portability.  From LibreSSL with some adaptations.
24 f9ab77a8 2023-08-23 op  */
25 f9ab77a8 2023-08-23 op 
26 f9ab77a8 2023-08-23 op #include <sys/mman.h>
27 f9ab77a8 2023-08-23 op 
28 f9ab77a8 2023-08-23 op #include <signal.h>
29 f9ab77a8 2023-08-23 op 
30 f9ab77a8 2023-08-23 op /* OpenSSH isn't multithreaded */
31 f9ab77a8 2023-08-23 op #define _ARC4_LOCK()
32 f9ab77a8 2023-08-23 op #define _ARC4_UNLOCK()
33 f9ab77a8 2023-08-23 op #define _ARC4_ATFORK(f)
34 f9ab77a8 2023-08-23 op 
35 f9ab77a8 2023-08-23 op static inline void
36 f9ab77a8 2023-08-23 op _getentropy_fail(void)
37 f9ab77a8 2023-08-23 op {
38 f9ab77a8 2023-08-23 op 	fatal("getentropy failed");
39 f9ab77a8 2023-08-23 op }
40 f9ab77a8 2023-08-23 op 
41 f9ab77a8 2023-08-23 op static volatile sig_atomic_t _rs_forked;
42 f9ab77a8 2023-08-23 op 
43 f9ab77a8 2023-08-23 op static inline void
44 f9ab77a8 2023-08-23 op _rs_forkhandler(void)
45 f9ab77a8 2023-08-23 op {
46 f9ab77a8 2023-08-23 op 	_rs_forked = 1;
47 f9ab77a8 2023-08-23 op }
48 f9ab77a8 2023-08-23 op 
49 f9ab77a8 2023-08-23 op static inline void
50 f9ab77a8 2023-08-23 op _rs_forkdetect(void)
51 f9ab77a8 2023-08-23 op {
52 f9ab77a8 2023-08-23 op 	static pid_t _rs_pid = 0;
53 f9ab77a8 2023-08-23 op 	pid_t pid = getpid();
54 f9ab77a8 2023-08-23 op 
55 f9ab77a8 2023-08-23 op 	if (_rs_pid == 0 || _rs_pid == 1 || _rs_pid != pid || _rs_forked) {
56 f9ab77a8 2023-08-23 op 		_rs_pid = pid;
57 f9ab77a8 2023-08-23 op 		_rs_forked = 0;
58 f9ab77a8 2023-08-23 op 		if (rs)
59 f9ab77a8 2023-08-23 op 			memset(rs, 0, sizeof(*rs));
60 f9ab77a8 2023-08-23 op 	}
61 f9ab77a8 2023-08-23 op }
62 f9ab77a8 2023-08-23 op 
63 f9ab77a8 2023-08-23 op static inline int
64 f9ab77a8 2023-08-23 op _rs_allocate(struct _rs **rsp, struct _rsx **rsxp)
65 f9ab77a8 2023-08-23 op {
66 f9ab77a8 2023-08-23 op #if defined(MAP_ANON) && defined(MAP_PRIVATE)
67 f9ab77a8 2023-08-23 op 	if ((*rsp = mmap(NULL, sizeof(**rsp), PROT_READ|PROT_WRITE,
68 f9ab77a8 2023-08-23 op 	    MAP_ANON|MAP_PRIVATE, -1, 0)) == MAP_FAILED)
69 f9ab77a8 2023-08-23 op 		return (-1);
70 f9ab77a8 2023-08-23 op 
71 f9ab77a8 2023-08-23 op 	if ((*rsxp = mmap(NULL, sizeof(**rsxp), PROT_READ|PROT_WRITE,
72 f9ab77a8 2023-08-23 op 	    MAP_ANON|MAP_PRIVATE, -1, 0)) == MAP_FAILED) {
73 f9ab77a8 2023-08-23 op 		munmap(*rsp, sizeof(**rsp));
74 f9ab77a8 2023-08-23 op 		*rsp = NULL;
75 f9ab77a8 2023-08-23 op 		return (-1);
76 f9ab77a8 2023-08-23 op 	}
77 f9ab77a8 2023-08-23 op #else
78 f9ab77a8 2023-08-23 op 	if ((*rsp = calloc(1, sizeof(**rsp))) == NULL)
79 f9ab77a8 2023-08-23 op 		return (-1);
80 f9ab77a8 2023-08-23 op 	if ((*rsxp = calloc(1, sizeof(**rsxp))) == NULL) {
81 f9ab77a8 2023-08-23 op 		free(*rsp);
82 f9ab77a8 2023-08-23 op 		*rsp = NULL;
83 f9ab77a8 2023-08-23 op 		return (-1);
84 f9ab77a8 2023-08-23 op 	}
85 f9ab77a8 2023-08-23 op #endif
86 f9ab77a8 2023-08-23 op 
87 f9ab77a8 2023-08-23 op 	_ARC4_ATFORK(_rs_forkhandler);
88 f9ab77a8 2023-08-23 op 	return (0);
89 f9ab77a8 2023-08-23 op }