#include "EXTERN.h"
#include "perl.h"
#include "XSUB.h"
#include "ppport.h"

#include <openssl/ssl.h>
#include <openssl/bio.h>

#if OPENSSL_VERSION_NUMBER < 0x10100000
static const ASN1_INTEGER *X509_REVOKED_get0_serialNumber(const X509_REVOKED *x)
{
	return x->serialNumber;
}
#endif

MODULE = POE::Filter::SSL      PACKAGE = POE::Filter::SSL

long
SSL_set_tmp_dh(ssl,dh)
     SSL *	ssl
     DH *	dh

long
SSL_CTX_set_tmp_dh(ctx,dh)
   SSL_CTX *	ctx
   DH *	dh

long
SSL_CTX_set_tmp_rsa(ctx,rsa)
   SSL_CTX *	ctx
   RSA *	rsa

ASN1_INTEGER *
X509_get_serialNumber(cert)
   X509 *      cert
   CODE:
      RETVAL = X509_get_serialNumber(cert);
      ST(0) = sv_newmortal();   /* Undefined to start with */
      sv_setpvn( ST(0), RETVAL->data, RETVAL->length);

ASN1_INTEGER *
verify_serial_against_crl_file(crlfile, serial)
   CODE:
   X509_CRL *crl=NULL;
   X509_REVOKED *revoked;
   STACK_OF(X509_REVOKED) *revokes;
   BIO *in=NULL;
   int n,i,retval = 0;
   STRLEN len, lenser;
   unsigned char* crlfile = SvPV( ST(0), len);
   unsigned char* serial  = SvPV( ST(1), lenser);
   ST(0) = sv_newmortal();   /* Undefined to start with */

   /* check peer cert against CRL */
   if (len <= 0) {
      sv_setpvn(ST(0), "CRL: No file name given!", 24);
      goto end;
   }

   in=BIO_new(BIO_s_file());
   if (in == NULL) {
      sv_setpvn(ST(0), "CRL: BIO err", 12);
      goto end;
   }

   if (BIO_read_filename(in, crlfile) <= 0) {
      sv_setpvn(ST(0), "CRL: cannot read CRL File", 25);
      goto end;
   }

   crl=PEM_read_bio_X509_CRL(in,NULL,NULL,NULL);
   if (crl == NULL) {
      sv_setpvn(ST(0), "CRL: cannot read from CRL File", 30);
      goto end;
   }

   revokes = X509_CRL_get_REVOKED(crl);
   n = sk_X509_REVOKED_num(revokes);
   if (n > 0) {
      for (i = 0; i < n; i++) {
         const ASN1_INTEGER *asn_ser;

         revoked = sk_X509_REVOKED_value(revokes, i);
         asn_ser = X509_REVOKED_get0_serialNumber(revoked);
         if ( (asn_ser->length > 0) &&
              (asn_ser->length == lenser) &&
              (strncmp(asn_ser->data, serial, lenser) == 0)) {
            sv_setpvn( ST(0), asn_ser->data, asn_ser->length);
            goto end;
         }
      }
      sv_setpvn(ST(0), "0", 1);
   } else {
      sv_setpvn(ST(0), "CRL: Empty File", 15);
   }
   end:
   BIO_free(in);
   if (crl) X509_CRL_free (crl);