1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
|
--[[
Copyright (c) 2019, Vsevolod Stakhov <vsevolod@highsecure.ru>
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
]]--
--[[[
-- @module lua_ffi/dkim
-- This module contains ffi interfaces to DKIM
--]]
local ffi = require 'ffi'
ffi.cdef[[
struct rspamd_dkim_sign_context_s;
struct rspamd_dkim_key_s;
struct rspamd_task;
enum rspamd_dkim_key_format {
RSPAMD_DKIM_KEY_FILE = 0,
RSPAMD_DKIM_KEY_PEM,
RSPAMD_DKIM_KEY_BASE64,
RSPAMD_DKIM_KEY_RAW,
};
enum rspamd_sign_type {
DKIM_SIGN_RSASHA1 = 0,
DKIM_SIGN_RSASHA256,
DKIM_SIGN_RSASHA512,
DKIM_SIGN_ECDSASHA256,
DKIM_SIGN_ECDSASHA512,
DKIM_SIGN_EDDSASHA256,
};
enum rspamd_dkim_key_type {
RSPAMD_DKIM_KEY_RSA = 0,
RSPAMD_DKIM_KEY_ECDSA,
RSPAMD_DKIM_KEY_EDDSA
};
struct rspamd_dkim_sign_context_s*
rspamd_create_dkim_sign_context (struct rspamd_task *task,
struct rspamd_dkim_key_s *priv_key,
int headers_canon,
int body_canon,
const char *dkim_headers,
enum rspamd_dkim_type type,
void *unused);
struct rspamd_dkim_key_s* rspamd_dkim_sign_key_load (const char *what, size_t len,
enum rspamd_dkim_key_format type,
void *err);
void rspamd_dkim_key_unref (struct rspamd_dkim_key_s *k);
struct GString *rspamd_dkim_sign (struct rspamd_task *task,
const char *selector,
const char *domain,
unsigned long expire,
size_t len,
unsigned int idx,
const char *arc_cv,
struct rspamd_dkim_sign_context_s *ctx);
]]
local function load_sign_key(what, format)
if not format then
format = ffi.C.RSPAMD_DKIM_KEY_PEM
else
if format == 'file' then
format = ffi.C.RSPAMD_DKIM_KEY_FILE
elseif format == 'base64' then
format = ffi.C.RSPAMD_DKIM_KEY_BASE64
elseif format == 'base64' then
format = ffi.C.RSPAMD_DKIM_KEY_RAW
else
return nil,'unknown key format'
end
end
return ffi.C.rspamd_dkim_sign_key_load(what, #what, format, nil)
end
local default_dkim_headers =
"(o)from:(o)sender:(o)reply-to:(o)subject:(o)date:(o)message-id:" ..
"(o)to:(o)cc:(o)mime-version:(o)content-type:(o)content-transfer-encoding:" ..
"resent-to:resent-cc:resent-from:resent-sender:resent-message-id:" ..
"(o)in-reply-to:(o)references:list-id:list-owner:list-unsubscribe:" ..
"list-subscribe:list-post"
local function create_sign_context(task, privkey, dkim_headers, sign_type)
if not task or not privkey then
return nil,'invalid arguments'
end
if not dkim_headers then
dkim_headers = default_dkim_headers
end
if not sign_type then
sign_type = 'rsa-sha-256'
end
if sign_type == 'rsa-sha256' then
sign_type = ffi.C.DKIM_SIGN_RSASHA256
elseif sign_type == 'rsa-sha1' then
sign_type = ffi.C.DKIM_SIGN_RSASHA1
elseif sign_type == 'rsa-sha512' then
sign_type = ffi.C.DKIM_SIGN_RSASHA512
elseif sign_type == 'eddsa' or sign_type == 'eddsa-sha256' then
sign_type = ffi.C.DKIM_SIGN_EDDSASHA256
else
return nil,'invalid sign type'
end
return ffi.C.rspamd_create_dkim_sign_context(task, privkey,
1, 1, dkim_headers, sign_type, nil)
end
local function do_sign(task, sign_context, selector, domain,
expire, len, arc_idx)
if not task or not sign_context or not selector or not domain then
return nil,'invalid arguments'
end
if not expire then expire = 0 end
if not len then len = 0 end
if not arc_idx then arc_idx = 0 end
local gstring = ffi.C.rspamd_dkim_sign(task, selector, domain, expire, len, arc_idx, nil, sign_context)
if not gstring then
return nil,'cannot sign'
end
local ret = ffi.string(gstring.str, gstring.len)
ffi.C.g_string_free(gstring, true)
return ret
end
return {
load_sign_key = load_sign_key,
create_sign_context = create_sign_context,
do_sign = do_sign
}
|
