HandleScope scope;

Local<FunctionTemplate> t = FunctionTemplate::New(SecureContext::New);

t->InstanceTemplate()->SetInternalFieldCount(1);

t->SetClassName(String::NewSymbol("SecureContext"));

NODE_SET_PROTOTYPE_METHOD(t, "init", SecureContext::Init);

NODE_SET_PROTOTYPE_METHOD(t, "setKey", SecureContext::SetKey);

NODE_SET_PROTOTYPE_METHOD(t, "setCert", SecureContext::SetCert);

NODE_SET_PROTOTYPE_METHOD(t, "addCACert", SecureContext::AddCACert);

NODE_SET_PROTOTYPE_METHOD(t, "setCiphers", SecureContext::SetCiphers);

NODE_SET_PROTOTYPE_METHOD(t, "close", SecureContext::Close);

target->Set(String::NewSymbol("SecureContext"), t->GetFunction());

HandleScope scope;

SecureContext *p = new SecureContext();

p->Wrap(args.Holder());

return args.This();

HandleScope scope;

SecureContext *sc = ObjectWrap::Unwrap<SecureContext>(args.Holder());

OPENSSL_CONST SSL_METHOD *method = TLSv1_method();

if (args.Length() == 1 && args[0]->IsString()) {

String::Utf8Value sslmethod(args[0]->ToString());

if (strcmp(*sslmethod, "SSLv2_method") == 0) {

method = SSLv2_method();

} else if (strcmp(*sslmethod, "SSLv2_server_method") == 0) {

method = SSLv2_server_method();

} else if (strcmp(*sslmethod, "SSLv2_client_method") == 0) {

method = SSLv2_client_method();

} else if (strcmp(*sslmethod, "SSLv3_method") == 0) {

method = SSLv3_method();

} else if (strcmp(*sslmethod, "SSLv3_server_method") == 0) {

method = SSLv3_server_method();

} else if (strcmp(*sslmethod, "SSLv3_client_method") == 0) {

method = SSLv3_client_method();

} else if (strcmp(*sslmethod, "SSLv23_method") == 0) {

method = SSLv23_method();

} else if (strcmp(*sslmethod, "SSLv23_server_method") == 0) {

method = SSLv23_server_method();

} else if (strcmp(*sslmethod, "SSLv23_client_method") == 0) {

method = SSLv23_client_method();

} else if (strcmp(*sslmethod, "TLSv1_method") == 0) {

method = TLSv1_method();

} else if (strcmp(*sslmethod, "TLSv1_server_method") == 0) {

method = TLSv1_server_method();

} else if (strcmp(*sslmethod, "TLSv1_client_method") == 0) {

method = TLSv1_client_method();

} else {

return ThrowException(Exception::Error(String::New("Unknown method")));

}

}

sc->ctx_ = SSL_CTX_new(method);

// Enable session caching?

SSL_CTX_set_session_cache_mode(sc->ctx_, SSL_SESS_CACHE_SERVER);

// SSL_CTX_set_session_cache_mode(sc->ctx_,SSL_SESS_CACHE_OFF);

sc->ca_store_ = X509_STORE_new();

SSL_CTX_set_cert_store(sc->ctx_, sc->ca_store_);

return True();

HandleScope scope;

SecureContext *sc = ObjectWrap::Unwrap<SecureContext>(args.Holder());

if (args.Length() != 1 || !args[0]->IsString()) {

return ThrowException(Exception::TypeError(String::New("Bad parameter")));

}

String::Utf8Value key_pem(args[0]->ToString());

BIO *bp = BIO_new(BIO_s_mem());

if (!BIO_write(bp, *key_pem, key_pem.length())) {

BIO_free(bp);

return False();

}

EVP_PKEY* pkey = PEM_read_bio_PrivateKey(bp, NULL, NULL, NULL);

if (pkey == NULL) {

BIO_free(bp);

return False();

}

SSL_CTX_use_PrivateKey(sc->ctx_, pkey);

BIO_free(bp);

// XXX Free pkey?

return True();

HandleScope scope;

SecureContext *sc = ObjectWrap::Unwrap<SecureContext>(args.Holder());

if (args.Length() != 1 ||

!args[0]->IsString()) {

return ThrowException(Exception::TypeError(

String::New("Bad parameter")));

}

String::Utf8Value cert_pem(args[0]->ToString());

BIO *bp = BIO_new(BIO_s_mem());

if (!BIO_write(bp, *cert_pem, cert_pem.length())) {

BIO_free(bp);

return False();

}

X509 * x509 = PEM_read_bio_X509(bp, NULL, NULL, NULL);

if (x509 == NULL) {

BIO_free(bp);

return False();

}

SSL_CTX_use_certificate(sc->ctx_, x509);

BIO_free(bp);

X509_free(x509);

return True();

HandleScope scope;

SecureContext *sc = ObjectWrap::Unwrap<SecureContext>(args.Holder());

if (args.Length() != 1 || !args[0]->IsString()) {

return ThrowException(Exception::TypeError(String::New("Bad parameter")));

}

String::Utf8Value cert_pem(args[0]->ToString());

BIO *bp = BIO_new(BIO_s_mem());

if (!BIO_write(bp, *cert_pem, cert_pem.length())) {

BIO_free(bp);

return False();

}

X509 *x509 = PEM_read_bio_X509(bp, NULL, NULL, NULL);

if (x509 == NULL) {

BIO_free(bp);

return False();

}

X509_STORE_add_cert(sc->ca_store_, x509);

BIO_free(bp);

X509_free(x509);

return True();

HandleScope scope;

SecureContext *sc = ObjectWrap::Unwrap<SecureContext>(args.Holder());

if (args.Length() != 1 || !args[0]->IsString()) {

return ThrowException(Exception::TypeError(String::New("Bad parameter")));

}

String::Utf8Value ciphers(args[0]->ToString());

SSL_CTX_set_cipher_list(sc->ctx_, *ciphers);

return True();

HandleScope scope;

SecureContext *sc = ObjectWrap::Unwrap<SecureContext>(args.Holder());

if (sc->ctx_ != NULL) {

SSL_CTX_free(sc->ctx_);

return True();

}

return False();

if (rv >= 0) {

return rv;

}

int err = SSL_get_error(ssl, rv);

if (err != SSL_ERROR_WANT_WRITE &&

err != SSL_ERROR_WANT_READ) {

ERR_error_string_n(ERR_get_error(), &ssl_error_buf[0], sizeof(ssl_error_buf));

/* fprintf(stderr, "[%p] SSL: %s failed: (%d:%d) %s\n", ssl, func, err, rv, buf); */

return rv;

} else if (err == SSL_ERROR_WANT_WRITE) {

/* fprintf(stderr, "[%p] SSL: %s want write\n", ssl, func); */

} else if (err == SSL_ERROR_WANT_READ) {

/* fprintf(stderr, "[%p] SSL: %s want read\n", ssl, func); */

}

return 0;

HandleScope scope;

Local<FunctionTemplate> t = FunctionTemplate::New(SecureStream::New);

t->InstanceTemplate()->SetInternalFieldCount(1);

t->SetClassName(String::NewSymbol("SecureStream"));

NODE_SET_PROTOTYPE_METHOD(t, "encIn", SecureStream::EncIn);

NODE_SET_PROTOTYPE_METHOD(t, "clearOut", SecureStream::ClearOut);

NODE_SET_PROTOTYPE_METHOD(t, "clearIn", SecureStream::ClearIn);

NODE_SET_PROTOTYPE_METHOD(t, "encOut", SecureStream::EncOut);

NODE_SET_PROTOTYPE_METHOD(t, "clearPending", SecureStream::ClearPending);

NODE_SET_PROTOTYPE_METHOD(t, "encPending", SecureStream::EncPending);

NODE_SET_PROTOTYPE_METHOD(t, "getPeerCertificate", SecureStream::GetPeerCertificate);

NODE_SET_PROTOTYPE_METHOD(t, "isInitFinished", SecureStream::IsInitFinished);

NODE_SET_PROTOTYPE_METHOD(t, "verifyPeer", SecureStream::VerifyPeer);

NODE_SET_PROTOTYPE_METHOD(t, "getCurrentCipher", SecureStream::GetCurrentCipher);

NODE_SET_PROTOTYPE_METHOD(t, "start", SecureStream::Start);

NODE_SET_PROTOTYPE_METHOD(t, "shutdown", SecureStream::Shutdown);

NODE_SET_PROTOTYPE_METHOD(t, "close", SecureStream::Close);

target->Set(String::NewSymbol("SecureStream"), t->GetFunction());

HandleScope scope;

SecureStream *p = new SecureStream();

p->Wrap(args.Holder());

if (args.Length() < 1 || !args[0]->IsObject()) {

return ThrowException(Exception::Error(String::New(

"First argument must be a crypto module Credentials")));

}

SecureContext *sc = ObjectWrap::Unwrap<SecureContext>(args[0]->ToObject());

bool is_server = args[1]->BooleanValue();

bool should_verify = args[2]->BooleanValue();

p->ssl_ = SSL_new(sc->ctx_);

p->bio_read_ = BIO_new(BIO_s_mem());

p->bio_write_ = BIO_new(BIO_s_mem());

SSL_set_bio(p->ssl_, p->bio_read_, p->bio_write_);

#ifdef SSL_MODE_RELEASE_BUFFERS

long mode = SSL_get_mode(p->ssl_);

SSL_set_mode(p->ssl_, mode | SSL_MODE_RELEASE_BUFFERS);

#endif

if ((p->should_verify_ = should_verify)) {

SSL_set_verify(p->ssl_, SSL_VERIFY_PEER, verify_callback);

}

if ((p->is_server_ = is_server)) {

SSL_set_accept_state(p->ssl_);

} else {

SSL_set_connect_state(p->ssl_);

}

return args.This();

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (args.Length() < 3) {

return ThrowException(Exception::TypeError(

String::New("Takes 3 parameters")));

}

if (!Buffer::HasInstance(args[0])) {

return ThrowException(Exception::TypeError(

String::New("Second argument should be a buffer")));

}

Local<Object> buffer_obj = args[0]->ToObject();

char *buffer_data = Buffer::Data(buffer_obj);

size_t buffer_length = Buffer::Length(buffer_obj);

size_t off = args[1]->Int32Value();

if (off >= buffer_length) {

return ThrowException(Exception::Error(

String::New("Offset is out of bounds")));

}

size_t len = args[2]->Int32Value();

if (off + len > buffer_length) {

return ThrowException(Exception::Error(

String::New("Length is extends beyond buffer")));

}

int bytes_written = serr(ss->ssl_, "BIO_write", BIO_write(ss->bio_read_, (char*)buffer_data + off, len));

if (bytes_written < 0) {

if (errno == EAGAIN || errno == EINTR) return Null();

return ThrowException(ErrnoException(errno, "read"));

}

return scope.Close(Integer::New(bytes_written));

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (args.Length() < 3) {

return ThrowException(Exception::TypeError(

String::New("Takes 3 parameters")));

}

if (!Buffer::HasInstance(args[0])) {

return ThrowException(Exception::TypeError(

String::New("Second argument should be a buffer")));

}

Local<Object> buffer_obj = args[0]->ToObject();

char *buffer_data = Buffer::Data(buffer_obj);

size_t buffer_length = Buffer::Length(buffer_obj);

size_t off = args[1]->Int32Value();

if (off >= buffer_length) {

return ThrowException(Exception::Error(

String::New("Offset is out of bounds")));

}

size_t len = args[2]->Int32Value();

if (off + len > buffer_length) {

return ThrowException(Exception::Error(

String::New("Length is extends beyond buffer")));

}

int bytes_read;

if (!SSL_is_init_finished(ss->ssl_)) {

if (ss->is_server_) {

bytes_read = serr(ss->ssl_, "SSL_accept:ClearOut", SSL_accept(ss->ssl_));

} else {

bytes_read = serr(ss->ssl_, "SSL_connect:ClearOut", SSL_connect(ss->ssl_));

}

if (bytes_read < 0) {

return ThrowException(Exception::Error(v8::String::New(ssl_error_buf)));

}

return scope.Close(Integer::New(0));

}

bytes_read = serr(ss->ssl_, "SSL_read:ClearOut", SSL_read(ss->ssl_, (char*)buffer_data + off, len));

if (bytes_read < 0) {

return ThrowException(Exception::Error(v8::String::New(ssl_error_buf)));

}

return scope.Close(Integer::New(bytes_read));

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

int bytes_pending = BIO_pending(ss->bio_read_);

return scope.Close(Integer::New(bytes_pending));

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

int bytes_pending = BIO_pending(ss->bio_write_);

return scope.Close(Integer::New(bytes_pending));

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (args.Length() < 3) {

return ThrowException(Exception::TypeError(

String::New("Takes 3 parameters")));

}

if (!Buffer::HasInstance(args[0])) {

return ThrowException(Exception::TypeError(

String::New("Second argument should be a buffer")));

}

Local<Object> buffer_obj = args[0]->ToObject();

char *buffer_data = Buffer::Data(buffer_obj);

size_t buffer_length = Buffer::Length(buffer_obj);

size_t off = args[1]->Int32Value();

if (off >= buffer_length) {

return ThrowException(Exception::Error(

String::New("Offset is out of bounds")));

}

size_t len = args[2]->Int32Value();

if (off + len > buffer_length) {

return ThrowException(Exception::Error(

String::New("Length is extends beyond buffer")));

}

int bytes_read = serr(ss->ssl_, "BIO_read:EncOut", BIO_read(ss->bio_write_, (char*)buffer_data + off, len));

return scope.Close(Integer::New(bytes_read));

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (args.Length() < 3) {

return ThrowException(Exception::TypeError(

String::New("Takes 3 parameters")));

}

if (!Buffer::HasInstance(args[0])) {

return ThrowException(Exception::TypeError(

String::New("Second argument should be a buffer")));

}

Local<Object> buffer_obj = args[0]->ToObject();

char *buffer_data = Buffer::Data(buffer_obj);

size_t buffer_length = Buffer::Length(buffer_obj);

size_t off = args[1]->Int32Value();

if (off >= buffer_length) {

return ThrowException(Exception::Error(

String::New("Offset is out of bounds")));

}

size_t len = args[2]->Int32Value();

if (off + len > buffer_length) {

return ThrowException(Exception::Error(

String::New("Length is extends beyond buffer")));

}

if (!SSL_is_init_finished(ss->ssl_)) {

int s;

if (ss->is_server_) {

s = serr(ss->ssl_, "SSL_accept:ClearIn", SSL_accept(ss->ssl_));

} else {

s = serr(ss->ssl_, "SSL_connect:ClearIn", SSL_connect(ss->ssl_));

}

if (s < 0) {

return ThrowException(Exception::Error(v8::String::New(ssl_error_buf)));

}

return scope.Close(Integer::New(0));

}

int bytes_written = serr(ss->ssl_, "SSL_write:ClearIn", SSL_write(ss->ssl_, (char*)buffer_data + off, len));

if (bytes_written < 0) {

return ThrowException(Exception::Error(v8::String::New(ssl_error_buf)));

}

return scope.Close(Integer::New(bytes_written));

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (ss->ssl_ == NULL) return Undefined();

Local<Object> info = Object::New();

X509* peer_cert = SSL_get_peer_certificate(ss->ssl_);

if (peer_cert != NULL) {

char* subject = X509_NAME_oneline(X509_get_subject_name(peer_cert), 0, 0);

if (subject != NULL) {

info->Set(subject_symbol, String::New(subject));

OPENSSL_free(subject);

}

char* issuer = X509_NAME_oneline(X509_get_issuer_name(peer_cert), 0, 0);

if (subject != NULL) {

info->Set(issuer_symbol, String::New(issuer));

OPENSSL_free(issuer);

}

char buf[256];

BIO* bio = BIO_new(BIO_s_mem());

ASN1_TIME_print(bio, X509_get_notBefore(peer_cert));

memset(buf, 0, sizeof(buf));

BIO_read(bio, buf, sizeof(buf) - 1);

info->Set(valid_from_symbol, String::New(buf));

ASN1_TIME_print(bio, X509_get_notAfter(peer_cert));

memset(buf, 0, sizeof(buf));

BIO_read(bio, buf, sizeof(buf) - 1);

BIO_free(bio);

info->Set(valid_to_symbol, String::New(buf));

unsigned int md_size, i;

unsigned char md[EVP_MAX_MD_SIZE];

if (X509_digest(peer_cert, EVP_sha1(), md, &md_size)) {

const char hex[] = "0123456789ABCDEF";

char fingerprint[EVP_MAX_MD_SIZE * 3];

for (i=0; i<md_size; i++) {

fingerprint[3*i] = hex[(md[i] & 0xf0) >> 4];

fingerprint[(3*i)+1] = hex[(md[i] & 0x0f)];

fingerprint[(3*i)+2] = ':';

}

if (md_size > 0) {

fingerprint[(3*(md_size-1))+2] = '\0';

}

else {

fingerprint[0] = '\0';

}

info->Set(fingerprint_symbol, String::New(fingerprint));

}

X509_free(peer_cert);

}

return scope.Close(info);

HandleScope scope;

int rv;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (!SSL_is_init_finished(ss->ssl_)) {

if (ss->is_server_) {

rv = serr(ss->ssl_, "SSL_accept:Start", SSL_accept(ss->ssl_));

} else {

rv = serr(ss->ssl_, "SSL_connect:Start", SSL_connect(ss->ssl_));

}

if (rv < 0) {

return ThrowException(Exception::Error(v8::String::New(ssl_error_buf)));

}

if (rv == 1) {

return True();

} else {

return False();

}

}

return True();

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (ss->ssl_ == NULL) return False();

if (SSL_shutdown(ss->ssl_) == 1) {

return True();

}

return False();

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (ss->ssl_ == NULL) return False();

return SSL_is_init_finished(ss->ssl_) ? True() : False();

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (ss->ssl_ == NULL) return False();

if (!ss->should_verify_) return False();

X509* peer_cert = SSL_get_peer_certificate(ss->ssl_);

if (peer_cert==NULL) return False();

X509_free(peer_cert);

long x509_verify_error = SSL_get_verify_result(ss->ssl_);

// Can also check for:

// X509_V_ERR_CERT_HAS_EXPIRED

// X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT

// X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN

// X509_V_ERR_INVALID_CA

// X509_V_ERR_PATH_LENGTH_EXCEEDED

// X509_V_ERR_INVALID_PURPOSE

// X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT

// printf("%s\n", X509_verify_cert_error_string(x509_verify_error));

if (!x509_verify_error) return True();

return False();

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

OPENSSL_CONST SSL_CIPHER *c;

if ( ss->ssl_ == NULL ) return Undefined();

c = SSL_get_current_cipher(ss->ssl_);

if ( c == NULL ) return Undefined();

Local<Object> info = Object::New();

const char *cipher_name = SSL_CIPHER_get_name(c);

info->Set(name_symbol, String::New(cipher_name));

const char *cipher_version = SSL_CIPHER_get_version(c);

info->Set(version_symbol, String::New(cipher_version));

return scope.Close(info);

HandleScope scope;

SecureStream *ss = ObjectWrap::Unwrap<SecureStream>(args.Holder());

if (ss->ssl_ != NULL) {

SSL_free(ss->ssl_);

ss->ssl_ = NULL;

}

return True();

int md_len,

char** md_hexdigest,

int* md_hex_len) {

*md_hex_len = (2*(md_len));

*md_hexdigest = new char[*md_hex_len + 1];

for (int i = 0; i < md_len; i++) {

snprintf((char *)(*md_hexdigest + (i*2)), 3, "%02x", md_value[i]);

}

int length,

char** buf64,

int* buf64_len) {

*buf64_len = (length/2);

*buf64 = new char[length/2 + 1];

char *b = *buf64;

for(int i = 0; i < length-1; i+=2) {

b[i/2] = (hex2i(input[i])<<4) | (hex2i(input[i+1]));

}

BIO *b64 = BIO_new(BIO_f_base64());

BIO *bmem = BIO_new(BIO_s_mem());

b64 = BIO_push(b64, bmem);

BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL);

int len = BIO_write(b64, input, length);

assert(len == length);

int r = BIO_flush(b64);

assert(r == 1);

BUF_MEM *bptr;

BIO_get_mem_ptr(b64, &bptr);

*buf64_len = bptr->length;

*buf64 = new char[*buf64_len+1];

memcpy(*buf64, bptr->data, *buf64_len);

char* b = *buf64;

b[*buf64_len] = 0;

BIO_free_all(b64);

int length,

char** buffer,

int* buffer_len) {

BIO *b64, *bmem;

*buffer = new char[length];

memset(*buffer, 0, length);

b64 = BIO_new(BIO_f_base64());

BIO_set_flags(b64, BIO_FLAGS_BASE64_NO_NL);

bmem = BIO_new_mem_buf(input, length);

bmem = BIO_push(b64, bmem);

*buffer_len = BIO_read(bmem, *buffer, length);

BIO_free_all(bmem);

int answer = len;

// 1-byte encoding.

static const int kUtf8SingleByteMask = 0x80;

static const int kUtf8SingleByteValue = 0x00;

// 2-byte encoding.

static const int kUtf8TwoByteMask = 0xe0;

static const int kUtf8TwoByteValue = 0xc0;

// 3-byte encoding.

static const int kUtf8ThreeByteMask = 0xf0;

static const int kUtf8ThreeByteValue = 0xe0;

// 4-byte encoding.

static const int kUtf8FourByteMask = 0xf8;

static const int kUtf8FourByteValue = 0xf0;

// Subsequent bytes of a multi-byte encoding.

static const int kMultiByteMask = 0xc0;

static const int kMultiByteValue = 0x80;

int multi_byte_bytes_seen = 0;

while (answer > 0) {

int c = buffer[answer - 1];

// Ends in valid single-byte sequence?

if ((c & kUtf8SingleByteMask) == kUtf8SingleByteValue) return answer;

// Ends in one or more subsequent bytes of a multi-byte value?

if ((c & kMultiByteMask) == kMultiByteValue) {

multi_byte_bytes_seen++;

answer--;

} else {

if ((c & kUtf8TwoByteMask) == kUtf8TwoByteValue) {

if (multi_byte_bytes_seen >= 1) {

return answer + 2;

}

return answer - 1;

} else if ((c & kUtf8ThreeByteMask) == kUtf8ThreeByteValue) {

if (multi_byte_bytes_seen >= 2) {

return answer + 3;

}

return answer - 1;

} else if ((c & kUtf8FourByteMask) == kUtf8FourByteValue) {

if (multi_byte_bytes_seen >= 3) {

return answer + 4;

}

return answer - 1;

} else {

return answer; // Malformed UTF-8.

}

}

}

return 0;

unsigned char *out,

int *outl) {

int i,b;

int n;

*outl=0;

b=ctx->cipher->block_size;

if (ctx->flags & EVP_CIPH_NO_PADDING) {

if(ctx->buf_len) {

EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH);

return 0;

}

*outl = 0;

return 1;

}

if (b > 1) {

if (ctx->buf_len || !ctx->final_used) {

EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_WRONG_FINAL_BLOCK_LENGTH);

return(0);

}

if (b > (int)(sizeof(ctx->final) / sizeof(ctx->final[0]))) {

EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_BAD_DECRYPT);

return(0);

}

n=ctx->final[b-1];

if (n > b) {

EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_BAD_DECRYPT);

return(0);

}

for (i=0; i<n; i++) {

if (ctx->final[--b] != n) {

EVPerr(EVP_F_EVP_DECRYPTFINAL,EVP_R_BAD_DECRYPT);

return(0);

}

}

n=ctx->cipher->block_size-n;

for (i=0; i<n; i++) {

out[i]=ctx->final[i];

}

*outl=n;

} else {

*outl=0;

}

return(1);

public:

static void Initialize (v8::Handle<v8::Object> target) {

HandleScope scope;

Local<FunctionTemplate> t = FunctionTemplate::New(New);

t->InstanceTemplate()->SetInternalFieldCount(1);

NODE_SET_PROTOTYPE_METHOD(t, "init", CipherInit);

NODE_SET_PROTOTYPE_METHOD(t, "initiv", CipherInitIv);

NODE_SET_PROTOTYPE_METHOD(t, "update", CipherUpdate);

NODE_SET_PROTOTYPE_METHOD(t, "final", CipherFinal);

target->Set(String::NewSymbol("Cipher"), t->GetFunction());

}

bool CipherInit(char* cipherType, char* key_buf, int key_buf_len) {

cipher = EVP_get_cipherbyname(cipherType);

if(!cipher) {

fprintf(stderr, "node-crypto : Unknown cipher %s\n", cipherType);

return false;

}

unsigned char key[EVP_MAX_KEY_LENGTH],iv[EVP_MAX_IV_LENGTH];

int key_len = EVP_BytesToKey(cipher, EVP_md5(), NULL, (unsigned char*) key_buf, key_buf_len, 1, key, iv);

EVP_CIPHER_CTX_init(&ctx);

EVP_CipherInit(&ctx,cipher,(unsigned char *)key,(unsigned char *)iv, true);

if (!EVP_CIPHER_CTX_set_key_length(&ctx,key_len)) {

fprintf(stderr, "node-crypto : Invalid key length %d\n", key_len);

EVP_CIPHER_CTX_cleanup(&ctx);

return false;

}

initialised_ = true;

return true;

}

bool CipherInitIv(char* cipherType,

char* key,

int key_len,

char *iv,

int iv_len) {

cipher = EVP_get_cipherbyname(cipherType);

if(!cipher) {

fprintf(stderr, "node-crypto : Unknown cipher %s\n", cipherType);

return false;

}

if (EVP_CIPHER_iv_length(cipher)!=iv_len) {

fprintf(stderr, "node-crypto : Invalid IV length %d\n", iv_len);

return false;

}

EVP_CIPHER_CTX_init(&ctx);

EVP_CipherInit(&ctx,cipher,(unsigned char *)key,(unsigned char *)iv, true);

if (!EVP_CIPHER_CTX_set_key_length(&ctx,key_len)) {

fprintf(stderr, "node-crypto : Invalid key length %d\n", key_len);

EVP_CIPHER_CTX_cleanup(&ctx);

return false;

}

initialised_ = true;

return true;

}

int CipherUpdate(char* data, int len, unsigned char** out, int* out_len) {

if (!initialised_) return 0;

*out_len=len+EVP_CIPHER_CTX_block_size(&ctx);

*out= new unsigned char[*out_len];

EVP_CipherUpdate(&ctx, *out, out_len, (unsigned char*)data, len);

return 1;

}

int CipherFinal(unsigned char** out, int *out_len) {

if (!initialised_) return 0;

*out = new unsigned char[EVP_CIPHER_CTX_block_size(&ctx)];

EVP_CipherFinal(&ctx,*out,out_len);

EVP_CIPHER_CTX_cleanup(&ctx);

initialised_ = false;

return 1;

}

protected:

static Handle<Value> New (const Arguments& args) {

HandleScope scope;

Cipher *cipher = new Cipher();

cipher->Wrap(args.This());

return args.This();

}

static Handle<Value> CipherInit(const Arguments& args) {

HandleScope scope;

Cipher *cipher = ObjectWrap::Unwrap<Cipher>(args.This());

cipher->incomplete_base64=NULL;

if (args.Length() <= 1 || !args[0]->IsString() || !args[1]->IsString()) {

return ThrowException(Exception::Error(String::New(

"Must give cipher-type, key")));

}

ssize_t key_buf_len = DecodeBytes(args[1], BINARY);

if (key_buf_len < 0) {

Local<Value> exception = Exception::TypeError(String::New("Bad argument"));

return ThrowException(exception);

}

char* key_buf = new char[key_buf_len];

ssize_t key_written = DecodeWrite(key_buf, key_buf_len, args[1], BINARY);