src: split CryptoPemCallback into two functions by danbev · Pull Request #12827 · nodejs/node

danbev · 2017-05-04T12:56:11Z

Currently the function CryptoPemCallback is used for two things:

As a passphrase callback.
To avoid the default OpenSSL passphrase routine.

The default OpenSSL passphase routine would apply if both
the callback and the passphrase are null pointers and the typical
behaviour is to prompt for the passphase which is not appropriate in
node.

This commit suggests that the PasswordCallback function only handle
passphrases, and that an additional function named NoPasswordCallback
used for the second case to avoid OpenSSL's passphase routine.

Checklist

make -j4 test (UNIX), or vcbuild test (Windows) passes
commit message follows commit guidelines

Affected core subsystem(s)

src

Currently the function CryptoPemCallback is used for two things: 1. As a passphrase callback. 2. To avoid the default OpenSSL passphrase routine. The default OpenSSL passphase routine would apply if both the callback and the passphrase are null pointers and the typical behaviour is to prompt for the passphase which is not appropriate in node. This commit suggests that the PasswordCallback function only handle passphrases, and that an additional function named NoPasswordCallback used for the second case to avoid OpenSSL's passphase routine.

danbev · 2017-05-04T12:56:48Z

CI: https://ci.nodejs.org/job/node-test-pull-request/7848/

cjihrig

LGTM, but @shigeki should probably take a look.

mscdex · 2017-05-04T19:30:22Z

/cc @nodejs/crypto

indutny

I like this direction, let's do it! Few nits, though.

indutny · 2017-05-04T19:41:13Z

+ memcpy(buf, u, len);
+ return len;
+}



Please add one more newline here, please.

I'll fix that.

indutny · 2017-05-04T19:42:08Z

+has_password = false;
 else
 THROW_AND_RETURN_IF_NOT_STRING(args[1], "Pass phrase");
 }


What if len == 1 from the start? It looks like has_password will be true?

Oh yes, sorry. Let me fix that. Thanks

danbev · 2017-05-05T08:03:36Z

CI: https://ci.nodejs.org/job/node-test-pull-request/7881/

sam-github · 2017-05-05T14:41:30Z

- memcpy(buf, u, len);
- return len;
- }
+ CHECK_NE(u, nullptr);


consider bringing back the conditional... EDIT: ... because it simplifies code, see below.

@sam-github why?

sam-github · 2017-05-05T14:44:01Z


- node::Utf8Value passphrase(env->isolate(), args[1]);
-
+ auto callback = has_password ? PasswordCallback : NoPasswordCallback;


... because it really simplifies this code.
This function uses the password cb because it may have a password.
The other examples below that use NoPasswordCallback I agree are more clear because the usage makes it really clear that there is no password, but I think here it is unnecessarily complex, caused only because the PasswordCallback stopped supporting an empty password.

Ah, I see. 👍

Sorry, for the unnecessarily obscure comments.

Fair point. Let me restore the original allowing a null passphrase but keep the NoPasswordCallback for this.

sam-github · 2017-05-06T09:49:26Z



+// This callback is used to avoid the default passphrase callback in OpenSSL
+// which will typically prompt for the passphrase.


"the prompting is designed for the openssl CLI, but works poorly for Node.js because it involves synchronous interaction with the controlling terminal, something we never want, and use this function to avoid." <--- Maybe add something like that?

I've added that now, thanks!

addaleax

Just reaffirming my LGTM for the latest changes

danbev · 2017-05-09T11:26:50Z

@indutny Would you mind taking a look and see what you think now? Your requested changes have been added (really only became the extra line as the other was reverted following the suggestions by sam-github). Thanks

danbev · 2017-05-12T06:40:47Z

@indutny Sorry about nagging, just wanted to ask again if you have anything against this landing?

addressed

addaleax · 2017-05-18T22:18:24Z

Landed in 29d89c9

Currently the function CryptoPemCallback is used for two things: 1. As a passphrase callback. 2. To avoid the default OpenSSL passphrase routine. The default OpenSSL passphase routine would apply if both the callback and the passphrase are null pointers and the typical behaviour is to prompt for the passphase which is not appropriate in node. This commit suggests that the PasswordCallback function only handle passphrases, and that an additional function named NoPasswordCallback used for the second case to avoid OpenSSL's passphase routine. PR-URL: #12827 Reviewed-By: Sam Roberts <vieuxtech@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

danbev · 2017-05-19T05:29:38Z

@addaleax Thanks!

Currently the function CryptoPemCallback is used for two things: 1. As a passphrase callback. 2. To avoid the default OpenSSL passphrase routine. The default OpenSSL passphase routine would apply if both the callback and the passphrase are null pointers and the typical behaviour is to prompt for the passphase which is not appropriate in node. This commit suggests that the PasswordCallback function only handle passphrases, and that an additional function named NoPasswordCallback used for the second case to avoid OpenSSL's passphase routine. PR-URL: nodejs#12827 Reviewed-By: Sam Roberts <vieuxtech@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

Currently the function CryptoPemCallback is used for two things: 1. As a passphrase callback. 2. To avoid the default OpenSSL passphrase routine. The default OpenSSL passphase routine would apply if both the callback and the passphrase are null pointers and the typical behaviour is to prompt for the passphase which is not appropriate in node. This commit suggests that the PasswordCallback function only handle passphrases, and that an additional function named NoPasswordCallback used for the second case to avoid OpenSSL's passphase routine. PR-URL: #12827 Reviewed-By: Sam Roberts <vieuxtech@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: James M Snell <jasnell@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com>

nodejs-github-bot added c++ Issues and PRs that require attention from people who are familiar with C++. crypto Issues and PRs related to the crypto subsystem. labels May 4, 2017

cjihrig approved these changes May 4, 2017
View reviewed changes

jasnell approved these changes May 4, 2017
View reviewed changes

addaleax approved these changes May 4, 2017
View reviewed changes

indutny previously requested changes May 4, 2017
View reviewed changes

danbev added 2 commits May 5, 2017 08:43

add additional newline for consistency
281402f

fix bug when len = 1
e7da72f

sam-github suggested changes May 5, 2017
View reviewed changes

restore support for null passphase
3a59be8

sam-github reviewed May 6, 2017
View reviewed changes

sam-github approved these changes May 6, 2017
View reviewed changes

update NoPasswordCallback comment
9c8e991

addaleax approved these changes May 6, 2017
View reviewed changes

addaleax closed this May 18, 2017

jasnell mentioned this pull request May 28, 2017
8.0.0 Release Proposal #12220
Closed

gibfahn mentioned this pull request Jun 15, 2017
Auditing for 6.11.1 nodejs/Release#230
Closed
3 tasks

danbev deleted the crypto-password-callback-refactor branch June 28, 2017 05:28

MylesBorins added the land-on-v6.x label Jul 17, 2017

MylesBorins mentioned this pull request Jul 18, 2017
v6.11.2 proposal #14356
Merged


		node::Utf8Value passphrase(env->isolate(), args[1]);

		auto callback = has_password ? PasswordCallback : NoPasswordCallback;



		// This callback is used to avoid the default passphrase callback in OpenSSL
		// which will typically prompt for the passphrase.

Uh oh!

Uh oh!

Conversation

danbev commented May 4, 2017

Checklist

Affected core subsystem(s)

Uh oh!

danbev commented May 4, 2017

Uh oh!

cjihrig left a comment

Choose a reason for hiding this comment

Uh oh!

mscdex commented May 4, 2017

Uh oh!

indutny left a comment

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

danbev commented May 5, 2017

Uh oh!

sam-githubMay 5, 2017• edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

Choose a reason for hiding this comment

Uh oh!

addaleax left a comment

Choose a reason for hiding this comment

Uh oh!

danbev commented May 9, 2017

Uh oh!

danbev commented May 12, 2017

Uh oh!

addaleax commented May 18, 2017

Uh oh!

danbev commented May 19, 2017

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

9 participants

sam-githubMay 5, 2017•
edited
Loading