Introduced WebCrypto API according to W3C spec.

The following methods were implemented:
    crypto.getRandomValues()
    crypto.subtle.importKey()
        format: raw, pkcs8, spki
        algorithm: AES-CBC, AES-CTR, AES-GCM,
            ECDSA, HKDF, HMAC, PBKDF2,
            RSASSA-PKCS1-v1_5, RSA-OAEP, RSA-PSS
    crypto.subtle.decrypt()
    crypto.subtle.encrypt()
        algorithm: AES-CBC, AES-CTR, AES-GCM,
            RSA-OAEP
    crypto.subtle.deriveBits()
    crypto.subtle.deriveKey()
        algorithm: HKDF, PBKDF2
    crypto.subtle.digest()
        algorithm: SHA-1, SHA-256, SHA-384, SHA-512
    crypto.subtle.sign()
    crypto.subtle.verify()
        algorithm: ECDSA, HMAC, RSASSA-PKCS1-v1_5, RSA-PSS

Author: xeioex

auto/make

@@ -75,7 +75,7 @@ cat << END >> $NJS_MAKEFILE
 
 $NJS_BUILD_DIR/njs: \\
 	$NJS_BUILD_DIR/libnjs.a \\
-	src/njs_shell.c
+	src/njs_shell.c external/njs_webcrypto.h external/njs_webcrypto.c
 	\$(NJS_LINK) -o $NJS_BUILD_DIR/njs \$(NJS_CFLAGS) \\
 		$NJS_LIB_AUX_CFLAGS \$(NJS_LIB_INCS) -Injs \\
 		src/njs_shell.c \\
@@ -159,7 +159,8 @@ njs_dep_post=`njs_gen_dep_post $njs_dep $njs_externals_obj`
 
 cat << END >> $NJS_MAKEFILE
 
-$NJS_BUILD_DIR/$njs_externals_obj: $njs_src
+$NJS_BUILD_DIR/$njs_externals_obj: \\
+    $njs_src external/njs_webcrypto.h external/njs_webcrypto.c
 	\$(NJS_CC) -c \$(NJS_CFLAGS) $NJS_LIB_AUX_CFLAGS \\
 		\$(NJS_LIB_INCS) -Injs \\
 		-o $NJS_BUILD_DIR/$njs_externals_obj \\

auto/openssl

@@ -0,0 +1,56 @@
+
+# Copyright (C) Dmitry Volyntsev
+# Copyright (C) NGINX, Inc.
+
+
+NJS_OPENSSL_LIB=
+NJS_HAVE_OPENSSL=NO
+
+
+njs_found=no
+
+
+njs_feature="OpenSSL library"
+njs_feature_name=NJS_HAVE_OPENSSL
+njs_feature_run=yes
+njs_feature_incs=
+njs_feature_libs="-lcrypto"
+njs_feature_test="#include <openssl/evp.h>
+
+                  int main() {
+                      OpenSSL_add_all_algorithms();
+                      return 0;
+                 }"
+. auto/feature
+
+
+if [ $njs_found = yes ]; then
+    njs_feature="OpenSSL HKDF"
+    njs_feature_name=NJS_HAVE_OPENSSL_HKDF
+    njs_feature_test="#include <openssl/evp.h>
+                      #include <openssl/kdf.h>
+
+                      int main(void) {
+                          EVP_PKEY_CTX *pctx = EVP_PKEY_CTX_new_id(EVP_PKEY_HKDF, NULL);
+
+                          EVP_PKEY_CTX_set_hkdf_md(pctx, EVP_sha256());
+                          EVP_PKEY_CTX_free(pctx);
+
+                          return 0;
+                      }"
+    . auto/feature
+
+    njs_feature="OpenSSL EVP_MD_CTX_new()"
+    njs_feature_name=NJS_HAVE_OPENSSL_EVP_MD_CTX_NEW
+    njs_feature_test="#include <openssl/evp.h>
+
+                      int main(void) {
+                          EVP_MD_CTX *ctx = EVP_MD_CTX_new();
+                          EVP_MD_CTX_free(ctx);
+                          return 0;
+                      }"
+    . auto/feature
+
+    NJS_HAVE_OPENSSL=YES
+    NJS_OPENSSL_LIB="$njs_feature_libs"
+fi

auto/sources

@@ -2,6 +2,7 @@ NJS_LIB_SRCS=" \
    src/njs_diyfp.c \
    src/njs_dtoa.c \
    src/njs_dtoa_fixed.c \
+   src/njs_str.c \
    src/njs_strtod.c \
    src/njs_murmur_hash.c \
    src/njs_djb_hash.c \

auto/summary

@@ -15,6 +15,10 @@ if [ $NJS_HAVE_READLINE = YES ]; then
   echo " + using readline library: $NJS_READLINE_LIB"
 fi
 
+if [ $NJS_HAVE_OPENSSL = YES ]; then
+  echo " + using OpenSSL library: $NJS_OPENSSL_LIB"
+fi
+
 echo
 echo " njs build dir: $NJS_BUILD_DIR"
 

configure

@@ -26,12 +26,13 @@ set -u
 . auto/explicit_bzero
 . auto/pcre
 . auto/readline
+. auto/openssl
 . auto/sources
 
 NJS_LIB_AUX_CFLAGS="$NJS_PCRE_CFLAGS"
 
 NJS_LIBS="$NJS_LIBRT"
-NJS_LIB_AUX_LIBS="$NJS_PCRE_LIB"
+NJS_LIB_AUX_LIBS="$NJS_PCRE_LIB $NJS_OPENSSL_LIB"
 
 . auto/make