115 lines
3.1 KiB
C
115 lines
3.1 KiB
C
/*
|
|
* uhub - A tiny ADC p2p connection hub
|
|
* Copyright (C) 2007-2014, Jan Vidar Krey
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <https://www.gnu.org/licenses/>.
|
|
*
|
|
*/
|
|
|
|
#ifndef HAVE_UHUB_NETWORK_TLS_H
|
|
#define HAVE_UHUB_NETWORK_TLS_H
|
|
|
|
#include "uhub.h"
|
|
|
|
#ifdef SSL_SUPPORT
|
|
|
|
|
|
enum ssl_state
|
|
{
|
|
tls_st_none,
|
|
tls_st_error,
|
|
tls_st_accepting,
|
|
tls_st_connecting,
|
|
tls_st_connected,
|
|
tls_st_disconnecting,
|
|
};
|
|
|
|
enum net_con_ssl_mode
|
|
{
|
|
net_con_ssl_mode_server,
|
|
net_con_ssl_mode_client,
|
|
};
|
|
|
|
struct ssl_context_handle;
|
|
|
|
/**
|
|
* Returns a string describing the TLS/SSL provider information
|
|
*/
|
|
extern const char* net_ssl_get_provider();
|
|
|
|
/**
|
|
* return 0 if error, 1 on success.
|
|
*/
|
|
extern int net_ssl_library_init();
|
|
extern int net_ssl_library_shutdown();
|
|
|
|
/**
|
|
* Create a new SSL context.
|
|
* Specify a TLS version as a string: "1.2" for TLS 1.2.
|
|
*/
|
|
extern struct ssl_context_handle* net_ssl_context_create(const char* tls_version, const char* tls_ciphersuite);
|
|
extern void net_ssl_context_destroy(struct ssl_context_handle* ctx);
|
|
|
|
/**
|
|
* Return 0 on error, 1 otherwise.
|
|
*/
|
|
extern int ssl_load_certificate(struct ssl_context_handle* ctx, const char* pem_file);
|
|
|
|
/**
|
|
* Return 0 on error, 1 otherwise.
|
|
*/
|
|
extern int ssl_load_private_key(struct ssl_context_handle* ctx, const char* pem_file);
|
|
|
|
/**
|
|
* Return 0 if private key does not match certificate, 1 if everything is OK.
|
|
*/
|
|
extern int ssl_check_private_key(struct ssl_context_handle* ctx);
|
|
|
|
/**
|
|
* Start SSL_accept()
|
|
*/
|
|
extern ssize_t net_con_ssl_accept(struct net_connection*);
|
|
|
|
/**
|
|
* Start SSL_connect()
|
|
*/
|
|
extern ssize_t net_con_ssl_connect(struct net_connection*);
|
|
|
|
extern ssize_t net_ssl_send(struct net_connection* con, const void* buf, size_t len);
|
|
extern ssize_t net_ssl_recv(struct net_connection* con, void* buf, size_t len);
|
|
|
|
/**
|
|
* Update the event mask. Additional events may be requested depending on the
|
|
* needs of the TLS layer.
|
|
*
|
|
* @param con Connection handle.
|
|
* @param events Event mask (NET_EVENT_*)
|
|
*/
|
|
extern void net_ssl_update(struct net_connection* con, int events);
|
|
|
|
extern void net_ssl_shutdown(struct net_connection* con);
|
|
extern void net_ssl_destroy(struct net_connection* con);
|
|
extern void net_ssl_callback(struct net_connection* con, int events);
|
|
|
|
|
|
extern ssize_t net_con_ssl_handshake(struct net_connection* con, enum net_con_ssl_mode, struct ssl_context_handle* ssl_ctx);
|
|
extern int net_con_is_ssl(struct net_connection* con);
|
|
|
|
extern const char* net_ssl_get_tls_version(struct net_connection* con);
|
|
extern const char* net_ssl_get_tls_cipher(struct net_connection* con);
|
|
|
|
#endif /* SSL_SUPPORT */
|
|
#endif /* HAVE_UHUB_NETWORK_TLS_H */
|
|
|