Emeric Brun | fc0421f | 2012-09-07 17:30:07 +0200 | [diff] [blame] | 1 | /* |
| 2 | * include/types/ssl_sock.h |
| 3 | * SSL settings for listeners and servers |
| 4 | * |
| 5 | * Copyright (C) 2012 EXCELIANCE, Emeric Brun <ebrun@exceliance.fr> |
| 6 | * |
| 7 | * This library is free software; you can redistribute it and/or |
| 8 | * modify it under the terms of the GNU Lesser General Public |
| 9 | * License as published by the Free Software Foundation, version 2.1 |
| 10 | * exclusively. |
| 11 | * |
| 12 | * This library is distributed in the hope that it will be useful, |
| 13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 15 | * Lesser General Public License for more details. |
| 16 | * |
| 17 | * You should have received a copy of the GNU Lesser General Public |
| 18 | * License along with this library; if not, write to the Free Software |
| 19 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA |
| 20 | */ |
| 21 | |
| 22 | #ifndef _TYPES_SSL_SOCK_H |
| 23 | #define _TYPES_SSL_SOCK_H |
| 24 | |
Emmanuel Hocdet | 9826329 | 2016-12-29 18:26:15 +0100 | [diff] [blame] | 25 | #include <types/listener.h> |
Emeric Brun | fc0421f | 2012-09-07 17:30:07 +0200 | [diff] [blame] | 26 | #include <openssl/ssl.h> |
| 27 | #include <ebmbtree.h> |
| 28 | |
| 29 | struct sni_ctx { |
| 30 | SSL_CTX *ctx; /* context associated to the certificate */ |
| 31 | int order; /* load order for the certificate */ |
Emmanuel Hocdet | 0594211 | 2017-02-20 16:11:50 +0100 | [diff] [blame] | 32 | uint8_t neg; /* reject if match */ |
| 33 | uint8_t key_sig; /* TLSEXT_signature_[rsa,ecdsa,...] */ |
Emmanuel Hocdet | 9826329 | 2016-12-29 18:26:15 +0100 | [diff] [blame] | 34 | struct ssl_bind_conf *conf; /* ssl "bind" conf for the certificate */ |
Emeric Brun | fc0421f | 2012-09-07 17:30:07 +0200 | [diff] [blame] | 35 | struct ebmb_node name; /* node holding the servername value */ |
| 36 | }; |
| 37 | |
Nenad Merdanovic | 200b0fa | 2015-05-09 08:46:01 +0200 | [diff] [blame] | 38 | extern struct list tlskeys_reference; |
| 39 | |
Nenad Merdanovic | 05552d4 | 2015-02-27 19:56:49 +0100 | [diff] [blame] | 40 | struct tls_sess_key { |
| 41 | unsigned char name[16]; |
| 42 | unsigned char aes_key[16]; |
| 43 | unsigned char hmac_key[16]; |
| 44 | } __attribute__((packed)); |
| 45 | |
Nenad Merdanovic | 146defa | 2015-05-09 08:46:00 +0200 | [diff] [blame] | 46 | struct tls_keys_ref { |
| 47 | struct list list; /* Used to chain refs. */ |
| 48 | char *filename; |
| 49 | int unique_id; /* Each pattern reference have unique id. */ |
| 50 | struct tls_sess_key *tlskeys; |
| 51 | int tls_ticket_enc_index; |
| 52 | }; |
| 53 | |
Emeric Brun | fc0421f | 2012-09-07 17:30:07 +0200 | [diff] [blame] | 54 | #endif /* _TYPES_SSL_SOCK_H */ |