Emeric Brun | 4659195 | 2012-05-18 15:47:34 +0200 | [diff] [blame] | 1 | /* |
| 2 | * include/proto/ssl_sock.h |
| 3 | * This file contains definition for ssl stream socket operations |
| 4 | * |
| 5 | * Copyright (C) 2012 EXCELIANCE, Emeric Brun <ebrun@exceliance.fr> |
| 6 | * |
| 7 | * This library is free software; you can redistribute it and/or |
| 8 | * modify it under the terms of the GNU Lesser General Public |
| 9 | * License as published by the Free Software Foundation, version 2.1 |
| 10 | * exclusively. |
| 11 | * |
| 12 | * This library is distributed in the hope that it will be useful, |
| 13 | * but WITHOUT ANY WARRANTY; without even the implied warranty of |
| 14 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU |
| 15 | * Lesser General Public License for more details. |
| 16 | * |
| 17 | * You should have received a copy of the GNU Lesser General Public |
| 18 | * License along with this library; if not, write to the Free Software |
| 19 | * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA |
| 20 | */ |
| 21 | |
| 22 | #ifndef _PROTO_SSL_SOCK_H |
| 23 | #define _PROTO_SSL_SOCK_H |
Emeric Brun | fc0421f | 2012-09-07 17:30:07 +0200 | [diff] [blame] | 24 | #include <openssl/ssl.h> |
Emeric Brun | 4659195 | 2012-05-18 15:47:34 +0200 | [diff] [blame] | 25 | |
Willy Tarreau | d1d5454 | 2012-09-12 22:58:11 +0200 | [diff] [blame] | 26 | #include <types/connection.h> |
| 27 | #include <types/listener.h> |
| 28 | #include <types/proxy.h> |
Emeric Brun | 4659195 | 2012-05-18 15:47:34 +0200 | [diff] [blame] | 29 | #include <types/stream_interface.h> |
| 30 | |
Willy Tarreau | f7bc57c | 2012-10-03 00:19:48 +0200 | [diff] [blame] | 31 | extern struct xprt_ops ssl_sock; |
Willy Tarreau | 71b734c | 2014-01-28 15:19:44 +0100 | [diff] [blame] | 32 | extern int sslconns; |
| 33 | extern int totalsslconns; |
| 34 | |
David S | afb7683 | 2014-05-08 23:42:08 -0400 | [diff] [blame] | 35 | /* boolean, returns true if connection is over SSL */ |
| 36 | static inline |
| 37 | int ssl_sock_is_ssl(struct connection *conn) |
| 38 | { |
| 39 | if (!conn || conn->xprt != &ssl_sock || !conn->xprt_ctx) |
| 40 | return 0; |
| 41 | else |
| 42 | return 1; |
| 43 | } |
| 44 | |
Emeric Brun | 4659195 | 2012-05-18 15:47:34 +0200 | [diff] [blame] | 45 | int ssl_sock_handshake(struct connection *conn, unsigned int flag); |
Willy Tarreau | 2a65ff0 | 2012-09-13 17:54:29 +0200 | [diff] [blame] | 46 | int ssl_sock_prepare_ctx(struct bind_conf *bind_conf, SSL_CTX *ctx, struct proxy *proxy); |
| 47 | void ssl_sock_free_certs(struct bind_conf *bind_conf); |
| 48 | int ssl_sock_prepare_all_ctx(struct bind_conf *bind_conf, struct proxy *px); |
Emeric Brun | 94324a4 | 2012-10-11 14:00:19 +0200 | [diff] [blame] | 49 | int ssl_sock_prepare_srv_ctx(struct server *srv, struct proxy *px); |
Willy Tarreau | 2a65ff0 | 2012-09-13 17:54:29 +0200 | [diff] [blame] | 50 | void ssl_sock_free_all_ctx(struct bind_conf *bind_conf); |
Willy Tarreau | ffc3fcd | 2012-10-12 20:17:54 +0200 | [diff] [blame] | 51 | const char *ssl_sock_get_cipher_name(struct connection *conn); |
| 52 | const char *ssl_sock_get_proto_version(struct connection *conn); |
David S | afb7683 | 2014-05-08 23:42:08 -0400 | [diff] [blame] | 53 | char *ssl_sock_get_version(struct connection *conn); |
| 54 | int ssl_sock_get_cert_used(struct connection *conn); |
Emeric Brun | 0abf836 | 2014-06-24 18:26:41 +0200 | [diff] [blame] | 55 | int ssl_sock_get_remote_common_name(struct connection *conn, struct chunk *out); |
David S | afb7683 | 2014-05-08 23:42:08 -0400 | [diff] [blame] | 56 | unsigned int ssl_sock_get_verify_result(struct connection *conn); |
Lukas Tribus | 656c5fa | 2014-08-18 00:56:31 +0200 | [diff] [blame^] | 57 | #if (defined SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB && !defined OPENSSL_IS_BORINGSSL) |
Emeric Brun | 4147b2e | 2014-06-16 18:36:30 +0200 | [diff] [blame] | 58 | int ssl_sock_update_ocsp_response(struct chunk *ocsp_response, char **err); |
| 59 | #endif |
Emeric Brun | 4659195 | 2012-05-18 15:47:34 +0200 | [diff] [blame] | 60 | |
| 61 | #endif /* _PROTO_SSL_SOCK_H */ |
| 62 | |
| 63 | /* |
| 64 | * Local variables: |
| 65 | * c-indent-level: 8 |
| 66 | * c-basic-offset: 8 |
| 67 | * End: |
| 68 | */ |