ssl_cookie.h 4.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140
  1. /**
  2. * \file ssl_cookie.h
  3. *
  4. * \brief DTLS cookie callbacks implementation
  5. */
  6. /*
  7. * Copyright The Mbed TLS Contributors
  8. * SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
  9. *
  10. * This file is provided under the Apache License 2.0, or the
  11. * GNU General Public License v2.0 or later.
  12. *
  13. * **********
  14. * Apache License 2.0:
  15. *
  16. * Licensed under the Apache License, Version 2.0 (the "License"); you may
  17. * not use this file except in compliance with the License.
  18. * You may obtain a copy of the License at
  19. *
  20. * http://www.apache.org/licenses/LICENSE-2.0
  21. *
  22. * Unless required by applicable law or agreed to in writing, software
  23. * distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
  24. * WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
  25. * See the License for the specific language governing permissions and
  26. * limitations under the License.
  27. *
  28. * **********
  29. *
  30. * **********
  31. * GNU General Public License v2.0 or later:
  32. *
  33. * This program is free software; you can redistribute it and/or modify
  34. * it under the terms of the GNU General Public License as published by
  35. * the Free Software Foundation; either version 2 of the License, or
  36. * (at your option) any later version.
  37. *
  38. * This program is distributed in the hope that it will be useful,
  39. * but WITHOUT ANY WARRANTY; without even the implied warranty of
  40. * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
  41. * GNU General Public License for more details.
  42. *
  43. * You should have received a copy of the GNU General Public License along
  44. * with this program; if not, write to the Free Software Foundation, Inc.,
  45. * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  46. *
  47. * **********
  48. */
  49. #ifndef MBEDTLS_SSL_COOKIE_H
  50. #define MBEDTLS_SSL_COOKIE_H
  51. #if !defined(MBEDTLS_CONFIG_FILE)
  52. #include "config.h"
  53. #else
  54. #include MBEDTLS_CONFIG_FILE
  55. #endif
  56. #include "ssl.h"
  57. #if defined(MBEDTLS_THREADING_C)
  58. #include "threading.h"
  59. #endif
  60. /**
  61. * \name SECTION: Module settings
  62. *
  63. * The configuration options you can set for this module are in this section.
  64. * Either change them in config.h or define them on the compiler command line.
  65. * \{
  66. */
  67. #ifndef MBEDTLS_SSL_COOKIE_TIMEOUT
  68. #define MBEDTLS_SSL_COOKIE_TIMEOUT 60 /**< Default expiration delay of DTLS cookies, in seconds if HAVE_TIME, or in number of cookies issued */
  69. #endif
  70. /* \} name SECTION: Module settings */
  71. #ifdef __cplusplus
  72. extern "C" {
  73. #endif
  74. /**
  75. * \brief Context for the default cookie functions.
  76. */
  77. typedef struct mbedtls_ssl_cookie_ctx
  78. {
  79. mbedtls_md_context_t hmac_ctx; /*!< context for the HMAC portion */
  80. #if !defined(MBEDTLS_HAVE_TIME)
  81. unsigned long serial; /*!< serial number for expiration */
  82. #endif
  83. unsigned long timeout; /*!< timeout delay, in seconds if HAVE_TIME,
  84. or in number of tickets issued */
  85. #if defined(MBEDTLS_THREADING_C)
  86. mbedtls_threading_mutex_t mutex;
  87. #endif
  88. } mbedtls_ssl_cookie_ctx;
  89. /**
  90. * \brief Initialize cookie context
  91. */
  92. void mbedtls_ssl_cookie_init( mbedtls_ssl_cookie_ctx *ctx );
  93. /**
  94. * \brief Setup cookie context (generate keys)
  95. */
  96. int mbedtls_ssl_cookie_setup( mbedtls_ssl_cookie_ctx *ctx,
  97. int (*f_rng)(void *, unsigned char *, size_t),
  98. void *p_rng );
  99. /**
  100. * \brief Set expiration delay for cookies
  101. * (Default MBEDTLS_SSL_COOKIE_TIMEOUT)
  102. *
  103. * \param ctx Cookie contex
  104. * \param delay Delay, in seconds if HAVE_TIME, or in number of cookies
  105. * issued in the meantime.
  106. * 0 to disable expiration (NOT recommended)
  107. */
  108. void mbedtls_ssl_cookie_set_timeout( mbedtls_ssl_cookie_ctx *ctx, unsigned long delay );
  109. /**
  110. * \brief Free cookie context
  111. */
  112. void mbedtls_ssl_cookie_free( mbedtls_ssl_cookie_ctx *ctx );
  113. /**
  114. * \brief Generate cookie, see \c mbedtls_ssl_cookie_write_t
  115. */
  116. mbedtls_ssl_cookie_write_t mbedtls_ssl_cookie_write;
  117. /**
  118. * \brief Verify cookie, see \c mbedtls_ssl_cookie_write_t
  119. */
  120. mbedtls_ssl_cookie_check_t mbedtls_ssl_cookie_check;
  121. #ifdef __cplusplus
  122. }
  123. #endif
  124. #endif /* ssl_cookie.h */