vtls.h 6.1 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145
  1. #ifndef HEADER_CURL_VTLS_H
  2. #define HEADER_CURL_VTLS_H
  3. /***************************************************************************
  4. * _ _ ____ _
  5. * Project ___| | | | _ \| |
  6. * / __| | | | |_) | |
  7. * | (__| |_| | _ <| |___
  8. * \___|\___/|_| \_\_____|
  9. *
  10. * Copyright (C) 1998 - 2014, Daniel Stenberg, <[email protected]>, et al.
  11. *
  12. * This software is licensed as described in the file COPYING, which
  13. * you should have received as part of this distribution. The terms
  14. * are also available at http://curl.haxx.se/docs/copyright.html.
  15. *
  16. * You may opt to use, copy, modify, merge, publish, distribute and/or sell
  17. * copies of the Software, and permit persons to whom the Software is
  18. * furnished to do so, under the terms of the COPYING file.
  19. *
  20. * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
  21. * KIND, either express or implied.
  22. *
  23. ***************************************************************************/
  24. #include "curl_setup.h"
  25. #include "openssl.h" /* OpenSSL versions */
  26. #include "gtls.h" /* GnuTLS versions */
  27. #include "nssg.h" /* NSS versions */
  28. #include "gskit.h" /* Global Secure ToolKit versions */
  29. #include "polarssl.h" /* PolarSSL versions */
  30. #include "axtls.h" /* axTLS versions */
  31. #include "cyassl.h" /* CyaSSL versions */
  32. #include "curl_schannel.h" /* Schannel SSPI version */
  33. #include "curl_darwinssl.h" /* SecureTransport (Darwin) version */
  34. #ifndef MAX_PINNED_PUBKEY_SIZE
  35. #define MAX_PINNED_PUBKEY_SIZE 1048576 /* 1MB */
  36. #endif
  37. #ifndef MD5_DIGEST_LENGTH
  38. #define MD5_DIGEST_LENGTH 16 /* fixed size */
  39. #endif
  40. /* see http://tools.ietf.org/html/draft-ietf-tls-applayerprotoneg-04 */
  41. #define ALPN_HTTP_1_1_LENGTH 8
  42. #define ALPN_HTTP_1_1 "http/1.1"
  43. bool Curl_ssl_config_matches(struct ssl_config_data* data,
  44. struct ssl_config_data* needle);
  45. bool Curl_clone_ssl_config(struct ssl_config_data* source,
  46. struct ssl_config_data* dest);
  47. void Curl_free_ssl_config(struct ssl_config_data* sslc);
  48. unsigned int Curl_rand(struct SessionHandle *);
  49. int Curl_ssl_backend(void);
  50. #ifdef USE_SSL
  51. int Curl_ssl_init(void);
  52. void Curl_ssl_cleanup(void);
  53. CURLcode Curl_ssl_connect(struct connectdata *conn, int sockindex);
  54. CURLcode Curl_ssl_connect_nonblocking(struct connectdata *conn,
  55. int sockindex,
  56. bool *done);
  57. /* tell the SSL stuff to close down all open information regarding
  58. connections (and thus session ID caching etc) */
  59. void Curl_ssl_close_all(struct SessionHandle *data);
  60. void Curl_ssl_close(struct connectdata *conn, int sockindex);
  61. CURLcode Curl_ssl_shutdown(struct connectdata *conn, int sockindex);
  62. CURLcode Curl_ssl_set_engine(struct SessionHandle *data, const char *engine);
  63. /* Sets engine as default for all SSL operations */
  64. CURLcode Curl_ssl_set_engine_default(struct SessionHandle *data);
  65. struct curl_slist *Curl_ssl_engines_list(struct SessionHandle *data);
  66. /* init the SSL session ID cache */
  67. CURLcode Curl_ssl_initsessions(struct SessionHandle *, size_t);
  68. size_t Curl_ssl_version(char *buffer, size_t size);
  69. bool Curl_ssl_data_pending(const struct connectdata *conn,
  70. int connindex);
  71. int Curl_ssl_check_cxn(struct connectdata *conn);
  72. /* Certificate information list handling. */
  73. void Curl_ssl_free_certinfo(struct SessionHandle *data);
  74. CURLcode Curl_ssl_init_certinfo(struct SessionHandle * data, int num);
  75. CURLcode Curl_ssl_push_certinfo_len(struct SessionHandle * data, int certnum,
  76. const char * label, const char * value,
  77. size_t valuelen);
  78. CURLcode Curl_ssl_push_certinfo(struct SessionHandle * data, int certnum,
  79. const char * label, const char * value);
  80. /* Functions to be used by SSL library adaptation functions */
  81. /* extract a session ID */
  82. bool Curl_ssl_getsessionid(struct connectdata *conn,
  83. void **ssl_sessionid,
  84. size_t *idsize) /* set 0 if unknown */;
  85. /* add a new session ID */
  86. CURLcode Curl_ssl_addsessionid(struct connectdata *conn,
  87. void *ssl_sessionid,
  88. size_t idsize);
  89. /* Kill a single session ID entry in the cache */
  90. void Curl_ssl_kill_session(struct curl_ssl_session *session);
  91. /* delete a session from the cache */
  92. void Curl_ssl_delsessionid(struct connectdata *conn, void *ssl_sessionid);
  93. /* get N random bytes into the buffer, return 0 if a find random is filled
  94. in */
  95. int Curl_ssl_random(struct SessionHandle *data, unsigned char *buffer,
  96. size_t length);
  97. void Curl_ssl_md5sum(unsigned char *tmp, /* input */
  98. size_t tmplen,
  99. unsigned char *md5sum, /* output */
  100. size_t md5len);
  101. /* Check pinned public key. */
  102. CURLcode Curl_pin_peer_pubkey(const char *pinnedpubkey,
  103. const unsigned char *pubkey, size_t pubkeylen);
  104. #define SSL_SHUTDOWN_TIMEOUT 10000 /* ms */
  105. #else
  106. /* When SSL support is not present, just define away these function calls */
  107. #define Curl_ssl_init() 1
  108. #define Curl_ssl_cleanup() Curl_nop_stmt
  109. #define Curl_ssl_connect(x,y) CURLE_NOT_BUILT_IN
  110. #define Curl_ssl_close_all(x) Curl_nop_stmt
  111. #define Curl_ssl_close(x,y) Curl_nop_stmt
  112. #define Curl_ssl_shutdown(x,y) CURLE_NOT_BUILT_IN
  113. #define Curl_ssl_set_engine(x,y) CURLE_NOT_BUILT_IN
  114. #define Curl_ssl_set_engine_default(x) CURLE_NOT_BUILT_IN
  115. #define Curl_ssl_engines_list(x) NULL
  116. #define Curl_ssl_send(a,b,c,d,e) -1
  117. #define Curl_ssl_recv(a,b,c,d,e) -1
  118. #define Curl_ssl_initsessions(x,y) CURLE_OK
  119. #define Curl_ssl_version(x,y) 0
  120. #define Curl_ssl_data_pending(x,y) 0
  121. #define Curl_ssl_check_cxn(x) 0
  122. #define Curl_ssl_free_certinfo(x) Curl_nop_stmt
  123. #define Curl_ssl_connect_nonblocking(x,y,z) CURLE_NOT_BUILT_IN
  124. #define Curl_ssl_kill_session(x) Curl_nop_stmt
  125. #define Curl_ssl_random(x,y,z) ((void)x, CURLE_NOT_BUILT_IN)
  126. #define CURL_SSL_BACKEND CURLSSLBACKEND_NONE
  127. #endif
  128. #endif /* HEADER_CURL_VTLS_H */