1

#ifndef SOCK_GNUTLS_H

     2

#define SOCK_GNUTLS_H

     3

     4

/**

     5

 * @file

     6

 *

     7

 * A sock_stream implementation using GnuTLS for SSL

     8

 */

     9

    10

#include "sock_internal.h"

    11

#include "sock_tcp.h"

    12

    13

#include <gnutls/gnutls.h>

    14

    15

/**

    16

 * GnuTLS library error codes

    17

 */

    18

enum sock_gnutls_error_code {

    19

    _ERR_GNUTLS_BEGIN = _ERR_GNUTLS,

    20

    21

    ERR_GNUTLS_CERT_ALLOC_CRED,

    22

    ERR_GNUTLS_GLOBAL_INIT,

    23

    ERR_GNUTLS_INIT,

    24

    ERR_GNUTLS_SET_DEFAULT_PRIORITY,

    25

    ERR_GNUTLS_CRED_SET,

    26

    ERR_GNUTLS_HANDSHAKE,

    27

    ERR_GNUTLS_RECORD_SEND,

    28

    ERR_GNUTLS_RECORD_RECV,

    29

    ERR_GNUTLS_RECORD_GET_DIRECTION,   

    30

};

    31

    33

 * Additional gnutls configuration for client sockets.

    34

 *

    35

 * XXX: currently, we just have one global instance, set up by sock_gnutls_init, used for all sockets

    36

 */

    37

struct sock_gnutls_client_ctx {

    39

    gnutls_certificate_credentials_t xcred;

    40

};

    41

    44

 */

    45

struct sock_gnutls {

    47

    struct sock_tcp base_tcp;

    48

    50

    struct sock_gnutls_ctx *ctx;

    51

    53

    gnutls_session_t session;

    54

    56

    int ev_mask;

    57

};

    58

    62

#define SOCK_GNUTLS_BASE(sock_ptr) (&(sock_ptr)->base_tcp.base)

    67

#define SOCK_GNUTLS_TCP(sock_ptr) (&(sock_ptr)->base_tcp)

    72

#define SOCK_GNUTLS_ERR(sock_ptr) SOCK_ERR(SOCK_GNUTLS_BASE(sock_ptr))

    73

    74

/**

    75

 * Initialize the global gnutls state

    76

 */

    77

err_t sock_gnutls_global_init (struct error_info *err);

    78

    79

/**

    80

 * Release the connection destructively, i.e. do not close it cleanly, just abort.

    81

 */

    82

void sock_gnutls_destroy (struct sock_gnutls *sock);

    83

    84

#endif /* SOCK_GNUTLS_H */