1

#ifndef SSL_INTERNAL_H

     2

#define SSL_INTERNAL_H

     3

     4

/**

     5

 * @file

     6

 *

     7

 * A sock_stream implementation using GnuTLS for SSL

     8

 */

     9

#include "ssl.h"

    10

#include "tcp_internal.h"

    11

    12

#include <gnutls/gnutls.h>

    13

    14

/**

    15

 * GnuTLS library error codes

    16

 */

    17

enum ssl_error_code {

    18

    _ERR_SSL_BEGIN = _ERR_GNUTLS,

    19

    20

    ERR_GNUTLS_CERT_ALLOC_CRED,

    21

    ERR_GNUTLS_GLOBAL_INIT,

    22

    ERR_GNUTLS_INIT,

    23

    ERR_GNUTLS_SET_DEFAULT_PRIORITY,

    24

    ERR_GNUTLS_CRED_SET,

    25

    ERR_GNUTLS_HANDSHAKE,

    26

    ERR_GNUTLS_RECORD_SEND,

    27

    ERR_GNUTLS_RECORD_RECV,

    28

    ERR_GNUTLS_RECORD_GET_DIRECTION,   

    29

    ERR_GNUTLS_CERT_VERIFY_PEERS2,

    30

    ERR_GNUTLS_CERT_VERIFY,

    31

    ERR_GNUTLS_CERT_SET_X509_TRUST_FILE,

    32

    ERR_GNUTLS_CERT_SET_X509_KEY_FILE,

    33

};

    34

    35

/**

    36

 * GnuTLS credentials for client sockets.

    37

 */

    38

struct ssl_client_cred {

    39

    /** Our client certificate */

    40

    gnutls_certificate_credentials_t x509;

    41

    42

    /** Should we verify? */

    43

    bool verify;

    44

    45

    /** Refcount from ssl_client */

    46

    int refcount;

    47

};

    48

    49

/**

    50

 * Global anonymous x509 credentials

    51

 */

    52

extern struct ssl_client_cred ssl_client_cred_anon;

    53

    54

/*

    55

 * Our transport_type

    56

 */

    57

extern struct transport_type ssl_client_type;

    58

    59

/**

    60

 * An SSL-encrypted TCP connection, using libgnutls

    61

 */

    62

struct ssl_client {

    63

    /** The underlying TCP connection */

    64

    struct tcp_client base_tcp;

    65

    66

    /** The hostname we connected to, for verification */

    67

    char *hostname;

    68

    69

    /** The credentials we are using, unless anon */

    70

    struct ssl_client_cred *cred;

    71

    72

    /** The GnuTLS session for this connection */

    73

    gnutls_session_t session;

    74

    75

    /** Should we verify the peer cert? */

    76

    bool verify;

    77

    78

    /** Are we running a handshake? */

    79

    bool handshake;

    80

};

    81

    82

/**

    83

 * Initialize the global gnutls state

    84

 */

    85

err_t ssl_global_init (error_t *err);

    86

    87

#endif /* SSL_INTERNAL_H */