1

#ifndef SOCK_GNUTLS_H

     2

#define SOCK_GNUTLS_H

     3

     4

/**

     5

 * @file

     6

 *

     7

 * A sock_stream implementation using GnuTLS for SSL

     8

 */

     9

    10

#include "sock_internal.h"

    11

#include "sock_tcp.h"

    12

    13

#include <gnutls/gnutls.h>

    14

    15

/**

    16

 * GnuTLS library error codes

    17

 */

    18

enum sock_gnutls_error_code {

    19

    _ERR_GNUTLS_BEGIN = _ERR_GNUTLS,

    20

    21

    ERR_GNUTLS_CERT_ALLOC_CRED,

    22

    ERR_GNUTLS_GLOBAL_INIT,

    23

    ERR_GNUTLS_INIT,

    24

    ERR_GNUTLS_SET_DEFAULT_PRIORITY,

    25

    ERR_GNUTLS_CRED_SET,

    26

    ERR_GNUTLS_HANDSHAKE,

    27

    ERR_GNUTLS_RECORD_SEND,

    28

    ERR_GNUTLS_RECORD_RECV,

    29

    ERR_GNUTLS_RECORD_GET_DIRECTION,   

    30

};

    31

    32

/*

    33

 * Additional gnutls configuration for client sockets.

    34

 *

    35

 * XXX: currently, we just have one global instance, set up by sock_gnutls_init, used for all sockets

    36

 */

    37

struct sock_gnutls_client_ctx {

    38

    gnutls_certificate_credentials_t xcred;

    39

};

    40

    41

/*

    42

 * Per-sock state, this includes the sock_tcp connection

    43

 */

    44

struct sock_gnutls {

    45

    /* SSL connections use TCP connections */

    46

    struct sock_tcp base_tcp;

    47

    48

    /* Additional SSL info XXX: do we need to keep a ref to this? */

    49

    struct sock_gnutls_ctx *ctx;

    50

    51

    /* The GnuTLS session for this connection */

    52

    gnutls_session_t session;

    53

    54

    /* The current event_enable mask */

    55

    int ev_mask;

    56

};

    57

    58

#define SOCK_GNUTLS_BASE(sock_ptr) (&(sock_ptr)->base_tcp.base)

    59

#define SOCK_GNUTLS_TCP(sock_ptr) (&(sock_ptr)->base_tcp)

    60

#define SOCK_GNUTLS_ERR(sock_ptr) SOCK_ERR(SOCK_GNUTLS_BASE(sock_ptr))

    61

    62

/**

    63

 * Initialize the global gnutls state

    64

 */

    65

err_t sock_gnutls_global_init (struct error_info *err);

    66

    67

/**

    68

 * Release the connection destructively, i.e. do not close it cleanly, just abort.

    69

 */

    70

void sock_gnutls_destroy (struct sock_gnutls *sock);

    71

    72

#endif /* SOCK_GNUTLS_H */