1

#ifndef SOCK_GNUTLS_H

     2

#define SOCK_GNUTLS_H

     3

     4

/**

     5

 * @file

     6

 *

     7

 * A sock_stream implementation using GnuTLS for SSL

     8

 */

     9

    10

#include "sock_internal.h"

    11

#include "sock_tcp.h"

    12

    13

#include <gnutls/gnutls.h>

    14

    15

/**

    16

 * GnuTLS library error codes

    17

 */

    18

enum sock_gnutls_error_code {

    19

    _ERR_GNUTLS_BEGIN = _ERR_GNUTLS,

    20

    21

    ERR_GNUTLS_CERT_ALLOC_CRED,

    22

    ERR_GNUTLS_GLOBAL_INIT,

    23

    ERR_GNUTLS_INIT,

    24

    ERR_GNUTLS_SET_DEFAULT_PRIORITY,

    25

    ERR_GNUTLS_CRED_SET,

    26

    ERR_GNUTLS_HANDSHAKE,

    27

    ERR_GNUTLS_RECORD_SEND,

    28

    ERR_GNUTLS_RECORD_RECV,

    29

    ERR_GNUTLS_RECORD_GET_DIRECTION,   

    30

};

    31

    32

/**

    33

 * Additional gnutls configuration for client sockets.

    34

 *

    35

 * XXX: currently, we just have one global instance, set up by sock_gnutls_init, used for all sockets

    36

 */

    37

struct sock_gnutls_client_ctx {

    38

    /** Our client certificate */

    39

    gnutls_certificate_credentials_t xcred;

    40

};

    41

    42

/**

    43

 * An SSL-encrypted TCP connection, using libgnutls

    44

 */

    45

struct sock_gnutls {

    46

    /** The underlying TCP connection */

    47

    struct sock_tcp base_tcp;

    48

    49

    /** Additional SSL info XXX: do we need to keep a ref to this? */

    50

    struct sock_gnutls_ctx *ctx;

    51

    52

    /** The GnuTLS session for this connection */

    53

    gnutls_session_t session;

    54

    55

    /** The current event_enable mask */

    56

    int ev_mask;

    57

};

    58

    59

/**

    60

 * Cast a sock_gnutls to a sock_tcp.

    61

 */

    62

#define SOCK_GNUTLS_TCP(sock_ptr) (&(sock_ptr)->base_tcp)

    63

    64

/**

    75

 * Get a pointer to the sock_gnutls's error_info.

    76

 */

    77

#define SOCK_GNUTLS_ERR(sock_ptr) SOCK_ERR(SOCK_GNUTLS_BASE(sock_ptr))

    78

    79

/**

    80

 * Initialize the global gnutls state

    81

 */

    82

err_t sock_gnutls_global_init (struct error_info *err);

    83

    84

/**

    85

 * Release the connection destructively, i.e. do not close it cleanly, just abort.

    86

 */

    87

void sock_gnutls_destroy (struct sock_gnutls *sock);

    88

    89

#endif /* SOCK_GNUTLS_H */