tls_domain.h

Go to the documentation of this file.

/*
 * Copyright (C) 2001-2003 FhG FOKUS
 * Copyright (C) 2005,2006 iptelorg GmbH
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#ifndef _TLS_DOMAIN_H
#define _TLS_DOMAIN_H

#include "../../str.h"
#include "../../ip_addr.h"
#include <openssl/ssl.h>


enum tls_method {
        TLS_METHOD_UNSPEC = 0,
        TLS_USE_SSLv2_cli,
        TLS_USE_SSLv2_srv,
        TLS_USE_SSLv2,
        TLS_USE_SSLv3_cli,
        TLS_USE_SSLv3_srv,
        TLS_USE_SSLv3,
        TLS_USE_TLSv1_cli,
        TLS_USE_TLSv1_srv,
        TLS_USE_TLSv1,
        TLS_USE_SSLv23_cli,
        TLS_USE_SSLv23_srv,
        TLS_USE_SSLv23,
        TLS_METHOD_MAX
};


enum tls_domain_type {
        TLS_DOMAIN_DEF = (1 << 0), 
        TLS_DOMAIN_SRV = (1 << 1), 
        TLS_DOMAIN_CLI = (1 << 2)  
};


typedef struct tls_domain {
        int type;
        struct ip_addr ip;
        unsigned short port;
        SSL_CTX** ctx;
        str cert_file;
        str pkey_file;
        int verify_cert;
        int verify_depth;
        str ca_file;
        int require_cert;
        str cipher_list;
        enum tls_method method;
        str crl_file;
        struct tls_domain* next;
} tls_domain_t;


typedef struct tls_domains_cfg {
        tls_domain_t* srv_default; 
        tls_domain_t* cli_default; 
        tls_domain_t* srv_list;    
        tls_domain_t* cli_list;    
        struct tls_domains_cfg* next; 
        int ref_count;             
} tls_domains_cfg_t;


tls_domain_t *tls_new_domain(int type, struct ip_addr *ip, 
                             unsigned short port);


void tls_free_domain(tls_domain_t* d);


char* tls_domain_str(tls_domain_t* d);



tls_domains_cfg_t* tls_new_cfg(void);


int tls_add_domain(tls_domains_cfg_t* cfg, tls_domain_t* d);


int tls_fix_domains_cfg(tls_domains_cfg_t* cfg, tls_domain_t* srv_defaults,
                                tls_domain_t* cli_defaults);


tls_domain_t* tls_lookup_cfg(tls_domains_cfg_t* cfg, int type,
                                                                struct ip_addr* ip, unsigned short port);


void tls_free_cfg(tls_domains_cfg_t* cfg);


void tls_destroy_cfg(void);

#endif /* _TLS_DOMAIN_H */