easy-tls.h revision 296465 
1/* -*- Mode: C; c-file-style: "bsd" -*- */
2/*-
3 * easy-tls.h -- generic TLS proxy.
4 * $Id: easy-tls.h,v 1.1 2001/09/17 19:06:59 bodo Exp $
5 */
6/*
7 * (c) Copyright 1999 Bodo Moeller.  All rights reserved.
8 */
9
10#ifndef HEADER_TLS_H
11# define HEADER_TLS_H
12
13# ifndef HEADER_SSL_H
14typedef struct ssl_ctx_st SSL_CTX;
15# endif
16
17# define TLS_INFO_SIZE 512      /* max. # of bytes written to infofd */
18
19void tls_set_dhe1024(int i, void *apparg);
20/*
21 * Generate DHE parameters: i >= 0 deterministic (i selects seed), i < 0
22 * random (may take a while). tls_create_ctx calls this with random
23 * non-negative i if the application has never called it.
24 */
25
26void tls_rand_seed(void);
27int tls_rand_seed_from_file(const char *filename, size_t n, void *apparg);
28void tls_rand_seed_from_memory(const void *buf, size_t n);
29
30struct tls_create_ctx_args {
31    int client_p;
32    const char *certificate_file;
33    const char *key_file;
34    const char *ca_file;
35    int verify_depth;
36    int fail_unless_verified;
37    int export_p;
38};
39struct tls_create_ctx_args tls_create_ctx_defaultargs(void);
40/*
41 * struct tls_create_ctx_args is similar to a conventional argument list, but
42 * it can provide default values and allows for future extension.
43 */
44SSL_CTX *tls_create_ctx(struct tls_create_ctx_args, void *apparg);
45
46struct tls_start_proxy_args {
47    int fd;
48    int client_p;
49    SSL_CTX *ctx;
50    pid_t *pid;
51    int *infofd;
52};
53struct tls_start_proxy_args tls_start_proxy_defaultargs(void);
54/*
55 * tls_start_proxy return value *MUST* be checked! 0 means ok, otherwise
56 * we've probably run out of some resources.
57 */
58int tls_start_proxy(struct tls_start_proxy_args, void *apparg);
59
60#endif
61