summaryrefslogtreecommitdiff
path: root/libextra/includes/gnutls/openssl.h
blob: 1e67c7c23ec8119ef1929544f2a0eea2d6cdcfd9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
/*
 * Copyright (C) 2004, 2005, 2007, 2008, 2009, 2010 Free Software
 * Foundation, Inc.
 * Copyright (c) 2002 Andrew McDonald <andrew@mcdonald.org.uk>
 *
 * This file is part of GNUTLS-EXTRA.
 *
 * GNUTLS-EXTRA is free software; you can redistribute it and/or
 * modify it under the terms of the GNU General Public License as
 * published by the Free Software Foundation; either version 3 of the
 * License, or (at your option) any later version.
 *
 * GNUTLS-EXTRA is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with GNUTLS-EXTRA; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
 * 02110-1301, USA.
 *
 */

/* WARNING: Error functions aren't currently thread-safe */

/* This file contains prototypes about the OPENSSL compatibility
 * layer in GNUTLS. GNUTLS is not a replacement of OPENSSL so
 * this compatibility layer only support limited OPENSSL functionality.
 *
 * New programs should avoid using this compatibility layer, and
 * use the native GNUTLS API.
 */

#ifndef GNUTLS_OPENSSL_H
#define GNUTLS_OPENSSL_H

#ifdef __cplusplus
extern "C"
{
#endif

#include <gnutls/gnutls.h>

/* Extra definitions that do not longer exist in gnutls.
 */
#define GNUTLS_X509_CN_SIZE 256
#define GNUTLS_X509_C_SIZE 3
#define GNUTLS_X509_O_SIZE 256
#define GNUTLS_X509_OU_SIZE 256
#define GNUTLS_X509_L_SIZE 256
#define GNUTLS_X509_S_SIZE 256
#define GNUTLS_X509_EMAIL_SIZE 256

  typedef struct
  {
    char common_name[GNUTLS_X509_CN_SIZE];
    char country[GNUTLS_X509_C_SIZE];
    char organization[GNUTLS_X509_O_SIZE];
    char organizational_unit_name[GNUTLS_X509_OU_SIZE];
    char locality_name[GNUTLS_X509_L_SIZE];
    char state_or_province_name[GNUTLS_X509_S_SIZE];
    char email[GNUTLS_X509_EMAIL_SIZE];
  } gnutls_x509_dn;


#define OPENSSL_VERSION_NUMBER (0x0090604F)
#define SSLEAY_VERSION_NUMBER OPENSSL_VERSION_NUMBER
#define OPENSSL_VERSION_TEXT ("GNUTLS " GNUTLS_VERSION " ")

#define SSL_ERROR_NONE        (0)
#define SSL_ERROR_SSL         (1)
#define SSL_ERROR_WANT_READ   (2)
#define SSL_ERROR_WANT_WRITE  (3)
#define SSL_ERROR_SYSCALL     (5)
#define SSL_ERROR_ZERO_RETURN (6)

#define SSL_FILETYPE_PEM (GNUTLS_X509_FMT_PEM)

#define SSL_VERIFY_NONE (0)

#define SSL_ST_OK (1)

#define X509_V_ERR_CERT_NOT_YET_VALID          (1)
#define X509_V_ERR_CERT_HAS_EXPIRED            (2)
#define X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT (3)

#define SSL_OP_ALL (0x000FFFFF)
#define SSL_OP_NO_TLSv1 (0x0400000)

#define SSL_MODE_ENABLE_PARTIAL_WRITE (0x1)
#define SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER (0x2)
#define SSL_MODE_AUTO_RETRY (0x4)

  typedef gnutls_x509_dn X509_NAME;
  typedef gnutls_datum_t X509;

  typedef struct _SSL SSL;

  typedef struct
  {
    int protocol_priority[GNUTLS_MAX_ALGORITHM_NUM];
    int cipher_priority[GNUTLS_MAX_ALGORITHM_NUM];
    int comp_priority[GNUTLS_MAX_ALGORITHM_NUM];
    int kx_priority[GNUTLS_MAX_ALGORITHM_NUM];
    int mac_priority[GNUTLS_MAX_ALGORITHM_NUM];
    gnutls_connection_end_t connend;
  } SSL_METHOD;

  typedef struct
  {
    gnutls_protocol_t version;
    gnutls_cipher_algorithm_t cipher;
    gnutls_kx_algorithm_t kx;
    gnutls_mac_algorithm_t mac;
    gnutls_compression_method_t compression;
    gnutls_certificate_type_t cert;
  } SSL_CIPHER;

  typedef struct _BIO
  {
    gnutls_transport_ptr_t fd;
  } BIO;

  typedef struct
  {
    SSL *ssl;
    int error;
    const gnutls_datum_t *cert_list;
#define current_cert cert_list
  } X509_STORE_CTX;

#define X509_STORE_CTX_get_current_cert(ctx) ((ctx)->current_cert)

  typedef struct _SSL_CTX
  {
    SSL_METHOD *method;
    char *certfile;
    int certfile_type;
    char *keyfile;
    int keyfile_type;
    unsigned long options;

    int (*verify_callback) (int, X509_STORE_CTX *);
    int verify_mode;

  } SSL_CTX;

  struct _SSL
  {
    gnutls_session_t gnutls_state;

    gnutls_certificate_client_credentials gnutls_cred;

    SSL_CTX *ctx;
    SSL_CIPHER ciphersuite;

    int last_error;
    int shutdown;
    int state;
    unsigned long options;

    int (*verify_callback) (int, X509_STORE_CTX *);
    int verify_mode;

    gnutls_transport_ptr_t rfd;
    gnutls_transport_ptr_t wfd;
  };

#define rbio gnutls_state

  typedef struct
  {
    void *handle;
  } MD_CTX;

  struct rsa_st;
  typedef struct rsa_st RSA;

#define MD5_CTX MD_CTX
#define RIPEMD160_CTX MD_CTX

#define OpenSSL_add_ssl_algorithms()  SSL_library_init()
#define SSLeay_add_ssl_algorithms()   SSL_library_init()
#define SSLeay_add_all_algorithms()   OpenSSL_add_all_algorithms()

#define SSL_get_cipher_name(ssl) SSL_CIPHER_get_name(SSL_get_current_cipher(ssl))
#define SSL_get_cipher(ssl) SSL_get_cipher_name(ssl)
#define SSL_get_cipher_bits(ssl,bp) SSL_CIPHER_get_bits(SSL_get_current_cipher(ssl),(bp))
#define SSL_get_cipher_version(ssl) SSL_CIPHER_get_version(SSL_get_current_cipher(ssl))


/* Library initialisation functions */

  int SSL_library_init (void);
  void OpenSSL_add_all_algorithms (void);


/* SSL_CTX structure handling */

  SSL_CTX *SSL_CTX_new (SSL_METHOD * method);
  void SSL_CTX_free (SSL_CTX * ctx);
  int SSL_CTX_set_default_verify_paths (SSL_CTX * ctx);
  int SSL_CTX_use_certificate_file (SSL_CTX * ctx, const char *certfile,
				    int type);
  int SSL_CTX_use_PrivateKey_file (SSL_CTX * ctx, const char *keyfile,
				   int type);
  void SSL_CTX_set_verify (SSL_CTX * ctx, int verify_mode,
			   int (*verify_callback) (int, X509_STORE_CTX *));
  unsigned long SSL_CTX_set_options (SSL_CTX * ctx, unsigned long options);
  long SSL_CTX_set_mode (SSL_CTX * ctx, long mode);
  int SSL_CTX_set_cipher_list (SSL_CTX * ctx, const char *list);


/* SSL_CTX statistics */

  long SSL_CTX_sess_number (SSL_CTX * ctx);
  long SSL_CTX_sess_connect (SSL_CTX * ctx);
  long SSL_CTX_sess_connect_good (SSL_CTX * ctx);
  long SSL_CTX_sess_connect_renegotiate (SSL_CTX * ctx);
  long SSL_CTX_sess_accept (SSL_CTX * ctx);
  long SSL_CTX_sess_accept_good (SSL_CTX * ctx);
  long SSL_CTX_sess_accept_renegotiate (SSL_CTX * ctx);
  long SSL_CTX_sess_hits (SSL_CTX * ctx);
  long SSL_CTX_sess_misses (SSL_CTX * ctx);
  long SSL_CTX_sess_timeouts (SSL_CTX * ctx);


/* SSL structure handling */

  SSL *SSL_new (SSL_CTX * ctx);
  void SSL_free (SSL * ssl);
  void SSL_load_error_strings (void);
  int SSL_get_error (SSL * ssl, int ret);
  int SSL_set_fd (SSL * ssl, int fd);
  int SSL_set_rfd (SSL * ssl, int fd);
  int SSL_set_wfd (SSL * ssl, int fd);
  void SSL_set_bio (SSL * ssl, BIO * rbio, BIO * wbio);
  void SSL_set_connect_state (SSL * ssl);
  int SSL_pending (SSL * ssl);
  void SSL_set_verify (SSL * ssl, int verify_mode,
		       int (*verify_callback) (int, X509_STORE_CTX *));
  const X509 *SSL_get_peer_certificate (SSL * ssl);

/* SSL connection open/close/read/write functions */

  int SSL_connect (SSL * ssl);
  int SSL_accept (SSL * ssl);
  int SSL_shutdown (SSL * ssl);
  int SSL_read (SSL * ssl, void *buf, int len);
  int SSL_write (SSL * ssl, const void *buf, int len);

  int SSL_want (SSL * ssl);

#define SSL_NOTHING (1)
#define SSL_WRITING (2)
#define SSL_READING (3)
#define SSL_X509_LOOKUP (4)

#define SSL_want_nothing(s) (SSL_want(s) == SSL_NOTHING)
#define SSL_want_read(s) (SSL_want(s) == SSL_READING)
#define SSL_want_write(s) (SSL_want(s) == SSL_WRITING)
#define SSL_want_x509_lookup(s) (SSL_want(s) == SSL_X509_LOOKUP)


/* SSL_METHOD functions */

  SSL_METHOD *SSLv23_client_method (void);
  SSL_METHOD *SSLv23_server_method (void);
  SSL_METHOD *SSLv3_client_method (void);
  SSL_METHOD *SSLv3_server_method (void);
  SSL_METHOD *TLSv1_client_method (void);
  SSL_METHOD *TLSv1_server_method (void);


/* SSL_CIPHER functions */

  SSL_CIPHER *SSL_get_current_cipher (SSL * ssl);
  const char *SSL_CIPHER_get_name (SSL_CIPHER * cipher);
  int SSL_CIPHER_get_bits (SSL_CIPHER * cipher, int *bits);
  const char *SSL_CIPHER_get_version (SSL_CIPHER * cipher);
  char *SSL_CIPHER_description (SSL_CIPHER * cipher, char *buf, int size);


/* X509 functions */

  X509_NAME *X509_get_subject_name (const X509 * cert);
  X509_NAME *X509_get_issuer_name (const X509 * cert);
  char *X509_NAME_oneline (gnutls_x509_dn * name, char *buf, int len);
  void X509_free (const X509 * cert);


/* BIO functions */

  void BIO_get_fd (gnutls_session_t gnutls_state, int *fd);
  BIO *BIO_new_socket (int sock, int close_flag);

/* error handling */

  unsigned long ERR_get_error (void);
  const char *ERR_error_string (unsigned long e, char *buf);


/* RAND functions */

  int RAND_status (void);
  void RAND_seed (const void *buf, int num);
  int RAND_bytes (unsigned char *buf, int num);
  int RAND_pseudo_bytes (unsigned char *buf, int num);
  const char *RAND_file_name (char *buf, size_t len);
  int RAND_load_file (const char *name, long maxbytes);
  int RAND_write_file (const char *name);

  int RAND_egd_bytes (const char *path, int bytes);
#define RAND_egd(p) RAND_egd_bytes((p), 255)

/* message digest functions */

#define MD5_DIGEST_LENGTH 16

  void MD5_Init (MD5_CTX * ctx);
  void MD5_Update (MD5_CTX * ctx, const void *buf, int len);
  void MD5_Final (unsigned char *md, MD5_CTX * ctx);
  unsigned char *MD5 (const unsigned char *buf, unsigned long len,
		      unsigned char *md);

  void RIPEMD160_Init (RIPEMD160_CTX * ctx);
  void RIPEMD160_Update (RIPEMD160_CTX * ctx, const void *buf, int len);
  void RIPEMD160_Final (unsigned char *md, RIPEMD160_CTX * ctx);
  unsigned char *RIPEMD160 (const unsigned char *buf, unsigned long len,
			    unsigned char *md);

#ifdef __cplusplus
}
#endif
#endif