1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374 |
- /* Copyright 2003 Roger Dingledine
- * Copyright 2004-2007 Roger Dingledine, Nick Mathewson */
- /* See LICENSE for licensing information */
- /* $Id$ */
- #ifndef _TORTLS_H
- #define _TORTLS_H
- #define TORTLS_H_ID "$Id$"
- /**
- * \file tortls.h
- * \brief Headers for tortls.c
- **/
- #include "../common/crypto.h"
- #include "../common/compat.h"
- /* Opaque structure to hold a TLS connection. */
- typedef struct tor_tls_t tor_tls_t;
- /* Possible return values for most tor_tls_* functions. */
- #define _MIN_TOR_TLS_ERROR_VAL -9
- #define TOR_TLS_ERROR_MISC -9
- #define TOR_TLS_ERROR_IO -8
- #define TOR_TLS_ERROR_CONNREFUSED -7
- #define TOR_TLS_ERROR_CONNRESET -6
- #define TOR_TLS_ERROR_NO_ROUTE -5
- #define TOR_TLS_ERROR_TIMEOUT -4
- #define TOR_TLS_CLOSE -3
- #define TOR_TLS_WANTREAD -2
- #define TOR_TLS_WANTWRITE -1
- #define TOR_TLS_DONE 0
- /** Use this macro in a switch statement to catch _any_ TLS error. That way,
- * if more errors are added, your switches will still work. */
- #define CASE_TOR_TLS_ERROR_ANY \
- case TOR_TLS_ERROR_MISC: \
- case TOR_TLS_ERROR_IO: \
- case TOR_TLS_ERROR_CONNREFUSED: \
- case TOR_TLS_ERROR_CONNRESET: \
- case TOR_TLS_ERROR_NO_ROUTE: \
- case TOR_TLS_ERROR_TIMEOUT
- #define TOR_TLS_IS_ERROR(rv) ((rv) < TOR_TLS_CLOSE)
- void tor_tls_free_all(void);
- int tor_tls_context_new(crypto_pk_env_t *rsa,
- const char *nickname, unsigned int key_lifetime);
- tor_tls_t *tor_tls_new(int sock, int is_server);
- int tor_tls_is_server(tor_tls_t *tls);
- void tor_tls_free(tor_tls_t *tls);
- int tor_tls_peer_has_cert(tor_tls_t *tls);
- int tor_tls_get_peer_cert_nickname(int severity, tor_tls_t *tls,
- char *buf, size_t buflen);
- int tor_tls_verify(int severity, tor_tls_t *tls, crypto_pk_env_t **identity);
- int tor_tls_check_lifetime(tor_tls_t *tls, int tolerance);
- int tor_tls_read(tor_tls_t *tls, char *cp, size_t len);
- int tor_tls_write(tor_tls_t *tls, const char *cp, size_t n);
- int tor_tls_handshake(tor_tls_t *tls);
- int tor_tls_shutdown(tor_tls_t *tls);
- int tor_tls_get_pending_bytes(tor_tls_t *tls);
- size_t tor_tls_get_forced_write_size(tor_tls_t *tls);
- void tor_tls_get_n_raw_bytes(tor_tls_t *tls,
- size_t *n_read, size_t *n_written);
- /* Log and abort if there are unhandled TLS errors in OpenSSL's error stack.
- */
- #define check_no_tls_errors() _check_no_tls_errors(__FILE__,__LINE__)
- void _check_no_tls_errors(const char *fname, int line);
- #endif
|