Home | History | Annotate | Download | only in vtls 
      1 #ifndef HEADER_CURL_SSLUSE_H
      2 #define HEADER_CURL_SSLUSE_H
      3 /***************************************************************************
      4  *                                  _   _ ____  _
      5  *  Project                     ___| | | |  _ \| |
      6  *                             / __| | | | |_) | |
      7  *                            | (__| |_| |  _ <| |___
      8  *                             \___|\___/|_| \_\_____|
      9  *
     10  * Copyright (C) 1998 - 2016, Daniel Stenberg, <daniel (at) haxx.se>, et al.
     11  *
     12  * This software is licensed as described in the file COPYING, which
     13  * you should have received as part of this distribution. The terms
     14  * are also available at https://curl.haxx.se/docs/copyright.html.
     15  *
     16  * You may opt to use, copy, modify, merge, publish, distribute and/or sell
     17  * copies of the Software, and permit persons to whom the Software is
     18  * furnished to do so, under the terms of the COPYING file.
     19  *
     20  * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
     21  * KIND, either express or implied.
     22  *
     23  ***************************************************************************/
     24 
     25 #include "curl_setup.h"
     26 
     27 #ifdef USE_OPENSSL
     28 /*
     29  * This header should only be needed to get included by vtls.c and openssl.c
     30  */
     31 
     32 #include "urldata.h"
     33 
     34 CURLcode Curl_ossl_connect(struct connectdata *conn, int sockindex);
     35 CURLcode Curl_ossl_connect_nonblocking(struct connectdata *conn,
     36                                        int sockindex,
     37                                        bool *done);
     38 
     39 /* close a SSL connection */
     40 void Curl_ossl_close(struct connectdata *conn, int sockindex);
     41 
     42 /* tell OpenSSL to close down all open information regarding connections (and
     43    thus session ID caching etc) */
     44 void Curl_ossl_close_all(struct Curl_easy *data);
     45 
     46 /* Sets an OpenSSL engine */
     47 CURLcode Curl_ossl_set_engine(struct Curl_easy *data, const char *engine);
     48 
     49 /* function provided for the generic SSL-layer, called when a session id
     50    should be freed */
     51 void Curl_ossl_session_free(void *ptr);
     52 
     53 /* Sets engine as default for all SSL operations */
     54 CURLcode Curl_ossl_set_engine_default(struct Curl_easy *data);
     55 
     56 /* Build list of OpenSSL engines */
     57 struct curl_slist *Curl_ossl_engines_list(struct Curl_easy *data);
     58 
     59 int Curl_ossl_init(void);
     60 void Curl_ossl_cleanup(void);
     61 
     62 size_t Curl_ossl_version(char *buffer, size_t size);
     63 int Curl_ossl_check_cxn(struct connectdata *cxn);
     64 int Curl_ossl_shutdown(struct connectdata *conn, int sockindex);
     65 bool Curl_ossl_data_pending(const struct connectdata *conn,
     66                             int connindex);
     67 
     68 /* return 0 if a find random is filled in */
     69 int Curl_ossl_random(struct Curl_easy *data, unsigned char *entropy,
     70                      size_t length);
     71 void Curl_ossl_md5sum(unsigned char *tmp, /* input */
     72                       size_t tmplen,
     73                       unsigned char *md5sum /* output */,
     74                       size_t unused);
     75 void Curl_ossl_sha256sum(const unsigned char *tmp, /* input */
     76                       size_t tmplen,
     77                       unsigned char *sha256sum /* output */,
     78                       size_t unused);
     79 
     80 bool Curl_ossl_cert_status_request(void);
     81 
     82 /* Set the API backend definition to OpenSSL */
     83 #define CURL_SSL_BACKEND CURLSSLBACKEND_OPENSSL
     84 
     85 /* this backend supports the CAPATH option */
     86 #define have_curlssl_ca_path 1
     87 
     88 /* this backend supports CURLOPT_CERTINFO */
     89 #define have_curlssl_certinfo 1
     90 
     91 /* this backend supports CURLOPT_SSL_CTX_* */
     92 #define have_curlssl_ssl_ctx 1
     93 
     94 /* this backend supports CURLOPT_PINNEDPUBLICKEY */
     95 #define have_curlssl_pinnedpubkey 1
     96 
     97 /* API setup for OpenSSL */
     98 #define curlssl_init Curl_ossl_init
     99 #define curlssl_cleanup Curl_ossl_cleanup
    100 #define curlssl_connect Curl_ossl_connect
    101 #define curlssl_connect_nonblocking Curl_ossl_connect_nonblocking
    102 #define curlssl_session_free(x) Curl_ossl_session_free(x)
    103 #define curlssl_close_all Curl_ossl_close_all
    104 #define curlssl_close Curl_ossl_close
    105 #define curlssl_shutdown(x,y) Curl_ossl_shutdown(x,y)
    106 #define curlssl_set_engine(x,y) Curl_ossl_set_engine(x,y)
    107 #define curlssl_set_engine_default(x) Curl_ossl_set_engine_default(x)
    108 #define curlssl_engines_list(x) Curl_ossl_engines_list(x)
    109 #define curlssl_version Curl_ossl_version
    110 #define curlssl_check_cxn Curl_ossl_check_cxn
    111 #define curlssl_data_pending(x,y) Curl_ossl_data_pending(x,y)
    112 #define curlssl_random(x,y,z) Curl_ossl_random(x,y,z)
    113 #define curlssl_md5sum(a,b,c,d) Curl_ossl_md5sum(a,b,c,d)
    114 #if (OPENSSL_VERSION_NUMBER >= 0x0090800fL) && !defined(OPENSSL_NO_SHA256)
    115 #define curlssl_sha256sum(a,b,c,d) Curl_ossl_sha256sum(a,b,c,d)
    116 #endif
    117 #define curlssl_cert_status_request() Curl_ossl_cert_status_request()
    118 
    119 #define DEFAULT_CIPHER_SELECTION \
    120   "ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH"
    121 
    122 #endif /* USE_OPENSSL */
    123 #endif /* HEADER_CURL_SSLUSE_H */
    124