| 1 | #ifndef HEADER_CURL_VQUIC_TLS_H
|
|---|
| 2 | #define HEADER_CURL_VQUIC_TLS_H
|
|---|
| 3 | /***************************************************************************
|
|---|
| 4 | * _ _ ____ _
|
|---|
| 5 | * Project ___| | | | _ \| |
|
|---|
| 6 | * / __| | | | |_) | |
|
|---|
| 7 | * | (__| |_| | _ <| |___
|
|---|
| 8 | * \___|\___/|_| \_\_____|
|
|---|
| 9 | *
|
|---|
| 10 | * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|---|
| 11 | *
|
|---|
| 12 | * This software is licensed as described in the file COPYING, which
|
|---|
| 13 | * you should have received as part of this distribution. The terms
|
|---|
| 14 | * are also available at https://curl.se/docs/copyright.html.
|
|---|
| 15 | *
|
|---|
| 16 | * You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|---|
| 17 | * copies of the Software, and permit persons to whom the Software is
|
|---|
| 18 | * furnished to do so, under the terms of the COPYING file.
|
|---|
| 19 | *
|
|---|
| 20 | * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|---|
| 21 | * KIND, either express or implied.
|
|---|
| 22 | *
|
|---|
| 23 | * SPDX-License-Identifier: curl
|
|---|
| 24 | *
|
|---|
| 25 | ***************************************************************************/
|
|---|
| 26 |
|
|---|
| 27 | #include "curl_setup.h"
|
|---|
| 28 | #include "bufq.h"
|
|---|
| 29 |
|
|---|
| 30 | #if defined(ENABLE_QUIC) && \
|
|---|
| 31 | (defined(USE_OPENSSL) || defined(USE_GNUTLS) || defined(USE_WOLFSSL))
|
|---|
| 32 |
|
|---|
| 33 | struct quic_tls_ctx {
|
|---|
| 34 | #ifdef USE_OPENSSL
|
|---|
| 35 | SSL_CTX *ssl_ctx;
|
|---|
| 36 | SSL *ssl;
|
|---|
| 37 | #elif defined(USE_GNUTLS)
|
|---|
| 38 | struct gtls_instance *gtls;
|
|---|
| 39 | #elif defined(USE_WOLFSSL)
|
|---|
| 40 | WOLFSSL_CTX *ssl_ctx;
|
|---|
| 41 | WOLFSSL *ssl;
|
|---|
| 42 | #endif
|
|---|
| 43 | BIT(x509_store_setup); /* if x509 store has been set up */
|
|---|
| 44 | };
|
|---|
| 45 |
|
|---|
| 46 | /**
|
|---|
| 47 | * Callback passed to `Curl_vquic_tls_init()` that can
|
|---|
| 48 | * do early initializations on the not otherwise configured TLS
|
|---|
| 49 | * instances created. This varies by TLS backend:
|
|---|
| 50 | * - openssl/wolfssl: SSL_CTX* has just been created
|
|---|
| 51 | * - gnutls: gtls_client_init() has run
|
|---|
| 52 | */
|
|---|
| 53 | typedef CURLcode Curl_vquic_tls_ctx_setup(struct quic_tls_ctx *ctx,
|
|---|
| 54 | struct Curl_cfilter *cf,
|
|---|
| 55 | struct Curl_easy *data);
|
|---|
| 56 |
|
|---|
| 57 | /**
|
|---|
| 58 | * Initialize the QUIC TLS instances based of the SSL configurations
|
|---|
| 59 | * for the connection filter, transfer and peer.
|
|---|
| 60 | * @param ctx the TLS context to initialize
|
|---|
| 61 | * @param cf the connection filter involved
|
|---|
| 62 | * @param data the transfer involved
|
|---|
| 63 | * @param peer the peer that will be connected to
|
|---|
| 64 | * @param alpn the ALPN string in protocol format ((len+bytes+)+),
|
|---|
| 65 | * may be NULL
|
|---|
| 66 | * @param alpn_len the overall number of bytes in `alpn`
|
|---|
| 67 | * @param ctx_setup optional callback for very early TLS config
|
|---|
| 68 | * @param user_data optional pointer to set in TLS application context
|
|---|
| 69 | */
|
|---|
| 70 | CURLcode Curl_vquic_tls_init(struct quic_tls_ctx *ctx,
|
|---|
| 71 | struct Curl_cfilter *cf,
|
|---|
| 72 | struct Curl_easy *data,
|
|---|
| 73 | struct ssl_peer *peer,
|
|---|
| 74 | const char *alpn, size_t alpn_len,
|
|---|
| 75 | Curl_vquic_tls_ctx_setup *ctx_setup,
|
|---|
| 76 | void *user_data);
|
|---|
| 77 |
|
|---|
| 78 | /**
|
|---|
| 79 | * Cleanup all data that has been initialized.
|
|---|
| 80 | */
|
|---|
| 81 | void Curl_vquic_tls_cleanup(struct quic_tls_ctx *ctx);
|
|---|
| 82 |
|
|---|
| 83 | CURLcode Curl_vquic_tls_before_recv(struct quic_tls_ctx *ctx,
|
|---|
| 84 | struct Curl_cfilter *cf,
|
|---|
| 85 | struct Curl_easy *data);
|
|---|
| 86 |
|
|---|
| 87 | /**
|
|---|
| 88 | * After the QUIC basic handshake has been, verify that the peer
|
|---|
| 89 | * (and its certificate) fulfill our requirements.
|
|---|
| 90 | */
|
|---|
| 91 | CURLcode Curl_vquic_tls_verify_peer(struct quic_tls_ctx *ctx,
|
|---|
| 92 | struct Curl_cfilter *cf,
|
|---|
| 93 | struct Curl_easy *data,
|
|---|
| 94 | struct ssl_peer *peer);
|
|---|
| 95 |
|
|---|
| 96 | #endif /* !ENABLE_QUIC && (USE_OPENSSL || USE_GNUTLS || USE_WOLFSSL) */
|
|---|
| 97 |
|
|---|
| 98 | #endif /* HEADER_CURL_VQUIC_TLS_H */
|
|---|
