1 #ifndef HEADER_CURL_SCHANNEL_H 2 #define HEADER_CURL_SCHANNEL_H 3 /*************************************************************************** 4 * _ _ ____ _ 5 * Project ___| | | | _ \| | 6 * / __| | | | |_) | | 7 * | (__| |_| | _ <| |___ 8 * \___|\___/|_| \_\_____| 9 * 10 * Copyright (C) 2012, Marc Hoersken, <info@marc-hoersken.de>, et al. 11 * Copyright (C) 2012 - 2018, Daniel Stenberg, <daniel@haxx.se>, et al. 12 * 13 * This software is licensed as described in the file COPYING, which 14 * you should have received as part of this distribution. The terms 15 * are also available at https://curl.haxx.se/docs/copyright.html. 16 * 17 * You may opt to use, copy, modify, merge, publish, distribute and/or sell 18 * copies of the Software, and permit persons to whom the Software is 19 * furnished to do so, under the terms of the COPYING file. 20 * 21 * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY 22 * KIND, either express or implied. 23 * 24 ***************************************************************************/ 25 #include "curl_setup.h" 26 27 #ifdef USE_SCHANNEL 28 29 #include <schnlsp.h> 30 #include <schannel.h> 31 #include "curl_sspi.h" 32 33 #include "urldata.h" 34 35 /* <wincrypt.h> has been included via the above <schnlsp.h>. 36 * Or in case of ldap.c, it was included via <winldap.h>. 37 * And since <wincrypt.h> has this: 38 * #define X509_NAME ((LPCSTR) 7) 39 * 40 * And in BoringSSL's <openssl/base.h> there is: 41 * typedef struct X509_name_st X509_NAME; 42 * etc. 43 * 44 * this will cause all kinds of C-preprocessing paste errors in 45 * BoringSSL's <openssl/x509.h>: So just undefine those defines here 46 * (and only here). 47 */ 48 #if defined(HAVE_BORINGSSL) || defined(OPENSSL_IS_BORINGSSL) 49 # undef X509_NAME 50 # undef X509_CERT_PAIR 51 # undef X509_EXTENSIONS 52 #endif 53 54 extern const struct Curl_ssl Curl_ssl_schannel; 55 56 CURLcode Curl_verify_certificate(struct connectdata *conn, int sockindex); 57 58 /* structs to expose only in schannel.c and schannel_verify.c */ 59 #ifdef EXPOSE_SCHANNEL_INTERNAL_STRUCTS 60 61 #ifdef __MINGW32__ 62 #include <_mingw.h> 63 #ifdef __MINGW64_VERSION_MAJOR 64 #define HAS_MANUAL_VERIFY_API 65 #endif 66 #else 67 #include <wincrypt.h> 68 #ifdef CERT_CHAIN_REVOCATION_CHECK_CHAIN 69 #define HAS_MANUAL_VERIFY_API 70 #endif 71 #endif 72 73 struct curl_schannel_cred { 74 CredHandle cred_handle; 75 TimeStamp time_stamp; 76 int refcount; 77 }; 78 79 struct curl_schannel_ctxt { 80 CtxtHandle ctxt_handle; 81 TimeStamp time_stamp; 82 }; 83 84 struct ssl_backend_data { 85 struct curl_schannel_cred *cred; 86 struct curl_schannel_ctxt *ctxt; 87 SecPkgContext_StreamSizes stream_sizes; 88 size_t encdata_length, decdata_length; 89 size_t encdata_offset, decdata_offset; 90 unsigned char *encdata_buffer, *decdata_buffer; 91 /* encdata_is_incomplete: if encdata contains only a partial record that 92 can't be decrypted without another Curl_read_plain (that is, status is 93 SEC_E_INCOMPLETE_MESSAGE) then set this true. after Curl_read_plain writes 94 more bytes into encdata then set this back to false. */ 95 bool encdata_is_incomplete; 96 unsigned long req_flags, ret_flags; 97 CURLcode recv_unrecoverable_err; /* schannel_recv had an unrecoverable err */ 98 bool recv_sspi_close_notify; /* true if connection closed by close_notify */ 99 bool recv_connection_closed; /* true if connection closed, regardless how */ 100 bool use_alpn; /* true if ALPN is used for this connection */ 101 #ifdef HAS_MANUAL_VERIFY_API 102 bool use_manual_cred_validation; /* true if manual cred validation is used */ 103 #endif 104 }; 105 #endif /* EXPOSE_SCHANNEL_INTERNAL_STRUCTS */ 106 107 #endif /* USE_SCHANNEL */ 108 #endif /* HEADER_CURL_SCHANNEL_H */ 109