• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 #ifndef HEADER_CURL_SSLUSE_H
2 #define HEADER_CURL_SSLUSE_H
3 /***************************************************************************
4  *                                  _   _ ____  _
5  *  Project                     ___| | | |  _ \| |
6  *                             / __| | | | |_) | |
7  *                            | (__| |_| |  _ <| |___
8  *                             \___|\___/|_| \_\_____|
9  *
10  * Copyright (C) 1998 - 2016, Daniel Stenberg, <daniel@haxx.se>, et al.
11  *
12  * This software is licensed as described in the file COPYING, which
13  * you should have received as part of this distribution. The terms
14  * are also available at https://curl.haxx.se/docs/copyright.html.
15  *
16  * You may opt to use, copy, modify, merge, publish, distribute and/or sell
17  * copies of the Software, and permit persons to whom the Software is
18  * furnished to do so, under the terms of the COPYING file.
19  *
20  * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
21  * KIND, either express or implied.
22  *
23  ***************************************************************************/
24 
25 #include "curl_setup.h"
26 
27 #ifdef USE_OPENSSL
28 /*
29  * This header should only be needed to get included by vtls.c and openssl.c
30  */
31 
32 #include "urldata.h"
33 
34 CURLcode Curl_ossl_connect(struct connectdata *conn, int sockindex);
35 CURLcode Curl_ossl_connect_nonblocking(struct connectdata *conn,
36                                        int sockindex,
37                                        bool *done);
38 
39 /* close a SSL connection */
40 void Curl_ossl_close(struct connectdata *conn, int sockindex);
41 
42 /* tell OpenSSL to close down all open information regarding connections (and
43    thus session ID caching etc) */
44 void Curl_ossl_close_all(struct Curl_easy *data);
45 
46 /* Sets an OpenSSL engine */
47 CURLcode Curl_ossl_set_engine(struct Curl_easy *data, const char *engine);
48 
49 /* function provided for the generic SSL-layer, called when a session id
50    should be freed */
51 void Curl_ossl_session_free(void *ptr);
52 
53 /* Sets engine as default for all SSL operations */
54 CURLcode Curl_ossl_set_engine_default(struct Curl_easy *data);
55 
56 /* Build list of OpenSSL engines */
57 struct curl_slist *Curl_ossl_engines_list(struct Curl_easy *data);
58 
59 int Curl_ossl_init(void);
60 void Curl_ossl_cleanup(void);
61 
62 size_t Curl_ossl_version(char *buffer, size_t size);
63 int Curl_ossl_check_cxn(struct connectdata *cxn);
64 int Curl_ossl_shutdown(struct connectdata *conn, int sockindex);
65 bool Curl_ossl_data_pending(const struct connectdata *conn,
66                             int connindex);
67 
68 /* return 0 if a find random is filled in */
69 int Curl_ossl_random(struct Curl_easy *data, unsigned char *entropy,
70                      size_t length);
71 void Curl_ossl_md5sum(unsigned char *tmp, /* input */
72                       size_t tmplen,
73                       unsigned char *md5sum /* output */,
74                       size_t unused);
75 void Curl_ossl_sha256sum(const unsigned char *tmp, /* input */
76                       size_t tmplen,
77                       unsigned char *sha256sum /* output */,
78                       size_t unused);
79 
80 bool Curl_ossl_cert_status_request(void);
81 
82 /* Set the API backend definition to OpenSSL */
83 #define CURL_SSL_BACKEND CURLSSLBACKEND_OPENSSL
84 
85 /* this backend supports the CAPATH option */
86 #define have_curlssl_ca_path 1
87 
88 /* this backend supports CURLOPT_CERTINFO */
89 #define have_curlssl_certinfo 1
90 
91 /* this backend supports CURLOPT_SSL_CTX_* */
92 #define have_curlssl_ssl_ctx 1
93 
94 /* this backend supports CURLOPT_PINNEDPUBLICKEY */
95 #define have_curlssl_pinnedpubkey 1
96 
97 /* API setup for OpenSSL */
98 #define curlssl_init Curl_ossl_init
99 #define curlssl_cleanup Curl_ossl_cleanup
100 #define curlssl_connect Curl_ossl_connect
101 #define curlssl_connect_nonblocking Curl_ossl_connect_nonblocking
102 #define curlssl_session_free(x) Curl_ossl_session_free(x)
103 #define curlssl_close_all Curl_ossl_close_all
104 #define curlssl_close Curl_ossl_close
105 #define curlssl_shutdown(x,y) Curl_ossl_shutdown(x,y)
106 #define curlssl_set_engine(x,y) Curl_ossl_set_engine(x,y)
107 #define curlssl_set_engine_default(x) Curl_ossl_set_engine_default(x)
108 #define curlssl_engines_list(x) Curl_ossl_engines_list(x)
109 #define curlssl_version Curl_ossl_version
110 #define curlssl_check_cxn Curl_ossl_check_cxn
111 #define curlssl_data_pending(x,y) Curl_ossl_data_pending(x,y)
112 #define curlssl_random(x,y,z) Curl_ossl_random(x,y,z)
113 #define curlssl_md5sum(a,b,c,d) Curl_ossl_md5sum(a,b,c,d)
114 #if (OPENSSL_VERSION_NUMBER >= 0x0090800fL) && !defined(OPENSSL_NO_SHA256)
115 #define curlssl_sha256sum(a,b,c,d) Curl_ossl_sha256sum(a,b,c,d)
116 #endif
117 #define curlssl_cert_status_request() Curl_ossl_cert_status_request()
118 
119 #define DEFAULT_CIPHER_SELECTION \
120   "ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH"
121 
122 #endif /* USE_OPENSSL */
123 #endif /* HEADER_CURL_SSLUSE_H */
124