tls_proto.h

Go to the documentation of this file.

/* Licensed to the Apache Software Foundation (ASF) under one or more
 * contributor license agreements.  See the NOTICE file distributed with
 * this work for additional information regarding copyright ownership.
 * The ASF licenses this file to You under the Apache License, Version 2.0
 * (the "License"); you may not use this file except in compliance with
 * the License.  You may obtain a copy of the License at
 *
 *     http://www.apache.org/licenses/LICENSE-2.0
 *
 * Unless required by applicable law or agreed to in writing, software
 * distributed under the License is distributed on an "AS IS" BASIS,
 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
 * See the License for the specific language governing permissions and
 * limitations under the License.
 */
#ifndef tls_proto_h
#define tls_proto_h
 
#include "tls_util.h"
 
 
#define TLS_VERSION_1_2   0x0303
#define TLS_VERSION_1_3   0x0304
 
typedef struct {
    apr_uint16_t id;      /* IANA 16-bit assigned value as used on the wire */
    const char *name;     /* IANA given name of the cipher */
    const char *alias;    /* Optional, commonly known alternate name */
} tls_cipher_t;
 
typedef struct tls_proto_conf_t tls_proto_conf_t;
struct tls_proto_conf_t {
    apr_array_header_t *supported_versions; /* supported protocol versions (apr_uint16_t) */
    apr_hash_t *known_ciphers_by_name; /* hash by name of known tls_cipher_t* */
    apr_hash_t *known_ciphers_by_id; /* hash by id of known tls_cipher_t* */
    apr_hash_t *rustls_ciphers_by_id; /* hash by id of rustls rustls_supported_ciphersuite* */
    apr_array_header_t *supported_cipher_ids; /* cipher ids (apr_uint16_t) supported by rustls */
    const rustls_root_cert_store *native_roots;
};
 
tls_proto_conf_t *tls_proto_init(apr_pool_t *p, server_rec *s);
 
apr_status_t tls_proto_pre_config(apr_pool_t *pool, apr_pool_t *ptemp);
 
apr_status_t tls_proto_post_config(apr_pool_t *p, apr_pool_t *ptemp, server_rec *s);
 
apr_uint16_t tls_proto_get_version_by_name(tls_proto_conf_t *conf, const char *name);
 
const char *tls_proto_get_version_name(
    tls_proto_conf_t *conf, apr_uint16_t id, apr_pool_t *pool);
 
apr_array_header_t *tls_proto_create_versions_plus(
    tls_proto_conf_t *conf, apr_uint16_t min_version, apr_pool_t *pool);
 
apr_status_t tls_proto_get_cipher_by_name(
    tls_proto_conf_t *conf, const char *name, apr_uint16_t *pcipher);
 
int tls_proto_is_cipher_supported(tls_proto_conf_t *conf, apr_uint16_t cipher);
 
const char *tls_proto_get_cipher_name(
    tls_proto_conf_t *conf, apr_uint16_t cipher, apr_pool_t *pool);
 
const char *tls_proto_get_cipher_names(
    tls_proto_conf_t *conf, const apr_array_header_t *ciphers, apr_pool_t *pool);
 
apr_array_header_t *tls_proto_get_rustls_suites(
    tls_proto_conf_t *conf, const apr_array_header_t *ids, apr_pool_t *pool);
 
#endif /* tls_proto_h */