139beb93cSSam Leffler /* 239beb93cSSam Leffler * TLSv1 server - internal structures 339beb93cSSam Leffler * Copyright (c) 2006-2007, Jouni Malinen <j@w1.fi> 439beb93cSSam Leffler * 5f05cddf9SRui Paulo * This software may be distributed under the terms of the BSD license. 6f05cddf9SRui Paulo * See README for more details. 739beb93cSSam Leffler */ 839beb93cSSam Leffler 939beb93cSSam Leffler #ifndef TLSV1_SERVER_I_H 1039beb93cSSam Leffler #define TLSV1_SERVER_I_H 1139beb93cSSam Leffler 1239beb93cSSam Leffler struct tlsv1_server { 1339beb93cSSam Leffler enum { 1439beb93cSSam Leffler CLIENT_HELLO, SERVER_HELLO, SERVER_CERTIFICATE, 1539beb93cSSam Leffler SERVER_KEY_EXCHANGE, SERVER_CERTIFICATE_REQUEST, 1639beb93cSSam Leffler SERVER_HELLO_DONE, CLIENT_CERTIFICATE, CLIENT_KEY_EXCHANGE, 1739beb93cSSam Leffler CERTIFICATE_VERIFY, CHANGE_CIPHER_SPEC, CLIENT_FINISHED, 1839beb93cSSam Leffler SERVER_CHANGE_CIPHER_SPEC, SERVER_FINISHED, 1939beb93cSSam Leffler ESTABLISHED, FAILED 2039beb93cSSam Leffler } state; 2139beb93cSSam Leffler 2239beb93cSSam Leffler struct tlsv1_record_layer rl; 2339beb93cSSam Leffler 2439beb93cSSam Leffler u8 session_id[TLS_SESSION_ID_MAX_LEN]; 2539beb93cSSam Leffler size_t session_id_len; 2639beb93cSSam Leffler u8 client_random[TLS_RANDOM_LEN]; 2739beb93cSSam Leffler u8 server_random[TLS_RANDOM_LEN]; 2839beb93cSSam Leffler u8 master_secret[TLS_MASTER_SECRET_LEN]; 2939beb93cSSam Leffler 3039beb93cSSam Leffler u8 alert_level; 3139beb93cSSam Leffler u8 alert_description; 3239beb93cSSam Leffler 33*4bc52338SCy Schubert int read_alerts, write_alerts; 34*4bc52338SCy Schubert 3539beb93cSSam Leffler struct crypto_public_key *client_rsa_key; 3639beb93cSSam Leffler 3739beb93cSSam Leffler struct tls_verify_hash verify; 3839beb93cSSam Leffler 3939beb93cSSam Leffler #define MAX_CIPHER_COUNT 30 4039beb93cSSam Leffler u16 cipher_suites[MAX_CIPHER_COUNT]; 4139beb93cSSam Leffler size_t num_cipher_suites; 4239beb93cSSam Leffler 4339beb93cSSam Leffler u16 cipher_suite; 4439beb93cSSam Leffler 4539beb93cSSam Leffler struct tlsv1_credentials *cred; 4639beb93cSSam Leffler 4739beb93cSSam Leffler int verify_peer; 4839beb93cSSam Leffler u16 client_version; 4939beb93cSSam Leffler 5039beb93cSSam Leffler u8 *session_ticket; 5139beb93cSSam Leffler size_t session_ticket_len; 5239beb93cSSam Leffler 5339beb93cSSam Leffler tlsv1_server_session_ticket_cb session_ticket_cb; 5439beb93cSSam Leffler void *session_ticket_cb_ctx; 5539beb93cSSam Leffler 565b9c547cSRui Paulo void (*log_cb)(void *ctx, const char *msg); 575b9c547cSRui Paulo void *log_cb_ctx; 585b9c547cSRui Paulo 5939beb93cSSam Leffler int use_session_ticket; 60780fb4a2SCy Schubert unsigned int status_request:1; 61780fb4a2SCy Schubert unsigned int status_request_v2:1; 62780fb4a2SCy Schubert unsigned int status_request_multi:1; 6339beb93cSSam Leffler 6439beb93cSSam Leffler u8 *dh_secret; 6539beb93cSSam Leffler size_t dh_secret_len; 665b9c547cSRui Paulo 675b9c547cSRui Paulo #ifdef CONFIG_TESTING_OPTIONS 685b9c547cSRui Paulo u32 test_flags; 695b9c547cSRui Paulo int test_failure_reported; 705b9c547cSRui Paulo #endif /* CONFIG_TESTING_OPTIONS */ 7139beb93cSSam Leffler }; 7239beb93cSSam Leffler 7339beb93cSSam Leffler 745b9c547cSRui Paulo void tlsv1_server_log(struct tlsv1_server *conn, const char *fmt, ...) 755b9c547cSRui Paulo PRINTF_FORMAT(2, 3); 765b9c547cSRui Paulo 7739beb93cSSam Leffler void tlsv1_server_alert(struct tlsv1_server *conn, u8 level, u8 description); 7839beb93cSSam Leffler int tlsv1_server_derive_keys(struct tlsv1_server *conn, 7939beb93cSSam Leffler const u8 *pre_master_secret, 8039beb93cSSam Leffler size_t pre_master_secret_len); 8139beb93cSSam Leffler u8 * tlsv1_server_handshake_write(struct tlsv1_server *conn, size_t *out_len); 8239beb93cSSam Leffler u8 * tlsv1_server_send_alert(struct tlsv1_server *conn, u8 level, 8339beb93cSSam Leffler u8 description, size_t *out_len); 8439beb93cSSam Leffler int tlsv1_server_process_handshake(struct tlsv1_server *conn, u8 ct, 8539beb93cSSam Leffler const u8 *buf, size_t *len); 865b9c547cSRui Paulo void tlsv1_server_get_dh_p(struct tlsv1_server *conn, const u8 **dh_p, 875b9c547cSRui Paulo size_t *dh_p_len); 8839beb93cSSam Leffler 8939beb93cSSam Leffler #endif /* TLSV1_SERVER_I_H */ 90