139beb93cSSam Leffler /* 239beb93cSSam Leffler * TLSv1 server - internal structures 339beb93cSSam Leffler * Copyright (c) 2006-2007, Jouni Malinen <j@w1.fi> 439beb93cSSam Leffler * 5*f05cddf9SRui Paulo * This software may be distributed under the terms of the BSD license. 6*f05cddf9SRui Paulo * See README for more details. 739beb93cSSam Leffler */ 839beb93cSSam Leffler 939beb93cSSam Leffler #ifndef TLSV1_SERVER_I_H 1039beb93cSSam Leffler #define TLSV1_SERVER_I_H 1139beb93cSSam Leffler 1239beb93cSSam Leffler struct tlsv1_server { 1339beb93cSSam Leffler enum { 1439beb93cSSam Leffler CLIENT_HELLO, SERVER_HELLO, SERVER_CERTIFICATE, 1539beb93cSSam Leffler SERVER_KEY_EXCHANGE, SERVER_CERTIFICATE_REQUEST, 1639beb93cSSam Leffler SERVER_HELLO_DONE, CLIENT_CERTIFICATE, CLIENT_KEY_EXCHANGE, 1739beb93cSSam Leffler CERTIFICATE_VERIFY, CHANGE_CIPHER_SPEC, CLIENT_FINISHED, 1839beb93cSSam Leffler SERVER_CHANGE_CIPHER_SPEC, SERVER_FINISHED, 1939beb93cSSam Leffler ESTABLISHED, FAILED 2039beb93cSSam Leffler } state; 2139beb93cSSam Leffler 2239beb93cSSam Leffler struct tlsv1_record_layer rl; 2339beb93cSSam Leffler 2439beb93cSSam Leffler u8 session_id[TLS_SESSION_ID_MAX_LEN]; 2539beb93cSSam Leffler size_t session_id_len; 2639beb93cSSam Leffler u8 client_random[TLS_RANDOM_LEN]; 2739beb93cSSam Leffler u8 server_random[TLS_RANDOM_LEN]; 2839beb93cSSam Leffler u8 master_secret[TLS_MASTER_SECRET_LEN]; 2939beb93cSSam Leffler 3039beb93cSSam Leffler u8 alert_level; 3139beb93cSSam Leffler u8 alert_description; 3239beb93cSSam Leffler 3339beb93cSSam Leffler struct crypto_public_key *client_rsa_key; 3439beb93cSSam Leffler 3539beb93cSSam Leffler struct tls_verify_hash verify; 3639beb93cSSam Leffler 3739beb93cSSam Leffler #define MAX_CIPHER_COUNT 30 3839beb93cSSam Leffler u16 cipher_suites[MAX_CIPHER_COUNT]; 3939beb93cSSam Leffler size_t num_cipher_suites; 4039beb93cSSam Leffler 4139beb93cSSam Leffler u16 cipher_suite; 4239beb93cSSam Leffler 4339beb93cSSam Leffler struct tlsv1_credentials *cred; 4439beb93cSSam Leffler 4539beb93cSSam Leffler int verify_peer; 4639beb93cSSam Leffler u16 client_version; 4739beb93cSSam Leffler 4839beb93cSSam Leffler u8 *session_ticket; 4939beb93cSSam Leffler size_t session_ticket_len; 5039beb93cSSam Leffler 5139beb93cSSam Leffler tlsv1_server_session_ticket_cb session_ticket_cb; 5239beb93cSSam Leffler void *session_ticket_cb_ctx; 5339beb93cSSam Leffler 5439beb93cSSam Leffler int use_session_ticket; 5539beb93cSSam Leffler 5639beb93cSSam Leffler u8 *dh_secret; 5739beb93cSSam Leffler size_t dh_secret_len; 5839beb93cSSam Leffler }; 5939beb93cSSam Leffler 6039beb93cSSam Leffler 6139beb93cSSam Leffler void tlsv1_server_alert(struct tlsv1_server *conn, u8 level, u8 description); 6239beb93cSSam Leffler int tlsv1_server_derive_keys(struct tlsv1_server *conn, 6339beb93cSSam Leffler const u8 *pre_master_secret, 6439beb93cSSam Leffler size_t pre_master_secret_len); 6539beb93cSSam Leffler u8 * tlsv1_server_handshake_write(struct tlsv1_server *conn, size_t *out_len); 6639beb93cSSam Leffler u8 * tlsv1_server_send_alert(struct tlsv1_server *conn, u8 level, 6739beb93cSSam Leffler u8 description, size_t *out_len); 6839beb93cSSam Leffler int tlsv1_server_process_handshake(struct tlsv1_server *conn, u8 ct, 6939beb93cSSam Leffler const u8 *buf, size_t *len); 7039beb93cSSam Leffler 7139beb93cSSam Leffler #endif /* TLSV1_SERVER_I_H */ 72