lib/vtls/openssl.h

   1 #ifndef HEADER_CURL_SSLUSE_H
   2 #define HEADER_CURL_SSLUSE_H
   3 /***************************************************************************
   4  *                                  _   _ ____  _
   5  *  Project                     ___| | | |  _ \| |
   6  *                             / __| | | | |_) | |
   7  *                            | (__| |_| |  _ <| |___
   8  *                             \___|\___/|_| \_\_____|
   9  *
  10  * Copyright (C) 1998 - 2014, Daniel Stenberg, <daniel@haxx.se>, et al.
  11  *
  12  * This software is licensed as described in the file COPYING, which
  13  * you should have received as part of this distribution. The terms
  14  * are also available at http://curl.haxx.se/docs/copyright.html.
  15  *
  16  * You may opt to use, copy, modify, merge, publish, distribute and/or sell
  17  * copies of the Software, and permit persons to whom the Software is
  18  * furnished to do so, under the terms of the COPYING file.
  19  *
  20  * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
  21  * KIND, either express or implied.
  22  *
  23  ***************************************************************************/
  24
  25 #include "curl_setup.h"
  26
  27 #ifdef USE_SSLEAY
  28 /*
  29  * This header should only be needed to get included by vtls.c and openssl.c
  30  */
  31
  32 #include "urldata.h"
  33
  34 CURLcode Curl_ossl_connect(struct connectdata *conn, int sockindex);
  35 CURLcode Curl_ossl_connect_nonblocking(struct connectdata *conn,
  36                                        int sockindex,
  37                                        bool *done);
  38
  39 /* close a SSL connection */
  40 void Curl_ossl_close(struct connectdata *conn, int sockindex);
  41
  42 /* tell OpenSSL to close down all open information regarding connections (and
  43    thus session ID caching etc) */
  44 void Curl_ossl_close_all(struct SessionHandle *data);
  45
  46 /* Sets an OpenSSL engine */
  47 CURLcode Curl_ossl_set_engine(struct SessionHandle *data, const char *engine);
  48
  49 /* function provided for the generic SSL-layer, called when a session id
  50    should be freed */
  51 void Curl_ossl_session_free(void *ptr);
  52
  53 /* Sets engine as default for all SSL operations */
  54 CURLcode Curl_ossl_set_engine_default(struct SessionHandle *data);
  55
  56 /* Build list of OpenSSL engines */
  57 struct curl_slist *Curl_ossl_engines_list(struct SessionHandle *data);
  58
  59 int Curl_ossl_init(void);
  60 void Curl_ossl_cleanup(void);
  61
  62 size_t Curl_ossl_version(char *buffer, size_t size);
  63 int Curl_ossl_check_cxn(struct connectdata *cxn);
  64 int Curl_ossl_shutdown(struct connectdata *conn, int sockindex);
  65 bool Curl_ossl_data_pending(const struct connectdata *conn,
  66                             int connindex);
  67
  68 /* return 0 if a find random is filled in */
  69 int Curl_ossl_random(struct SessionHandle *data, unsigned char *entropy,
  70                      size_t length);
  71 void Curl_ossl_md5sum(unsigned char *tmp, /* input */
  72                       size_t tmplen,
  73                       unsigned char *md5sum /* output */,
  74                       size_t unused);
  75
  76 /* this backend supports the CAPATH option */
  77 #define have_curlssl_ca_path 1
  78
  79 /* this backend supports CURLOPT_CERTINFO */
  80 #define have_curlssl_certinfo 1
  81
  82 /* this backend suppots CURLOPT_SSL_CTX_* */
  83 #define have_curlssl_ssl_ctx 1
  84
  85 /* API setup for OpenSSL */
  86 #define curlssl_init Curl_ossl_init
  87 #define curlssl_cleanup Curl_ossl_cleanup
  88 #define curlssl_connect Curl_ossl_connect
  89 #define curlssl_connect_nonblocking Curl_ossl_connect_nonblocking
  90 #define curlssl_session_free(x) Curl_ossl_session_free(x)
  91 #define curlssl_close_all Curl_ossl_close_all
  92 #define curlssl_close Curl_ossl_close
  93 #define curlssl_shutdown(x,y) Curl_ossl_shutdown(x,y)
  94 #define curlssl_set_engine(x,y) Curl_ossl_set_engine(x,y)
  95 #define curlssl_set_engine_default(x) Curl_ossl_set_engine_default(x)
  96 #define curlssl_engines_list(x) Curl_ossl_engines_list(x)
  97 #define curlssl_version Curl_ossl_version
  98 #define curlssl_check_cxn Curl_ossl_check_cxn
  99 #define curlssl_data_pending(x,y) Curl_ossl_data_pending(x,y)
 100 #define curlssl_random(x,y,z) Curl_ossl_random(x,y,z)
 101 #define curlssl_md5sum(a,b,c,d) Curl_ossl_md5sum(a,b,c,d)
 102 #define CURL_SSL_BACKEND CURLSSLBACKEND_OPENSSL
 103
 104 #ifdef TIZEN_TV_EXT
 105 #define DEFAULT_CIPHER_SELECTION \
 106 "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:" \
 107 "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:" \
 108 "ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:" \
 109 "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:" \
 110 "DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:" \
 111 "AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:" \
 112 "ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:" \
 113 "EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:" \
 114 "DES-CBC3-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA"
 115 #else
 116 #define DEFAULT_CIPHER_SELECTION "ALL!EXPORT!EXPORT40!EXPORT56!aNULL!LOW!RC4"
 117 #endif
 118
 119 #endif /* USE_SSLEAY */
 120 #endif /* HEADER_CURL_SSLUSE_H */