lib/vtls/openssl.h

   1 #ifndef HEADER_CURL_SSLUSE_H
   2 #define HEADER_CURL_SSLUSE_H
   3 /***************************************************************************
   4  *                                  _   _ ____  _
   5  *  Project                     ___| | | |  _ \| |
   6  *                             / __| | | | |_) | |
   7  *                            | (__| |_| |  _ <| |___
   8  *                             \___|\___/|_| \_\_____|
   9  *
  10  * Copyright (C) 1998 - 2015, Daniel Stenberg, <daniel@haxx.se>, et al.
  11  *
  12  * This software is licensed as described in the file COPYING, which
  13  * you should have received as part of this distribution. The terms
  14  * are also available at https://curl.haxx.se/docs/copyright.html.
  15  *
  16  * You may opt to use, copy, modify, merge, publish, distribute and/or sell
  17  * copies of the Software, and permit persons to whom the Software is
  18  * furnished to do so, under the terms of the COPYING file.
  19  *
  20  * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
  21  * KIND, either express or implied.
  22  *
  23  ***************************************************************************/
  24
  25 #include "curl_setup.h"
  26
  27 #ifdef USE_OPENSSL
  28 /*
  29  * This header should only be needed to get included by vtls.c and openssl.c
  30  */
  31
  32 #include "urldata.h"
  33
  34 CURLcode Curl_ossl_connect(struct connectdata *conn, int sockindex);
  35 CURLcode Curl_ossl_connect_nonblocking(struct connectdata *conn,
  36                                        int sockindex,
  37                                        bool *done);
  38
  39 /* close a SSL connection */
  40 void Curl_ossl_close(struct connectdata *conn, int sockindex);
  41
  42 /* tell OpenSSL to close down all open information regarding connections (and
  43    thus session ID caching etc) */
  44 void Curl_ossl_close_all(struct SessionHandle *data);
  45
  46 /* Sets an OpenSSL engine */
  47 CURLcode Curl_ossl_set_engine(struct SessionHandle *data, const char *engine);
  48
  49 /* function provided for the generic SSL-layer, called when a session id
  50    should be freed */
  51 void Curl_ossl_session_free(void *ptr);
  52
  53 /* Sets engine as default for all SSL operations */
  54 CURLcode Curl_ossl_set_engine_default(struct SessionHandle *data);
  55
  56 /* Build list of OpenSSL engines */
  57 struct curl_slist *Curl_ossl_engines_list(struct SessionHandle *data);
  58
  59 int Curl_ossl_init(void);
  60 void Curl_ossl_cleanup(void);
  61
  62 size_t Curl_ossl_version(char *buffer, size_t size);
  63 int Curl_ossl_check_cxn(struct connectdata *cxn);
  64 int Curl_ossl_shutdown(struct connectdata *conn, int sockindex);
  65 bool Curl_ossl_data_pending(const struct connectdata *conn,
  66                             int connindex);
  67
  68 /* return 0 if a find random is filled in */
  69 int Curl_ossl_random(struct SessionHandle *data, unsigned char *entropy,
  70                      size_t length);
  71 void Curl_ossl_md5sum(unsigned char *tmp, /* input */
  72                       size_t tmplen,
  73                       unsigned char *md5sum /* output */,
  74                       size_t unused);
  75 void Curl_ossl_sha256sum(const unsigned char *tmp, /* input */
  76                       size_t tmplen,
  77                       unsigned char *sha256sum /* output */,
  78                       size_t unused);
  79
  80 bool Curl_ossl_cert_status_request(void);
  81
  82 /* Set the API backend definition to OpenSSL */
  83 #define CURL_SSL_BACKEND CURLSSLBACKEND_OPENSSL
  84
  85 /* this backend supports the CAPATH option */
  86 #define have_curlssl_ca_path 1
  87
  88 /* this backend supports CURLOPT_CERTINFO */
  89 #define have_curlssl_certinfo 1
  90
  91 /* this backend suppots CURLOPT_SSL_CTX_* */
  92 #define have_curlssl_ssl_ctx 1
  93
  94 /* API setup for OpenSSL */
  95 #define curlssl_init Curl_ossl_init
  96 #define curlssl_cleanup Curl_ossl_cleanup
  97 #define curlssl_connect Curl_ossl_connect
  98 #define curlssl_connect_nonblocking Curl_ossl_connect_nonblocking
  99 #define curlssl_session_free(x) Curl_ossl_session_free(x)
 100 #define curlssl_close_all Curl_ossl_close_all
 101 #define curlssl_close Curl_ossl_close
 102 #define curlssl_shutdown(x,y) Curl_ossl_shutdown(x,y)
 103 #define curlssl_set_engine(x,y) Curl_ossl_set_engine(x,y)
 104 #define curlssl_set_engine_default(x) Curl_ossl_set_engine_default(x)
 105 #define curlssl_engines_list(x) Curl_ossl_engines_list(x)
 106 #define curlssl_version Curl_ossl_version
 107 #define curlssl_check_cxn Curl_ossl_check_cxn
 108 #define curlssl_data_pending(x,y) Curl_ossl_data_pending(x,y)
 109 #define curlssl_random(x,y,z) Curl_ossl_random(x,y,z)
 110 #define curlssl_md5sum(a,b,c,d) Curl_ossl_md5sum(a,b,c,d)
 111 #if (OPENSSL_VERSION_NUMBER >= 0x0090800fL) && !defined(OPENSSL_NO_SHA256)
 112 #define curlssl_sha256sum(a,b,c,d) Curl_ossl_sha256sum(a,b,c,d)
 113 #endif
 114 #define curlssl_cert_status_request() Curl_ossl_cert_status_request()
 115
 116 #if defined TIZEN_TV_EXT
 117 #define DEFAULT_CIPHER_SELECTION \
 118 "ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:" \
 119 "DHE-RSA-AES256-SHA:DHE-DSS-AES256-SHA:ECDH-RSA-AES256-SHA:" \
 120 "ECDH-ECDSA-AES256-SHA:AES256-SHA:ECDHE-RSA-AES128-GCM-SHA256:" \
 121 "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:" \
 122 "DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA:" \
 123 "AES128-GCM-SHA256:AES128-SHA256:AES128-SHA:" \
 124 "ECDHE-RSA-DES-CBC3-SHA:ECDHE-ECDSA-DES-CBC3-SHA:EDH-RSA-DES-CBC3-SHA:" \
 125 "EDH-DSS-DES-CBC3-SHA:ECDH-RSA-DES-CBC3-SHA:ECDH-ECDSA-DES-CBC3-SHA:" \
 126 "DES-CBC3-SHA:ECDHE-RSA-RC4-SHA:ECDHE-ECDSA-RC4-SHA"
 127 #else
 128 #define DEFAULT_CIPHER_SELECTION \
 129   "ALL:!EXPORT:!EXPORT40:!EXPORT56:!aNULL:!LOW:!RC4:@STRENGTH"
 130 #endif
 131
 132 #endif /* USE_OPENSSL */
 133 #endif /* HEADER_CURL_SSLUSE_H */