ssl_ctx.h

Go to the documentation of this file.

 
#ifndef SSL_CTX_H
#define SSL_CTX_H
 
#include "he_internal.h"
 
he_return_code_t he_init(void);
 
he_return_code_t he_cleanup(void);
 
he_return_code_t he_ssl_ctx_is_valid_client(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_is_valid_server(he_ssl_ctx_t *ctx);
 
he_ssl_ctx_t *he_ssl_ctx_create(void);
 
void he_ssl_ctx_destroy(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_start(he_ssl_ctx_t *context);
 
he_return_code_t he_ssl_ctx_start_server(he_ssl_ctx_t *context);
 
he_return_code_t he_ssl_ctx_stop(he_ssl_ctx_t *context);
 
he_return_code_t he_ssl_ctx_set_minimum_supported_version(he_ssl_ctx_t *context,
                                                          uint8_t major_version,
                                                          uint8_t minor_version);
 
he_return_code_t he_ssl_ctx_set_maximum_supported_version(he_ssl_ctx_t *context,
                                                          uint8_t major_version,
                                                          uint8_t minor_version);
bool he_ssl_ctx_is_supported_version(he_ssl_ctx_t *context, uint8_t major_version,
                                     uint8_t minor_version);
 
bool he_ssl_ctx_is_latest_version(he_ssl_ctx_t *context, uint8_t major_version,
                                  uint8_t minor_version);
 
// Setters and getters for the configuration
he_return_code_t he_ssl_ctx_set_server_dn(he_ssl_ctx_t *ctx, const char *distinguished_name);
 
const char *he_ssl_ctx_get_server_dn(he_ssl_ctx_t *ctx);
 
bool he_ssl_ctx_is_server_dn_set(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_set_use_chacha20(he_ssl_ctx_t *ctx, bool use);
 
bool he_ssl_ctx_get_use_chacha20(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_set_ca(he_ssl_ctx_t *ctx, uint8_t *cert_buffer, size_t length);
 
bool he_ssl_ctx_is_ca_set(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_set_server_cert_key_files(he_ssl_ctx_t *ctx, const char *server_cert,
                                                      const char *server_key);
 
bool he_ssl_ctx_is_server_cert_key_set(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_set_connection_type(he_ssl_ctx_t *ctx,
                                                he_connection_type_t connection_type);
 
void he_ssl_ctx_set_state_change_cb(he_ssl_ctx_t *ctx, he_state_change_cb_t state_change_cb);
 
bool he_ssl_ctx_is_state_change_cb_set(he_ssl_ctx_t *ctx);
 
void he_ssl_ctx_set_inside_write_cb(he_ssl_ctx_t *ctx, he_inside_write_cb_t inside_write_cb);
 
bool he_ssl_ctx_is_inside_write_cb_set(he_ssl_ctx_t *ctx);
 
void he_ssl_ctx_set_outside_write_cb(he_ssl_ctx_t *ctx, he_outside_write_cb_t outside_write_cb);
 
he_return_code_t he_conn_outside_data_received(he_conn_t *conn, uint8_t *buffer, size_t length);
 
bool he_ssl_ctx_is_outside_write_cb_set(he_ssl_ctx_t *ctx);
 
void he_ssl_ctx_set_network_config_ipv4_cb(he_ssl_ctx_t *ctx,
                                           he_network_config_ipv4_cb_t network_config_cb);
 
bool he_ssl_ctx_is_network_config_ipv4_cb_set(he_ssl_ctx_t *ctx);
 
void he_ssl_ctx_set_server_config_cb(he_ssl_ctx_t *ctx, he_server_config_cb_t server_config_cb);
 
void he_ssl_ctx_set_nudge_time_cb(he_ssl_ctx_t *ctx, he_nudge_time_cb_t nudge_time_cb);
 
bool he_ssl_ctx_is_nudge_time_cb_set(he_ssl_ctx_t *ctx);
 
void he_ssl_ctx_set_event_cb(he_ssl_ctx_t *ctx, he_event_cb_t event_cb);
 
void he_ssl_ctx_set_auth_cb(he_ssl_ctx_t *ctx, he_auth_cb_t auth_cb);
 
void he_ssl_ctx_set_auth_token_cb(he_ssl_ctx_t *ctx, he_auth_token_cb_t auth_token_cb);
 
void he_ssl_ctx_set_auth_buf_cb(he_ssl_ctx_t *ctx, he_auth_buf_cb_t auth_buf_cb);
 
bool he_ssl_ctx_is_auth_cb_set(he_ssl_ctx_t *ctx);
 
void he_ssl_ctx_set_populate_network_config_ipv4_cb(
    he_ssl_ctx_t *ctx, he_populate_network_config_ipv4_cb_t pop_network_cb);
 
void he_ssl_ctx_set_pmtud_state_change_cb(he_ssl_ctx_t *ctx,
                                          he_pmtud_state_change_cb_t pmtud_state_change_cb);
 
void he_ssl_ctx_set_pmtud_time_cb(he_ssl_ctx_t *ctx, he_pmtud_time_cb_t pmtud_time_cb);
 
he_return_code_t he_ssl_ctx_set_disable_roaming(he_ssl_ctx_t *ctx);
 
bool he_ssl_ctx_is_roaming_disabled(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_set_padding_type(he_ssl_ctx_t *ctx, he_padding_type_t padding_type);
 
he_padding_type_t he_ssl_ctx_get_padding_type(he_ssl_ctx_t *ctx);
 
he_return_code_t he_ssl_ctx_set_aggressive_mode(he_ssl_ctx_t *ctx);
 
#ifndef HE_NO_PQC
 
he_return_code_t he_ssl_ctx_set_use_pqc(he_ssl_ctx_t *ctx, bool enabled);
 
#endif  // HE_NO_PQC
 
he_return_code_t he_ssl_ctx_set_max_frag_entries(he_ssl_ctx_t *ctx, size_t max_frag_entries);
 
#endif  // SSL_CTX_H