diff options
Diffstat (limited to 'src/lib/libssl/ssl.h')
| -rw-r--r-- | src/lib/libssl/ssl.h | 131 |
1 files changed, 1 insertions, 130 deletions
diff --git a/src/lib/libssl/ssl.h b/src/lib/libssl/ssl.h index 2c208b098b..2a55cf0efb 100644 --- a/src/lib/libssl/ssl.h +++ b/src/lib/libssl/ssl.h | |||
| @@ -1,4 +1,4 @@ | |||
| 1 | /* $OpenBSD: ssl.h,v 1.209 2021/09/14 23:07:18 inoguchi Exp $ */ | 1 | /* $OpenBSD: ssl.h,v 1.210 2021/10/15 16:48:46 jsing Exp $ */ |
| 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) | 2 | /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com) |
| 3 | * All rights reserved. | 3 | * All rights reserved. |
| 4 | * | 4 | * |
| @@ -357,9 +357,6 @@ extern "C" { | |||
| 357 | * in SSL_CTX. */ | 357 | * in SSL_CTX. */ |
| 358 | typedef struct ssl_st *ssl_crock_st; | 358 | typedef struct ssl_st *ssl_crock_st; |
| 359 | 359 | ||
| 360 | #if defined(LIBRESSL_INTERNAL) | ||
| 361 | typedef struct tls_session_ticket_ext_st TLS_SESSION_TICKET_EXT; | ||
| 362 | #endif | ||
| 363 | typedef struct ssl_method_st SSL_METHOD; | 360 | typedef struct ssl_method_st SSL_METHOD; |
| 364 | typedef struct ssl_cipher_st SSL_CIPHER; | 361 | typedef struct ssl_cipher_st SSL_CIPHER; |
| 365 | typedef struct ssl_session_st SSL_SESSION; | 362 | typedef struct ssl_session_st SSL_SESSION; |
| @@ -537,57 +534,10 @@ typedef int (*GEN_SESSION_CB)(const SSL *ssl, unsigned char *id, | |||
| 537 | typedef struct ssl_comp_st SSL_COMP; | 534 | typedef struct ssl_comp_st SSL_COMP; |
| 538 | 535 | ||
| 539 | #ifdef LIBRESSL_INTERNAL | 536 | #ifdef LIBRESSL_INTERNAL |
| 540 | |||
| 541 | struct ssl_comp_st { | ||
| 542 | int id; | ||
| 543 | const char *name; | ||
| 544 | }; | ||
| 545 | |||
| 546 | DECLARE_STACK_OF(SSL_COMP) | 537 | DECLARE_STACK_OF(SSL_COMP) |
| 547 | struct lhash_st_SSL_SESSION { | 538 | struct lhash_st_SSL_SESSION { |
| 548 | int dummy; | 539 | int dummy; |
| 549 | }; | 540 | }; |
| 550 | |||
| 551 | struct ssl_ctx_internal_st; | ||
| 552 | |||
| 553 | struct ssl_ctx_st { | ||
| 554 | const SSL_METHOD *method; | ||
| 555 | |||
| 556 | STACK_OF(SSL_CIPHER) *cipher_list; | ||
| 557 | |||
| 558 | struct x509_store_st /* X509_STORE */ *cert_store; | ||
| 559 | |||
| 560 | /* If timeout is not 0, it is the default timeout value set | ||
| 561 | * when SSL_new() is called. This has been put in to make | ||
| 562 | * life easier to set things up */ | ||
| 563 | long session_timeout; | ||
| 564 | |||
| 565 | int references; | ||
| 566 | |||
| 567 | /* Default values to use in SSL structures follow (these are copied by SSL_new) */ | ||
| 568 | |||
| 569 | STACK_OF(X509) *extra_certs; | ||
| 570 | |||
| 571 | int verify_mode; | ||
| 572 | unsigned int sid_ctx_length; | ||
| 573 | unsigned char sid_ctx[SSL_MAX_SID_CTX_LENGTH]; | ||
| 574 | |||
| 575 | X509_VERIFY_PARAM *param; | ||
| 576 | |||
| 577 | /* | ||
| 578 | * XXX | ||
| 579 | * default_passwd_cb used by python and openvpn, need to keep it until we | ||
| 580 | * add an accessor | ||
| 581 | */ | ||
| 582 | /* Default password callback. */ | ||
| 583 | pem_password_cb *default_passwd_callback; | ||
| 584 | |||
| 585 | /* Default password callback user data. */ | ||
| 586 | void *default_passwd_callback_userdata; | ||
| 587 | |||
| 588 | struct ssl_ctx_internal_st *internal; | ||
| 589 | }; | ||
| 590 | |||
| 591 | #endif | 541 | #endif |
| 592 | 542 | ||
| 593 | #define SSL_SESS_CACHE_OFF 0x0000 | 543 | #define SSL_SESS_CACHE_OFF 0x0000 |
| @@ -703,85 +653,6 @@ void SSL_set_psk_use_session_callback(SSL *s, SSL_psk_use_session_cb_func cb); | |||
| 703 | #define SSL_MAC_FLAG_READ_MAC_STREAM 1 | 653 | #define SSL_MAC_FLAG_READ_MAC_STREAM 1 |
| 704 | #define SSL_MAC_FLAG_WRITE_MAC_STREAM 2 | 654 | #define SSL_MAC_FLAG_WRITE_MAC_STREAM 2 |
| 705 | 655 | ||
| 706 | #if defined(LIBRESSL_INTERNAL) | ||
| 707 | struct ssl_internal_st; | ||
| 708 | |||
| 709 | struct ssl_st { | ||
| 710 | /* protocol version | ||
| 711 | * (one of SSL2_VERSION, SSL3_VERSION, TLS1_VERSION, DTLS1_VERSION) | ||
| 712 | */ | ||
| 713 | int version; | ||
| 714 | |||
| 715 | const SSL_METHOD *method; /* SSLv3 */ | ||
| 716 | |||
| 717 | /* There are 2 BIO's even though they are normally both the | ||
| 718 | * same. This is so data can be read and written to different | ||
| 719 | * handlers */ | ||
| 720 | |||
| 721 | BIO *rbio; /* used by SSL_read */ | ||
| 722 | BIO *wbio; /* used by SSL_write */ | ||
| 723 | BIO *bbio; /* used during session-id reuse to concatenate | ||
| 724 | * messages */ | ||
| 725 | int server; /* are we the server side? - mostly used by SSL_clear*/ | ||
| 726 | |||
| 727 | struct ssl3_state_st *s3; /* SSLv3 variables */ | ||
| 728 | struct dtls1_state_st *d1; /* DTLSv1 variables */ | ||
| 729 | |||
| 730 | X509_VERIFY_PARAM *param; | ||
| 731 | |||
| 732 | /* crypto */ | ||
| 733 | STACK_OF(SSL_CIPHER) *cipher_list; | ||
| 734 | |||
| 735 | /* This is used to hold the server certificate used */ | ||
| 736 | struct cert_st /* CERT */ *cert; | ||
| 737 | |||
| 738 | /* the session_id_context is used to ensure sessions are only reused | ||
| 739 | * in the appropriate context */ | ||
| 740 | unsigned int sid_ctx_length; | ||
| 741 | unsigned char sid_ctx[SSL_MAX_SID_CTX_LENGTH]; | ||
| 742 | |||
| 743 | /* This can also be in the session once a session is established */ | ||
| 744 | SSL_SESSION *session; | ||
| 745 | |||
| 746 | /* Used in SSL2 and SSL3 */ | ||
| 747 | int verify_mode; /* 0 don't care about verify failure. | ||
| 748 | * 1 fail if verify fails */ | ||
| 749 | int error; /* error bytes to be written */ | ||
| 750 | int error_code; /* actual code */ | ||
| 751 | |||
| 752 | SSL_CTX *ctx; | ||
| 753 | |||
| 754 | long verify_result; | ||
| 755 | |||
| 756 | int references; | ||
| 757 | |||
| 758 | int client_version; /* what was passed, used for | ||
| 759 | * SSLv3/TLS rollback check */ | ||
| 760 | |||
| 761 | unsigned int max_send_fragment; | ||
| 762 | |||
| 763 | char *tlsext_hostname; | ||
| 764 | |||
| 765 | /* certificate status request info */ | ||
| 766 | /* Status type or -1 if no status type */ | ||
| 767 | int tlsext_status_type; | ||
| 768 | |||
| 769 | SSL_CTX * initial_ctx; /* initial ctx, used to store sessions */ | ||
| 770 | #define session_ctx initial_ctx | ||
| 771 | |||
| 772 | /* | ||
| 773 | * XXX really should be internal, but is | ||
| 774 | * touched unnaturally by wpa-supplicant | ||
| 775 | * and freeradius and other perversions | ||
| 776 | */ | ||
| 777 | EVP_CIPHER_CTX *enc_read_ctx; /* cryptographic state */ | ||
| 778 | EVP_MD_CTX *read_hash; /* used for mac generation */ | ||
| 779 | |||
| 780 | struct ssl_internal_st *internal; | ||
| 781 | }; | ||
| 782 | |||
| 783 | #endif | ||
| 784 | |||
| 785 | #ifdef __cplusplus | 656 | #ifdef __cplusplus |
| 786 | } | 657 | } |
| 787 | #endif | 658 | #endif |
