lib/includes/gnutls/gnutls.h.in

   1 /* -*- c -*-
   2  * Copyright (C) 2000-2012 Free Software Foundation, Inc.
   3  *
   4  * Author: Nikos Mavrogiannopoulos
   5  *
   6  * This file is part of GnuTLS.
   7  *
   8  * The GnuTLS is free software; you can redistribute it and/or
   9  * modify it under the terms of the GNU Lesser General Public License
  10  * as published by the Free Software Foundation; either version 3 of
  11  * the License, or (at your option) any later version.
  12  *
  13  * This library is distributed in the hope that it will be useful, but
  14  * WITHOUT ANY WARRANTY; without even the implied warranty of
  15  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
  16  * Lesser General Public License for more details.
  17  *
  18  * You should have received a copy of the GNU Lesser General Public License
  19  * along with this program.  If not, see <http://www.gnu.org/licenses/>
  20  *
  21  */
  22
  23 /* This file contains the types and prototypes for all the
  24  * high level functionality of the gnutls main library.
  25  *
  26  * If the optional C++ binding was built, it is available in
  27  * gnutls/gnutlsxx.h.
  28  *
  29  * The openssl compatibility layer (which is under the GNU GPL
  30  * license) is in gnutls/openssl.h.
  31  *
  32  * The low level cipher functionality is in gnutls/crypto.h.
  33  */
  34
  35
  36 #ifndef GNUTLS_H
  37 #define GNUTLS_H
  38
  39 /* Get size_t. */
  40 #include <stddef.h>
  41 /* Get ssize_t. */
  42 #ifndef HAVE_SSIZE_T
  43 #define HAVE_SSIZE_T
  44 /* *INDENT-OFF* */
  45 @DEFINE_SSIZE_T@
  46 /* *INDENT-ON* */
  47 #endif
  48 /* Get time_t. */
  49 #include <time.h>
  50 #ifdef __cplusplus
  51 extern "C"
  52 {
  53 #endif
  54
  55 #define GNUTLS_VERSION "@VERSION@"
  56
  57 #define GNUTLS_VERSION_MAJOR @MAJOR_VERSION@
  58 #define GNUTLS_VERSION_MINOR @MINOR_VERSION@
  59 #define GNUTLS_VERSION_PATCH @PATCH_VERSION@
  60
  61 #define GNUTLS_VERSION_NUMBER @NUMBER_VERSION@
  62
  63 #define GNUTLS_CIPHER_RIJNDAEL_128_CBC GNUTLS_CIPHER_AES_128_CBC
  64 #define GNUTLS_CIPHER_RIJNDAEL_256_CBC GNUTLS_CIPHER_AES_256_CBC
  65 #define GNUTLS_CIPHER_RIJNDAEL_CBC GNUTLS_CIPHER_AES_128_CBC
  66 #define GNUTLS_CIPHER_ARCFOUR GNUTLS_CIPHER_ARCFOUR_128
  67
  68 /**
  69  * gnutls_cipher_algorithm_t:
  70  * @GNUTLS_CIPHER_UNKNOWN: Unknown algorithm.
  71  * @GNUTLS_CIPHER_NULL: NULL algorithm.
  72  * @GNUTLS_CIPHER_ARCFOUR_128: ARCFOUR stream cipher with 128-bit keys.
  73  * @GNUTLS_CIPHER_3DES_CBC: 3DES in CBC mode.
  74  * @GNUTLS_CIPHER_AES_128_CBC: AES in CBC mode with 128-bit keys.
  75  * @GNUTLS_CIPHER_AES_192_CBC: AES in CBC mode with 192-bit keys.
  76  * @GNUTLS_CIPHER_AES_256_CBC: AES in CBC mode with 256-bit keys.
  77  * @GNUTLS_CIPHER_ARCFOUR_40: ARCFOUR stream cipher with 40-bit keys.
  78  * @GNUTLS_CIPHER_CAMELLIA_128_CBC: Camellia in CBC mode with 128-bit keys.
  79  * @GNUTLS_CIPHER_CAMELLIA_256_CBC: Camellia in CBC mode with 256-bit keys.
  80  * @GNUTLS_CIPHER_RC2_40_CBC: RC2 in CBC mode with 40-bit keys.
  81  * @GNUTLS_CIPHER_DES_CBC: DES in CBC mode (56-bit keys).
  82  * @GNUTLS_CIPHER_AES_128_GCM: AES in GCM mode with 128-bit keys.
  83  * @GNUTLS_CIPHER_AES_256_GCM: AES in GCM mode with 256-bit keys.
  84  * @GNUTLS_CIPHER_IDEA_PGP_CFB: IDEA in CFB mode.
  85  * @GNUTLS_CIPHER_3DES_PGP_CFB: 3DES in CFB mode.
  86  * @GNUTLS_CIPHER_CAST5_PGP_CFB: CAST5 in CFB mode.
  87  * @GNUTLS_CIPHER_BLOWFISH_PGP_CFB: Blowfish in CFB mode.
  88  * @GNUTLS_CIPHER_SAFER_SK128_PGP_CFB: Safer-SK in CFB mode with 128-bit keys.
  89  * @GNUTLS_CIPHER_AES128_PGP_CFB: AES in CFB mode with 128-bit keys.
  90  * @GNUTLS_CIPHER_AES192_PGP_CFB: AES in CFB mode with 192-bit keys.
  91  * @GNUTLS_CIPHER_AES256_PGP_CFB: AES in CFB mode with 256-bit keys.
  92  * @GNUTLS_CIPHER_TWOFISH_PGP_CFB: Twofish in CFB mode.
  93  *
  94  * Enumeration of different symmetric encryption algorithms.
  95  */
  96   typedef enum gnutls_cipher_algorithm
  97   {
  98     GNUTLS_CIPHER_UNKNOWN = 0,
  99     GNUTLS_CIPHER_NULL = 1,
 100     GNUTLS_CIPHER_ARCFOUR_128 = 2,
 101     GNUTLS_CIPHER_3DES_CBC = 3,
 102     GNUTLS_CIPHER_AES_128_CBC = 4,
 103     GNUTLS_CIPHER_AES_256_CBC = 5,
 104     GNUTLS_CIPHER_ARCFOUR_40 = 6,
 105     GNUTLS_CIPHER_CAMELLIA_128_CBC = 7,
 106     GNUTLS_CIPHER_CAMELLIA_256_CBC = 8,
 107     GNUTLS_CIPHER_RC2_40_CBC = 90,
 108     GNUTLS_CIPHER_DES_CBC = 91,
 109     GNUTLS_CIPHER_AES_192_CBC = 92,
 110     GNUTLS_CIPHER_AES_128_GCM = 93,
 111     GNUTLS_CIPHER_AES_256_GCM = 94,
 112
 113     /* used only for PGP internals. Ignored in TLS/SSL
 114      */
 115     GNUTLS_CIPHER_IDEA_PGP_CFB = 200,
 116     GNUTLS_CIPHER_3DES_PGP_CFB = 201,
 117     GNUTLS_CIPHER_CAST5_PGP_CFB = 202,
 118     GNUTLS_CIPHER_BLOWFISH_PGP_CFB = 203,
 119     GNUTLS_CIPHER_SAFER_SK128_PGP_CFB = 204,
 120     GNUTLS_CIPHER_AES128_PGP_CFB = 205,
 121     GNUTLS_CIPHER_AES192_PGP_CFB = 206,
 122     GNUTLS_CIPHER_AES256_PGP_CFB = 207,
 123     GNUTLS_CIPHER_TWOFISH_PGP_CFB = 208
 124   } gnutls_cipher_algorithm_t;
 125
 126 /**
 127  * gnutls_kx_algorithm_t:
 128  * @GNUTLS_KX_UNKNOWN: Unknown key-exchange algorithm.
 129  * @GNUTLS_KX_RSA: RSA key-exchange algorithm.
 130  * @GNUTLS_KX_DHE_DSS: DHE-DSS key-exchange algorithm.
 131  * @GNUTLS_KX_DHE_RSA: DHE-RSA key-exchange algorithm.
 132  * @GNUTLS_KX_ECDHE_RSA: ECDHE-RSA key-exchange algorithm.
 133  * @GNUTLS_KX_ECDHE_ECDSA: ECDHE-ECDSA key-exchange algorithm.
 134  * @GNUTLS_KX_ANON_DH: Anon-DH key-exchange algorithm.
 135  * @GNUTLS_KX_ANON_ECDH: Anon-ECDH key-exchange algorithm.
 136  * @GNUTLS_KX_SRP: SRP key-exchange algorithm.
 137  * @GNUTLS_KX_RSA_EXPORT: RSA-EXPORT key-exchange algorithm.
 138  * @GNUTLS_KX_SRP_RSA: SRP-RSA key-exchange algorithm.
 139  * @GNUTLS_KX_SRP_DSS: SRP-DSS key-exchange algorithm.
 140  * @GNUTLS_KX_PSK: PSK key-exchange algorithm.
 141  * @GNUTLS_KX_DHE_PSK: DHE-PSK key-exchange algorithm.
 142  * @GNUTLS_KX_ECDHE_PSK: ECDHE-PSK key-exchange algorithm.
 143  *
 144  * Enumeration of different key exchange algorithms.
 145  */
 146   typedef enum
 147   {
 148     GNUTLS_KX_UNKNOWN = 0,
 149     GNUTLS_KX_RSA = 1,
 150     GNUTLS_KX_DHE_DSS = 2,
 151     GNUTLS_KX_DHE_RSA = 3,
 152     GNUTLS_KX_ANON_DH = 4,
 153     GNUTLS_KX_SRP = 5,
 154     GNUTLS_KX_RSA_EXPORT = 6,
 155     GNUTLS_KX_SRP_RSA = 7,
 156     GNUTLS_KX_SRP_DSS = 8,
 157     GNUTLS_KX_PSK = 9,
 158     GNUTLS_KX_DHE_PSK = 10,
 159     GNUTLS_KX_ANON_ECDH = 11,
 160     GNUTLS_KX_ECDHE_RSA = 12,
 161     GNUTLS_KX_ECDHE_ECDSA = 13,
 162     GNUTLS_KX_ECDHE_PSK = 14,
 163   } gnutls_kx_algorithm_t;
 164
 165 /**
 166  * gnutls_params_type_t:
 167  * @GNUTLS_PARAMS_RSA_EXPORT: Session RSA-EXPORT parameters.
 168  * @GNUTLS_PARAMS_DH: Session Diffie-Hellman parameters.
 169  * @GNUTLS_PARAMS_ECDH: Session Elliptic-Curve Diffie-Hellman parameters.
 170  *
 171  * Enumeration of different TLS session parameter types.
 172  */
 173   typedef enum
 174   {
 175     GNUTLS_PARAMS_RSA_EXPORT = 1,
 176     GNUTLS_PARAMS_DH = 2,
 177     GNUTLS_PARAMS_ECDH = 3,
 178   } gnutls_params_type_t;
 179
 180 /**
 181  * gnutls_credentials_type_t:
 182  * @GNUTLS_CRD_CERTIFICATE: Certificate credential.
 183  * @GNUTLS_CRD_ANON: Anonymous credential.
 184  * @GNUTLS_CRD_SRP: SRP credential.
 185  * @GNUTLS_CRD_PSK: PSK credential.
 186  * @GNUTLS_CRD_IA: IA credential.
 187  *
 188  * Enumeration of different credential types.
 189  */
 190   typedef enum
 191   {
 192     GNUTLS_CRD_CERTIFICATE = 1,
 193     GNUTLS_CRD_ANON,
 194     GNUTLS_CRD_SRP,
 195     GNUTLS_CRD_PSK,
 196     GNUTLS_CRD_IA
 197   } gnutls_credentials_type_t;
 198
 199 #define GNUTLS_MAC_SHA GNUTLS_MAC_SHA1
 200 #define GNUTLS_DIG_SHA GNUTLS_DIG_SHA1
 201
 202 /**
 203  * gnutls_mac_algorithm_t:
 204  * @GNUTLS_MAC_UNKNOWN: Unknown MAC algorithm.
 205  * @GNUTLS_MAC_NULL: NULL MAC algorithm (empty output).
 206  * @GNUTLS_MAC_MD5: HMAC-MD5 algorithm.
 207  * @GNUTLS_MAC_SHA1: HMAC-SHA-1 algorithm.
 208  * @GNUTLS_MAC_RMD160: HMAC-RMD160 algorithm.
 209  * @GNUTLS_MAC_MD2: HMAC-MD2 algorithm.
 210  * @GNUTLS_MAC_SHA256: HMAC-SHA-256 algorithm.
 211  * @GNUTLS_MAC_SHA384: HMAC-SHA-384 algorithm.
 212  * @GNUTLS_MAC_SHA512: HMAC-SHA-512 algorithm.
 213  * @GNUTLS_MAC_SHA224: HMAC-SHA-224 algorithm.
 214  * @GNUTLS_MAC_AEAD: MAC implicit through AEAD cipher.
 215  *
 216  * Enumeration of different Message Authentication Code (MAC)
 217  * algorithms.
 218  */
 219   typedef enum
 220   {
 221     GNUTLS_MAC_UNKNOWN = 0,
 222     GNUTLS_MAC_NULL = 1,
 223     GNUTLS_MAC_MD5 = 2,
 224     GNUTLS_MAC_SHA1 = 3,
 225     GNUTLS_MAC_RMD160 = 4,
 226     GNUTLS_MAC_MD2 = 5,
 227     GNUTLS_MAC_SHA256 = 6,
 228     GNUTLS_MAC_SHA384 = 7,
 229     GNUTLS_MAC_SHA512 = 8,
 230     GNUTLS_MAC_SHA224 = 9,
 231       /* If you add anything here, make sure you align with
 232          gnutls_digest_algorithm_t. */
 233     GNUTLS_MAC_AEAD = 200 /* indicates that MAC is on the cipher */
 234   } gnutls_mac_algorithm_t;
 235
 236 /**
 237  * gnutls_digest_algorithm_t:
 238  * @GNUTLS_DIG_UNKNOWN: Unknown hash algorithm.
 239  * @GNUTLS_DIG_NULL: NULL hash algorithm (empty output).
 240  * @GNUTLS_DIG_MD5: MD5 algorithm.
 241  * @GNUTLS_DIG_SHA1: SHA-1 algorithm.
 242  * @GNUTLS_DIG_RMD160: RMD160 algorithm.
 243  * @GNUTLS_DIG_MD2: MD2 algorithm.
 244  * @GNUTLS_DIG_SHA256: SHA-256 algorithm.
 245  * @GNUTLS_DIG_SHA384: SHA-384 algorithm.
 246  * @GNUTLS_DIG_SHA512: SHA-512 algorithm.
 247  * @GNUTLS_DIG_SHA224: SHA-224 algorithm.
 248  *
 249  * Enumeration of different digest (hash) algorithms.
 250  */
 251   typedef enum
 252   {
 253     GNUTLS_DIG_UNKNOWN = GNUTLS_MAC_UNKNOWN,
 254     GNUTLS_DIG_NULL = GNUTLS_MAC_NULL,
 255     GNUTLS_DIG_MD5 = GNUTLS_MAC_MD5,
 256     GNUTLS_DIG_SHA1 = GNUTLS_MAC_SHA1,
 257     GNUTLS_DIG_RMD160 = GNUTLS_MAC_RMD160,
 258     GNUTLS_DIG_MD2 = GNUTLS_MAC_MD2,
 259     GNUTLS_DIG_SHA256 = GNUTLS_MAC_SHA256,
 260     GNUTLS_DIG_SHA384 = GNUTLS_MAC_SHA384,
 261     GNUTLS_DIG_SHA512 = GNUTLS_MAC_SHA512,
 262     GNUTLS_DIG_SHA224 = GNUTLS_MAC_SHA224
 263       /* If you add anything here, make sure you align with
 264          gnutls_mac_algorithm_t. */
 265   } gnutls_digest_algorithm_t;
 266
 267   /* exported for other gnutls headers. This is the maximum number of
 268    * algorithms (ciphers, kx or macs).
 269    */
 270 #define GNUTLS_MAX_ALGORITHM_NUM 32
 271
 272 /**
 273  * gnutls_compression_method_t:
 274  * @GNUTLS_COMP_UNKNOWN: Unknown compression method.
 275  * @GNUTLS_COMP_NULL: The NULL compression method (no compression).
 276  * @GNUTLS_COMP_DEFLATE: The DEFLATE compression method from zlib.
 277  * @GNUTLS_COMP_ZLIB: Same as %GNUTLS_COMP_DEFLATE.
 278  *
 279  * Enumeration of different TLS compression methods.
 280  */
 281   typedef enum
 282   {
 283     GNUTLS_COMP_UNKNOWN = 0,
 284     GNUTLS_COMP_NULL = 1,
 285     GNUTLS_COMP_DEFLATE = 2,
 286     GNUTLS_COMP_ZLIB = GNUTLS_COMP_DEFLATE,
 287   } gnutls_compression_method_t;
 288
 289   /*
 290    * Flags for gnutls_init()
 291    *
 292    * @GNUTLS_SERVER: Connection end is a server.
 293    * @GNUTLS_CLIENT: Connection end is a client.
 294    * @GNUTLS_DATAGRAM: Connection is datagram oriented (DTLS).
 295    * @GNUTLS_NONBLOCK: Connection should not block (DTLS).
 296    *
 297    * Enumeration of different TLS connection end types.
 298    */
 299 #define GNUTLS_SERVER 1
 300 #define GNUTLS_CLIENT (1<<1)
 301 #define GNUTLS_DATAGRAM (1<<2)
 302 #define GNUTLS_NONBLOCK (1<<3)
 303
 304 /**
 305  * gnutls_alert_level_t:
 306  * @GNUTLS_AL_WARNING: Alert of warning severity.
 307  * @GNUTLS_AL_FATAL: Alert of fatal severity.
 308  *
 309  * Enumeration of different TLS alert severities.
 310  */
 311   typedef enum
 312   {
 313     GNUTLS_AL_WARNING = 1,
 314     GNUTLS_AL_FATAL
 315   } gnutls_alert_level_t;
 316
 317 /**
 318  * gnutls_alert_description_t:
 319  * @GNUTLS_A_CLOSE_NOTIFY: Close notify.
 320  * @GNUTLS_A_UNEXPECTED_MESSAGE: Unexpected message.
 321  * @GNUTLS_A_BAD_RECORD_MAC: Bad record MAC.
 322  * @GNUTLS_A_DECRYPTION_FAILED: Decryption failed.
 323  * @GNUTLS_A_RECORD_OVERFLOW: Record overflow.
 324  * @GNUTLS_A_DECOMPRESSION_FAILURE: Decompression failed.
 325  * @GNUTLS_A_HANDSHAKE_FAILURE: Handshake failed.
 326  * @GNUTLS_A_SSL3_NO_CERTIFICATE: No certificate.
 327  * @GNUTLS_A_BAD_CERTIFICATE: Certificate is bad.
 328  * @GNUTLS_A_UNSUPPORTED_CERTIFICATE: Certificate is not supported.
 329  * @GNUTLS_A_CERTIFICATE_REVOKED: Certificate was revoked.
 330  * @GNUTLS_A_CERTIFICATE_EXPIRED: Certificate is expired.
 331  * @GNUTLS_A_CERTIFICATE_UNKNOWN: Unknown certificate.
 332  * @GNUTLS_A_ILLEGAL_PARAMETER: Illegal parameter.
 333  * @GNUTLS_A_UNKNOWN_CA: CA is unknown.
 334  * @GNUTLS_A_ACCESS_DENIED: Access was denied.
 335  * @GNUTLS_A_DECODE_ERROR: Decode error.
 336  * @GNUTLS_A_DECRYPT_ERROR: Decrypt error.
 337  * @GNUTLS_A_EXPORT_RESTRICTION: Export restriction.
 338  * @GNUTLS_A_PROTOCOL_VERSION: Error in protocol version.
 339  * @GNUTLS_A_INSUFFICIENT_SECURITY: Insufficient security.
 340  * @GNUTLS_A_USER_CANCELED: User canceled.
 341  * @GNUTLS_A_INTERNAL_ERROR: Internal error.
 342  * @GNUTLS_A_NO_RENEGOTIATION: No renegotiation is allowed.
 343  * @GNUTLS_A_CERTIFICATE_UNOBTAINABLE: Could not retrieve the
 344  *   specified certificate.
 345  * @GNUTLS_A_UNSUPPORTED_EXTENSION: An unsupported extension was
 346  *   sent.
 347  * @GNUTLS_A_UNRECOGNIZED_NAME: The server name sent was not
 348  *   recognized.
 349  * @GNUTLS_A_UNKNOWN_PSK_IDENTITY: The SRP/PSK username is missing
 350  *   or not known.
 351  *
 352  * Enumeration of different TLS alerts.
 353  */
 354   typedef enum
 355   {
 356     GNUTLS_A_CLOSE_NOTIFY,
 357     GNUTLS_A_UNEXPECTED_MESSAGE = 10,
 358     GNUTLS_A_BAD_RECORD_MAC = 20,
 359     GNUTLS_A_DECRYPTION_FAILED,
 360     GNUTLS_A_RECORD_OVERFLOW,
 361     GNUTLS_A_DECOMPRESSION_FAILURE = 30,
 362     GNUTLS_A_HANDSHAKE_FAILURE = 40,
 363     GNUTLS_A_SSL3_NO_CERTIFICATE = 41,
 364     GNUTLS_A_BAD_CERTIFICATE = 42,
 365     GNUTLS_A_UNSUPPORTED_CERTIFICATE,
 366     GNUTLS_A_CERTIFICATE_REVOKED,
 367     GNUTLS_A_CERTIFICATE_EXPIRED,
 368     GNUTLS_A_CERTIFICATE_UNKNOWN,
 369     GNUTLS_A_ILLEGAL_PARAMETER,
 370     GNUTLS_A_UNKNOWN_CA,
 371     GNUTLS_A_ACCESS_DENIED,
 372     GNUTLS_A_DECODE_ERROR = 50,
 373     GNUTLS_A_DECRYPT_ERROR,
 374     GNUTLS_A_EXPORT_RESTRICTION = 60,
 375     GNUTLS_A_PROTOCOL_VERSION = 70,
 376     GNUTLS_A_INSUFFICIENT_SECURITY,
 377     GNUTLS_A_INTERNAL_ERROR = 80,
 378     GNUTLS_A_USER_CANCELED = 90,
 379     GNUTLS_A_NO_RENEGOTIATION = 100,
 380     GNUTLS_A_UNSUPPORTED_EXTENSION = 110,
 381     GNUTLS_A_CERTIFICATE_UNOBTAINABLE = 111,
 382     GNUTLS_A_UNRECOGNIZED_NAME = 112,
 383     GNUTLS_A_UNKNOWN_PSK_IDENTITY = 115,
 384   } gnutls_alert_description_t;
 385
 386 /**
 387  * gnutls_handshake_description_t:
 388  * @GNUTLS_HANDSHAKE_HELLO_REQUEST: Hello request.
 389  * @GNUTLS_HANDSHAKE_HELLO_VERIFY_REQUEST: DTLS Hello verify request.
 390  * @GNUTLS_HANDSHAKE_CLIENT_HELLO: Client hello.
 391  * @GNUTLS_HANDSHAKE_SERVER_HELLO: Server hello.
 392  * @GNUTLS_HANDSHAKE_NEW_SESSION_TICKET: New session ticket.
 393  * @GNUTLS_HANDSHAKE_CERTIFICATE_PKT: Certificate packet.
 394  * @GNUTLS_HANDSHAKE_SERVER_KEY_EXCHANGE: Server key exchange.
 395  * @GNUTLS_HANDSHAKE_CERTIFICATE_REQUEST: Certificate request.
 396  * @GNUTLS_HANDSHAKE_SERVER_HELLO_DONE: Server hello done.
 397  * @GNUTLS_HANDSHAKE_CERTIFICATE_VERIFY: Certificate verify.
 398  * @GNUTLS_HANDSHAKE_CLIENT_KEY_EXCHANGE: Client key exchange.
 399  * @GNUTLS_HANDSHAKE_FINISHED: Finished.
 400  * @GNUTLS_HANDSHAKE_SUPPLEMENTAL: Supplemental.
 401  * @GNUTLS_HANDSHAKE_CHANGE_CIPHER_SPEC: Change Cipher Spec
 402  * @GNUTLS_HANDSHAKE_CLIENT_HELLO_V2: SSLv2 Client Hello.
 403  *
 404  * Enumeration of different TLS handshake packets.
 405  */
 406   typedef enum
 407   {
 408     GNUTLS_HANDSHAKE_HELLO_REQUEST = 0,
 409     GNUTLS_HANDSHAKE_CLIENT_HELLO = 1,
 410     GNUTLS_HANDSHAKE_SERVER_HELLO = 2,
 411     GNUTLS_HANDSHAKE_HELLO_VERIFY_REQUEST = 3,
 412     GNUTLS_HANDSHAKE_NEW_SESSION_TICKET = 4,
 413     GNUTLS_HANDSHAKE_CERTIFICATE_PKT = 11,
 414     GNUTLS_HANDSHAKE_SERVER_KEY_EXCHANGE = 12,
 415     GNUTLS_HANDSHAKE_CERTIFICATE_REQUEST = 13,
 416     GNUTLS_HANDSHAKE_SERVER_HELLO_DONE = 14,
 417     GNUTLS_HANDSHAKE_CERTIFICATE_VERIFY = 15,
 418     GNUTLS_HANDSHAKE_CLIENT_KEY_EXCHANGE = 16,
 419     GNUTLS_HANDSHAKE_FINISHED = 20,
 420     GNUTLS_HANDSHAKE_SUPPLEMENTAL = 23,
 421     GNUTLS_HANDSHAKE_CHANGE_CIPHER_SPEC = 254,
 422     GNUTLS_HANDSHAKE_CLIENT_HELLO_V2 = 1024,
 423   } gnutls_handshake_description_t;
 424
 425 /**
 426  * gnutls_certificate_status_t:
 427  * @GNUTLS_CERT_INVALID: The certificate is not signed by one of the
 428  *   known authorities or the signature is invalid.
 429  * @GNUTLS_CERT_REVOKED: Certificate is revoked by its authority.  In X.509 this will be
 430  *   set only if CRLs are checked.
 431  * @GNUTLS_CERT_SIGNER_NOT_FOUND: The certificate's issuer is not known.
 432  *   This is the case if the issuer is not included in the trusted certificate list.
 433  * @GNUTLS_CERT_SIGNER_NOT_CA: The certificate's signer was not a CA. This
 434  *   may happen if this was a version 1 certificate, which is common with
 435  *   some CAs, or a version 3 certificate without the basic constrains extension.
 436  * @GNUTLS_CERT_INSECURE_ALGORITHM:  The certificate was signed using an insecure
 437  *   algorithm such as MD2 or MD5. These algorithms have been broken and
 438  *   should not be trusted.
 439  * @GNUTLS_CERT_NOT_ACTIVATED: The certificate is not yet activated.
 440  * @GNUTLS_CERT_EXPIRED: The certificate has expired.
 441  *
 442  * Enumeration of certificate status codes.  Note that the status
 443  * bits have different meanings in OpenPGP keys and X.509
 444  * certificate verification.
 445  */
 446   typedef enum
 447   {
 448     GNUTLS_CERT_INVALID = 2,
 449     GNUTLS_CERT_REVOKED = 32,
 450     GNUTLS_CERT_SIGNER_NOT_FOUND = 64,
 451     GNUTLS_CERT_SIGNER_NOT_CA = 128,
 452     GNUTLS_CERT_INSECURE_ALGORITHM = 256,
 453     GNUTLS_CERT_NOT_ACTIVATED = 512,
 454     GNUTLS_CERT_EXPIRED = 1024
 455   } gnutls_certificate_status_t;
 456
 457 /**
 458  * gnutls_certificate_request_t:
 459  * @GNUTLS_CERT_IGNORE: Ignore certificate.
 460  * @GNUTLS_CERT_REQUEST: Request certificate.
 461  * @GNUTLS_CERT_REQUIRE: Require certificate.
 462  *
 463  * Enumeration of certificate request types.
 464  */
 465   typedef enum
 466   {
 467     GNUTLS_CERT_IGNORE = 0,
 468     GNUTLS_CERT_REQUEST = 1,
 469     GNUTLS_CERT_REQUIRE = 2
 470   } gnutls_certificate_request_t;
 471
 472 /**
 473  * gnutls_openpgp_crt_status_t:
 474  * @GNUTLS_OPENPGP_CERT: Send entire certificate.
 475  * @GNUTLS_OPENPGP_CERT_FINGERPRINT: Send only certificate fingerprint.
 476  *
 477  * Enumeration of ways to send OpenPGP certificate.
 478  */
 479   typedef enum
 480   {
 481     GNUTLS_OPENPGP_CERT = 0,
 482     GNUTLS_OPENPGP_CERT_FINGERPRINT = 1
 483   } gnutls_openpgp_crt_status_t;
 484
 485 /**
 486  * gnutls_close_request_t:
 487  * @GNUTLS_SHUT_RDWR: Disallow further receives/sends.
 488  * @GNUTLS_SHUT_WR: Disallow further sends.
 489  *
 490  * Enumeration of how TLS session should be terminated.  See gnutls_bye().
 491  */
 492   typedef enum
 493   {
 494     GNUTLS_SHUT_RDWR = 0,
 495     GNUTLS_SHUT_WR = 1
 496   } gnutls_close_request_t;
 497
 498 /**
 499  * gnutls_protocol_t:
 500  * @GNUTLS_SSL3: SSL version 3.0.
 501  * @GNUTLS_TLS1_0: TLS version 1.0.
 502  * @GNUTLS_TLS1: Same as %GNUTLS_TLS1_0.
 503  * @GNUTLS_TLS1_1: TLS version 1.1.
 504  * @GNUTLS_TLS1_2: TLS version 1.2.
 505  * @GNUTLS_DTLS1_0: DTLS version 1.0.
 506  * @GNUTLS_DTLS0_9: DTLS version 0.9 (Cisco AnyConnect / OpenSSL 0.9.8e).
 507  * @GNUTLS_VERSION_MAX: Maps to the highest supported TLS version.
 508  * @GNUTLS_VERSION_UNKNOWN: Unknown SSL/TLS version.
 509  *
 510  * Enumeration of different SSL/TLS protocol versions.
 511  */
 512   typedef enum
 513   {
 514     GNUTLS_SSL3 = 1,
 515     GNUTLS_TLS1_0 = 2,
 516     GNUTLS_TLS1 = GNUTLS_TLS1_0,
 517     GNUTLS_TLS1_1 = 3,
 518     GNUTLS_TLS1_2 = 4,
 519     GNUTLS_DTLS1_0 = 5,
 520     GNUTLS_DTLS0_9 = 6,
 521     GNUTLS_VERSION_MAX = GNUTLS_DTLS0_9,
 522     GNUTLS_VERSION_UNKNOWN = 0xff
 523   } gnutls_protocol_t;
 524
 525 /**
 526  * gnutls_certificate_type_t:
 527  * @GNUTLS_CRT_UNKNOWN: Unknown certificate type.
 528  * @GNUTLS_CRT_X509: X.509 Certificate.
 529  * @GNUTLS_CRT_OPENPGP: OpenPGP certificate.
 530  * @GNUTLS_CRT_RAW: Raw public key (SubjectPublicKey)
 531  *
 532  * Enumeration of different certificate types.
 533  */
 534   typedef enum
 535   {
 536     GNUTLS_CRT_UNKNOWN = 0,
 537     GNUTLS_CRT_X509 = 1,
 538     GNUTLS_CRT_OPENPGP = 2,
 539     GNUTLS_CRT_RAW = 3
 540   } gnutls_certificate_type_t;
 541
 542 /**
 543  * gnutls_x509_crt_fmt_t:
 544  * @GNUTLS_X509_FMT_DER: X.509 certificate in DER format (binary).
 545  * @GNUTLS_X509_FMT_PEM: X.509 certificate in PEM format (text).
 546  *
 547  * Enumeration of different certificate encoding formats.
 548  */
 549   typedef enum
 550   {
 551     GNUTLS_X509_FMT_DER = 0,
 552     GNUTLS_X509_FMT_PEM = 1
 553   } gnutls_x509_crt_fmt_t;
 554
 555 /**
 556  * gnutls_certificate_print_formats_t:
 557  * @GNUTLS_CRT_PRINT_FULL: Full information about certificate.
 558  * @GNUTLS_CRT_PRINT_COMPACT: Information about certificate name in one line, plus identification of the public key.
 559  * @GNUTLS_CRT_PRINT_ONELINE: Information about certificate in one line.
 560  * @GNUTLS_CRT_PRINT_UNSIGNED_FULL: All info for an unsigned certificate.
 561  *
 562  * Enumeration of different certificate printing variants.
 563  */
 564   typedef enum gnutls_certificate_print_formats
 565   {
 566     GNUTLS_CRT_PRINT_FULL = 0,
 567     GNUTLS_CRT_PRINT_ONELINE = 1,
 568     GNUTLS_CRT_PRINT_UNSIGNED_FULL = 2,
 569     GNUTLS_CRT_PRINT_COMPACT = 3
 570   } gnutls_certificate_print_formats_t;
 571
 572 #define GNUTLS_PK_ECC GNUTLS_PK_EC
 573 /**
 574  * gnutls_pk_algorithm_t:
 575  * @GNUTLS_PK_UNKNOWN: Unknown public-key algorithm.
 576  * @GNUTLS_PK_RSA: RSA public-key algorithm.
 577  * @GNUTLS_PK_DSA: DSA public-key algorithm.
 578  * @GNUTLS_PK_DH: Diffie-Hellman algorithm. Used to generate parameters.
 579  * @GNUTLS_PK_EC: Elliptic curve algorithm. Used to generate parameters.
 580  *
 581  * Enumeration of different public-key algorithms.
 582  */
 583   typedef enum
 584   {
 585     GNUTLS_PK_UNKNOWN = 0,
 586     GNUTLS_PK_RSA = 1,
 587     GNUTLS_PK_DSA = 2,
 588     GNUTLS_PK_DH = 3,
 589     GNUTLS_PK_EC = 4,
 590   } gnutls_pk_algorithm_t;
 591
 592   const char *gnutls_pk_algorithm_get_name (gnutls_pk_algorithm_t algorithm);
 593
 594 /**
 595  * gnutls_sign_algorithm_t:
 596  * @GNUTLS_SIGN_UNKNOWN: Unknown signature algorithm.
 597  * @GNUTLS_SIGN_RSA_SHA1: Digital signature algorithm RSA with SHA-1
 598  * @GNUTLS_SIGN_RSA_SHA: Same as %GNUTLS_SIGN_RSA_SHA1.
 599  * @GNUTLS_SIGN_DSA_SHA1: Digital signature algorithm DSA with SHA-1
 600  * @GNUTLS_SIGN_DSA_SHA224: Digital signature algorithm DSA with SHA-224
 601  * @GNUTLS_SIGN_DSA_SHA256: Digital signature algorithm DSA with SHA-256
 602  * @GNUTLS_SIGN_DSA_SHA: Same as %GNUTLS_SIGN_DSA_SHA1.
 603  * @GNUTLS_SIGN_RSA_MD5: Digital signature algorithm RSA with MD5.
 604  * @GNUTLS_SIGN_RSA_MD2: Digital signature algorithm RSA with MD2.
 605  * @GNUTLS_SIGN_RSA_RMD160: Digital signature algorithm RSA with RMD-160.
 606  * @GNUTLS_SIGN_RSA_SHA256: Digital signature algorithm RSA with SHA-256.
 607  * @GNUTLS_SIGN_RSA_SHA384: Digital signature algorithm RSA with SHA-384.
 608  * @GNUTLS_SIGN_RSA_SHA512: Digital signature algorithm RSA with SHA-512.
 609  * @GNUTLS_SIGN_RSA_SHA224: Digital signature algorithm RSA with SHA-224.
 610  * @GNUTLS_SIGN_ECDSA_SHA1: ECDSA with SHA1.
 611  * @GNUTLS_SIGN_ECDSA_SHA256: Digital signature algorithm ECDSA with SHA-256.
 612  * @GNUTLS_SIGN_ECDSA_SHA384: Digital signature algorithm ECDSA with SHA-384.
 613  * @GNUTLS_SIGN_ECDSA_SHA512: Digital signature algorithm ECDSA with SHA-512.
 614  * @GNUTLS_SIGN_ECDSA_SHA224: Digital signature algorithm ECDSA with SHA-224.
 615  *
 616  * Enumeration of different digital signature algorithms.
 617  */
 618   typedef enum
 619   {
 620     GNUTLS_SIGN_UNKNOWN = 0,
 621     GNUTLS_SIGN_RSA_SHA1 = 1,
 622     GNUTLS_SIGN_RSA_SHA = GNUTLS_SIGN_RSA_SHA1,
 623     GNUTLS_SIGN_DSA_SHA1 = 2,
 624     GNUTLS_SIGN_DSA_SHA = GNUTLS_SIGN_DSA_SHA1,
 625     GNUTLS_SIGN_RSA_MD5 = 3,
 626     GNUTLS_SIGN_RSA_MD2 = 4,
 627     GNUTLS_SIGN_RSA_RMD160 = 5,
 628     GNUTLS_SIGN_RSA_SHA256 = 6,
 629     GNUTLS_SIGN_RSA_SHA384 = 7,
 630     GNUTLS_SIGN_RSA_SHA512 = 8,
 631     GNUTLS_SIGN_RSA_SHA224 = 9,
 632     GNUTLS_SIGN_DSA_SHA224 = 10,
 633     GNUTLS_SIGN_DSA_SHA256 = 11,
 634     GNUTLS_SIGN_ECDSA_SHA1 = 12,
 635     GNUTLS_SIGN_ECDSA_SHA224 = 13,
 636     GNUTLS_SIGN_ECDSA_SHA256 = 14,
 637     GNUTLS_SIGN_ECDSA_SHA384 = 15,
 638     GNUTLS_SIGN_ECDSA_SHA512 = 16,
 639   } gnutls_sign_algorithm_t;
 640
 641 /**
 642  * gnutls_ecc_curve_t:
 643  * @GNUTLS_ECC_CURVE_INVALID: Cannot be known
 644  * @GNUTLS_ECC_CURVE_SECP192R1: the SECP192R1 curve
 645  * @GNUTLS_ECC_CURVE_SECP224R1: the SECP224R1 curve
 646  * @GNUTLS_ECC_CURVE_SECP256R1: the SECP256R1 curve
 647  * @GNUTLS_ECC_CURVE_SECP384R1: the SECP384R1 curve
 648  * @GNUTLS_ECC_CURVE_SECP521R1: the SECP521R1 curve
 649  *
 650  * Enumeration of ECC curves.
 651  */
 652 typedef enum
 653 {
 654   GNUTLS_ECC_CURVE_INVALID=0,
 655   GNUTLS_ECC_CURVE_SECP224R1,
 656   GNUTLS_ECC_CURVE_SECP256R1,
 657   GNUTLS_ECC_CURVE_SECP384R1,
 658   GNUTLS_ECC_CURVE_SECP521R1,
 659   GNUTLS_ECC_CURVE_SECP192R1,
 660 } gnutls_ecc_curve_t;
 661
 662 #define GNUTLS_SEC_PARAM_WEAK GNUTLS_SEC_PARAM_LOW
 663
 664 /**
 665  * gnutls_sec_param_t:
 666  * @GNUTLS_SEC_PARAM_UNKNOWN: Cannot be known
 667  * @GNUTLS_SEC_PARAM_LOW: low security level
 668  * @GNUTLS_SEC_PARAM_LEGACY: 96 bits of security
 669  * @GNUTLS_SEC_PARAM_NORMAL: 112 bits of security
 670  * @GNUTLS_SEC_PARAM_HIGH: 128 bits of security
 671  * @GNUTLS_SEC_PARAM_ULTRA: 192 bits of security
 672  *
 673  * Enumeration of security parameters for passive attacks.
 674  */
 675   typedef enum
 676   {
 677     GNUTLS_SEC_PARAM_UNKNOWN,
 678     GNUTLS_SEC_PARAM_LOW = 1,
 679     GNUTLS_SEC_PARAM_LEGACY = 2,
 680     GNUTLS_SEC_PARAM_NORMAL = 3,
 681     GNUTLS_SEC_PARAM_HIGH = 4,
 682     GNUTLS_SEC_PARAM_ULTRA = 5,
 683   } gnutls_sec_param_t;
 684
 685 /**
 686  * gnutls_channel_binding_t:
 687  * @GNUTLS_CB_TLS_UNIQUE: "tls-unique" (RFC 5929) channel binding
 688  *
 689  * Enumeration of support channel binding types.
 690  */
 691   typedef enum
 692   {
 693     GNUTLS_CB_TLS_UNIQUE
 694   } gnutls_channel_binding_t;
 695
 696 /* If you want to change this, then also change the define in
 697  * gnutls_int.h, and recompile.
 698  */
 699   typedef void *gnutls_transport_ptr_t;
 700
 701   struct gnutls_session_int;
 702   typedef struct gnutls_session_int *gnutls_session_t;
 703
 704   struct gnutls_dh_params_int;
 705   typedef struct gnutls_dh_params_int *gnutls_dh_params_t;
 706
 707   struct gnutls_ecdh_params_int;
 708   typedef struct gnutls_ecdh_params_int *gnutls_ecdh_params_t;
 709
 710   /* XXX ugly. */
 711   struct gnutls_x509_privkey_int;
 712   typedef struct gnutls_x509_privkey_int *gnutls_rsa_params_t;
 713
 714   struct gnutls_priority_st;
 715   typedef struct gnutls_priority_st *gnutls_priority_t;
 716
 717   typedef struct
 718   {
 719     unsigned char *data;
 720     unsigned int size;
 721   } gnutls_datum_t;
 722
 723
 724   typedef struct gnutls_params_st
 725   {
 726     gnutls_params_type_t type;
 727     union params
 728     {
 729       gnutls_dh_params_t dh;
 730       gnutls_ecdh_params_t ecdh;
 731       gnutls_rsa_params_t rsa_export;
 732     } params;
 733     int deinit;
 734   } gnutls_params_st;
 735
 736   typedef int gnutls_params_function (gnutls_session_t, gnutls_params_type_t,
 737                                       gnutls_params_st *);
 738
 739 /* internal functions */
 740
 741   int gnutls_init (gnutls_session_t * session,
 742                    unsigned int flags);
 743   void gnutls_deinit (gnutls_session_t session);
 744 #define _gnutls_deinit(x) gnutls_deinit(x)
 745
 746   int gnutls_bye (gnutls_session_t session, gnutls_close_request_t how);
 747
 748   int gnutls_handshake (gnutls_session_t session);
 749   int gnutls_rehandshake (gnutls_session_t session);
 750
 751   gnutls_alert_description_t gnutls_alert_get (gnutls_session_t session);
 752   int gnutls_alert_send (gnutls_session_t session,
 753                          gnutls_alert_level_t level,
 754                          gnutls_alert_description_t desc);
 755   int gnutls_alert_send_appropriate (gnutls_session_t session, int err);
 756   const char *gnutls_alert_get_name (gnutls_alert_description_t alert);
 757   const char * gnutls_alert_get_strname (gnutls_alert_description_t alert);
 758
 759   gnutls_sec_param_t gnutls_pk_bits_to_sec_param (gnutls_pk_algorithm_t algo,
 760                                                   unsigned int bits);
 761   const char *gnutls_sec_param_get_name (gnutls_sec_param_t param);
 762   unsigned int gnutls_sec_param_to_pk_bits (gnutls_pk_algorithm_t algo,
 763                                             gnutls_sec_param_t param);
 764
 765 /* Elliptic curves */
 766 const char * gnutls_ecc_curve_get_name (gnutls_ecc_curve_t curve);
 767 int gnutls_ecc_curve_get_size (gnutls_ecc_curve_t curve);
 768 gnutls_ecc_curve_t gnutls_ecc_curve_get(gnutls_session_t session);
 769
 770 /* get information on the current session */
 771   gnutls_cipher_algorithm_t gnutls_cipher_get (gnutls_session_t session);
 772   gnutls_kx_algorithm_t gnutls_kx_get (gnutls_session_t session);
 773   gnutls_mac_algorithm_t gnutls_mac_get (gnutls_session_t session);
 774     gnutls_compression_method_t
 775     gnutls_compression_get (gnutls_session_t session);
 776     gnutls_certificate_type_t
 777     gnutls_certificate_type_get (gnutls_session_t session);
 778   int gnutls_sign_algorithm_get_requested (gnutls_session_t session,
 779                                            size_t indx,
 780                                            gnutls_sign_algorithm_t * algo);
 781
 782   size_t gnutls_cipher_get_key_size (gnutls_cipher_algorithm_t algorithm);
 783   size_t gnutls_mac_get_key_size (gnutls_mac_algorithm_t algorithm);
 784
 785 /* the name of the specified algorithms */
 786   const char *gnutls_cipher_get_name (gnutls_cipher_algorithm_t algorithm);
 787   const char *gnutls_mac_get_name (gnutls_mac_algorithm_t algorithm);
 788   const char *gnutls_compression_get_name (gnutls_compression_method_t
 789                                            algorithm);
 790   const char *gnutls_kx_get_name (gnutls_kx_algorithm_t algorithm);
 791   const char *gnutls_certificate_type_get_name (gnutls_certificate_type_t
 792                                                 type);
 793   const char *gnutls_pk_get_name (gnutls_pk_algorithm_t algorithm);
 794   const char *gnutls_sign_get_name (gnutls_sign_algorithm_t algorithm);
 795   gnutls_sign_algorithm_t gnutls_pk_to_sign (gnutls_pk_algorithm_t pk,
 796                                              gnutls_digest_algorithm_t d);
 797
 798 #define gnutls_sign_algorithm_get_name gnutls_sign_get_name
 799
 800   gnutls_mac_algorithm_t gnutls_mac_get_id (const char *name);
 801   gnutls_compression_method_t gnutls_compression_get_id (const char *name);
 802   gnutls_cipher_algorithm_t gnutls_cipher_get_id (const char *name);
 803   gnutls_kx_algorithm_t gnutls_kx_get_id (const char *name);
 804   gnutls_protocol_t gnutls_protocol_get_id (const char *name);
 805   gnutls_certificate_type_t gnutls_certificate_type_get_id (const char *name);
 806   gnutls_pk_algorithm_t gnutls_pk_get_id (const char *name);
 807   gnutls_sign_algorithm_t gnutls_sign_get_id (const char *name);
 808
 809   /* list supported algorithms */
 810   const gnutls_ecc_curve_t * gnutls_ecc_curve_list (void);
 811   const gnutls_cipher_algorithm_t *gnutls_cipher_list (void);
 812   const gnutls_mac_algorithm_t *gnutls_mac_list (void);
 813   const gnutls_compression_method_t *gnutls_compression_list (void);
 814   const gnutls_protocol_t *gnutls_protocol_list (void);
 815   const gnutls_certificate_type_t *gnutls_certificate_type_list (void);
 816   const gnutls_kx_algorithm_t *gnutls_kx_list (void);
 817   const gnutls_pk_algorithm_t *gnutls_pk_list (void);
 818   const gnutls_sign_algorithm_t *gnutls_sign_list (void);
 819   const char *gnutls_cipher_suite_info (size_t idx,
 820                                         unsigned char *cs_id,
 821                                         gnutls_kx_algorithm_t * kx,
 822                                         gnutls_cipher_algorithm_t * cipher,
 823                                         gnutls_mac_algorithm_t * mac,
 824                                         gnutls_protocol_t * min_version);
 825
 826   /* error functions */
 827   int gnutls_error_is_fatal (int error);
 828   int gnutls_error_to_alert (int err, int *level);
 829
 830   void gnutls_perror (int error);
 831   const char *gnutls_strerror (int error);
 832   const char *gnutls_strerror_name (int error);
 833
 834 /* Semi-internal functions.
 835  */
 836   void gnutls_handshake_set_private_extensions (gnutls_session_t session,
 837                                                 int allow);
 838     gnutls_handshake_description_t
 839     gnutls_handshake_get_last_out (gnutls_session_t session);
 840     gnutls_handshake_description_t
 841     gnutls_handshake_get_last_in (gnutls_session_t session);
 842
 843 /* Record layer functions.
 844  */
 845   ssize_t gnutls_record_send (gnutls_session_t session, const void *data,
 846                               size_t data_size);
 847   ssize_t gnutls_record_recv (gnutls_session_t session, void *data,
 848                               size_t data_size);
 849 #define gnutls_read gnutls_record_recv
 850 #define gnutls_write gnutls_record_send
 851   ssize_t gnutls_record_recv_seq (gnutls_session_t session, void *data, size_t data_size,
 852     unsigned char *seq);
 853
 854   void gnutls_session_enable_compatibility_mode (gnutls_session_t session);
 855
 856   void gnutls_record_disable_padding (gnutls_session_t session);
 857
 858   int gnutls_record_get_direction (gnutls_session_t session);
 859
 860   size_t gnutls_record_get_max_size (gnutls_session_t session);
 861   ssize_t gnutls_record_set_max_size (gnutls_session_t session, size_t size);
 862
 863   size_t gnutls_record_check_pending (gnutls_session_t session);
 864
 865   int gnutls_prf (gnutls_session_t session,
 866                   size_t label_size, const char *label,
 867                   int server_random_first,
 868                   size_t extra_size, const char *extra,
 869                   size_t outsize, char *out);
 870
 871   int gnutls_prf_raw (gnutls_session_t session,
 872                       size_t label_size, const char *label,
 873                       size_t seed_size, const char *seed,
 874                       size_t outsize, char *out);
 875
 876 /**
 877  * gnutls_server_name_type_t:
 878  * @GNUTLS_NAME_DNS: Domain Name System name type.
 879  *
 880  * Enumeration of different server name types.
 881  */
 882   typedef enum
 883   {
 884     GNUTLS_NAME_DNS = 1
 885   } gnutls_server_name_type_t;
 886
 887   int gnutls_server_name_set (gnutls_session_t session,
 888                               gnutls_server_name_type_t type,
 889                               const void *name, size_t name_length);
 890
 891   int gnutls_server_name_get (gnutls_session_t session,
 892                               void *data, size_t * data_length,
 893                               unsigned int *type, unsigned int indx);
 894
 895   /* Safe renegotiation */
 896   int gnutls_safe_renegotiation_status (gnutls_session_t session);
 897
 898 /**
 899  * gnutls_supplemental_data_format_type_t:
 900  * @GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA: Supplemental user mapping data.
 901  *
 902  * Enumeration of different supplemental data types (RFC 4680).
 903  */
 904   typedef enum
 905   {
 906     GNUTLS_SUPPLEMENTAL_USER_MAPPING_DATA = 0
 907   } gnutls_supplemental_data_format_type_t;
 908
 909   const char
 910     *gnutls_supplemental_get_name (gnutls_supplemental_data_format_type_t
 911                                    type);
 912
 913   /* SessionTicket, RFC 5077. */
 914   int gnutls_session_ticket_key_generate (gnutls_datum_t * key);
 915   int gnutls_session_ticket_enable_client (gnutls_session_t session);
 916   int gnutls_session_ticket_enable_server (gnutls_session_t session,
 917                                            const gnutls_datum_t * key);
 918
 919   int gnutls_key_generate (gnutls_datum_t * key, unsigned int key_size);
 920
 921 /* if you just want some defaults, use the following.
 922  */
 923   int gnutls_priority_init (gnutls_priority_t * priority_cache,
 924                             const char *priorities, const char **err_pos);
 925   void gnutls_priority_deinit (gnutls_priority_t priority_cache);
 926   int gnutls_priority_get_cipher_suite_index (gnutls_priority_t pcache, unsigned int idx, unsigned int *sidx);
 927
 928   int gnutls_priority_set (gnutls_session_t session,
 929                            gnutls_priority_t priority);
 930   int gnutls_priority_set_direct (gnutls_session_t session,
 931                                   const char *priorities,
 932                                   const char **err_pos);
 933
 934   int gnutls_priority_certificate_type_list (gnutls_priority_t pcache, const unsigned int** list);
 935   int gnutls_priority_sign_list (gnutls_priority_t pcache, const unsigned int** list);
 936   int gnutls_priority_protocol_list (gnutls_priority_t pcache, const unsigned int** list);
 937   int gnutls_priority_compression_list (gnutls_priority_t pcache, const unsigned int** list);
 938   int gnutls_priority_ecc_curve_list (gnutls_priority_t pcache, const unsigned int** list);
 939
 940   /* for compatibility
 941    */
 942   int gnutls_set_default_priority (gnutls_session_t session);
 943
 944 /* Returns the name of a cipher suite */
 945   const char *gnutls_cipher_suite_get_name (gnutls_kx_algorithm_t
 946                                             kx_algorithm,
 947                                             gnutls_cipher_algorithm_t
 948                                             cipher_algorithm,
 949                                             gnutls_mac_algorithm_t
 950                                             mac_algorithm);
 951
 952 /* get the currently used protocol version */
 953   gnutls_protocol_t gnutls_protocol_get_version (gnutls_session_t session);
 954
 955   const char *gnutls_protocol_get_name (gnutls_protocol_t version);
 956
 957
 958 /* get/set session
 959  */
 960   int gnutls_session_set_data (gnutls_session_t session,
 961                                const void *session_data,
 962                                size_t session_data_size);
 963   int gnutls_session_get_data (gnutls_session_t session, void *session_data,
 964                                size_t * session_data_size);
 965   int gnutls_session_get_data2 (gnutls_session_t session,
 966                                 gnutls_datum_t * data);
 967   void gnutls_session_get_random (gnutls_session_t session, gnutls_datum_t* client,
 968                                   gnutls_datum_t* server);
 969
 970   int gnutls_session_set_premaster (gnutls_session_t session, unsigned int entity,
 971                            gnutls_protocol_t version,
 972                            gnutls_kx_algorithm_t kx,
 973                            gnutls_cipher_algorithm_t cipher,
 974                            gnutls_mac_algorithm_t mac,
 975                            gnutls_compression_method_t comp,
 976                            const gnutls_datum_t* master,
 977                            const gnutls_datum_t * session_id);
 978
 979 /* returns the session ID */
 980 #define GNUTLS_MAX_SESSION_ID 32
 981   int gnutls_session_get_id (gnutls_session_t session, void *session_id,
 982                              size_t * session_id_size);
 983
 984
 985   int gnutls_session_channel_binding (gnutls_session_t session,
 986                                       gnutls_channel_binding_t cbtype,
 987                                       gnutls_datum_t * cb);
 988
 989 /* checks if this session is a resumed one
 990  */
 991   int gnutls_session_is_resumed (gnutls_session_t session);
 992   int gnutls_session_resumption_requested (gnutls_session_t session);
 993
 994   typedef int (*gnutls_db_store_func) (void *, gnutls_datum_t key,
 995                                        gnutls_datum_t data);
 996   typedef int (*gnutls_db_remove_func) (void *, gnutls_datum_t key);
 997   typedef gnutls_datum_t (*gnutls_db_retr_func) (void *, gnutls_datum_t key);
 998
 999   void gnutls_db_set_cache_expiration (gnutls_session_t session, int seconds);
1000
1001   void gnutls_db_remove_session (gnutls_session_t session);
1002   void gnutls_db_set_retrieve_function (gnutls_session_t session,
1003                                         gnutls_db_retr_func retr_func);
1004   void gnutls_db_set_remove_function (gnutls_session_t session,
1005                                       gnutls_db_remove_func rem_func);
1006   void gnutls_db_set_store_function (gnutls_session_t session,
1007                                      gnutls_db_store_func store_func);
1008   void gnutls_db_set_ptr (gnutls_session_t session, void *ptr);
1009   void *gnutls_db_get_ptr (gnutls_session_t session);
1010   int gnutls_db_check_entry (gnutls_session_t session,
1011                              gnutls_datum_t session_entry);
1012
1013   typedef int (*gnutls_handshake_post_client_hello_func) (gnutls_session_t);
1014   void
1015     gnutls_handshake_set_post_client_hello_function (gnutls_session_t session,
1016                                                      gnutls_handshake_post_client_hello_func
1017                                                      func);
1018
1019   void gnutls_handshake_set_max_packet_length (gnutls_session_t session,
1020                                                size_t max);
1021
1022 /* returns libgnutls version (call it with a NULL argument)
1023  */
1024   const char *gnutls_check_version (const char *req_version);
1025
1026 /* Functions for setting/clearing credentials
1027  */
1028   void gnutls_credentials_clear (gnutls_session_t session);
1029
1030 /* cred is a structure defined by the kx algorithm
1031  */
1032   int gnutls_credentials_set (gnutls_session_t session,
1033                               gnutls_credentials_type_t type, void *cred);
1034 #define gnutls_cred_set gnutls_credentials_set
1035
1036 /* x.509 types */
1037
1038   struct gnutls_x509_privkey_int;
1039   typedef struct gnutls_x509_privkey_int *gnutls_x509_privkey_t;
1040
1041   struct gnutls_x509_crl_int;
1042   typedef struct gnutls_x509_crl_int *gnutls_x509_crl_t;
1043
1044   struct gnutls_x509_crt_int;
1045   typedef struct gnutls_x509_crt_int *gnutls_x509_crt_t;
1046
1047   struct gnutls_x509_crq_int;
1048   typedef struct gnutls_x509_crq_int *gnutls_x509_crq_t;
1049
1050   struct gnutls_openpgp_keyring_int;
1051   typedef struct gnutls_openpgp_keyring_int *gnutls_openpgp_keyring_t;
1052
1053
1054 /* Credential structures - used in gnutls_credentials_set(); */
1055
1056   struct gnutls_certificate_credentials_st;
1057   typedef struct gnutls_certificate_credentials_st
1058     *gnutls_certificate_credentials_t;
1059   typedef gnutls_certificate_credentials_t
1060     gnutls_certificate_server_credentials;
1061   typedef gnutls_certificate_credentials_t
1062     gnutls_certificate_client_credentials;
1063
1064   typedef struct gnutls_anon_server_credentials_st
1065     *gnutls_anon_server_credentials_t;
1066   typedef struct gnutls_anon_client_credentials_st
1067     *gnutls_anon_client_credentials_t;
1068
1069   void gnutls_anon_free_server_credentials (gnutls_anon_server_credentials_t
1070                                             sc);
1071   int
1072     gnutls_anon_allocate_server_credentials (gnutls_anon_server_credentials_t
1073                                              * sc);
1074
1075   void gnutls_anon_set_server_dh_params (gnutls_anon_server_credentials_t res,
1076                                          gnutls_dh_params_t dh_params);
1077
1078   void
1079     gnutls_anon_set_server_params_function (gnutls_anon_server_credentials_t
1080                                             res,
1081                                             gnutls_params_function * func);
1082
1083   void
1084     gnutls_anon_free_client_credentials (gnutls_anon_client_credentials_t sc);
1085   int
1086     gnutls_anon_allocate_client_credentials (gnutls_anon_client_credentials_t
1087                                              * sc);
1088
1089 /* CERTFILE is an x509 certificate in PEM form.
1090  * KEYFILE is a pkcs-1 private key in PEM form (for RSA keys).
1091  */
1092   void
1093     gnutls_certificate_free_credentials (gnutls_certificate_credentials_t sc);
1094   int
1095     gnutls_certificate_allocate_credentials (gnutls_certificate_credentials_t
1096                                              * res);
1097
1098   int
1099     gnutls_certificate_get_issuer (gnutls_certificate_credentials_t sc,
1100     gnutls_x509_crt_t cert, gnutls_x509_crt_t* issuer, unsigned int flags);
1101
1102   void gnutls_certificate_free_keys (gnutls_certificate_credentials_t sc);
1103   void gnutls_certificate_free_cas (gnutls_certificate_credentials_t sc);
1104   void gnutls_certificate_free_ca_names (gnutls_certificate_credentials_t sc);
1105   void gnutls_certificate_free_crls (gnutls_certificate_credentials_t sc);
1106
1107   void gnutls_certificate_set_dh_params (gnutls_certificate_credentials_t res,
1108                                          gnutls_dh_params_t dh_params);
1109   void gnutls_certificate_set_verify_flags (gnutls_certificate_credentials_t
1110                                             res, unsigned int flags);
1111   void gnutls_certificate_set_verify_limits (gnutls_certificate_credentials_t
1112                                              res, unsigned int max_bits,
1113                                              unsigned int max_depth);
1114
1115   int
1116     gnutls_certificate_set_x509_system_trust (gnutls_certificate_credentials_t cred);
1117
1118   int
1119     gnutls_certificate_set_x509_trust_file (gnutls_certificate_credentials_t
1120                                             cred, const char *cafile,
1121                                             gnutls_x509_crt_fmt_t type);
1122   int gnutls_certificate_set_x509_trust_mem (gnutls_certificate_credentials_t
1123                                              res, const gnutls_datum_t * ca,
1124                                              gnutls_x509_crt_fmt_t type);
1125
1126   int
1127     gnutls_certificate_set_x509_crl_file (gnutls_certificate_credentials_t
1128                                           res, const char *crlfile,
1129                                           gnutls_x509_crt_fmt_t type);
1130   int gnutls_certificate_set_x509_crl_mem (gnutls_certificate_credentials_t
1131                                            res, const gnutls_datum_t * CRL,
1132                                            gnutls_x509_crt_fmt_t type);
1133
1134   int
1135     gnutls_certificate_set_x509_key_file (gnutls_certificate_credentials_t
1136                                           res, const char *certfile,
1137                                           const char *keyfile,
1138                                           gnutls_x509_crt_fmt_t type);
1139   int gnutls_certificate_set_x509_key_mem (gnutls_certificate_credentials_t
1140                                            res, const gnutls_datum_t * cert,
1141                                            const gnutls_datum_t * key,
1142                                            gnutls_x509_crt_fmt_t type);
1143
1144   void gnutls_certificate_send_x509_rdn_sequence (gnutls_session_t session,
1145                                                   int status);
1146
1147   int gnutls_certificate_set_x509_simple_pkcs12_file (gnutls_certificate_credentials_t res, const char *pkcs12file,
1148      gnutls_x509_crt_fmt_t type, const char *password);
1149   int gnutls_certificate_set_x509_simple_pkcs12_mem (gnutls_certificate_credentials_t res, const gnutls_datum_t * p12blob,
1150      gnutls_x509_crt_fmt_t type, const char *password);
1151
1152 /* New functions to allow setting already parsed X.509 stuff.
1153  */
1154
1155   int gnutls_certificate_set_x509_key (gnutls_certificate_credentials_t res,
1156                                        gnutls_x509_crt_t * cert_list,
1157                                        int cert_list_size,
1158                                        gnutls_x509_privkey_t key);
1159   int gnutls_certificate_set_x509_trust (gnutls_certificate_credentials_t res,
1160                                          gnutls_x509_crt_t * ca_list,
1161                                          int ca_list_size);
1162   int gnutls_certificate_set_x509_crl (gnutls_certificate_credentials_t res,
1163                                        gnutls_x509_crl_t * crl_list,
1164                                        int crl_list_size);
1165
1166 /* global state functions
1167  */
1168   int gnutls_global_init (void);
1169   void gnutls_global_deinit (void);
1170
1171   /**
1172    * gnutls_time_func:
1173    * @t: where to store time.
1174    *
1175    * Function prototype for time()-like function.  Set with
1176    * gnutls_global_set_time_function().
1177    *
1178    * Returns: Number of seconds since the epoch, or (time_t)-1 on errors.
1179    */
1180   typedef time_t (*gnutls_time_func) (time_t *t);
1181
1182   typedef int (*mutex_init_func) (void **mutex);
1183   typedef int (*mutex_lock_func) (void **mutex);
1184   typedef int (*mutex_unlock_func) (void **mutex);
1185   typedef int (*mutex_deinit_func) (void **mutex);
1186
1187   void gnutls_global_set_mutex (mutex_init_func init, mutex_deinit_func deinit,
1188                                 mutex_lock_func lock, mutex_unlock_func unlock);
1189
1190   typedef void *(*gnutls_alloc_function) (size_t);
1191   typedef void *(*gnutls_calloc_function) (size_t, size_t);
1192   typedef int (*gnutls_is_secure_function) (const void *);
1193   typedef void (*gnutls_free_function) (void *);
1194   typedef void *(*gnutls_realloc_function) (void *, size_t);
1195
1196   void
1197     gnutls_global_set_mem_functions (gnutls_alloc_function alloc_func,
1198                                      gnutls_alloc_function secure_alloc_func,
1199                                      gnutls_is_secure_function is_secure_func,
1200                                      gnutls_realloc_function realloc_func,
1201                                      gnutls_free_function free_func);
1202
1203   void gnutls_global_set_time_function (gnutls_time_func time_func);
1204
1205 /* For use in callbacks */
1206   extern gnutls_alloc_function gnutls_malloc;
1207   extern gnutls_alloc_function gnutls_secure_malloc;
1208   extern gnutls_realloc_function gnutls_realloc;
1209   extern gnutls_calloc_function gnutls_calloc;
1210   extern gnutls_free_function gnutls_free;
1211
1212   extern char *(*gnutls_strdup) (const char *);
1213
1214   typedef void (*gnutls_log_func) (int, const char *);
1215   typedef void (*gnutls_audit_log_func) (gnutls_session_t, const char *);
1216   void gnutls_global_set_log_function (gnutls_log_func log_func);
1217   void gnutls_global_set_audit_log_function (gnutls_audit_log_func log_func);
1218   void gnutls_global_set_log_level (int level);
1219
1220 /* Diffie-Hellman parameter handling.
1221  */
1222   int gnutls_dh_params_init (gnutls_dh_params_t * dh_params);
1223   void gnutls_dh_params_deinit (gnutls_dh_params_t dh_params);
1224   int gnutls_dh_params_import_raw (gnutls_dh_params_t dh_params,
1225                                    const gnutls_datum_t * prime,
1226                                    const gnutls_datum_t * generator);
1227   int gnutls_dh_params_import_pkcs3 (gnutls_dh_params_t params,
1228                                      const gnutls_datum_t * pkcs3_params,
1229                                      gnutls_x509_crt_fmt_t format);
1230   int gnutls_dh_params_generate2 (gnutls_dh_params_t params,
1231                                   unsigned int bits);
1232   int gnutls_dh_params_export_pkcs3 (gnutls_dh_params_t params,
1233                                      gnutls_x509_crt_fmt_t format,
1234                                      unsigned char *params_data,
1235                                      size_t * params_data_size);
1236   int gnutls_dh_params_export_raw (gnutls_dh_params_t params,
1237                                    gnutls_datum_t * prime,
1238                                    gnutls_datum_t * generator,
1239                                    unsigned int *bits);
1240   int gnutls_dh_params_cpy (gnutls_dh_params_t dst, gnutls_dh_params_t src);
1241
1242
1243
1244 /* Session stuff
1245  */
1246   typedef struct
1247   {
1248     void *iov_base;             /* Starting address */
1249     size_t iov_len;             /* Number of bytes to transfer */
1250   } giovec_t;
1251
1252   typedef ssize_t (*gnutls_pull_func) (gnutls_transport_ptr_t, void *,
1253                                        size_t);
1254   typedef ssize_t (*gnutls_push_func) (gnutls_transport_ptr_t, const void *,
1255                                        size_t);
1256
1257   typedef int (*gnutls_pull_timeout_func) (gnutls_transport_ptr_t, unsigned int ms);
1258
1259   typedef ssize_t (*gnutls_vec_push_func) (gnutls_transport_ptr_t,
1260                                            const giovec_t * iov, int iovcnt);
1261
1262   typedef int (*gnutls_errno_func) (gnutls_transport_ptr_t);
1263
1264   void gnutls_transport_set_ptr (gnutls_session_t session,
1265                                  gnutls_transport_ptr_t ptr);
1266   void gnutls_transport_set_ptr2 (gnutls_session_t session,
1267                                   gnutls_transport_ptr_t recv_ptr,
1268                                   gnutls_transport_ptr_t send_ptr);
1269
1270   gnutls_transport_ptr_t gnutls_transport_get_ptr (gnutls_session_t session);
1271   void gnutls_transport_get_ptr2 (gnutls_session_t session,
1272                                   gnutls_transport_ptr_t * recv_ptr,
1273                                   gnutls_transport_ptr_t * send_ptr);
1274
1275   void gnutls_transport_set_vec_push_function (gnutls_session_t session,
1276                                             gnutls_vec_push_func vec_func);
1277   void gnutls_transport_set_push_function (gnutls_session_t session,
1278                                            gnutls_push_func push_func);
1279   void gnutls_transport_set_pull_function (gnutls_session_t session,
1280                                            gnutls_pull_func pull_func);
1281
1282   void gnutls_transport_set_pull_timeout_function (gnutls_session_t session,
1283                                             gnutls_pull_timeout_func func);
1284
1285   void gnutls_transport_set_errno_function (gnutls_session_t session,
1286                                             gnutls_errno_func errno_func);
1287
1288   void gnutls_transport_set_errno (gnutls_session_t session, int err);
1289
1290 /* session specific
1291  */
1292   void gnutls_session_set_ptr (gnutls_session_t session, void *ptr);
1293   void *gnutls_session_get_ptr (gnutls_session_t session);
1294
1295   void gnutls_openpgp_send_cert (gnutls_session_t session,
1296                                  gnutls_openpgp_crt_status_t status);
1297
1298 /* This function returns the hash of the given data.
1299  */
1300   int gnutls_fingerprint (gnutls_digest_algorithm_t algo,
1301                           const gnutls_datum_t * data, void *result,
1302                           size_t * result_size);
1303
1304   /**
1305    * gnutls_random_art_t:
1306    * @GNUTLS_RANDOM_ART_OPENSSH: OpenSSH-style random art.
1307    *
1308    * Enumeration of different random art types.
1309    */
1310   typedef enum gnutls_random_art
1311   {
1312     GNUTLS_RANDOM_ART_OPENSSH=1,
1313   } gnutls_random_art_t;
1314
1315   int gnutls_random_art (gnutls_random_art_t type,
1316                          const char* key_type, unsigned int key_size,
1317                          void * fpr, size_t fpr_size,
1318                          gnutls_datum_t* art);
1319
1320 /* SRP
1321  */
1322
1323   typedef struct gnutls_srp_server_credentials_st
1324     *gnutls_srp_server_credentials_t;
1325   typedef struct gnutls_srp_client_credentials_st
1326     *gnutls_srp_client_credentials_t;
1327
1328   void
1329     gnutls_srp_free_client_credentials (gnutls_srp_client_credentials_t sc);
1330   int
1331     gnutls_srp_allocate_client_credentials (gnutls_srp_client_credentials_t *
1332                                             sc);
1333   int gnutls_srp_set_client_credentials (gnutls_srp_client_credentials_t res,
1334                                          const char *username,
1335                                          const char *password);
1336
1337   void
1338     gnutls_srp_free_server_credentials (gnutls_srp_server_credentials_t sc);
1339   int
1340     gnutls_srp_allocate_server_credentials (gnutls_srp_server_credentials_t *
1341                                             sc);
1342   int gnutls_srp_set_server_credentials_file (gnutls_srp_server_credentials_t
1343                                               res, const char *password_file,
1344                                               const char *password_conf_file);
1345
1346   const char *gnutls_srp_server_get_username (gnutls_session_t session);
1347
1348   extern void gnutls_srp_set_prime_bits (gnutls_session_t session,
1349                                          unsigned int bits);
1350
1351   int gnutls_srp_verifier (const char *username,
1352                            const char *password,
1353                            const gnutls_datum_t * salt,
1354                            const gnutls_datum_t * generator,
1355                            const gnutls_datum_t * prime,
1356                            gnutls_datum_t * res);
1357
1358 /* The static parameters defined in draft-ietf-tls-srp-05
1359  * Those should be used as input to gnutls_srp_verifier().
1360  */
1361   extern const gnutls_datum_t gnutls_srp_4096_group_prime;
1362   extern const gnutls_datum_t gnutls_srp_4096_group_generator;
1363
1364   extern const gnutls_datum_t gnutls_srp_3072_group_prime;
1365   extern const gnutls_datum_t gnutls_srp_3072_group_generator;
1366
1367   extern const gnutls_datum_t gnutls_srp_2048_group_prime;
1368   extern const gnutls_datum_t gnutls_srp_2048_group_generator;
1369
1370   extern const gnutls_datum_t gnutls_srp_1536_group_prime;
1371   extern const gnutls_datum_t gnutls_srp_1536_group_generator;
1372
1373   extern const gnutls_datum_t gnutls_srp_1024_group_prime;
1374   extern const gnutls_datum_t gnutls_srp_1024_group_generator;
1375
1376   typedef int gnutls_srp_server_credentials_function (gnutls_session_t,
1377                                                       const char *username,
1378                                                       gnutls_datum_t * salt,
1379                                                       gnutls_datum_t *
1380                                                       verifier,
1381                                                       gnutls_datum_t *
1382                                                       generator,
1383                                                       gnutls_datum_t * prime);
1384   void
1385     gnutls_srp_set_server_credentials_function (
1386      gnutls_srp_server_credentials_t cred,
1387      gnutls_srp_server_credentials_function * func);
1388
1389   typedef int gnutls_srp_client_credentials_function (gnutls_session_t,
1390                                                       char **, char **);
1391   void
1392     gnutls_srp_set_client_credentials_function (
1393      gnutls_srp_client_credentials_t cred,
1394      gnutls_srp_client_credentials_function * func);
1395
1396   int gnutls_srp_base64_encode (const gnutls_datum_t * data, char *result,
1397                                 size_t * result_size);
1398   int gnutls_srp_base64_encode_alloc (const gnutls_datum_t * data,
1399                                       gnutls_datum_t * result);
1400
1401   int gnutls_srp_base64_decode (const gnutls_datum_t * b64_data, char *result,
1402                                 size_t * result_size);
1403   int gnutls_srp_base64_decode_alloc (const gnutls_datum_t * b64_data,
1404                                       gnutls_datum_t * result);
1405
1406 /* PSK stuff */
1407   typedef struct gnutls_psk_server_credentials_st
1408     *gnutls_psk_server_credentials_t;
1409   typedef struct gnutls_psk_client_credentials_st
1410     *gnutls_psk_client_credentials_t;
1411
1412 /**
1413  * gnutls_psk_key_flags:
1414  * @GNUTLS_PSK_KEY_RAW: PSK-key in raw format.
1415  * @GNUTLS_PSK_KEY_HEX: PSK-key in hex format.
1416  *
1417  * Enumeration of different PSK key flags.
1418  */
1419   typedef enum gnutls_psk_key_flags
1420   {
1421     GNUTLS_PSK_KEY_RAW = 0,
1422     GNUTLS_PSK_KEY_HEX
1423   } gnutls_psk_key_flags;
1424
1425   void
1426     gnutls_psk_free_client_credentials (gnutls_psk_client_credentials_t sc);
1427   int
1428     gnutls_psk_allocate_client_credentials (gnutls_psk_client_credentials_t *
1429                                             sc);
1430   int gnutls_psk_set_client_credentials (gnutls_psk_client_credentials_t res,
1431                                          const char *username,
1432                                          const gnutls_datum_t * key,
1433                                          gnutls_psk_key_flags flags);
1434
1435   void
1436     gnutls_psk_free_server_credentials (gnutls_psk_server_credentials_t sc);
1437   int
1438     gnutls_psk_allocate_server_credentials (gnutls_psk_server_credentials_t *
1439                                             sc);
1440   int gnutls_psk_set_server_credentials_file (gnutls_psk_server_credentials_t
1441                                               res, const char *password_file);
1442
1443   int
1444     gnutls_psk_set_server_credentials_hint (gnutls_psk_server_credentials_t
1445                                             res, const char *hint);
1446
1447   const char *gnutls_psk_server_get_username (gnutls_session_t session);
1448   const char *gnutls_psk_client_get_hint (gnutls_session_t session);
1449
1450   typedef int gnutls_psk_server_credentials_function (gnutls_session_t,
1451                                                       const char *username,
1452                                                       gnutls_datum_t * key);
1453   void
1454     gnutls_psk_set_server_credentials_function (
1455      gnutls_psk_server_credentials_t cred,
1456      gnutls_psk_server_credentials_function * func);
1457
1458   typedef int gnutls_psk_client_credentials_function (gnutls_session_t,
1459                                                       char **username,
1460                                                       gnutls_datum_t * key);
1461   void
1462     gnutls_psk_set_client_credentials_function (
1463      gnutls_psk_client_credentials_t cred,
1464      gnutls_psk_client_credentials_function * func);
1465
1466   int gnutls_hex_encode (const gnutls_datum_t * data, char *result,
1467                          size_t * result_size);
1468   int gnutls_hex_decode (const gnutls_datum_t * hex_data, void *result,
1469                          size_t * result_size);
1470
1471   void
1472     gnutls_psk_set_server_dh_params (gnutls_psk_server_credentials_t res,
1473                                      gnutls_dh_params_t dh_params);
1474
1475   void
1476     gnutls_psk_set_server_params_function (gnutls_psk_server_credentials_t
1477                                            res,
1478                                            gnutls_params_function * func);
1479
1480 /**
1481  * gnutls_x509_subject_alt_name_t:
1482  * @GNUTLS_SAN_DNSNAME: DNS-name SAN.
1483  * @GNUTLS_SAN_RFC822NAME: E-mail address SAN.
1484  * @GNUTLS_SAN_URI: URI SAN.
1485  * @GNUTLS_SAN_IPADDRESS: IP address SAN.
1486  * @GNUTLS_SAN_OTHERNAME: OtherName SAN.
1487  * @GNUTLS_SAN_DN: DN SAN.
1488  * @GNUTLS_SAN_OTHERNAME_XMPP: Virtual SAN, used by
1489  *   gnutls_x509_crt_get_subject_alt_othername_oid.
1490  *
1491  * Enumeration of different subject alternative names types.
1492  */
1493   typedef enum gnutls_x509_subject_alt_name_t
1494   {
1495     GNUTLS_SAN_DNSNAME = 1,
1496     GNUTLS_SAN_RFC822NAME = 2,
1497     GNUTLS_SAN_URI = 3,
1498     GNUTLS_SAN_IPADDRESS = 4,
1499     GNUTLS_SAN_OTHERNAME = 5,
1500     GNUTLS_SAN_DN = 6,
1501     /* The following are "virtual" subject alternative name types, in
1502        that they are represented by an otherName value and an OID.
1503        Used by gnutls_x509_crt_get_subject_alt_othername_oid.  */
1504     GNUTLS_SAN_OTHERNAME_XMPP = 1000
1505   } gnutls_x509_subject_alt_name_t;
1506
1507   struct gnutls_openpgp_crt_int;
1508   typedef struct gnutls_openpgp_crt_int *gnutls_openpgp_crt_t;
1509
1510   struct gnutls_openpgp_privkey_int;
1511   typedef struct gnutls_openpgp_privkey_int *gnutls_openpgp_privkey_t;
1512
1513   struct gnutls_pkcs11_privkey_st;
1514   typedef struct gnutls_pkcs11_privkey_st *gnutls_pkcs11_privkey_t;
1515
1516 /**
1517  * gnutls_privkey_type_t:
1518  * @GNUTLS_PRIVKEY_X509: X.509 private key, #gnutls_x509_privkey_t.
1519  * @GNUTLS_PRIVKEY_OPENPGP: OpenPGP private key, #gnutls_openpgp_privkey_t.
1520  * @GNUTLS_PRIVKEY_PKCS11: PKCS11 private key, #gnutls_pkcs11_privkey_t.
1521  * @GNUTLS_PRIVKEY_EXT: External private key, operating using callbacks.
1522  *
1523  * Enumeration of different private key types.
1524  */
1525   typedef enum
1526     {
1527       GNUTLS_PRIVKEY_X509,
1528       GNUTLS_PRIVKEY_OPENPGP,
1529       GNUTLS_PRIVKEY_PKCS11,
1530       GNUTLS_PRIVKEY_EXT
1531     } gnutls_privkey_type_t;
1532
1533   typedef struct gnutls_retr2_st
1534   {
1535     gnutls_certificate_type_t cert_type;
1536     gnutls_privkey_type_t key_type;
1537
1538     union
1539     {
1540       gnutls_x509_crt_t *x509;
1541       gnutls_openpgp_crt_t pgp;
1542     } cert;
1543     unsigned int ncerts;        /* one for pgp keys */
1544
1545     union
1546     {
1547       gnutls_x509_privkey_t x509;
1548       gnutls_openpgp_privkey_t pgp;
1549       gnutls_pkcs11_privkey_t pkcs11;
1550     } key;
1551
1552     unsigned int deinit_all;    /* if non zero all keys will be deinited */
1553   } gnutls_retr2_st;
1554
1555
1556   /* Functions that allow auth_info_t structures handling
1557    */
1558
1559   gnutls_credentials_type_t gnutls_auth_get_type (gnutls_session_t session);
1560     gnutls_credentials_type_t
1561     gnutls_auth_server_get_type (gnutls_session_t session);
1562     gnutls_credentials_type_t
1563     gnutls_auth_client_get_type (gnutls_session_t session);
1564
1565   /* DH */
1566
1567   void gnutls_dh_set_prime_bits (gnutls_session_t session, unsigned int bits);
1568   int gnutls_dh_get_secret_bits (gnutls_session_t session);
1569   int gnutls_dh_get_peers_public_bits (gnutls_session_t session);
1570   int gnutls_dh_get_prime_bits (gnutls_session_t session);
1571
1572   int gnutls_dh_get_group (gnutls_session_t session, gnutls_datum_t * raw_gen,
1573                            gnutls_datum_t * raw_prime);
1574   int gnutls_dh_get_pubkey (gnutls_session_t session,
1575                             gnutls_datum_t * raw_key);
1576
1577   /* X509PKI */
1578
1579
1580   /* These are set on the credentials structure.
1581    */
1582
1583   /* use gnutls_certificate_set_retrieve_function2() in abstract.h
1584    * instead. It's much more efficient.
1585    */
1586
1587   typedef int gnutls_certificate_retrieve_function (gnutls_session_t,
1588                                                     const
1589                                                     gnutls_datum_t *
1590                                                     req_ca_rdn,
1591                                                     int nreqs,
1592                                                     const
1593                                                     gnutls_pk_algorithm_t
1594                                                     * pk_algos,
1595                                                     int
1596                                                     pk_algos_length,
1597                                                     gnutls_retr2_st *);
1598
1599
1600   void gnutls_certificate_set_retrieve_function (
1601      gnutls_certificate_credentials_t cred,
1602      gnutls_certificate_retrieve_function * func);
1603
1604   typedef int gnutls_certificate_verify_function (gnutls_session_t);
1605   void
1606     gnutls_certificate_set_verify_function (gnutls_certificate_credentials_t
1607                                             cred,
1608                                             gnutls_certificate_verify_function
1609                                             * func);
1610
1611   void
1612     gnutls_certificate_server_set_request (gnutls_session_t session,
1613                                            gnutls_certificate_request_t req);
1614
1615   /* get data from the session
1616    */
1617   const gnutls_datum_t *gnutls_certificate_get_peers (gnutls_session_t
1618                                                       session,
1619                                                       unsigned int
1620                                                       *list_size);
1621   const gnutls_datum_t *gnutls_certificate_get_ours (gnutls_session_t
1622                                                      session);
1623
1624   time_t gnutls_certificate_activation_time_peers (gnutls_session_t session);
1625   time_t gnutls_certificate_expiration_time_peers (gnutls_session_t session);
1626
1627   int gnutls_certificate_client_get_request_status (gnutls_session_t session);
1628   int gnutls_certificate_verify_peers2 (gnutls_session_t session,
1629                                         unsigned int *status);
1630
1631   int gnutls_pem_base64_encode (const char *msg, const gnutls_datum_t * data,
1632                                 char *result, size_t * result_size);
1633   int gnutls_pem_base64_decode (const char *header,
1634                                 const gnutls_datum_t * b64_data,
1635                                 unsigned char *result, size_t * result_size);
1636
1637   int gnutls_pem_base64_encode_alloc (const char *msg,
1638                                       const gnutls_datum_t * data,
1639                                       gnutls_datum_t * result);
1640   int gnutls_pem_base64_decode_alloc (const char *header,
1641                                       const gnutls_datum_t * b64_data,
1642                                       gnutls_datum_t * result);
1643
1644   /* key_usage will be an OR of the following values:
1645    */
1646
1647   /* when the key is to be used for signing: */
1648 #define GNUTLS_KEY_DIGITAL_SIGNATURE    128
1649 #define GNUTLS_KEY_NON_REPUDIATION      64
1650   /* when the key is to be used for encryption: */
1651 #define GNUTLS_KEY_KEY_ENCIPHERMENT     32
1652 #define GNUTLS_KEY_DATA_ENCIPHERMENT    16
1653 #define GNUTLS_KEY_KEY_AGREEMENT        8
1654 #define GNUTLS_KEY_KEY_CERT_SIGN        4
1655 #define GNUTLS_KEY_CRL_SIGN             2
1656 #define GNUTLS_KEY_ENCIPHER_ONLY        1
1657 #define GNUTLS_KEY_DECIPHER_ONLY        32768
1658
1659   void
1660     gnutls_certificate_set_params_function (gnutls_certificate_credentials_t
1661                                             res,
1662                                             gnutls_params_function * func);
1663   void gnutls_anon_set_params_function (gnutls_anon_server_credentials_t res,
1664                                         gnutls_params_function * func);
1665   void gnutls_psk_set_params_function (gnutls_psk_server_credentials_t res,
1666                                        gnutls_params_function * func);
1667
1668   int gnutls_hex2bin (const char *hex_data, size_t hex_size,
1669                       void *bin_data, size_t * bin_size);
1670
1671   /* Trust on first use (or ssh like) functions */
1672
1673   /* stores the provided information to a database
1674    */
1675   typedef int (*gnutls_tdb_store_func) (const char* db_name,
1676                                              const char* host,
1677                                              const char* service,
1678                                              time_t expiration,
1679                                              const gnutls_datum_t* pubkey);
1680
1681   typedef int (*gnutls_tdb_store_commitment_func) (const char* db_name,
1682                                              const char* host,
1683                                              const char* service,
1684                                              time_t expiration,
1685                                              gnutls_digest_algorithm_t hash_algo,
1686                                              const gnutls_datum_t* hash);
1687
1688   /* searches for the provided host/service pair that match the
1689    * provided public key in the database. */
1690   typedef int (*gnutls_tdb_verify_func) (const char* db_name,
1691                                             const char* host,
1692                                             const char* service,
1693                                             const gnutls_datum_t *pubkey);
1694
1695
1696   struct gnutls_tdb_int;
1697   typedef struct gnutls_tdb_int *gnutls_tdb_t;
1698
1699   int gnutls_tdb_init (gnutls_tdb_t *tdb);
1700   void gnutls_tdb_set_store_func (gnutls_tdb_t tdb,
1701                                   gnutls_tdb_store_func store);
1702   void gnutls_tdb_set_store_commitment_func (gnutls_tdb_t tdb,
1703                                      gnutls_tdb_store_commitment_func cstore);
1704   void gnutls_tdb_set_verify_func (gnutls_tdb_t tdb,
1705                                    gnutls_tdb_verify_func verify);
1706   void gnutls_tdb_deinit (gnutls_tdb_t tdb);
1707
1708   int gnutls_verify_stored_pubkey (const char* db_name,
1709                                    gnutls_tdb_t tdb,
1710                                    const char* host,
1711                                    const char* service,
1712                                    gnutls_certificate_type_t cert_type,
1713                                    const gnutls_datum_t * cert,
1714                                    unsigned int flags);
1715
1716   int gnutls_store_commitment (const char* db_name,
1717                                gnutls_tdb_t tdb,
1718                                const char* host,
1719                                const char* service,
1720                                gnutls_digest_algorithm_t hash_algo,
1721                                const gnutls_datum_t* hash,
1722                                time_t expiration,
1723                                unsigned int flags);
1724
1725   int gnutls_store_pubkey (const char* db_name,
1726                            gnutls_tdb_t tdb,
1727                            const char* host,
1728                            const char* service,
1729                            gnutls_certificate_type_t cert_type,
1730                            const gnutls_datum_t * cert,
1731                            time_t expiration,
1732                            unsigned int flags);
1733
1734
1735   /* Gnutls error codes. The mapping to a TLS alert is also shown in
1736    * comments.
1737    */
1738
1739 #define GNUTLS_E_SUCCESS 0
1740 #define GNUTLS_E_UNKNOWN_COMPRESSION_ALGORITHM -3
1741 #define GNUTLS_E_UNKNOWN_CIPHER_TYPE -6
1742 #define GNUTLS_E_LARGE_PACKET -7
1743 #define GNUTLS_E_UNSUPPORTED_VERSION_PACKET -8  /* GNUTLS_A_PROTOCOL_VERSION */
1744 #define GNUTLS_E_UNEXPECTED_PACKET_LENGTH -9    /* GNUTLS_A_RECORD_OVERFLOW */
1745 #define GNUTLS_E_INVALID_SESSION -10
1746 #define GNUTLS_E_FATAL_ALERT_RECEIVED -12
1747 #define GNUTLS_E_UNEXPECTED_PACKET -15  /* GNUTLS_A_UNEXPECTED_MESSAGE */
1748 #define GNUTLS_E_WARNING_ALERT_RECEIVED -16
1749 #define GNUTLS_E_ERROR_IN_FINISHED_PACKET -18
1750 #define GNUTLS_E_UNEXPECTED_HANDSHAKE_PACKET -19
1751 #define GNUTLS_E_UNKNOWN_CIPHER_SUITE -21       /* GNUTLS_A_HANDSHAKE_FAILURE */
1752 #define GNUTLS_E_UNWANTED_ALGORITHM -22
1753 #define GNUTLS_E_MPI_SCAN_FAILED -23
1754 #define GNUTLS_E_DECRYPTION_FAILED -24  /* GNUTLS_A_DECRYPTION_FAILED, GNUTLS_A_BAD_RECORD_MAC */
1755 #define GNUTLS_E_MEMORY_ERROR -25
1756 #define GNUTLS_E_DECOMPRESSION_FAILED -26       /* GNUTLS_A_DECOMPRESSION_FAILURE */
1757 #define GNUTLS_E_COMPRESSION_FAILED -27
1758 #define GNUTLS_E_AGAIN -28
1759 #define GNUTLS_E_EXPIRED -29
1760 #define GNUTLS_E_DB_ERROR -30
1761 #define GNUTLS_E_SRP_PWD_ERROR -31
1762 #define GNUTLS_E_INSUFFICIENT_CREDENTIALS -32
1763 #define GNUTLS_E_INSUFICIENT_CREDENTIALS GNUTLS_E_INSUFFICIENT_CREDENTIALS      /* for backwards compatibility only */
1764 #define GNUTLS_E_INSUFFICIENT_CRED GNUTLS_E_INSUFFICIENT_CREDENTIALS
1765 #define GNUTLS_E_INSUFICIENT_CRED GNUTLS_E_INSUFFICIENT_CREDENTIALS     /* for backwards compatibility only */
1766
1767 #define GNUTLS_E_HASH_FAILED -33
1768 #define GNUTLS_E_BASE64_DECODING_ERROR -34
1769
1770 #define GNUTLS_E_MPI_PRINT_FAILED -35
1771 #define GNUTLS_E_REHANDSHAKE -37        /* GNUTLS_A_NO_RENEGOTIATION */
1772 #define GNUTLS_E_GOT_APPLICATION_DATA -38
1773 #define GNUTLS_E_RECORD_LIMIT_REACHED -39
1774 #define GNUTLS_E_ENCRYPTION_FAILED -40
1775
1776 #define GNUTLS_E_PK_ENCRYPTION_FAILED -44
1777 #define GNUTLS_E_PK_DECRYPTION_FAILED -45
1778 #define GNUTLS_E_PK_SIGN_FAILED -46
1779 #define GNUTLS_E_X509_UNSUPPORTED_CRITICAL_EXTENSION -47
1780 #define GNUTLS_E_KEY_USAGE_VIOLATION -48
1781 #define GNUTLS_E_NO_CERTIFICATE_FOUND -49       /* GNUTLS_A_BAD_CERTIFICATE */
1782 #define GNUTLS_E_INVALID_REQUEST -50
1783 #define GNUTLS_E_SHORT_MEMORY_BUFFER -51
1784 #define GNUTLS_E_INTERRUPTED -52
1785 #define GNUTLS_E_PUSH_ERROR -53
1786 #define GNUTLS_E_PULL_ERROR -54
1787 #define GNUTLS_E_RECEIVED_ILLEGAL_PARAMETER -55 /* GNUTLS_A_ILLEGAL_PARAMETER */
1788 #define GNUTLS_E_REQUESTED_DATA_NOT_AVAILABLE -56
1789 #define GNUTLS_E_PKCS1_WRONG_PAD -57
1790 #define GNUTLS_E_RECEIVED_ILLEGAL_EXTENSION -58
1791 #define GNUTLS_E_INTERNAL_ERROR -59
1792 #define GNUTLS_E_DH_PRIME_UNACCEPTABLE -63
1793 #define GNUTLS_E_FILE_ERROR -64
1794 #define GNUTLS_E_TOO_MANY_EMPTY_PACKETS -78
1795 #define GNUTLS_E_UNKNOWN_PK_ALGORITHM -80
1796 #define GNUTLS_E_TOO_MANY_HANDSHAKE_PACKETS -81
1797
1798   /* returned if you need to generate temporary RSA
1799    * parameters. These are needed for export cipher suites.
1800    */
1801 #define GNUTLS_E_NO_TEMPORARY_RSA_PARAMS -84
1802
1803 #define GNUTLS_E_NO_COMPRESSION_ALGORITHMS -86
1804 #define GNUTLS_E_NO_CIPHER_SUITES -87
1805
1806 #define GNUTLS_E_OPENPGP_GETKEY_FAILED -88
1807 #define GNUTLS_E_PK_SIG_VERIFY_FAILED -89
1808
1809 #define GNUTLS_E_ILLEGAL_SRP_USERNAME -90
1810 #define GNUTLS_E_SRP_PWD_PARSING_ERROR -91
1811 #define GNUTLS_E_NO_TEMPORARY_DH_PARAMS -93
1812
1813   /* For certificate and key stuff
1814    */
1815 #define GNUTLS_E_ASN1_ELEMENT_NOT_FOUND -67
1816 #define GNUTLS_E_ASN1_IDENTIFIER_NOT_FOUND -68
1817 #define GNUTLS_E_ASN1_DER_ERROR -69
1818 #define GNUTLS_E_ASN1_VALUE_NOT_FOUND -70
1819 #define GNUTLS_E_ASN1_GENERIC_ERROR -71
1820 #define GNUTLS_E_ASN1_VALUE_NOT_VALID -72
1821 #define GNUTLS_E_ASN1_TAG_ERROR -73
1822 #define GNUTLS_E_ASN1_TAG_IMPLICIT -74
1823 #define GNUTLS_E_ASN1_TYPE_ANY_ERROR -75
1824 #define GNUTLS_E_ASN1_SYNTAX_ERROR -76
1825 #define GNUTLS_E_ASN1_DER_OVERFLOW -77
1826 #define GNUTLS_E_OPENPGP_UID_REVOKED -79
1827 #define GNUTLS_E_CERTIFICATE_ERROR -43
1828 #define GNUTLS_E_X509_CERTIFICATE_ERROR GNUTLS_E_CERTIFICATE_ERROR
1829 #define GNUTLS_E_CERTIFICATE_KEY_MISMATCH -60
1830 #define GNUTLS_E_UNSUPPORTED_CERTIFICATE_TYPE -61       /* GNUTLS_A_UNSUPPORTED_CERTIFICATE */
1831 #define GNUTLS_E_X509_UNKNOWN_SAN -62
1832 #define GNUTLS_E_OPENPGP_FINGERPRINT_UNSUPPORTED -94
1833 #define GNUTLS_E_X509_UNSUPPORTED_ATTRIBUTE -95
1834 #define GNUTLS_E_UNKNOWN_HASH_ALGORITHM -96
1835 #define GNUTLS_E_UNKNOWN_PKCS_CONTENT_TYPE -97
1836 #define GNUTLS_E_UNKNOWN_PKCS_BAG_TYPE -98
1837 #define GNUTLS_E_INVALID_PASSWORD -99
1838 #define GNUTLS_E_MAC_VERIFY_FAILED -100 /* for PKCS #12 MAC */
1839 #define GNUTLS_E_CONSTRAINT_ERROR -101
1840
1841 #define GNUTLS_E_WARNING_IA_IPHF_RECEIVED -102
1842 #define GNUTLS_E_WARNING_IA_FPHF_RECEIVED -103
1843
1844 #define GNUTLS_E_IA_VERIFY_FAILED -104
1845 #define GNUTLS_E_UNKNOWN_ALGORITHM -105
1846 #define GNUTLS_E_UNSUPPORTED_SIGNATURE_ALGORITHM -106
1847 #define GNUTLS_E_SAFE_RENEGOTIATION_FAILED -107
1848 #define GNUTLS_E_UNSAFE_RENEGOTIATION_DENIED -108
1849 #define GNUTLS_E_UNKNOWN_SRP_USERNAME -109
1850 #define GNUTLS_E_PREMATURE_TERMINATION -110
1851
1852 #define GNUTLS_E_BASE64_ENCODING_ERROR -201
1853 #define GNUTLS_E_INCOMPATIBLE_GCRYPT_LIBRARY -202       /* obsolete */
1854 #define GNUTLS_E_INCOMPATIBLE_CRYPTO_LIBRARY -202
1855 #define GNUTLS_E_INCOMPATIBLE_LIBTASN1_LIBRARY -203
1856
1857 #define GNUTLS_E_OPENPGP_KEYRING_ERROR -204
1858 #define GNUTLS_E_X509_UNSUPPORTED_OID -205
1859
1860 #define GNUTLS_E_RANDOM_FAILED -206
1861 #define GNUTLS_E_BASE64_UNEXPECTED_HEADER_ERROR -207
1862
1863 #define GNUTLS_E_OPENPGP_SUBKEY_ERROR -208
1864
1865 #define GNUTLS_E_CRYPTO_ALREADY_REGISTERED -209
1866
1867 #define GNUTLS_E_HANDSHAKE_TOO_LARGE -210
1868
1869 #define GNUTLS_E_CRYPTODEV_IOCTL_ERROR -211
1870 #define GNUTLS_E_CRYPTODEV_DEVICE_ERROR -212
1871
1872 #define GNUTLS_E_CHANNEL_BINDING_NOT_AVAILABLE -213
1873 #define GNUTLS_E_BAD_COOKIE -214
1874 #define GNUTLS_E_OPENPGP_PREFERRED_KEY_ERROR -215
1875 #define GNUTLS_E_INCOMPAT_DSA_KEY_WITH_TLS_PROTOCOL -216
1876
1877 /* PKCS11 related */
1878 #define GNUTLS_E_PKCS11_ERROR -300
1879 #define GNUTLS_E_PKCS11_LOAD_ERROR -301
1880 #define GNUTLS_E_PARSING_ERROR -302
1881 #define GNUTLS_E_PKCS11_PIN_ERROR -303
1882
1883 #define GNUTLS_E_PKCS11_SLOT_ERROR -305
1884 #define GNUTLS_E_LOCKING_ERROR -306
1885 #define GNUTLS_E_PKCS11_ATTRIBUTE_ERROR -307
1886 #define GNUTLS_E_PKCS11_DEVICE_ERROR -308
1887 #define GNUTLS_E_PKCS11_DATA_ERROR -309
1888 #define GNUTLS_E_PKCS11_UNSUPPORTED_FEATURE_ERROR -310
1889 #define GNUTLS_E_PKCS11_KEY_ERROR -311
1890 #define GNUTLS_E_PKCS11_PIN_EXPIRED -312
1891 #define GNUTLS_E_PKCS11_PIN_LOCKED -313
1892 #define GNUTLS_E_PKCS11_SESSION_ERROR -314
1893 #define GNUTLS_E_PKCS11_SIGNATURE_ERROR -315
1894 #define GNUTLS_E_PKCS11_TOKEN_ERROR -316
1895 #define GNUTLS_E_PKCS11_USER_ERROR -317
1896
1897 #define GNUTLS_E_CRYPTO_INIT_FAILED -318
1898 #define GNUTLS_E_TIMEDOUT -319
1899 #define GNUTLS_E_USER_ERROR -320
1900 #define GNUTLS_E_ECC_NO_SUPPORTED_CURVES -321
1901 #define GNUTLS_E_ECC_UNSUPPORTED_CURVE -322
1902 #define GNUTLS_E_PKCS11_REQUESTED_OBJECT_NOT_AVAILBLE -323
1903 #define GNUTLS_E_CERTIFICATE_LIST_UNSORTED -324
1904 #define GNUTLS_E_ILLEGAL_PARAMETER -325
1905 #define GNUTLS_E_NO_PRIORITIES_WERE_SET -326
1906 #define GNUTLS_E_X509_UNSUPPORTED_EXTENSION -327
1907 #define GNUTLS_E_SESSION_EOF -328
1908
1909 #define GNUTLS_E_UNIMPLEMENTED_FEATURE -1250
1910
1911
1912
1913 #define GNUTLS_E_APPLICATION_ERROR_MAX -65000
1914 #define GNUTLS_E_APPLICATION_ERROR_MIN -65500
1915
1916 #ifdef __cplusplus
1917 }
1918 #endif
1919
1920 #include <gnutls/compat.h>
1921
1922 #endif                          /* GNUTLS_H */