1 /* Copyright 2003 Roger Dingledine */
2 /* See LICENSE for licensing information */
7 #define TORTLS_H_ID "$Id$"
11 * \brief Headers for tortls.c
14 #include "../common/crypto.h"
15 #include "../common/compat.h"
17 /* Opaque structure to hold a TLS connection. */
18 typedef struct tor_tls_st tor_tls
;
20 /* Possible return values for most tor_tls_* functions. */
21 #define TOR_TLS_ERROR -4
22 #define TOR_TLS_CLOSE -3
23 #define TOR_TLS_WANTREAD -2
24 #define TOR_TLS_WANTWRITE -1
25 #define TOR_TLS_DONE 0
27 int tor_tls_context_new(crypto_pk_env_t
*rsa
, int isServer
,
28 const char *nickname
, unsigned int key_lifetime
);
29 tor_tls
*tor_tls_new(int sock
, int is_server
, int use_no_cert
);
30 void tor_tls_free(tor_tls
*tls
);
31 int tor_tls_peer_has_cert(tor_tls
*tls
);
32 int tor_tls_get_peer_cert_nickname(tor_tls
*tls
, char *buf
, size_t buflen
);
33 int tor_tls_verify(tor_tls
*tls
, crypto_pk_env_t
**identity
);
34 int tor_tls_check_lifetime(tor_tls
*tls
, int tolerance
);
35 int tor_tls_read(tor_tls
*tls
, char *cp
, size_t len
);
36 int tor_tls_write(tor_tls
*tls
, char *cp
, size_t n
);
37 int tor_tls_handshake(tor_tls
*tls
);
38 int tor_tls_shutdown(tor_tls
*tls
);
39 int tor_tls_get_pending_bytes(tor_tls
*tls
);
41 unsigned long tor_tls_get_n_bytes_read(tor_tls
*tls
);
42 unsigned long tor_tls_get_n_bytes_written(tor_tls
*tls
);
44 /* Log and abort if there are unhandled TLS errors in OpenSSL's error stack.
46 #define assert_no_tls_errors() _assert_no_tls_errors(_SHORT_FILE_,__LINE__)
48 void _assert_no_tls_errors(const char *fname
, int line
);