Split X509 certificate liveness checks into a separate function
[tor.git] / src / common / tortls.h
blobff2d69e1dec79bcd31371f154d4e46acc93211ed
1 /* Copyright 2003 Roger Dingledine */
2 /* See LICENSE for licensing information */
3 /* $Id$ */
5 #ifndef _TORTLS_H
6 #define _TORTLS_H
8 /**
9 * \file tortls.h
10 * \brief Headers for tortls.c
11 **/
13 #include "../common/crypto.h"
15 /* Opaque structure to hold a TLS connection. */
16 typedef struct tor_tls_st tor_tls;
18 /* Possible return values for most tor_tls_* functions. */
19 #define TOR_TLS_ERROR -4
20 #define TOR_TLS_CLOSE -3
21 #define TOR_TLS_WANTREAD -2
22 #define TOR_TLS_WANTWRITE -1
23 #define TOR_TLS_DONE 0
25 int tor_tls_context_new(crypto_pk_env_t *rsa, int isServer,
26 const char *nickname, unsigned int key_lifetime);
27 tor_tls *tor_tls_new(int sock, int is_server, int use_no_cert);
28 void tor_tls_free(tor_tls *tls);
29 int tor_tls_peer_has_cert(tor_tls *tls);
30 int tor_tls_get_peer_cert_nickname(tor_tls *tls, char *buf, size_t buflen);
31 int tor_tls_verify(tor_tls *tls, crypto_pk_env_t **identity);
32 int tor_tls_check_lifetime(tor_tls *tls, int tolerance);
33 int tor_tls_read(tor_tls *tls, char *cp, size_t len);
34 int tor_tls_write(tor_tls *tls, char *cp, size_t n);
35 int tor_tls_handshake(tor_tls *tls);
36 int tor_tls_shutdown(tor_tls *tls);
37 int tor_tls_get_pending_bytes(tor_tls *tls);
39 unsigned long tor_tls_get_n_bytes_read(tor_tls *tls);
40 unsigned long tor_tls_get_n_bytes_written(tor_tls *tls);
42 /* Log and abort if there are unhandled TLS errors in OpenSSL's error stack.
44 #define assert_no_tls_errors() _assert_no_tls_errors(__FILE__,__LINE__)
46 void _assert_no_tls_errors(const char *fname, int line);
48 #endif
51 Local Variables:
52 mode:c
53 indent-tabs-mode:nil
54 c-basic-offset:2
55 End: