2010-11-23 20:17:41 +00:00
|
|
|
/*
|
|
|
|
* virnettlscontext.h: TLS encryption/x509 handling
|
|
|
|
*
|
|
|
|
* Copyright (C) 2010-2011 Red Hat, Inc.
|
|
|
|
*
|
|
|
|
* This library is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
|
|
* License as published by the Free Software Foundation; either
|
|
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This library is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
|
|
* Lesser General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU Lesser General Public
|
2012-09-20 22:30:55 +00:00
|
|
|
* License along with this library. If not, see
|
2012-07-21 10:06:23 +00:00
|
|
|
* <http://www.gnu.org/licenses/>.
|
2010-11-23 20:17:41 +00:00
|
|
|
*/
|
|
|
|
|
2019-06-18 16:12:39 +00:00
|
|
|
#pragma once
|
2010-11-23 20:17:41 +00:00
|
|
|
|
2019-06-18 16:12:39 +00:00
|
|
|
#include "internal.h"
|
|
|
|
#include "virobject.h"
|
2010-11-23 20:17:41 +00:00
|
|
|
|
|
|
|
typedef struct _virNetTLSContext virNetTLSContext;
|
|
|
|
|
|
|
|
typedef struct _virNetTLSSession virNetTLSSession;
|
|
|
|
|
|
|
|
|
2011-08-18 08:44:08 +00:00
|
|
|
void virNetTLSInit(void);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
virNetTLSContext *virNetTLSContextNewServerPath(const char *pkipath,
|
2010-11-23 20:17:41 +00:00
|
|
|
bool tryUserPkiPath,
|
2020-06-16 09:39:17 +00:00
|
|
|
const char *const *x509dnACL,
|
2016-06-03 16:44:55 +00:00
|
|
|
const char *priority,
|
2011-07-21 10:13:11 +00:00
|
|
|
bool sanityCheckCert,
|
2010-11-23 20:17:41 +00:00
|
|
|
bool requireValidCert);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
virNetTLSContext *virNetTLSContextNewClientPath(const char *pkipath,
|
2010-11-23 20:17:41 +00:00
|
|
|
bool tryUserPkiPath,
|
2016-06-03 16:44:55 +00:00
|
|
|
const char *priority,
|
2011-07-21 10:13:11 +00:00
|
|
|
bool sanityCheckCert,
|
2010-11-23 20:17:41 +00:00
|
|
|
bool requireValidCert);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
virNetTLSContext *virNetTLSContextNewServer(const char *cacert,
|
2010-11-23 20:17:41 +00:00
|
|
|
const char *cacrl,
|
|
|
|
const char *cert,
|
|
|
|
const char *key,
|
2020-06-16 09:39:17 +00:00
|
|
|
const char *const *x509dnACL,
|
2016-06-03 16:44:55 +00:00
|
|
|
const char *priority,
|
2011-07-21 10:13:11 +00:00
|
|
|
bool sanityCheckCert,
|
2010-11-23 20:17:41 +00:00
|
|
|
bool requireValidCert);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
virNetTLSContext *virNetTLSContextNewClient(const char *cacert,
|
2010-11-23 20:17:41 +00:00
|
|
|
const char *cacrl,
|
|
|
|
const char *cert,
|
|
|
|
const char *key,
|
2016-06-03 16:44:55 +00:00
|
|
|
const char *priority,
|
2011-07-21 10:13:11 +00:00
|
|
|
bool sanityCheckCert,
|
2010-11-23 20:17:41 +00:00
|
|
|
bool requireValidCert);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
int virNetTLSContextReloadForServer(virNetTLSContext *ctxt,
|
2020-03-07 11:31:00 +00:00
|
|
|
bool tryUserPkiPath);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
int virNetTLSContextCheckCertificate(virNetTLSContext *ctxt,
|
|
|
|
virNetTLSSession *sess);
|
2010-11-23 20:17:41 +00:00
|
|
|
|
|
|
|
|
|
|
|
typedef ssize_t (*virNetTLSSessionWriteFunc)(const char *buf, size_t len,
|
|
|
|
void *opaque);
|
|
|
|
typedef ssize_t (*virNetTLSSessionReadFunc)(char *buf, size_t len,
|
|
|
|
void *opaque);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
virNetTLSSession *virNetTLSSessionNew(virNetTLSContext *ctxt,
|
2010-11-23 20:17:41 +00:00
|
|
|
const char *hostname);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
void virNetTLSSessionSetIOCallbacks(virNetTLSSession *sess,
|
2010-11-23 20:17:41 +00:00
|
|
|
virNetTLSSessionWriteFunc writeFunc,
|
|
|
|
virNetTLSSessionReadFunc readFunc,
|
|
|
|
void *opaque);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
ssize_t virNetTLSSessionWrite(virNetTLSSession *sess,
|
2010-11-23 20:17:41 +00:00
|
|
|
const char *buf, size_t len);
|
2021-03-11 07:16:13 +00:00
|
|
|
ssize_t virNetTLSSessionRead(virNetTLSSession *sess,
|
2010-11-23 20:17:41 +00:00
|
|
|
char *buf, size_t len);
|
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
int virNetTLSSessionHandshake(virNetTLSSession *sess);
|
2010-11-23 20:17:41 +00:00
|
|
|
|
|
|
|
typedef enum {
|
|
|
|
VIR_NET_TLS_HANDSHAKE_COMPLETE,
|
|
|
|
VIR_NET_TLS_HANDSHAKE_SENDING,
|
|
|
|
VIR_NET_TLS_HANDSHAKE_RECVING,
|
|
|
|
} virNetTLSSessionHandshakeStatus;
|
|
|
|
|
|
|
|
virNetTLSSessionHandshakeStatus
|
2021-03-11 07:16:13 +00:00
|
|
|
virNetTLSSessionGetHandshakeStatus(virNetTLSSession *sess);
|
2010-11-23 20:17:41 +00:00
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
int virNetTLSSessionGetKeySize(virNetTLSSession *sess);
|
2010-11-23 20:17:41 +00:00
|
|
|
|
2021-03-11 07:16:13 +00:00
|
|
|
const char *virNetTLSSessionGetX509DName(virNetTLSSession *sess);
|