1*b077aed3SPierre Pronchery /* 2*b077aed3SPierre Pronchery * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved. 3*b077aed3SPierre Pronchery * 4*b077aed3SPierre Pronchery * Licensed under the Apache License 2.0 (the "License"). You may not use 5*b077aed3SPierre Pronchery * this file except in compliance with the License. You can obtain a copy 6*b077aed3SPierre Pronchery * in the file LICENSE in the source distribution or at 7*b077aed3SPierre Pronchery * https://www.openssl.org/source/license.html 8*b077aed3SPierre Pronchery */ 9*b077aed3SPierre Pronchery 10*b077aed3SPierre Pronchery #include <openssl/opensslconf.h> 11*b077aed3SPierre Pronchery 12*b077aed3SPierre Pronchery #include <openssl/ssl.h> 13*b077aed3SPierre Pronchery #include <openssl/srp.h> 14*b077aed3SPierre Pronchery 15*b077aed3SPierre Pronchery #define PORT "4433" 16*b077aed3SPierre Pronchery #define PROTOCOL "tcp" 17*b077aed3SPierre Pronchery 18*b077aed3SPierre Pronchery typedef int (*do_server_cb)(int s, int stype, int prot, unsigned char *context); 19*b077aed3SPierre Pronchery int report_server_accept(BIO *out, int asock, int with_address, int with_pid); 20*b077aed3SPierre Pronchery int do_server(int *accept_sock, const char *host, const char *port, 21*b077aed3SPierre Pronchery int family, int type, int protocol, do_server_cb cb, 22*b077aed3SPierre Pronchery unsigned char *context, int naccept, BIO *bio_s_out); 23*b077aed3SPierre Pronchery 24*b077aed3SPierre Pronchery int verify_callback(int ok, X509_STORE_CTX *ctx); 25*b077aed3SPierre Pronchery 26*b077aed3SPierre Pronchery int set_cert_stuff(SSL_CTX *ctx, char *cert_file, char *key_file); 27*b077aed3SPierre Pronchery int set_cert_key_stuff(SSL_CTX *ctx, X509 *cert, EVP_PKEY *key, 28*b077aed3SPierre Pronchery STACK_OF(X509) *chain, int build_chain); 29*b077aed3SPierre Pronchery int ssl_print_sigalgs(BIO *out, SSL *s); 30*b077aed3SPierre Pronchery int ssl_print_point_formats(BIO *out, SSL *s); 31*b077aed3SPierre Pronchery int ssl_print_groups(BIO *out, SSL *s, int noshared); 32*b077aed3SPierre Pronchery int ssl_print_tmp_key(BIO *out, SSL *s); 33*b077aed3SPierre Pronchery int init_client(int *sock, const char *host, const char *port, 34*b077aed3SPierre Pronchery const char *bindhost, const char *bindport, 35*b077aed3SPierre Pronchery int family, int type, int protocol); 36*b077aed3SPierre Pronchery int should_retry(int i); 37*b077aed3SPierre Pronchery void do_ssl_shutdown(SSL *ssl); 38*b077aed3SPierre Pronchery 39*b077aed3SPierre Pronchery long bio_dump_callback(BIO *bio, int cmd, const char *argp, size_t len, 40*b077aed3SPierre Pronchery int argi, long argl, int ret, size_t *processed); 41*b077aed3SPierre Pronchery 42*b077aed3SPierre Pronchery void apps_ssl_info_callback(const SSL *s, int where, int ret); 43*b077aed3SPierre Pronchery void msg_cb(int write_p, int version, int content_type, const void *buf, 44*b077aed3SPierre Pronchery size_t len, SSL *ssl, void *arg); 45*b077aed3SPierre Pronchery void tlsext_cb(SSL *s, int client_server, int type, const unsigned char *data, 46*b077aed3SPierre Pronchery int len, void *arg); 47*b077aed3SPierre Pronchery 48*b077aed3SPierre Pronchery int generate_cookie_callback(SSL *ssl, unsigned char *cookie, 49*b077aed3SPierre Pronchery unsigned int *cookie_len); 50*b077aed3SPierre Pronchery int verify_cookie_callback(SSL *ssl, const unsigned char *cookie, 51*b077aed3SPierre Pronchery unsigned int cookie_len); 52*b077aed3SPierre Pronchery 53*b077aed3SPierre Pronchery #ifdef __VMS /* 31 char symbol name limit */ 54*b077aed3SPierre Pronchery # define generate_stateless_cookie_callback generate_stateless_cookie_cb 55*b077aed3SPierre Pronchery # define verify_stateless_cookie_callback verify_stateless_cookie_cb 56*b077aed3SPierre Pronchery #endif 57*b077aed3SPierre Pronchery 58*b077aed3SPierre Pronchery int generate_stateless_cookie_callback(SSL *ssl, unsigned char *cookie, 59*b077aed3SPierre Pronchery size_t *cookie_len); 60*b077aed3SPierre Pronchery int verify_stateless_cookie_callback(SSL *ssl, const unsigned char *cookie, 61*b077aed3SPierre Pronchery size_t cookie_len); 62*b077aed3SPierre Pronchery 63*b077aed3SPierre Pronchery typedef struct ssl_excert_st SSL_EXCERT; 64*b077aed3SPierre Pronchery 65*b077aed3SPierre Pronchery void ssl_ctx_set_excert(SSL_CTX *ctx, SSL_EXCERT *exc); 66*b077aed3SPierre Pronchery void ssl_excert_free(SSL_EXCERT *exc); 67*b077aed3SPierre Pronchery int args_excert(int option, SSL_EXCERT **pexc); 68*b077aed3SPierre Pronchery int load_excert(SSL_EXCERT **pexc); 69*b077aed3SPierre Pronchery void print_verify_detail(SSL *s, BIO *bio); 70*b077aed3SPierre Pronchery void print_ssl_summary(SSL *s); 71*b077aed3SPierre Pronchery int config_ctx(SSL_CONF_CTX *cctx, STACK_OF(OPENSSL_STRING) *str, SSL_CTX *ctx); 72*b077aed3SPierre Pronchery int ssl_ctx_add_crls(SSL_CTX *ctx, STACK_OF(X509_CRL) *crls, 73*b077aed3SPierre Pronchery int crl_download); 74*b077aed3SPierre Pronchery int ssl_load_stores(SSL_CTX *ctx, const char *vfyCApath, 75*b077aed3SPierre Pronchery const char *vfyCAfile, const char *vfyCAstore, 76*b077aed3SPierre Pronchery const char *chCApath, const char *chCAfile, 77*b077aed3SPierre Pronchery const char *chCAstore, STACK_OF(X509_CRL) *crls, 78*b077aed3SPierre Pronchery int crl_download); 79*b077aed3SPierre Pronchery void ssl_ctx_security_debug(SSL_CTX *ctx, int verbose); 80*b077aed3SPierre Pronchery int set_keylog_file(SSL_CTX *ctx, const char *keylog_file); 81*b077aed3SPierre Pronchery void print_ca_names(BIO *bio, SSL *s); 82*b077aed3SPierre Pronchery 83*b077aed3SPierre Pronchery #ifndef OPENSSL_NO_SRP 84*b077aed3SPierre Pronchery /* The client side SRP context that we pass to all SRP related callbacks */ 85*b077aed3SPierre Pronchery typedef struct srp_arg_st { 86*b077aed3SPierre Pronchery char *srppassin; 87*b077aed3SPierre Pronchery char *srplogin; 88*b077aed3SPierre Pronchery int msg; /* copy from c_msg */ 89*b077aed3SPierre Pronchery int debug; /* copy from c_debug */ 90*b077aed3SPierre Pronchery int amp; /* allow more groups */ 91*b077aed3SPierre Pronchery int strength; /* minimal size for N */ 92*b077aed3SPierre Pronchery } SRP_ARG; 93*b077aed3SPierre Pronchery 94*b077aed3SPierre Pronchery int set_up_srp_arg(SSL_CTX *ctx, SRP_ARG *srp_arg, int srp_lateuser, int c_msg, 95*b077aed3SPierre Pronchery int c_debug); 96*b077aed3SPierre Pronchery void set_up_dummy_srp(SSL_CTX *ctx); 97*b077aed3SPierre Pronchery 98*b077aed3SPierre Pronchery /* The server side SRP context that we pass to all SRP related callbacks */ 99*b077aed3SPierre Pronchery typedef struct srpsrvparm_st { 100*b077aed3SPierre Pronchery char *login; 101*b077aed3SPierre Pronchery SRP_VBASE *vb; 102*b077aed3SPierre Pronchery SRP_user_pwd *user; 103*b077aed3SPierre Pronchery } srpsrvparm; 104*b077aed3SPierre Pronchery 105*b077aed3SPierre Pronchery int set_up_srp_verifier_file(SSL_CTX *ctx, srpsrvparm *srp_callback_parm, 106*b077aed3SPierre Pronchery char *srpuserseed, char *srp_verifier_file); 107*b077aed3SPierre Pronchery void lookup_srp_user(srpsrvparm *srp_callback_parm, BIO *bio_s_out); 108*b077aed3SPierre Pronchery #endif /* OPENSSL_NO_SRP */ 109