1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
/*
* Copyright © 2008 Christian Kellner, Samuel Cormier-Iijima
* Copyright © 2008-2009 Codethink Limited
* Copyright © 2009 Collabora Limited
*
* This program is free software: you can redistribute it and/or modify
* it under the terms of the GNU Lesser General Public License as published
* by the Free Software Foundation; either version 2 of the licence or (at
* your option) any later version.
*
* Authors: Ryan Lortie <desrt@desrt.ca>
* Christian Kellner <gicmo@gnome.org>
* Samuel Cormier-Iijima <sciyoshi@gmail.com>
* Vivek Dasmohapatra <vivek@collabora.co.uk>
*
* Upstream: git://git.gnome.org/gnio
* Branched at: 42b00d143fcf644880456d06d3a20b6e990a7fa3
* "toss out everything that moved to glib"
*
* This file follows the orignal coding style from upstream, not house
* collabora style: It is a copy of unmerged gnio TLS support with the
* 'g' prefixes changes to 'wocky' and server-side TLS support added.
*
*/
#if !defined (WOCKY_H_INSIDE) && !defined (WOCKY_COMPILATION)
# error "Only <wocky/wocky.h> can be included directly."
#endif
#ifndef _wocky_tls_h_
#define _wocky_tls_h_
#include <gio/gio.h>
#include "wocky-enumtypes.h"
#define WOCKY_TYPE_TLS_CONNECTION (wocky_tls_connection_get_type ())
#define WOCKY_TYPE_TLS_SESSION (wocky_tls_session_get_type ())
#define WOCKY_TLS_SESSION(inst) (G_TYPE_CHECK_INSTANCE_CAST ((inst), \
WOCKY_TYPE_TLS_SESSION, WockyTLSSession))
#define WOCKY_TLS_CONNECTION(inst)(G_TYPE_CHECK_INSTANCE_CAST ((inst), \
WOCKY_TYPE_TLS_CONNECTION, \
WockyTLSConnection))
typedef struct _WockyTLSConnection WockyTLSConnection;
typedef struct _WockyTLSSession WockyTLSSession;
typedef enum
{
WOCKY_TLS_VERIFY_STRICT = 0,
WOCKY_TLS_VERIFY_NORMAL,
WOCKY_TLS_VERIFY_LENIENT,
} WockyTLSVerificationLevel;
GQuark wocky_tls_cert_error_quark (void);
#define WOCKY_TLS_CERT_ERROR (wocky_tls_cert_error_quark ())
GQuark wocky_tls_error_quark (void);
#define WOCKY_TLS_ERROR (wocky_tls_error_quark ())
typedef enum
{
WOCKY_TLS_CERT_OK = 0,
WOCKY_TLS_CERT_INVALID,
WOCKY_TLS_CERT_NAME_MISMATCH,
WOCKY_TLS_CERT_REVOKED,
WOCKY_TLS_CERT_SIGNER_UNKNOWN,
WOCKY_TLS_CERT_SIGNER_UNAUTHORISED,
WOCKY_TLS_CERT_INSECURE,
WOCKY_TLS_CERT_NOT_ACTIVE,
WOCKY_TLS_CERT_EXPIRED,
WOCKY_TLS_CERT_NO_CERTIFICATE,
WOCKY_TLS_CERT_MAYBE_DOS,
WOCKY_TLS_CERT_INTERNAL_ERROR,
WOCKY_TLS_CERT_UNKNOWN_ERROR,
} WockyTLSCertStatus;
typedef enum
{
WOCKY_TLS_CERT_TYPE_NONE = 0,
WOCKY_TLS_CERT_TYPE_X509,
WOCKY_TLS_CERT_TYPE_OPENPGP,
} WockyTLSCertType;
GType wocky_tls_connection_get_type (void);
GType wocky_tls_session_get_type (void);
int wocky_tls_session_verify_peer (WockyTLSSession *session,
const gchar *peername,
GStrv extra_identities,
WockyTLSVerificationLevel level,
WockyTLSCertStatus *status);
GPtrArray *wocky_tls_session_get_peers_certificate (WockyTLSSession *session,
WockyTLSCertType *type);
WockyTLSConnection *wocky_tls_session_handshake (WockyTLSSession *session,
GCancellable *cancellable,
GError **error);
void
wocky_tls_session_handshake_async (WockyTLSSession *session,
gint io_priority,
GCancellable *cancellable,
GAsyncReadyCallback callback,
gpointer user_data);
WockyTLSConnection *
wocky_tls_session_handshake_finish (WockyTLSSession *session,
GAsyncResult *result,
GError **error);
void wocky_tls_session_add_ca (WockyTLSSession *session, const gchar *path);
void wocky_tls_session_add_crl (WockyTLSSession *session, const gchar *path);
WockyTLSSession *wocky_tls_session_new (GIOStream *stream);
WockyTLSSession *wocky_tls_session_server_new (GIOStream *stream,
guint dhbits,
const gchar* key,
const gchar* cert);
#endif /* _wocky_tls_h_ */
/* this file is "borrowed" from an unmerged gnio feature: */
/* Local Variables: */
/* c-file-style: "gnu" */
/* End: */
|
