tls.h

 
#ifndef FREERDP_LIB_CRYPTO_TLS_H
#define FREERDP_LIB_CRYPTO_TLS_H
 
#include <winpr/crt.h>
#include <winpr/sspi.h>
 
#include <openssl/ssl.h>
#include <openssl/err.h>
 
#include <freerdp/api.h>
#include <freerdp/types.h>
#include <freerdp/crypto/certificate_store.h>
 
#include <winpr/stream.h>
 
#define TLS_ALERT_LEVEL_WARNING 1
#define TLS_ALERT_LEVEL_FATAL 2
 
#define TLS_ALERT_DESCRIPTION_CLOSE_NOTIFY 0
#define TLS_ALERT_DESCRIPTION_UNEXPECTED_MESSAGE 10
#define TLS_ALERT_DESCRIPTION_BAD_RECORD_MAC 20
#define TLS_ALERT_DESCRIPTION_DECRYPTION_FAILED 21
#define TLS_ALERT_DESCRIPTION_RECORD_OVERFLOW 22
#define TLS_ALERT_DESCRIPTION_DECOMPRESSION_FAILURE 30
#define TLS_ALERT_DESCRIPTION_HANSHAKE_FAILURE 40
#define TLS_ALERT_DESCRIPTION_NO_CERTIFICATE 41
#define TLS_ALERT_DESCRIPTION_BAD_CERTIFICATE 42
#define TLS_ALERT_DESCRIPTION_UNSUPPORTED_CERTIFICATE 43
#define TLS_ALERT_DESCRIPTION_CERTIFICATE_REVOKED 44
#define TLS_ALERT_DESCRIPTION_CERTIFICATE_EXPIRED 45
#define TLS_ALERT_DESCRIPTION_CERTIFICATE_UNKNOWN 46
#define TLS_ALERT_DESCRIPTION_ILLEGAL_PARAMETER 47
#define TLS_ALERT_DESCRIPTION_UNKNOWN_CA 48
#define TLS_ALERT_DESCRIPTION_ACCESS_DENIED 49
#define TLS_ALERT_DESCRIPTION_DECODE_ERROR 50
#define TLS_ALERT_DESCRIPTION_DECRYPT_ERROR 51
#define TLS_ALERT_DESCRIPTION_EXPORT_RESTRICTION 60
#define TLS_ALERT_DESCRIPTION_PROTOCOL_VERSION 70
#define TLS_ALERT_DESCRIPTION_INSUFFICIENT_SECURITY 71
#define TLS_ALERT_DESCRIPTION_INTERNAL_ERROR 80
#define TLS_ALERT_DESCRIPTION_USER_CANCELED 90
#define TLS_ALERT_DESCRIPTION_NO_RENEGOTIATION 100
#define TLS_ALERT_DESCRIPTION_UNSUPPORTED_EXTENSION 110
 
typedef struct rdp_tls rdpTls;
 
struct rdp_tls
{
  SSL* ssl;
  BIO* bio;
  void* tsg;
  SSL_CTX* ctx;
  BYTE* PublicKey;
  DWORD PublicKeyLength;
  rdpContext* context;
  SecPkgContext_Bindings* Bindings;
  rdpCertificateStore* certificate_store;
  BIO* underlying;
  const char* hostname;
  const char* serverName;
  UINT16 port;
  int alertLevel;
  int alertDescription;
  BOOL isGatewayTransport;
  BOOL isClientMode;
  BOOL isHttpRequest;
};
 
typedef enum
{
  TLS_HANDSHAKE_SUCCESS,     
  TLS_HANDSHAKE_CONTINUE,    
  TLS_HANDSHAKE_ERROR,       
  TLS_HANDSHAKE_VERIFY_ERROR 
} TlsHandshakeResult;
 
#ifdef __cplusplus
extern "C"
{
#endif
 
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL const SSL_METHOD* freerdp_tls_get_ssl_method(BOOL isDtls, BOOL isClient);
 
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL int freerdp_tls_connect(rdpTls* tls, BIO* underlying);
 
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL TlsHandshakeResult freerdp_tls_connect_ex(rdpTls* tls, BIO* underlying,
                                                          const SSL_METHOD* methods);
 
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL BOOL freerdp_tls_accept(rdpTls* tls, BIO* underlying, rdpSettings* settings);
 
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL TlsHandshakeResult freerdp_tls_accept_ex(rdpTls* tls, BIO* underlying,
                                                         rdpSettings* settings,
                                                         const SSL_METHOD* methods);
 
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL TlsHandshakeResult freerdp_tls_handshake(rdpTls* tls);
 
  FREERDP_LOCAL BOOL freerdp_tls_send_alert(rdpTls* tls);
 
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL int freerdp_tls_write_all(rdpTls* tls, const void* data, size_t length);
 
  FREERDP_LOCAL int freerdp_tls_set_alert_code(rdpTls* tls, int level, int description);
 
  FREERDP_LOCAL void freerdp_tls_free(rdpTls* tls);
 
  WINPR_ATTR_MALLOC(freerdp_tls_free, 1)
  WINPR_ATTR_NODISCARD
  FREERDP_LOCAL rdpTls* freerdp_tls_new(rdpContext* context);
 
#ifdef __cplusplus
}
#endif
 
#endif /* FREERDP_LIB_CRYPTO_TLS_H */