1 /* -*- Mode: C; c-file-style: "bsd" -*- */
3 * easy-tls.h -- generic TLS proxy.
4 * $Id: easy-tls.h,v 1.1.1.1 2009/07/19 23:05:17 christos Exp $
7 * (c) Copyright 1999 Bodo Moeller. All rights reserved.
14 typedef struct ssl_ctx_st SSL_CTX
;
17 #define TLS_INFO_SIZE 512 /* max. # of bytes written to infofd */
19 void tls_set_dhe1024(int i
, void* apparg
);
20 /* Generate DHE parameters:
21 * i >= 0 deterministic (i selects seed), i < 0 random (may take a while).
22 * tls_create_ctx calls this with random non-negative i if the application
23 * has never called it.*/
25 void tls_rand_seed(void);
26 int tls_rand_seed_from_file(const char *filename
, size_t n
, void *apparg
);
27 void tls_rand_seed_from_memory(const void *buf
, size_t n
);
29 struct tls_create_ctx_args
32 const char *certificate_file
;
36 int fail_unless_verified
;
39 struct tls_create_ctx_args
tls_create_ctx_defaultargs(void);
40 /* struct tls_create_ctx_args is similar to a conventional argument list,
41 * but it can provide default values and allows for future extension. */
42 SSL_CTX
*tls_create_ctx(struct tls_create_ctx_args
, void *apparg
);
44 struct tls_start_proxy_args
52 struct tls_start_proxy_args
tls_start_proxy_defaultargs(void);
53 /* tls_start_proxy return value *MUST* be checked!
54 * 0 means ok, otherwise we've probably run out of some resources. */
55 int tls_start_proxy(struct tls_start_proxy_args
, void *apparg
);