tls.h

Go to the documentation of this file.

#pragma once
 
#include <ascii-chat/asciichat_errno.h>
#include <ngtcp2/ngtcp2_crypto.h>
#include <openssl/ssl.h>
#include <stdbool.h>
 
typedef struct http_server http_server_t;
 
/* The context and its ALPN storage must outlive every SSL created from it. */
typedef struct {
  SSL_CTX *ssl_ctx;
  unsigned char alpn[256];
  unsigned int alpn_length;
  bool server;
  /* Set before creating connections; defaults to disabled. */
  bool enable_datagrams;
  bool webtransport;
  bool http3;
  bool accept_native;
  http_server_t *http_server;
  char webtransport_origin[512];
  char webtransport_path[512];
} quic_tls_t;

asciichat_error_t quic_tls_server_create(const char *alpn, const char *certificate_file, const char *private_key_file,
                                         quic_tls_t **out);
asciichat_error_t quic_tls_client_create(const char *alpn, const char *ca_file, quic_tls_t **out);

asciichat_error_t quic_tls_client_configure(quic_tls_t *tls, SSL *ssl, const char *server_name);

asciichat_error_t quic_tls_session_create(quic_tls_t *tls, const char *server_name, ngtcp2_crypto_conn_ref *connection,
                                          SSL **out);
asciichat_error_t quic_tls_verify_ready(quic_tls_t *tls, SSL *ssl);
void quic_tls_session_destroy(SSL **ssl);
void quic_tls_destroy(quic_tls_t **tls);