/* * Copyright (c) 2018 Intel and/or its affiliates. * Licensed under the Apache License, Version 2.0 (the "License"); * you may not use this file except in compliance with the License. * You may obtain a copy of the License at: * * http://www.apache.org/licenses/LICENSE-2.0 * * Unless required by applicable law or agreed to in writing, software * distributed under the License is distributed on an "AS IS" BASIS, * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. * See the License for the specific language governing permissions and * limitations under the License. */ #include <openssl/ssl.h> #include <openssl/conf.h> #include <openssl/err.h> #include <openssl/engine.h> #include <vnet/plugin/plugin.h> #include <vpp/app/version.h> #include <vnet/tls/tls.h> typedef struct tls_ctx_openssl_ { tls_ctx_t ctx; /**< First */ u32 openssl_ctx_index; SSL_CTX *ssl_ctx; SSL *ssl; BIO *rbio; BIO *wbio; } openssl_ctx_t; typedef struct tls_listen_ctx_opensl_ { u32 openssl_lctx_index; SSL_CTX *ssl_ctx; SSL *ssl; X509 *srvcert; EVP_PKEY *pkey; } openssl_listen_ctx_t; typedef struct openssl_main_ { openssl_ctx_t ***ctx_pool; openssl_listen_ctx_t *lctx_pool; /* API message ID base */ u16 msg_id_base; X509_STORE *cert_store; u8 *ciphers; int engine_init; int async; } openssl_main_t; typedef struct openssl_tls_callback_ { int (*callback) (SSL * ssl, void *arg); void *arg; } openssl_tls_callback_t; typedef int openssl_resume_handler (tls_ctx_t * ctx, session_t * tls_session); tls_ctx_t *openssl_ctx_get_w_thread (u32 ctx_index, u8 thread_index); openssl_tls_callback_t *vpp_add_async_pending_event (tls_ctx_t * ctx, openssl_resume_handler * handler); int vpp_add_async_run_event (tls_ctx_t * ctx, openssl_resume_handler * handler); int tls_async_openssl_callback (SSL * s, void *evt); void openssl_polling_start (ENGINE * engine); int openssl_engine_register (char *engine, char *alg); void openssl_async_node_enable_disable (u8 is_en); clib_error_t *tls_openssl_api_init (vlib_main_t * vm); int tls_openssl_set_ciphers (char *ciphers); /* * fd.io coding-style-patch-verification: ON * * Local Variables: * eval: (c-set-style "gnu") * End: */