X-Git-Url: http://git.code-monkey.de/?p=umurmur.git;a=blobdiff_plain;f=src%2Fssl.h;h=2bb80e2a9b76ebe87b695a3fd6e209875c4a72b5;hp=f88e3017a8f80606623ba1206e28043a7bb38db5;hb=6fb422b7cbb94a2b8063c6df630b04184414b633;hpb=a7ffadd41a1457e24ffde19a081c4b8bffe1b3b8 diff --git a/src/ssl.h b/src/ssl.h index f88e301..2bb80e2 100644 --- a/src/ssl.h +++ b/src/ssl.h @@ -1,6 +1,6 @@ /* Copyright (C) 2009-2014, Martin Johansson - Copyright (C) 2005-2014, Thorvald Natvig + Copyright (C) 2005-2014, Thorvald Natvig All rights reserved. Redistribution and use in source and binary forms, with or without @@ -33,12 +33,17 @@ #define SSL_H_987698 #include "config.h" +#include "types.h" + +#include +#include +#include -#ifdef USE_POLARSSL +#if defined(USE_POLARSSL) #include #include -#ifdef POLARSSL_VERSION_MAJOR +#if defined(POLARSSL_VERSION_MAJOR) #if (POLARSSL_VERSION_MAJOR < 1) #error PolarSSL version 1.0.0 or greater is required! #endif @@ -46,7 +51,7 @@ #error PolarSSL version 1.0.0 or greater is required! #endif -#ifdef USE_POLARSSL_HAVEGE +#if defined(USE_POLARSSL_HAVEGE) #include #if (POLARSSL_VERSION_MINOR >= 1) #define HAVEGE_RAND (havege_random) @@ -74,15 +79,6 @@ int urandom_bytes(void *ctx, unsigned char *dest, size_t len); #define POLARSSL_API_V1_3_ABOVE #endif -#else /* OpenSSL */ -#include -#include -#endif - -#include "types.h" -#include - -#ifdef USE_POLARSSL #define SSLI_ERROR_WANT_READ -0x0F300 /* PolarSSL v0.x.x uses -0x0f00 -> --0x0f90, v1.x.x uses -0x7080 -> -0x7e80 */ #define SSLI_ERROR_WANT_WRITE -0x0F310 @@ -92,7 +88,54 @@ int urandom_bytes(void *ctx, unsigned char *dest, size_t len); typedef ssl_context SSL_handle_t; +#elif defined(USE_MBEDTLS) +#include +#include +#include + +#if defined(MBEDTLS_VERSION_MAJOR) +#if (MBEDTLS_VERSION_MAJOR < 2) +#error mbedTLS version 2.0.0 or greater is required! +#endif #else +#error mbedTLS version 2.0.0 or greater is required! +#endif + +#if defined(USE_MBEDTLS_HAVEGE) +#include + #define HAVEGE_RAND (havege_random) + #define RAND_bytes(_dst_, _size_) do { \ + mbedtls_havege_random(&hs, _dst_, _size_); \ + } while (0) +#else +#define RAND_bytes(_dst_, _size_) do { urandom_bytes(NULL, _dst_, _size_); } while (0) +int urandom_bytes(void *ctx, unsigned char *dest, size_t len); +#endif + +#define SSLI_ERROR_WANT_READ -0x0F300 /* mbedTLS v0.x.x uses -0x0f00 -> --0x0f90, v1.x.x uses -0x7080 -> -0x7e80 */ +#define SSLI_ERROR_WANT_WRITE -0x0F310 + +#define SSLI_ERROR_ZERO_RETURN 0 +#define SSLI_ERROR_CONNRESET MBEDTLS_ERR_NET_CONN_RESET +#define SSLI_ERROR_SYSCALL MBEDTLS_ERR_NET_RECV_FAILED + +typedef mbedtls_ssl_context SSL_handle_t; + +#elif defined(USE_GNUTLS) + +#include + +#define SSLI_ERROR_WANT_READ GNUTLS_E_AGAIN +#define SSLI_ERROR_WANT_WRITE GNUTLS_E_AGAIN +#define SSLI_ERROR_ZERO_RETURN GNUTLS_E_PREMATURE_TERMINATION +#define SSLI_ERROR_CONNRESET GNUTLS_E_PREMATURE_TERMINATION +#define SSLI_ERROR_SYSCALL GNUTLS_E_PREMATURE_TERMINATION + +typedef gnutls_session_t SSL_handle_t; + +#else /* OpenSSL */ +#include +#include #define SSLI_ERROR_WANT_READ SSL_ERROR_WANT_READ #define SSLI_ERROR_WANT_WRITE SSL_ERROR_WANT_WRITE @@ -123,9 +166,10 @@ static inline void SSLi_hash2hex(uint8_t *hash, char *out) for (i = 0; i < 20; i++) offset += sprintf(out + offset, "%02x", hash[i]); } + static inline void SSLi_hex2hash(char *in, uint8_t *hash) { - int i, offset = 0; + int i; char byte[3]; int scanned; @@ -137,3 +181,4 @@ static inline void SSLi_hex2hash(char *in, uint8_t *hash) } } #endif +