2011-07-04 01:29:09 +04:00
|
|
|
/**
|
2012-02-21 09:56:55 +04:00
|
|
|
* FreeRDP: A Remote Desktop Protocol Implementation
|
2011-07-04 01:29:09 +04:00
|
|
|
* Transport Layer Security
|
|
|
|
*
|
2012-02-21 09:56:55 +04:00
|
|
|
* Copyright 2011-2012 Marc-Andre Moreau <marcandre.moreau@gmail.com>
|
2011-07-04 01:29:09 +04:00
|
|
|
*
|
|
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
* you may not use this file except in compliance with the License.
|
|
|
|
* You may obtain a copy of the License at
|
|
|
|
*
|
|
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
*
|
|
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
* See the License for the specific language governing permissions and
|
|
|
|
* limitations under the License.
|
|
|
|
*/
|
|
|
|
|
2012-02-21 09:56:55 +04:00
|
|
|
#ifndef FREERDP_CRYPTO_TLS_H
|
|
|
|
#define FREERDP_CRYPTO_TLS_H
|
2011-07-04 01:29:09 +04:00
|
|
|
|
2011-08-16 22:41:12 +04:00
|
|
|
#include "crypto.h"
|
2012-02-03 03:20:02 +04:00
|
|
|
#include "certificate.h"
|
2011-08-16 22:41:12 +04:00
|
|
|
|
2013-01-09 09:20:08 +04:00
|
|
|
#include <winpr/crt.h>
|
|
|
|
#include <winpr/sspi.h>
|
|
|
|
|
2011-07-04 01:29:09 +04:00
|
|
|
#include <openssl/ssl.h>
|
|
|
|
#include <openssl/err.h>
|
|
|
|
|
2012-02-21 09:56:55 +04:00
|
|
|
#include <freerdp/api.h>
|
2011-07-07 21:37:48 +04:00
|
|
|
#include <freerdp/types.h>
|
2013-03-22 00:45:25 +04:00
|
|
|
|
|
|
|
#include <winpr/stream.h>
|
2011-07-04 01:29:09 +04:00
|
|
|
|
2013-12-19 04:44:18 +04:00
|
|
|
#define TLS_ALERT_LEVEL_WARNING 1
|
|
|
|
#define TLS_ALERT_LEVEL_FATAL 2
|
|
|
|
|
|
|
|
#define TLS_ALERT_DESCRIPTION_CLOSE_NOTIFY 0
|
|
|
|
#define TLS_ALERT_DESCRIPTION_UNEXPECTED_MESSAGE 10
|
|
|
|
#define TLS_ALERT_DESCRIPTION_BAD_RECORD_MAC 20
|
|
|
|
#define TLS_ALERT_DESCRIPTION_DECRYPTION_FAILED 21
|
|
|
|
#define TLS_ALERT_DESCRIPTION_RECORD_OVERFLOW 22
|
|
|
|
#define TLS_ALERT_DESCRIPTION_DECOMPRESSION_FAILURE 30
|
|
|
|
#define TLS_ALERT_DESCRIPTION_HANSHAKE_FAILURE 40
|
|
|
|
#define TLS_ALERT_DESCRIPTION_NO_CERTIFICATE 41
|
|
|
|
#define TLS_ALERT_DESCRIPTION_BAD_CERTIFICATE 42
|
|
|
|
#define TLS_ALERT_DESCRIPTION_UNSUPPORTED_CERTIFICATE 43
|
|
|
|
#define TLS_ALERT_DESCRIPTION_CERTIFICATE_REVOKED 44
|
|
|
|
#define TLS_ALERT_DESCRIPTION_CERTIFICATE_EXPIRED 45
|
|
|
|
#define TLS_ALERT_DESCRIPTION_CERTIFICATE_UNKNOWN 46
|
|
|
|
#define TLS_ALERT_DESCRIPTION_ILLEGAL_PARAMETER 47
|
|
|
|
#define TLS_ALERT_DESCRIPTION_UNKNOWN_CA 48
|
|
|
|
#define TLS_ALERT_DESCRIPTION_ACCESS_DENIED 49
|
|
|
|
#define TLS_ALERT_DESCRIPTION_DECODE_ERROR 50
|
|
|
|
#define TLS_ALERT_DESCRIPTION_DECRYPT_ERROR 51
|
|
|
|
#define TLS_ALERT_DESCRIPTION_EXPORT_RESTRICTION 60
|
|
|
|
#define TLS_ALERT_DESCRIPTION_PROTOCOL_VERSION 70
|
|
|
|
#define TLS_ALERT_DESCRIPTION_INSUFFICIENT_SECURITY 71
|
|
|
|
#define TLS_ALERT_DESCRIPTION_INTERNAL_ERROR 80
|
|
|
|
#define TLS_ALERT_DESCRIPTION_USER_CANCELED 90
|
|
|
|
#define TLS_ALERT_DESCRIPTION_NO_RENEGOTIATION 100
|
|
|
|
#define TLS_ALERT_DESCRIPTION_UNSUPPORTED_EXTENSION 110
|
|
|
|
|
2011-07-04 01:29:09 +04:00
|
|
|
typedef struct rdp_tls rdpTls;
|
|
|
|
|
|
|
|
struct rdp_tls
|
|
|
|
{
|
2011-07-07 22:11:12 +04:00
|
|
|
SSL* ssl;
|
2013-10-11 14:12:50 +04:00
|
|
|
BIO* bio;
|
|
|
|
void* tsg;
|
2011-07-07 22:11:12 +04:00
|
|
|
SSL_CTX* ctx;
|
2012-09-24 12:40:32 +04:00
|
|
|
BYTE* PublicKey;
|
|
|
|
DWORD PublicKeyLength;
|
2012-02-03 03:20:02 +04:00
|
|
|
rdpSettings* settings;
|
2013-01-09 09:20:08 +04:00
|
|
|
SecPkgContext_Bindings* Bindings;
|
2012-02-03 03:20:02 +04:00
|
|
|
rdpCertificateStore* certificate_store;
|
2015-02-18 23:36:57 +03:00
|
|
|
BIO* underlying;
|
2013-12-07 07:15:45 +04:00
|
|
|
char* hostname;
|
|
|
|
int port;
|
2013-12-19 04:44:18 +04:00
|
|
|
int alertLevel;
|
|
|
|
int alertDescription;
|
2014-05-30 22:36:18 +04:00
|
|
|
BOOL isGatewayTransport;
|
2011-07-04 01:29:09 +04:00
|
|
|
};
|
|
|
|
|
2014-12-01 15:12:51 +03:00
|
|
|
#ifdef __cplusplus
|
2018-07-10 11:03:49 +03:00
|
|
|
extern "C" {
|
2014-12-01 15:12:51 +03:00
|
|
|
#endif
|
|
|
|
|
2018-07-10 11:03:49 +03:00
|
|
|
FREERDP_API int tls_connect(rdpTls* tls, BIO* underlying);
|
|
|
|
FREERDP_API BOOL tls_accept(rdpTls* tls, BIO* underlying, rdpSettings* settings);
|
2015-03-30 12:56:09 +03:00
|
|
|
FREERDP_API BOOL tls_send_alert(rdpTls* tls);
|
2012-02-03 03:20:02 +04:00
|
|
|
|
2014-05-21 19:32:14 +04:00
|
|
|
FREERDP_API int tls_write_all(rdpTls* tls, const BYTE* data, int length);
|
2012-12-21 12:23:50 +04:00
|
|
|
|
2013-12-19 04:44:18 +04:00
|
|
|
FREERDP_API int tls_set_alert_code(rdpTls* tls, int level, int description);
|
|
|
|
|
2012-10-09 10:38:39 +04:00
|
|
|
FREERDP_API BOOL tls_print_error(char* func, SSL* connection, int value);
|
2012-02-03 03:20:02 +04:00
|
|
|
|
2012-02-21 09:56:55 +04:00
|
|
|
FREERDP_API rdpTls* tls_new(rdpSettings* settings);
|
|
|
|
FREERDP_API void tls_free(rdpTls* tls);
|
2011-07-04 01:29:09 +04:00
|
|
|
|
2014-12-01 15:12:51 +03:00
|
|
|
#ifdef __cplusplus
|
2018-07-10 11:03:49 +03:00
|
|
|
}
|
2014-12-01 15:12:51 +03:00
|
|
|
#endif
|
|
|
|
|
2012-02-21 09:56:55 +04:00
|
|
|
#endif /* FREERDP_CRYPTO_TLS_H */
|