app_tls_common.h

/*
 * This file is part of the openHiTLS project.
 *
 * openHiTLS is licensed under the Mulan PSL v2.
 * You can use this software according to the terms and conditions of the Mulan PSL v2.
 * You may obtain a copy of Mulan PSL v2 at:
 *
 *     http://license.coscl.org.cn/MulanPSL2
 *
 * THIS SOFTWARE IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTIES OF ANY KIND,
 * EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO NON-INFRINGEMENT,
 * MERCHANTABILITY OR FIT FOR A PARTICULAR PURPOSE.
 * See the Mulan PSL v2 for more details.
 */
 
#ifndef HITLS_APP_TLS_COMMON_H
#define HITLS_APP_TLS_COMMON_H
 
#include <stdint.h>
#include <stdbool.h>
#include "bsl_types.h"
#include "bsl_uio.h"
#include "hitls_config.h"
#include "hitls_pki_cert.h"
#include "hitls.h"
#include "hitls_cert.h"
#include "crypt_eal_pkey.h"
#include "app_provider.h"
#include "app_sm.h"
 
#ifdef __cplusplus
extern "C" {
#endif
 
#define APP_HEARTBEAT_LEN 17
#define DEFAULT_DTLCP_PORT 54000
#define HTTP_BUF_MAXLEN (18 * 1024) /* 18KB */
 
/* Protocol types */
typedef enum {
    APP_PROTOCOL_TLS,      // International standard TLS protocol (default)
    APP_PROTOCOL_TLCP,
    APP_PROTOCOL_DTLCP,
} APP_ProtocolType;
 
/* Network address structure */
typedef struct {
    char *host;
    int port;
} APP_NetworkAddr;
 
/* Certificate configuration structure */
typedef struct {
    char *keyPass;
    char *caFile;
    char *caChain;
    BSL_ParseFormat certFormat;
    BSL_ParseFormat keyFormat;
    
    /* TLCP specific certificates */
    char *tlcpEncCert;
    char *tlcpEncKey;
    char *tlcpSignCert;
    char *tlcpSignKey;
    AppProvider *provider;
#ifdef HITLS_APP_SM_MODE
    HITLS_APP_SM_Param *smParam;
#endif
} APP_CertConfig;

APP_ProtocolType ParseProtocolType(const char *protocolStr);

HITLS_Config *CreateProtocolConfig(APP_ProtocolType protocol, AppProvider *provider);

int ConfigureCipherSuites(HITLS_Config *config, const char *cipherStr, APP_ProtocolType protocol);

HITLS_X509_Cert *LoadCertFromFile(const char *certFile, BSL_ParseFormat format, AppProvider *provider);

int ConfCertVerification(HITLS_Config *config, APP_CertConfig *certConfig,
    bool verifyPeer, int verifyDepth);

int ConfigureTLCPCertificates(HITLS_Config *config, APP_CertConfig *certConfig);

int CreateTCPSocket(APP_NetworkAddr *addr, int timeout);

int CreateUDPSocket(APP_NetworkAddr *addr, int timeout);

int CreateTCPListenSocket(APP_NetworkAddr *addr, int backlog);

int CreateUDPListenSocket(APP_NetworkAddr *addr, int timeout);

int AcceptTCPConnection(int listenFd);

void PrintConnectionInfo(HITLS_Ctx *ctx, bool showState);

void PrintCertificateChain(HITLS_Ctx *ctx);

void PrintHandshakeState(HITLS_Ctx *ctx);

int ParseConnectString(const char *connectStr, APP_NetworkAddr *addr);
 
int32_t GetHeartBeat(uint8_t *buffer, uint32_t *len);
 
int32_t ParseHeartBeat(uint8_t *buffer, uint32_t len);
 
#ifdef __cplusplus
}
#endif
 
#endif /* HITLS_APP_TLS_COMMON_H */