#include "config.h"
#include "../msg.h"
#include <assert.h>
#include <errno.h>
#include "../../dlib/dlib.h"
#include "../dialog.hh"
#include "../klist.h"
#include "iowatch.hh"
#include "tls.h"
#include "Url.h"
#include <mbedtls/platform.h>
#include <mbedtls/ssl.h>
#include <mbedtls/ctr_drbg.h>
#include <mbedtls/entropy.h>
#include <mbedtls/error.h>
#include <mbedtls/oid.h>
#include <mbedtls/x509.h>
#include <mbedtls/version.h>
#include <mbedtls/net.h>

Include dependency graph for tls_mbedtls.c:

Macros
#define	CERT_STATUS_NONE 0

#define	CERT_STATUS_RECEIVING 1

#define	CERT_STATUS_CLEAN 2

#define	CERT_STATUS_BAD 3

#define	CERT_STATUS_USER_ACCEPTED 4

Functions
static void	Tls_handshake_cb (int fd, void *vconnkey)

static int	Tls_fd_map_cmp (const void v1, const void v2)

static void	Tls_fd_map_add_entry (int fd, int connkey)

static void	Tls_fd_map_remove_entry (int fd)

void *	a_Tls_mbedtls_connection (int fd)

static Conn_t *	Tls_conn_new (int fd, const DilloUrl url, mbedtls_ssl_context ssl)

static int	Tls_make_conn_key (Conn_t *conn)

static void	Tls_load_certificates_from_file (const char *const filename)

static void	Tls_load_certificates_from_path (const char *const pathname)

static void	Tls_remove_duplicate_certificates ()

static void	Tls_load_certificates ()

static void	Tls_remove_psk_ciphersuites ()

void	a_Tls_mbedtls_init (void)

static int	Tls_servers_cmp (const void v1, const void v2)

static int	Tls_servers_by_url_cmp (const void v1, const void v2)

int	a_Tls_mbedtls_connect_ready (const DilloUrl *url)

static int	Tls_cert_status (const DilloUrl *url)

static int	Tls_user_said_no (const DilloUrl *url)

int	a_Tls_mbedtls_certificate_is_clean (const DilloUrl *url)

static void	Tls_cert_expired (const mbedtls_x509_crt cert, Dstr ds)

static void	Tls_cert_cn_mismatch (const mbedtls_x509_crt cert, Dstr ds)

static void	Tls_cert_trust_chain_failed (const mbedtls_x509_crt cert, Dstr ds)

static void	Tls_cert_not_valid_yet (const mbedtls_x509_crt cert, Dstr ds)

static void	Tls_cert_bad_hash (const mbedtls_x509_crt cert, Dstr ds)

static void	Tls_cert_bad_pk_alg (const mbedtls_x509_crt cert, Dstr ds)

static void	Tls_cert_bad_key (const mbedtls_x509_crt cert, Dstr ds)

static char *	Tls_make_bad_cert_msg (const mbedtls_x509_crt *cert, uint32_t flags)

static int	Tls_cert_auth_cmp (const void v1, const void v2)

static int	Tls_cert_auth_cmp_by_name (const void v1, const void v2)

static void	Tls_update_cert_authorities_data (const mbedtls_x509_crt cert, Server_t srv)

static int	Tls_examine_certificate (mbedtls_ssl_context ssl, Server_t srv)

void	a_Tls_mbedtls_reset_server_state (const DilloUrl *url)

static void	Tls_close_by_key (int connkey)

static void	Tls_fatal_error_msg (int error_type)

static void	Tls_handshake (int fd, int connkey)

void	a_Tls_mbedtls_connect (int fd, const DilloUrl *url)

int	a_Tls_mbedtls_read (void conn, void buf, size_t len)

int	a_Tls_mbedtls_write (void conn, void buf, size_t len)

void	a_Tls_mbedtls_close_by_fd (int fd)

static void	Tls_cert_authorities_print_summary ()

static void	Tls_cert_authorities_freeall ()

static void	Tls_servers_freeall ()

static void	Tls_fd_map_remove_all ()

void	a_Tls_mbedtls_freeall (void)

Variables
static Klist_t *	conn_list = NULL

static bool_t	ssl_enabled = TRUE

static mbedtls_ssl_config	ssl_conf

static mbedtls_x509_crt	cacerts

static mbedtls_ctr_drbg_context	ctr_drbg

static mbedtls_entropy_context	entropy

static Dlist *	servers

static Dlist *	cert_authorities

static Dlist *	fd_map