5 // Created by Martin Baulig on 14/11/15.
6 // Copyright (c) 2015 Xamarin. All rights reserved.
10 #include <btls-x509-verify-param.h>
17 #define debug_print(ptr,message) \
18 do { if (mono_btls_ssl_ctx_is_debug_enabled(ptr->ctx)) \
19 mono_btls_ssl_ctx_debug_printf (ptr->ctx, "%s:%d:%s(): " message, __FILE__, __LINE__, \
20 __func__); } while (0)
22 #define debug_printf(ptr,fmt, ...) \
23 do { if (mono_btls_ssl_ctx_is_debug_enabled(ptr->ctx)) \
24 mono_btls_ssl_ctx_debug_printf (ptr->ctx, "%s:%d:%s(): " fmt, __FILE__, __LINE__, \
25 __func__, __VA_ARGS__); } while (0)
27 STACK_OF(SSL_CIPHER) *ssl_bytes_to_cipher_list (SSL *s, const CBS *cbs);
29 MONO_API MonoBtlsSsl *
30 mono_btls_ssl_new (MonoBtlsSslCtx *ctx)
34 ptr = calloc (1, sizeof (MonoBtlsSsl));
36 ptr->ctx = mono_btls_ssl_ctx_up_ref (ctx);
37 ptr->ssl = SSL_new (mono_btls_ssl_ctx_get_ctx (ptr->ctx));
39 SSL_set_options (ptr->ssl, SSL_OP_NO_SSLv2 | SSL_OP_NO_SSLv3);
45 mono_btls_ssl_destroy (MonoBtlsSsl *ptr)
47 mono_btls_ssl_close (ptr);
53 mono_btls_ssl_ctx_free (ptr->ctx);
60 mono_btls_ssl_close (MonoBtlsSsl *ptr)
66 mono_btls_ssl_set_bio (MonoBtlsSsl *ptr, BIO *bio)
69 SSL_set_bio (ptr->ssl, bio, bio);
73 mono_btls_ssl_print_errors_cb (ERR_print_errors_callback_t callback, void *ctx)
75 ERR_print_errors_cb (callback, ctx);
79 mono_btls_ssl_use_certificate (MonoBtlsSsl *ptr, X509 *x509)
81 return SSL_use_certificate (ptr->ssl, x509);
85 mono_btls_ssl_use_private_key (MonoBtlsSsl *ptr, EVP_PKEY *key)
87 return SSL_use_PrivateKey (ptr->ssl, key);
91 mono_btls_ssl_add_chain_certificate (MonoBtlsSsl *ptr, X509 *x509)
93 return SSL_add1_chain_cert (ptr->ssl, x509);
97 mono_btls_ssl_accept (MonoBtlsSsl *ptr)
99 return SSL_accept (ptr->ssl);
103 mono_btls_ssl_connect (MonoBtlsSsl *ptr)
105 return SSL_connect (ptr->ssl);
109 mono_btls_ssl_handshake (MonoBtlsSsl *ptr)
111 return SSL_do_handshake (ptr->ssl);
115 mono_btls_ssl_read (MonoBtlsSsl *ptr, void *buf, int count)
117 return SSL_read (ptr->ssl, buf, count);
121 mono_btls_ssl_write (MonoBtlsSsl *ptr, void *buf, int count)
123 return SSL_write (ptr->ssl, buf, count);
127 mono_btls_ssl_get_version (MonoBtlsSsl *ptr)
129 return SSL_version (ptr->ssl);
133 mono_btls_ssl_set_min_version (MonoBtlsSsl *ptr, int version)
135 SSL_set_min_version (ptr->ssl, version);
139 mono_btls_ssl_set_max_version (MonoBtlsSsl *ptr, int version)
141 SSL_set_max_version (ptr->ssl, version);
145 mono_btls_ssl_get_cipher (MonoBtlsSsl *ptr)
147 const SSL_CIPHER *cipher;
149 cipher = SSL_get_current_cipher (ptr->ssl);
152 return (uint16_t)SSL_CIPHER_get_id (cipher);
156 mono_btls_ssl_set_cipher_list (MonoBtlsSsl *ptr, const char *str)
158 return SSL_set_cipher_list(ptr->ssl, str);
162 mono_btls_ssl_get_ciphers (MonoBtlsSsl *ptr, uint16_t **data)
164 STACK_OF(SSL_CIPHER) *ciphers;
169 ciphers = SSL_get_ciphers (ptr->ssl);
173 count = (int)sk_SSL_CIPHER_num (ciphers);
175 *data = OPENSSL_malloc (2 * count);
179 for (i = 0; i < count; i++) {
180 const SSL_CIPHER *cipher = sk_SSL_CIPHER_value (ciphers, i);
181 (*data) [i] = (uint16_t) SSL_CIPHER_get_id (cipher);
188 mono_btls_ssl_get_peer_certificate (MonoBtlsSsl *ptr)
190 return SSL_get_peer_certificate (ptr->ssl);
194 mono_btls_ssl_get_error (MonoBtlsSsl *ptr, int ret_code)
196 return SSL_get_error (ptr->ssl, ret_code);
200 mono_btls_ssl_set_verify_param (MonoBtlsSsl *ptr, const MonoBtlsX509VerifyParam *param)
202 return SSL_set1_param (ptr->ssl, mono_btls_x509_verify_param_peek_param (param));
206 mono_btls_ssl_set_server_name (MonoBtlsSsl *ptr, const char *name)
208 return SSL_set_tlsext_host_name (ptr->ssl, name);
211 MONO_API const char *
212 mono_btls_ssl_get_server_name (MonoBtlsSsl *ptr)
214 return SSL_get_servername (ptr->ssl, TLSEXT_NAMETYPE_host_name);