1 ! Copyright (C) 2007 Elie CHAFTARI
2 ! Portions copyright (C) 2008 Slava Pestov
3 ! See http://factorcode.org/license.txt for BSD license.
4 USING: alien alien.c-types alien.destructors alien.libraries
5 alien.parser alien.syntax classes.struct combinators kernel
6 literals namespaces openssl.libcrypto system ;
7 SLOT: alpn-supported-protocols
11 { [ os windows? ] [ "libssl-38.dll" ] }
12 { [ os macosx? ] [ "libssl.35.dylib" ] }
13 { [ os unix? ] [ "libssl.so" ] }
14 } cond cdecl add-library >>
16 CONSTANT: X509_FILETYPE_PEM 1
17 CONSTANT: X509_FILETYPE_ASN1 2
18 CONSTANT: X509_FILETYPE_DEFAULT 3
20 ALIAS: SSL_FILETYPE_ASN1 X509_FILETYPE_ASN1
21 ALIAS: SSL_FILETYPE_PEM X509_FILETYPE_PEM
23 CONSTANT: SSL_SENT_SHUTDOWN 1
24 CONSTANT: SSL_RECEIVED_SHUTDOWN 2
26 CONSTANT: SSL_NOTHING 1
27 CONSTANT: SSL_WRITING 2
28 CONSTANT: SSL_READING 3
29 CONSTANT: SSL_X509_LOOKUP 4
31 CONSTANT: SSL_CTRL_NEED_TMP_RSA 1
32 CONSTANT: SSL_CTRL_SET_TMP_RSA 2
33 CONSTANT: SSL_CTRL_SET_TMP_DH 3
34 CONSTANT: SSL_CTRL_SET_TMP_RSA_CB 4
35 CONSTANT: SSL_CTRL_SET_TMP_DH_CB 5
37 CONSTANT: SSL_CTRL_GET_SESSION_REUSED 6
38 CONSTANT: SSL_CTRL_GET_CLIENT_CERT_REQUEST 7
39 CONSTANT: SSL_CTRL_GET_NUM_RENEGOTIATIONS 8
40 CONSTANT: SSL_CTRL_CLEAR_NUM_RENEGOTIATIONS 9
41 CONSTANT: SSL_CTRL_GET_TOTAL_RENEGOTIATIONS 10
42 CONSTANT: SSL_CTRL_GET_FLAGS 11
43 CONSTANT: SSL_CTRL_EXTRA_CHAIN_CERT 12
45 CONSTANT: SSL_CTRL_SET_MSG_CALLBACK 13
46 CONSTANT: SSL_CTRL_SET_MSG_CALLBACK_ARG 14
48 CONSTANT: SSL_CTRL_SESS_NUMBER 20
49 CONSTANT: SSL_CTRL_SESS_CONNECT 21
50 CONSTANT: SSL_CTRL_SESS_CONNECT_GOOD 22
51 CONSTANT: SSL_CTRL_SESS_CONNECT_RENEGOTIATE 23
52 CONSTANT: SSL_CTRL_SESS_ACCEPT 24
53 CONSTANT: SSL_CTRL_SESS_ACCEPT_GOOD 25
54 CONSTANT: SSL_CTRL_SESS_ACCEPT_RENEGOTIATE 26
55 CONSTANT: SSL_CTRL_SESS_HIT 27
56 CONSTANT: SSL_CTRL_SESS_CB_HIT 28
57 CONSTANT: SSL_CTRL_SESS_MISSES 29
58 CONSTANT: SSL_CTRL_SESS_TIMEOUTS 30
59 CONSTANT: SSL_CTRL_SESS_CACHE_FULL 31
60 CONSTANT: SSL_CTRL_OPTIONS 32
61 CONSTANT: SSL_CTRL_MODE 33
63 CONSTANT: SSL_CTRL_GET_READ_AHEAD 40
64 CONSTANT: SSL_CTRL_SET_READ_AHEAD 41
65 CONSTANT: SSL_CTRL_SET_SESS_CACHE_SIZE 42
66 CONSTANT: SSL_CTRL_GET_SESS_CACHE_SIZE 43
67 CONSTANT: SSL_CTRL_SET_SESS_CACHE_MODE 44
68 CONSTANT: SSL_CTRL_GET_SESS_CACHE_MODE 45
70 CONSTANT: SSL_CTRL_GET_MAX_CERT_LIST 50
71 CONSTANT: SSL_CTRL_SET_MAX_CERT_LIST 51
72 CONSTANT: SSL_CTRL_SET_MAX_SEND_FRAGMENT 52
73 CONSTANT: SSL_CTRL_SET_TLSEXT_SERVERNAME_CB 53
74 CONSTANT: SSL_CTRL_SET_TLSEXT_SERVERNAME_ARG 54
75 CONSTANT: SSL_CTRL_SET_TLSEXT_HOSTNAME 55
76 CONSTANT: SSL_CTRL_SET_TLSEXT_DEBUG_CB 56
77 CONSTANT: SSL_CTRL_SET_TLSEXT_DEBUG_ARG 57
78 CONSTANT: SSL_CTRL_GET_TLSEXT_TICKET_KEYS 58
79 CONSTANT: SSL_CTRL_SET_TLSEXT_TICKET_KEYS 59
80 CONSTANT: SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB 61
81 CONSTANT: SSL_CTRL_SET_TLSEXT_OPAQUE_PRF_INPUT_CB_ARG 62
82 CONSTANT: SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB 63
83 CONSTANT: SSL_CTRL_SET_TLSEXT_STATUS_REQ_CB_ARG 64
84 CONSTANT: SSL_CTRL_SET_TLSEXT_STATUS_REQ_TYPE 65
85 CONSTANT: SSL_CTRL_GET_TLSEXT_STATUS_REQ_EXTS 66
86 CONSTANT: SSL_CTRL_SET_TLSEXT_STATUS_REQ_EXTS 67
87 CONSTANT: SSL_CTRL_GET_TLSEXT_STATUS_REQ_IDS 68
88 CONSTANT: SSL_CTRL_SET_TLSEXT_STATUS_REQ_IDS 69
89 CONSTANT: SSL_CTRL_GET_TLSEXT_STATUS_REQ_OCSP_RESP 70
90 CONSTANT: SSL_CTRL_SET_TLSEXT_STATUS_REQ_OCSP_RESP 71
91 CONSTANT: SSL_CTRL_SET_TLSEXT_TICKET_KEY_CB 72
92 CONSTANT: SSL_CTRL_SET_TLS_EXT_SRP_USERNAME_CB 75
93 CONSTANT: SSL_CTRL_SET_SRP_VERIFY_PARAM_CB 76
94 CONSTANT: SSL_CTRL_SET_SRP_GIVE_CLIENT_PWD_CB 77
95 CONSTANT: SSL_CTRL_SET_SRP_ARG 78
96 CONSTANT: SSL_CTRL_SET_TLS_EXT_SRP_USERNAME 79
97 CONSTANT: SSL_CTRL_SET_TLS_EXT_SRP_STRENGTH 80
98 CONSTANT: SSL_CTRL_SET_TLS_EXT_SRP_PASSWORD 81
99 CONSTANT: SSL_CTRL_TLS_EXT_SEND_HEARTBEAT 85
100 CONSTANT: SSL_CTRL_GET_TLS_EXT_HEARTBEAT_PENDING 86
101 CONSTANT: SSL_CTRL_SET_TLS_EXT_HEARTBEAT_NO_REQUESTS 87
102 CONSTANT: SSL_CTRL_CHAIN 88
103 CONSTANT: SSL_CTRL_CHAIN_CERT 89
104 CONSTANT: SSL_CTRL_GET_CURVES 90
105 CONSTANT: SSL_CTRL_SET_CURVES 91
106 CONSTANT: SSL_CTRL_SET_CURVES_LIST 92
107 CONSTANT: SSL_CTRL_GET_SHARED_CURVE 93
108 CONSTANT: SSL_CTRL_SET_ECDH_AUTO 94
109 CONSTANT: SSL_CTRL_SET_SIGALGS 97
110 CONSTANT: SSL_CTRL_SET_SIGALGS_LIST 98
111 CONSTANT: SSL_CTRL_CERT_FLAGS 99
112 CONSTANT: SSL_CTRL_CLEAR_CERT_FLAGS 100
113 CONSTANT: SSL_CTRL_SET_CLIENT_SIGALGS 101
114 CONSTANT: SSL_CTRL_SET_CLIENT_SIGALGS_LIST 102
115 CONSTANT: SSL_CTRL_GET_CLIENT_CERT_TYPES 103
116 CONSTANT: SSL_CTRL_SET_CLIENT_CERT_TYPES 104
117 CONSTANT: SSL_CTRL_BUILD_CERT_CHAIN 105
118 CONSTANT: SSL_CTRL_SET_VERIFY_CERT_STORE 106
119 CONSTANT: SSL_CTRL_SET_CHAIN_CERT_STORE 107
120 CONSTANT: SSL_CTRL_GET_PEER_SIGNATURE_NID 108
121 CONSTANT: SSL_CTRL_GET_SERVER_TMP_KEY 109
122 CONSTANT: SSL_CTRL_GET_RAW_CIPHERLIST 110
123 CONSTANT: SSL_CTRL_GET_EC_POINT_FORMATS 111
124 CONSTANT: SSL_CTRL_GET_CHAIN_CERTS 115
125 CONSTANT: SSL_CTRL_SELECT_CURRENT_CERT 116
126 CONSTANT: SSL_CTRL_SET_CURRENT_CERT 117
127 CONSTANT: SSL_CTRL_CHECK_PROTO_VERSION 119
128 CONSTANT: DTLS_CTRL_SET_LINK_MTU 120
129 CONSTANT: DTLS_CTRL_GET_LINK_MIN_MTU 121
131 CONSTANT: TLSEXT_NAMETYPE_host_name 0
132 CONSTANT: TLSEXT_STATUSTYPE_ocsp 1
134 CONSTANT: TLSEXT_ECPOINTFORMAT_first 0
135 CONSTANT: TLSEXT_ECPOINTFORMAT_uncompressed 0
136 CONSTANT: TLSEXT_ECPOINTFORMAT_ansiX962_compressed_prime 1
137 CONSTANT: TLSEXT_ECPOINTFORMAT_ansiX962_compressed_char2 2
138 CONSTANT: TLSEXT_ECPOINTFORMAT_last 2
140 CONSTANT: TLSEXT_signature_anonymous 0
141 CONSTANT: TLSEXT_signature_rsa 1
142 CONSTANT: TLSEXT_signature_dsa 2
143 CONSTANT: TLSEXT_signature_ecdsa 3
144 CONSTANT: TLSEXT_signature_num 4
146 CONSTANT: TLSEXT_hash_none 0
147 CONSTANT: TLSEXT_hash_md5 1
148 CONSTANT: TLSEXT_hash_sha1 2
149 CONSTANT: TLSEXT_hash_sha224 3
150 CONSTANT: TLSEXT_hash_sha256 4
151 CONSTANT: TLSEXT_hash_sha384 5
152 CONSTANT: TLSEXT_hash_sha512 6
153 CONSTANT: TLSEXT_hash_num 7
155 CONSTANT: TLSEXT_nid_unknown 0x1000000
157 CONSTANT: SSL_OP_NO_SSLv2 0x01000000
158 CONSTANT: SSL_OP_NO_SSLv3 0x02000000
159 CONSTANT: SSL_OP_NO_TLSv1 0x04000000
160 CONSTANT: SSL_OP_NO_TLSv1_2 0x08000000
161 CONSTANT: SSL_OP_NO_TLSv1_1 0x10000000
163 CONSTANT: SSL_VERIFY_NONE 0
164 CONSTANT: SSL_VERIFY_PEER 1
165 CONSTANT: SSL_VERIFY_FAIL_IF_NO_PEER_CERT 2
166 CONSTANT: SSL_VERIFY_CLIENT_ONCE 4
168 CONSTANT: SSL_SESS_CACHE_OFF 0x0000
169 CONSTANT: SSL_SESS_CACHE_CLIENT 0x0001
170 CONSTANT: SSL_SESS_CACHE_SERVER 0x0002
172 CONSTANT: SSL_SESS_CACHE_BOTH flags{ SSL_SESS_CACHE_CLIENT SSL_SESS_CACHE_SERVER }
174 CONSTANT: SSL_SESS_CACHE_NO_AUTO_CLEAR 0x0080
175 CONSTANT: SSL_SESS_CACHE_NO_INTERNAL_LOOKUP 0x0100
176 CONSTANT: SSL_SESS_CACHE_NO_INTERNAL_STORE 0x0200
178 CONSTANT: SSL_SESS_CACHE_NO_INTERNAL
179 flags{ SSL_SESS_CACHE_NO_INTERNAL_LOOKUP SSL_SESS_CACHE_NO_INTERNAL_STORE }
181 CONSTANT: SSL_ERROR_NONE 0
182 CONSTANT: SSL_ERROR_SSL 1
183 CONSTANT: SSL_ERROR_WANT_READ 2
184 CONSTANT: SSL_ERROR_WANT_WRITE 3
185 CONSTANT: SSL_ERROR_WANT_X509_LOOKUP 4
186 CONSTANT: SSL_ERROR_SYSCALL 5 ! consult errno for details
187 CONSTANT: SSL_ERROR_ZERO_RETURN 6
188 CONSTANT: SSL_ERROR_WANT_CONNECT 7
189 CONSTANT: SSL_ERROR_WANT_ACCEPT 8
191 ! Error messages table
192 : error-messages ( -- hash )
194 { 0 "SSL_ERROR_NONE" }
195 { 1 "SSL_ERROR_SSL" }
196 { 2 "SSL_ERROR_WANT_READ" }
197 { 3 "SSL_ERROR_WANT_WRITE" }
198 { 4 "SSL_ERROR_WANT_X509_LOOKUP" }
199 { 5 "SSL_ERROR_SYSCALL" }
200 { 6 "SSL_ERROR_ZERO_RETURN" }
201 { 7 "SSL_ERROR_WANT_CONNECT" }
202 { 8 "SSL_ERROR_WANT_ACCEPT" }
210 ! ===============================================
212 ! ===============================================
219 TYPEDEF: stack_st _STACK
221 ! ===============================================
223 ! ===============================================
226 ! ===============================================
228 ! ===============================================
230 TYPEDEF: ASN1_ITEM ASN1_ITEM_EXP
238 FUNCTION: int ASN1_STRING_cmp ( ASN1_STRING* a, ASN1_STRING* b )
239 FUNCTION: ASN1_VALUE* ASN1_item_d2i ( ASN1_VALUE** val, uchar** in, long len, ASN1_ITEM* it )
241 ! ===============================================
243 ! ===============================================
244 TYPEDEF: ASN1_STRING ASN1_OCTET_STRING
246 ! ===============================================
248 ! ===============================================
249 STRUCT: X509_EXTENSION
252 { value ASN1_OCTET_STRING* } ;
257 ! ===============================================
259 ! ===============================================
260 STRUCT: X509V3_EXT_METHOD
265 FUNCTION: X509V3_EXT_METHOD* X509V3_EXT_get ( X509_EXTENSION* ext )
267 UNION-STRUCT: GENERAL_NAME_st_d
271 { dNSName ASN1_STRING* } ;
273 STRUCT: GENERAL_NAME_st
275 { d GENERAL_NAME_st_d } ;
277 CONSTANT: GEN_OTHERNAME 0
278 CONSTANT: GEN_EMAIL 1
281 CONSTANT: GEN_DIRNAME 4
282 CONSTANT: GEN_EDIPARTY 5
284 CONSTANT: GEN_IPADD 7
287 ! ===============================================
289 ! ===============================================
290 STRUCT: ssl_method_st
296 { ssl_connect void* }
300 { ssl_shutdown void* }
301 { ssl_renegotiate void* }
302 { ssl_renegotiate_check void* }
303 { ssl_get_message void* }
304 { ssl_read_bytes void* }
305 { ssl_write_bytes void* }
306 { ssl_dispatch_alert void* }
308 { ssl_ctx_ctrl void* }
309 { get_cipher_by_char void* }
310 { put_cipher_by_char void* }
311 { ssl_pending void* }
312 { num_ciphers void* }
314 { get_ssl_method void* }
315 { get_timeout void* }
317 { ssl_version void* }
318 { ssl_callback_ctrl void* }
319 { ssl_ctx_callback_ctrl void* } ;
320 TYPEDEF: ssl_method_st* ssl-method
325 { method ssl_method_st* }
331 { handshake_func void* }
334 { quiet_shutdown int }
343 { packet_length int }
348 { msg_callback void* }
349 { msg_callback_arg void* }
352 { cipher_list void* }
353 { cipher_list_by_id void* }
355 { enc_read_ctx void* }
358 { enc_write_ctx void* }
362 { sid_ctx_length uint }
364 { session SSL_SESSION* }
365 { generate_session_id void* }
367 { verify_callback void* }
368 { info_callback void* }
372 { psk_client_callback void* }
373 { psk_server_callback void* }
376 ! ------------------------------------------------------------------------------
378 ! ------------------------------------------------------------------------------
379 CONSTANT: OPENSSL_INIT_NO_LOAD_CRYPTO_STRINGS 0x00000001
380 CONSTANT: OPENSSL_INIT_LOAD_CRYPTO_STRINGS 0x00000002
381 CONSTANT: OPENSSL_INIT_NO_LOAD_SSL_STRINGS 0x00100000
382 CONSTANT: OPENSSL_INIT_LOAD_SSL_STRINGS 0x00200000
383 CONSTANT: OPENSSL_INIT_ADD_ALL_CIPHERS 0x00000004
384 CONSTANT: OPENSSL_INIT_ADD_ALL_DIGESTS 0x00000008
385 CONSTANT: OPENSSL_INIT_NO_ADD_ALL_CIPHERS 0x00000010
386 CONSTANT: OPENSSL_INIT_NO_ADD_ALL_DIGESTS 0x00000020
389 FUNCTION: int OPENSSL_init_ssl ( uint64_t opts, void* settings )
390 ! ------------------------------------------------------------------------------
391 ! API < 1.1.0, removed in new versions
392 ! ------------------------------------------------------------------------------
393 ! Initialization functions
394 FUNCTION: int SSL_library_init ( )
396 ! Maps OpenSSL errors to strings
397 FUNCTION: void SSL_load_error_strings ( )
398 ! ------------------------------------------------------------------------------
400 ! Sets the default SSL version
401 FUNCTION: ssl-method SSLv2_client_method ( )
402 FUNCTION: ssl-method SSLv23_client_method ( )
403 FUNCTION: ssl-method SSLv23_server_method ( )
404 FUNCTION: ssl-method SSLv23_method ( ) ! SSLv3 but can rollback to v2
405 FUNCTION: ssl-method SSLv3_client_method ( )
406 FUNCTION: ssl-method SSLv3_server_method ( )
407 FUNCTION: ssl-method SSLv3_method ( )
408 FUNCTION: ssl-method TLSv1_client_method ( )
409 FUNCTION: ssl-method TLSv1_server_method ( )
410 FUNCTION: ssl-method TLSv1_method ( )
411 FUNCTION: ssl-method TLSv1_1_method ( )
412 FUNCTION: ssl-method TLSv1_2_method ( )
414 FUNCTION: void SSL_SESSION_free ( SSL_SESSION* ses )
415 FUNCTION: void RAND_seed ( void* buf, int num )
416 FUNCTION: void* BIO_f_ssl ( )
418 ! ------------------------------------------------------------------------------
420 ! ------------------------------------------------------------------------------
421 FUNCTION: c-string SSL_get_version ( SSL* ssl )
423 FUNCTION: c-string SSL_state_string ( SSL* ssl )
424 FUNCTION: c-string SSL_rstate_string ( SSL* ssl )
425 FUNCTION: c-string SSL_state_string_long ( SSL* ssl )
426 FUNCTION: c-string SSL_rstate_string_long ( SSL* ssl )
428 FUNCTION: int SSL_set_fd ( SSL* ssl, int fd )
430 FUNCTION: void SSL_set_bio ( SSL* ssl, void* rbio, void* wbio )
432 FUNCTION: int SSL_set_session ( SSL* to, SSL_SESSION* session )
433 FUNCTION: SSL_SESSION* SSL_get_session ( SSL* to )
434 FUNCTION: SSL_SESSION* SSL_get1_session ( SSL* ssl )
436 FUNCTION: int SSL_get_error ( SSL* ssl, int ret )
438 FUNCTION: void SSL_set_connect_state ( SSL* ssl )
440 FUNCTION: void SSL_set_accept_state ( SSL* ssl )
441 FUNCTION: void SSL_free ( SSL* ssl )
444 FUNCTION: int SSL_accept ( SSL* ssl )
445 FUNCTION: int SSL_connect ( SSL* ssl )
446 FUNCTION: int SSL_read ( SSL* ssl, void* buf, int num )
447 FUNCTION: int SSL_write ( SSL* ssl, void* buf, int num )
448 FUNCTION: long SSL_ctrl ( SSL* ssl, int cmd, long larg, void* parg )
450 FUNCTION: int SSL_shutdown ( SSL* ssl )
451 FUNCTION: int SSL_get_shutdown ( SSL* ssl )
453 FUNCTION: int SSL_want ( SSL* ssl )
454 FUNCTION: long SSL_get_verify_result ( SSL* ssl )
455 FUNCTION: X509* SSL_get_peer_certificate ( SSL* s )
457 FUNCTION: int SSL_set_cipher_list ( SSL* ssl, c-string str )
458 FUNCTION: int SSL_use_RSAPrivateKey_file ( SSL* ssl, c-string str )
459 FUNCTION: int SSL_use_certificate_file ( SSL* ssl, c-string str, int type )
461 FUNCTION: SSL* SSL_load_client_CA_file ( c-string file )
463 ! ------------------------------------------------------------------------------
465 ! ------------------------------------------------------------------------------
466 FUNCTION: SSL_CTX* SSL_CTX_new ( ssl-method method )
467 FUNCTION: void SSL_CTX_free ( SSL_CTX* ctx )
468 DESTRUCTOR: SSL_CTX_free
470 ! Load the certificates and private keys into the SSL_CTX
471 FUNCTION: int SSL_CTX_use_certificate_chain_file ( SSL_CTX* ctx,
472 c-string file ) ! PEM type
473 FUNCTION: int SSL_CTX_use_certificate ( SSL_CTX* ctx, X509* x )
475 FUNCTION: SSL* SSL_new ( SSL_CTX* ctx )
478 FUNCTION: int SSL_CTX_set_default_verify_paths ( SSL_CTX* ctx )
479 FUNCTION: int SSL_CTX_set_session_id_context ( SSL_CTX* ctx,
482 FUNCTION: int SSL_CTX_use_RSAPrivateKey_file ( SSL_CTX* ctx, int type )
483 FUNCTION: int SSL_CTX_load_verify_locations ( SSL_CTX* ctx,
486 FUNCTION: void SSL_CTX_set_verify ( SSL_CTX* ctx, int mode, void* callback )
487 FUNCTION: void SSL_CTX_set_client_CA_list ( SSL_CTX* ctx, SSL* list )
489 ! Used to manipulate settings of the SSL_CTX and SSL objects.
490 ! This function should never be called directly
491 FUNCTION: long SSL_CTX_ctrl ( SSL_CTX* ctx, int cmd, long larg, void* parg )
493 FUNCTION: void SSL_CTX_set_default_passwd_cb ( SSL_CTX* ctx, void* cb )
495 FUNCTION: void SSL_CTX_set_default_passwd_cb_userdata ( SSL_CTX* ctx,
498 FUNCTION: int SSL_CTX_use_PrivateKey_file ( SSL_CTX* ctx, c-string file,
501 ! Sets the maximum depth for the allowed ctx certificate chain verification
502 FUNCTION: void SSL_CTX_set_verify_depth ( SSL_CTX* ctx, int depth )
504 ! Sets DH parameters to be used to be dh.
505 ! The key is inherited by all ssl objects created from ctx
506 FUNCTION: void SSL_CTX_set_tmp_dh_callback ( SSL_CTX* ctx, void* dh )
508 FUNCTION: void SSL_CTX_set_tmp_rsa_callback ( SSL_CTX* ctx, void* rsa )
510 FUNCTION: ulong SSL_CTX_set_options ( SSL_CTX* ctx, ulong options )
511 FUNCTION: ulong SSL_set_options ( SSL* ssl, ulong options )
513 FUNCTION: ulong SSL_CTX_clear_options ( SSL_CTX* ctx, ulong options )
514 FUNCTION: ulong SSL_clear_options ( SSL* ssl, ulong options )
516 FUNCTION: ulong SSL_CTX_get_options ( SSL_CTX* ctx )
517 FUNCTION: ulong SSL_get_options ( SSL* ssl )
519 FUNCTION: ulong SSL_get_secure_renegotiation_support ( SSL* ssl )
521 ! -----------------------------
523 ! -----------------------------
525 ! values from https://github.com/openssl/openssl/blob/master/include/openssl/tls1.h
526 CONSTANT: SSL_TLSEXT_ERR_OK 0
527 CONSTANT: SSL_TLSEXT_ERR_ALERT_FATAL 2
528 CONSTANT: SSL_TLSEXT_ERR_NOACK 3
529 ! values from https://github.com/openssl/openssl/blob/master/include/openssl/ssl.h.in
530 CONSTANT: OPENSSL_NPN_UNSUPPORTED 0
531 CONSTANT: OPENSSL_NPN_NEGOTIATED 1
532 CONSTANT: OPENSSL_NPN_NO_OVERLAP 2
535 ! CALLBACK: int SSL_CTX_alpn_select_cb_func ( SSL* ssl, const
536 ! unsigned c-string* out, uchar* outlen, const unsigned c-string
537 ! in, uint inlen, void* arg )
538 CALLBACK: int SSL_CTX_alpn_select_cb_func ( SSL* ssl,
539 c-string* out, uchar* outlen, c-string in, uint inlen, void* arg )
540 FUNCTION: void SSL_CTX_set_alpn_select_cb ( SSL_CTX* ctx,
541 SSL_CTX_alpn_select_cb_func cb, void* arg )
542 FUNCTION: int SSL_select_next_proto ( c-string* out, uchar*
543 outlen, c-string server, uint server_len, c-string client, uint
546 FUNCTION: void SSL_get0_alpn_selected ( SSL* s,
547 c-string* data, uint* len )
549 ! ------------------------------------------------------------------------------
551 ! ------------------------------------------------------------------------------
552 : SSL_set_tlsext_host_name ( ctx hostname -- n )
553 [ SSL_CTRL_SET_TLSEXT_HOSTNAME TLSEXT_NAMETYPE_host_name ] dip
556 : SSL_CTX_need_tmp_rsa ( ctx -- n )
557 SSL_CTRL_NEED_TMP_RSA 0 f SSL_CTX_ctrl ;
559 : SSL_CTX_set_tmp_rsa ( ctx rsa -- n )
560 [ SSL_CTRL_SET_TMP_RSA 0 ] dip SSL_CTX_ctrl ;
562 : SSL_CTX_set_tmp_dh ( ctx dh -- n )
563 [ SSL_CTRL_SET_TMP_DH 0 ] dip SSL_CTX_ctrl ;
565 : SSL_CTX_set_session_cache_mode ( ctx mode -- n )
566 [ SSL_CTRL_SET_SESS_CACHE_MODE ] dip f SSL_CTX_ctrl ;
568 ! ===============================================
570 ! ===============================================
573 { X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT 2 }
574 X509_V_ERR_UNABLE_TO_GET_CRL
575 X509_V_ERR_UNABLE_TO_DECRYPT_CERT_SIGNATURE
576 X509_V_ERR_UNABLE_TO_DECRYPT_CRL_SIGNATURE
577 X509_V_ERR_UNABLE_TO_DECODE_ISSUER_PUBLIC_KEY
578 X509_V_ERR_CERT_SIGNATURE_FAILURE
579 X509_V_ERR_CRL_SIGNATURE_FAILURE
580 X509_V_ERR_CERT_NOT_YET_VALID
581 X509_V_ERR_CERT_HAS_EXPIRED
582 X509_V_ERR_CRL_NOT_YET_VALID
583 X509_V_ERR_CRL_HAS_EXPIRED
584 X509_V_ERR_ERROR_IN_CERT_NOT_BEFORE_FIELD
585 X509_V_ERR_ERROR_IN_CERT_NOT_AFTER_FIELD
586 X509_V_ERR_ERROR_IN_CRL_LAST_UPDATE_FIELD
587 X509_V_ERR_ERROR_IN_CRL_NEXT_UPDATE_FIELD
588 X509_V_ERR_OUT_OF_MEM
589 X509_V_ERR_DEPTH_ZERO_SELF_SIGNED_CERT
590 X509_V_ERR_SELF_SIGNED_CERT_IN_CHAIN
591 X509_V_ERR_UNABLE_TO_GET_ISSUER_CERT_LOCALLY
592 X509_V_ERR_UNABLE_TO_VERIFY_LEAF_SIGNATURE
593 X509_V_ERR_CERT_CHAIN_TOO_LONG
594 X509_V_ERR_CERT_REVOKED
595 X509_V_ERR_INVALID_CA
596 X509_V_ERR_PATH_LENGTH_EXCEEDED
597 X509_V_ERR_INVALID_PURPOSE
598 X509_V_ERR_CERT_UNTRUSTED
599 X509_V_ERR_CERT_REJECTED
600 X509_V_ERR_SUBJECT_ISSUER_MISMATCH
601 X509_V_ERR_AKID_SKID_MISMATCH
602 X509_V_ERR_AKID_ISSUER_SERIAL_MISMATCH
603 X509_V_ERR_KEYUSAGE_NO_CERTSIGN
604 X509_V_ERR_UNABLE_TO_GET_CRL_ISSUER
605 X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION
606 X509_V_ERR_KEYUSAGE_NO_CRL_SIGN
607 X509_V_ERR_UNHANDLED_CRITICAL_CRL_EXTENSION
608 X509_V_ERR_INVALID_NON_CA
609 X509_V_ERR_PROXY_PATH_LENGTH_EXCEEDED
610 X509_V_ERR_KEYUSAGE_NO_DIGITAL_SIGNATURE
611 X509_V_ERR_PROXY_CERTIFICATES_NOT_ALLOWED
612 { X509_V_ERR_APPLICATION_VERIFICATION 50 } ;
614 ! ===============================================
616 ! ===============================================
617 CONSTANT: NID_commonName 13
618 CONSTANT: NID_subject_alt_name 85
619 CONSTANT: NID_issuer_alt_name 86
621 ! ===============================================
622 ! On Windows, some of the functions making up libressl
623 ! are placed in libcrypto-37.dll
624 ! ===============================================
627 [ "libcrypto-37.dll" cdecl add-library ] [ current-library set ] bi
630 ! ===============================================
632 ! ===============================================
633 CONSTANT: X509_R_CERT_ALREADY_IN_HASH_TABLE 101
635 FUNCTION: int X509_NAME_get_text_by_NID ( X509_NAME* name, int nid, void* buf, int len )
636 ! X509_NAME_oneline could return c-string but needs to be freed with OPENSSL_free
637 FUNCTION: char* X509_NAME_oneline ( X509_NAME* a, char* buf, int size )
639 FUNCTION: int X509_get_ext_by_NID ( X509* a, int nid, int lastpos )
640 FUNCTION: void* X509_get_ext_d2i ( X509* a, int nid, int* crit, int* idx )
641 FUNCTION: X509_NAME* X509_get_issuer_name ( X509* a )
642 FUNCTION: X509_NAME* X509_get_subject_name ( X509* a )
643 FUNCTION: int X509_check_trust ( X509* a, int id, int flags )
644 FUNCTION: X509_EXTENSION* X509_get_ext ( X509* a, int loc )
645 FUNCTION: void X509_free ( X509* a )
646 DESTRUCTOR: X509_free
647 FUNCTION: X509* d2i_X509 ( X509** px, uchar** in, int len )
648 FUNCTION: int i2d_X509 ( X509* x, uchar** out )
649 FUNCTION: int i2d_re_X509_tbs ( X509* x, uchar** out )
652 FUNCTION: X509_STORE* X509_STORE_new ( )
653 FUNCTION: int X509_STORE_add_cert ( X509_STORE* ctx, X509* x )
655 ! ------------------------------------------------------------------------------
657 ! ------------------------------------------------------------------------------
658 FUNCTION: int OPENSSL_sk_num ( _STACK* s )
659 FUNCTION: void* OPENSSL_sk_value ( _STACK* s, int v )
661 ! ------------------------------------------------------------------------------
662 ! API < 1.1.0, removed in new versions
663 ! ------------------------------------------------------------------------------
664 FUNCTION: int sk_num ( _STACK* s )
665 FUNCTION: void* sk_value ( _STACK* s, int v )
667 ! ------------------------------------------------------------------------------