blob: 50e592fee70a22d3f79179c740af9635eea05c2c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright (c) 2005, 2010, Oracle and/or its affiliates. All rights reserved.
*/
#ifndef _INET_KSSL_KSSL_H
#define _INET_KSSL_KSSL_H
#ifdef __cplusplus
extern "C" {
#endif
#include <sys/types.h>
#include <netinet/in.h>
#include <sys/crypto/common.h>
/* These are re-definition from <crypto/ioctl.h> */
typedef struct kssl_object_attribute {
uint64_t ka_type; /* attribute type */
uint32_t ka_value_offset; /* offset to attribute value */
uint32_t ka_value_len; /* length of attribute value */
} kssl_object_attribute_t;
typedef struct kssl_key {
crypto_key_format_t ks_format; /* format identifier */
uint32_t ks_count; /* number of attributes */
uint32_t ks_attrs_offset; /* offset to the attributes */
} kssl_key_t;
typedef struct kssl_certs_s {
uint32_t sc_count; /* number of certificates */
uint32_t sc_sizes_offset; /* offset to certificates sizes array */
uint32_t sc_certs_offset; /* offset to certificates array */
} kssl_certs_t;
#define MAX_PIN_LENGTH 1024
typedef struct kssl_tokinfo_s {
uint8_t toklabel[CRYPTO_EXT_SIZE_LABEL];
uint32_t pinlen;
uint32_t tokpin_offset; /* offset to the pin */
uint32_t ck_rv; /* PKCS #11 specific error */
} kssl_tokinfo_t;
/* Code point for Signalling Cipher Suite Value (SCSV) */
#define SSL_SCSV 0x00ff
/* Cipher suites */
#define SSL_RSA_WITH_NULL_SHA 0x0002
#define SSL_RSA_WITH_RC4_128_MD5 0x0004
#define SSL_RSA_WITH_RC4_128_SHA 0x0005
#define SSL_RSA_WITH_DES_CBC_SHA 0x0009
#define SSL_RSA_WITH_3DES_EDE_CBC_SHA 0x000a
#define TLS_RSA_WITH_AES_128_CBC_SHA 0x002f
#define TLS_RSA_WITH_AES_256_CBC_SHA 0x0035
/* total number of cipher suites supported */
#define CIPHER_SUITE_COUNT 7
#define CIPHER_NOTSET 0xffff
/* TLS extension types */
#define TLSEXT_RENEGOTIATION_INFO 0xff01
#define DEFAULT_SID_TIMEOUT 86400 /* 24 hours in seconds */
#define DEFAULT_SID_CACHE_NENTRIES 5000
typedef struct kssl_params_s {
uint64_t kssl_params_size; /* total params buf len */
/* address and port number */
struct sockaddr_in6 kssl_addr;
uint16_t kssl_proxy_port;
uint32_t kssl_session_cache_timeout; /* In seconds */
uint32_t kssl_session_cache_size;
/*
* Contains ordered list of cipher suites. We do not include
* the one suite with no encryption. Hence the -1.
*/
uint16_t kssl_suites[CIPHER_SUITE_COUNT - 1];
uint8_t kssl_is_nxkey;
kssl_tokinfo_t kssl_token;
/* certificates */
kssl_certs_t kssl_certs;
/* private key */
kssl_key_t kssl_privkey;
} kssl_params_t;
/* The ioctls to /dev/kssl */
#define KSSL_IOC(x) (('s' << 24) | ('s' << 16) | ('l' << 8) | (x))
#define KSSL_ADD_ENTRY KSSL_IOC(1)
#define KSSL_DELETE_ENTRY KSSL_IOC(2)
#ifdef _KERNEL
extern int kssl_add_entry(kssl_params_t *);
extern int kssl_delete_entry(struct sockaddr_in6 *);
#endif /* _KERNEL */
#ifdef __cplusplus
}
#endif
#endif /* _INET_KSSL_KSSL_H */
|
