1/**************************************************************************/
2/* tls_context_mbedtls.h */
3/**************************************************************************/
4/* This file is part of: */
5/* GODOT ENGINE */
6/* https://godotengine.org */
7/**************************************************************************/
8/* Copyright (c) 2014-present Godot Engine contributors (see AUTHORS.md). */
9/* Copyright (c) 2007-2014 Juan Linietsky, Ariel Manzur. */
10/* */
11/* Permission is hereby granted, free of charge, to any person obtaining */
12/* a copy of this software and associated documentation files (the */
13/* "Software"), to deal in the Software without restriction, including */
14/* without limitation the rights to use, copy, modify, merge, publish, */
15/* distribute, sublicense, and/or sell copies of the Software, and to */
16/* permit persons to whom the Software is furnished to do so, subject to */
17/* the following conditions: */
18/* */
19/* The above copyright notice and this permission notice shall be */
20/* included in all copies or substantial portions of the Software. */
21/* */
22/* THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, */
23/* EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF */
24/* MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. */
25/* IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY */
26/* CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, */
27/* TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE */
28/* SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE. */
29/**************************************************************************/
30
31#ifndef TLS_CONTEXT_MBEDTLS_H
32#define TLS_CONTEXT_MBEDTLS_H
33
34#include "crypto_mbedtls.h"
35
36#include "core/io/file_access.h"
37#include "core/object/ref_counted.h"
38
39#include <mbedtls/config.h>
40#include <mbedtls/ctr_drbg.h>
41#include <mbedtls/debug.h>
42#include <mbedtls/entropy.h>
43#include <mbedtls/ssl.h>
44#include <mbedtls/ssl_cookie.h>
45
46class TLSContextMbedTLS;
47
48class CookieContextMbedTLS : public RefCounted {
49 friend class TLSContextMbedTLS;
50
51protected:
52 bool inited = false;
53 mbedtls_entropy_context entropy;
54 mbedtls_ctr_drbg_context ctr_drbg;
55 mbedtls_ssl_cookie_ctx cookie_ctx;
56
57public:
58 Error setup();
59 void clear();
60
61 CookieContextMbedTLS();
62 ~CookieContextMbedTLS();
63};
64
65class TLSContextMbedTLS : public RefCounted {
66protected:
67 bool inited = false;
68
69public:
70 static void print_mbedtls_error(int p_ret);
71
72 Ref<X509CertificateMbedTLS> certs;
73 Ref<CryptoKeyMbedTLS> pkey;
74 Ref<CookieContextMbedTLS> cookies;
75
76 mbedtls_entropy_context entropy;
77 mbedtls_ctr_drbg_context ctr_drbg;
78 mbedtls_ssl_context tls;
79 mbedtls_ssl_config conf;
80
81 Error _setup(int p_endpoint, int p_transport, int p_authmode);
82 Error init_server(int p_transport, Ref<TLSOptions> p_options, Ref<CookieContextMbedTLS> p_cookies = Ref<CookieContextMbedTLS>());
83 Error init_client(int p_transport, const String &p_hostname, Ref<TLSOptions> p_options);
84 void clear();
85
86 mbedtls_ssl_context *get_context();
87
88 TLSContextMbedTLS();
89 ~TLSContextMbedTLS();
90};
91
92#endif // TLS_CONTEXT_MBEDTLS_H
93