/*

* This program is free software; you can redistribute it and/or

* modify it under the terms of the GNU General Public License

* as published by the Free Software Foundation; either version 2

* of the License, or (at your option) any later version.

*

* This program is distributed in the hope that it will be useful,

* but WITHOUT ANY WARRANTY; without even the implied warranty of

* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the

* GNU General Public License for more details.

*

* For more ,please contact QQ/wechat:4108863 mail:4108863@qq.com

*/

#ifndef AIHTTPS_H_INCLUDED

#define AIHTTPS_H_INCLUDED

#include "config.h"

#include <arpa/inet.h>

#include "ev.h"

#include <stdio.h>

#include <syslog.h>

#include <sys/types.h>

#include <sys/ioctl.h>

#include <openssl/asn1.h>

#include <openssl/engine.h>

#include <openssl/evp.h>

#include <openssl/err.h>

#include <openssl/ssl.h>

#include <openssl/ocsp.h>

#include <openssl/x509.h>

#include <openssl/x509v3.h>

#include "asn_gentm.h"

#include "configuration.h"

#include "ringbuffer.h"

#include "foreign/miniobj.h"

#include "foreign/vas.h"

#include "foreign/vsb.h"

#include "waf/httpx.h"

#include "waf/mqtt.h"

typedef struct sslstaple_s sslstaple;

struct sni_name_s;

VTAILQ_HEAD(sni_name_head, sni_name_s);

/* SSL contexts. */

struct sslctx_s {

unsigned magic;

#define SSLCTX_MAGIC 0xcd1ce5ff

char *filename;

SSL_CTX *ctx;

double mtim;

sslstaple *staple;

int staple_vfy;

char *staple_fn;

X509 *x509;

ev_stat *ev_staple;

struct sni_name_head sni_list;

UT_hash_handle hh;

};

typedef struct sslctx_s sslctx;

#ifndef OPENSSL_NO_TLSEXT

struct sslstaple_s {

unsigned magic;

#define SSLSTAPLE_MAGIC 0x20fe53fd

unsigned char *staple;

double mtim;

double nextupd;

int len;

};

/* SNI lookup objects */

typedef struct sni_name_s {

unsigned magic;

#define SNI_NAME_MAGIC 0xb0626581

char *servername;

sslctx *sctx;

int is_wildcard;

VTAILQ_ENTRY(sni_name_s) list;

UT_hash_handle hh;

} sni_name;

sni_name *sni_names;

#endif /* OPENSSL_NO_TLSEXT */

struct backend;

/*

* Proxied State

*

* All state associated with one proxied connection

*/

typedef struct proxystate {

unsigned magic;

#define PROXYSTATE_MAGIC 0xcf877ed9

ringbuffer ring_ssl2clear; /* Pushing bytes from

* secure to clear

* stream */

ringbuffer ring_clear2ssl; /* Pushing bytes from

* clear to secure

* stream */

ev_io ev_r_ssl; /* Secure stream write event */

ev_io ev_w_ssl; /* Secure stream read event */

ev_io ev_r_handshake; /* Secure stream handshake

* write event */

ev_io ev_w_handshake; /* Secure stream handshake

* read event */

ev_timer ev_t_handshake; /* handshake timer */

ev_io ev_w_connect; /* Backend connect event */

ev_timer ev_t_connect; /* backend connect timer */

ev_io ev_r_clear; /* Clear stream write event */

ev_io ev_w_clear; /* Clear stream read event */

ev_io ev_proxy; /* proxy read event */

int fd_up; /* Upstream (client) socket */

int fd_down; /* Downstream (backend)

* socket */

struct backend *backend;

int want_shutdown:1; /* Connection is

* half-shutdown */

int handshaked:1; /* Initial handshake happened */

int clear_connected:1; /* Clear stream is

* connected */

int renegotiation:1; /* Renegotation is

* occuring */

int npn_alpn_tried:1;/* NPN or ALPN was tried */

SSL *ssl; /* OpenSSL SSL state */

http_waf_msg *req;

struct sockaddr_storage remote_ip; /* Remote ip returned

* from `accept` */

int connect_port; /* local port for connection */

} proxystate;

X509 * Find_issuer(X509 *subj, STACK_OF(X509) *chain);

#endif /* AIHTTPS_H_INCLUDED */