mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-05 17:15:31 +00:00
e493e04c0f
* Following the example set in 634bdfb16d, the tlsdns netmgr
module now uses libuv and SSL primitives directly, rather than
opening a TLS socket which opens a TCP socket, as the previous
model was difficult to debug. Closes #2335.
* Remove the netmgr tls layer (we will have to re-add it for DoH)
* Add isc_tls API to wrap the OpenSSL SSL_CTX object into libisc
library; move the OpenSSL initialization/deinitialization from dstapi
needed for OpenSSL 1.0.x to the isc_tls_{initialize,destroy}()
* Add couple of new shims needed for OpenSSL 1.0.x
* When LibreSSL is used, require at least version 2.7.0 that
has the best OpenSSL 1.1.x compatibility and auto init/deinit
* Enforce OpenSSL 1.1.x usage on Windows
* Added a TLSDNS unit test and implemented a simple TLSDNS echo
server and client.
129 lines
3.0 KiB
C
129 lines
3.0 KiB
C
/*
|
|
* Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
*
|
|
* This Source Code Form is subject to the terms of the Mozilla Public
|
|
* License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
* file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
*
|
|
* See the COPYRIGHT file distributed with this work for additional
|
|
* information regarding copyright ownership.
|
|
*/
|
|
|
|
#pragma once
|
|
|
|
#include <openssl/crypto.h>
|
|
#include <openssl/engine.h>
|
|
#include <openssl/evp.h>
|
|
#include <openssl/hmac.h>
|
|
#include <openssl/opensslv.h>
|
|
#include <openssl/ssl.h>
|
|
|
|
#if !HAVE_CRYPTO_ZALLOC
|
|
void *
|
|
CRYPTO_zalloc(size_t num, const char *file, int line);
|
|
#endif /* if !HAVE_CRYPTO_ZALLOC */
|
|
|
|
#if !defined(OPENSSL_zalloc)
|
|
#define OPENSSL_zalloc(num) CRYPTO_zalloc(num, __FILE__, __LINE__)
|
|
#endif
|
|
|
|
#if !HAVE_EVP_CIPHER_CTX_NEW
|
|
EVP_CIPHER_CTX *
|
|
EVP_CIPHER_CTX_new(void);
|
|
#endif /* if !HAVE_EVP_CIPHER_CTX_NEW */
|
|
|
|
#if !HAVE_EVP_CIPHER_CTX_FREE
|
|
void
|
|
EVP_CIPHER_CTX_free(EVP_CIPHER_CTX *ctx);
|
|
#endif /* if !HAVE_EVP_CIPHER_CTX_FREE */
|
|
|
|
#if !HAVE_EVP_MD_CTX_NEW
|
|
EVP_MD_CTX *
|
|
EVP_MD_CTX_new(void);
|
|
#endif /* if !HAVE_EVP_MD_CTX_NEW */
|
|
|
|
#if !HAVE_EVP_MD_CTX_FREE
|
|
void
|
|
EVP_MD_CTX_free(EVP_MD_CTX *ctx);
|
|
#endif /* if !HAVE_EVP_MD_CTX_FREE */
|
|
|
|
#if !HAVE_EVP_MD_CTX_RESET
|
|
int
|
|
EVP_MD_CTX_reset(EVP_MD_CTX *ctx);
|
|
#endif /* if !HAVE_EVP_MD_CTX_RESET */
|
|
|
|
#if !HAVE_HMAC_CTX_NEW
|
|
HMAC_CTX *
|
|
HMAC_CTX_new(void);
|
|
#endif /* if !HAVE_HMAC_CTX_NEW */
|
|
|
|
#if !HAVE_HMAC_CTX_FREE
|
|
void
|
|
HMAC_CTX_free(HMAC_CTX *ctx);
|
|
#endif /* if !HAVE_HMAC_CTX_FREE */
|
|
|
|
#if !HAVE_HMAC_CTX_RESET
|
|
int
|
|
HMAC_CTX_reset(HMAC_CTX *ctx);
|
|
#endif /* if !HAVE_HMAC_CTX_RESET */
|
|
|
|
#if !HAVE_HMAC_CTX_GET_MD
|
|
const EVP_MD *
|
|
HMAC_CTX_get_md(const HMAC_CTX *ctx);
|
|
#endif /* if !HAVE_HMAC_CTX_GET_MD */
|
|
|
|
#if !HAVE_SSL_READ_EX
|
|
int
|
|
SSL_read_ex(SSL *ssl, void *buf, size_t num, size_t *readbytes);
|
|
#endif
|
|
|
|
#if !HAVE_SSL_PEEK_EX
|
|
int
|
|
SSL_peek_ex(SSL *ssl, void *buf, size_t num, size_t *readbytes);
|
|
#endif
|
|
|
|
#if !HAVE_SSL_WRITE_EX
|
|
int
|
|
SSL_write_ex(SSL *ssl, const void *buf, size_t num, size_t *written);
|
|
#endif
|
|
|
|
#if !HAVE_BIO_READ_EX
|
|
int
|
|
BIO_read_ex(BIO *b, void *data, size_t dlen, size_t *readbytes);
|
|
#endif
|
|
|
|
#if !HAVE_BIO_WRITE_EX
|
|
int
|
|
BIO_write_ex(BIO *b, const void *data, size_t dlen, size_t *written);
|
|
#endif
|
|
|
|
#if !HAVE_OPENSSL_INIT_CRYPTO
|
|
|
|
#define OPENSSL_INIT_NO_LOAD_CRYPTO_STRINGS 0x00000001L
|
|
#define OPENSSL_INIT_LOAD_CRYPTO_STRINGS 0x00000002L
|
|
#define OPENSSL_INIT_ADD_ALL_CIPHERS 0x00000004L
|
|
#define OPENSSL_INIT_ADD_ALL_DIGESTS 0x00000008L
|
|
#define OPENSSL_INIT_NO_ADD_ALL_CIPHERS 0x00000010L
|
|
#define OPENSSL_INIT_NO_ADD_ALL_DIGESTS 0x00000020L
|
|
|
|
int
|
|
OPENSSL_init_crypto(uint64_t opts, const void *settings);
|
|
#endif
|
|
|
|
#if !HAVE_OPENSSL_INIT_SSL
|
|
#define OPENSSL_INIT_NO_LOAD_SSL_STRINGS 0x00100000L
|
|
#define OPENSSL_INIT_LOAD_SSL_STRINGS 0x00200000L
|
|
|
|
int
|
|
OPENSSL_init_ssl(uint64_t opts, const void *settings);
|
|
|
|
#endif
|
|
|
|
#if !HAVE_TLS_SERVER_METHOD
|
|
#define TLS_server_method SSLv23_server_method
|
|
#endif
|
|
|
|
#if !HAVE_TLS_CLIENT_METHOD
|
|
#define TLS_client_method SSLv23_client_method
|
|
#endif
|