/usr/include/postfix/tls_scache.h is in postfix-dev 2.11.0-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 | #ifndef _TLS_SCACHE_H_INCLUDED_
#define _TLS_SCACHE_H_INCLUDED_
/*++
/* NAME
/* tls_scache 3h
/* SUMMARY
/* TLS session cache manager
/* SYNOPSIS
/* #include <tls_scache.h>
/* DESCRIPTION
/* .nf
/*
* Utility library.
*/
#include <dict.h>
#include <vstring.h>
/*
* External interface.
*/
typedef struct {
int flags; /* see below */
DICT *db; /* database handle */
char *cache_label; /* "smtpd", "smtp" or "lmtp" */
int verbose; /* enable verbose logging */
int timeout; /* smtp(d)_tls_session_cache_timeout */
char *saved_cursor; /* cursor cache ID */
} TLS_SCACHE;
#define TLS_TICKET_NAMELEN 16 /* RFC 5077 ticket key name length */
#define TLS_TICKET_IVLEN 16 /* RFC 5077 ticket IV length */
#define TLS_TICKET_KEYLEN 16 /* AES-128-CBC key size */
#define TLS_TICKET_MACLEN 16 /* SHA-256 collision strength */
#define TLS_SESSION_LIFEMIN 120 /* May you live to 120! */
typedef struct TLS_TICKET_KEY {
unsigned char name[TLS_TICKET_NAMELEN];
unsigned char bits[TLS_TICKET_KEYLEN];
unsigned char hmac[TLS_TICKET_MACLEN];
time_t tout;
} TLS_TICKET_KEY;
#define TLS_SCACHE_FLAG_DEL_SAVED_CURSOR (1<<0)
extern TLS_SCACHE *tls_scache_open(const char *, const char *, int, int);
extern void tls_scache_close(TLS_SCACHE *);
extern int tls_scache_lookup(TLS_SCACHE *, const char *, VSTRING *);
extern int tls_scache_update(TLS_SCACHE *, const char *, const char *, ssize_t);
extern int tls_scache_delete(TLS_SCACHE *, const char *);
extern int tls_scache_sequence(TLS_SCACHE *, int, char **, VSTRING *);
extern TLS_TICKET_KEY *tls_scache_key(unsigned char *, time_t, int);
extern TLS_TICKET_KEY *tls_scache_key_rotate(TLS_TICKET_KEY *);
#define TLS_SCACHE_DONT_NEED_CACHE_ID ((char **) 0)
#define TLS_SCACHE_DONT_NEED_SESSION ((VSTRING *) 0)
#define TLS_SCACHE_SEQUENCE_NOTHING \
TLS_SCACHE_DONT_NEED_CACHE_ID, TLS_SCACHE_DONT_NEED_SESSION
/* LICENSE
/* .ad
/* .fi
/* The Secure Mailer license must be distributed with this software.
/* AUTHOR(S)
/* Wietse Venema
/* IBM T.J. Watson Research
/* P.O. Box 704
/* Yorktown Heights, NY 10598, USA
/*--*/
#endif
|