/usr/include/canl_ssl.h is in libcanl-c-dev 2.1.2-1.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 | #ifndef _CANL_SSL_H
#define _CANL_SSL_H
#include <canl.h>
#include <openssl/ssl.h>
#ifdef __cplusplus
extern "C" {
#endif
typedef enum canl_ctx_ssl_flags {
CANL_SSL_ACCEPT_SSLv2 = 0x0001,
CANL_SSL_DN_OSSL = 0x0002,
CANL_SSL_VERIFY_NONE = 0x0004,
CANL_SSL_OCSP_VERIFY_ALL = 0x0008,
} canl_ctx_ssl_flags;
canl_err_code CANL_CALLCONV
canl_ctx_set_ssl_flags(canl_ctx, unsigned int);
canl_err_code CANL_CALLCONV
canl_ctx_set_ssl_cred(canl_ctx, char *, char *key, char *proxy,
canl_password_callback, void *);
canl_err_code CANL_CALLCONV
canl_ctx_set_ca_dir(canl_ctx, const char *);
canl_err_code CANL_CALLCONV
canl_ctx_set_crl_dir(canl_ctx, const char *);
canl_err_code CANL_CALLCONV
canl_ctx_set_ca_fn(canl_ctx, const char *);
/*MP not impemented yet*/
canl_err_code CANL_CALLCONV
canl_ctx_set_crl_fn(canl_ctx, const char *);
/* Set canl cert verification callbacks into SSL_CTX.
Do not use SSL_CTX stored in canl_ctx.
Special case: if verify_callback is not NULL, then caNl will be ready
to use its callback,but it must be called separately by canl_direct_pv_clb()
(e.g. in verify_callback)-try to avoid this, unless you
know what you are doing.
Any data set into the extern SSL_CTX by the caNl in this function
are not freed by calling canl_free_ctx().
This might look like memory leak (e.g. by valgrind), but in this special case
is intended.
*/
canl_err_code CANL_CALLCONV
canl_ssl_ctx_set_clb(canl_ctx cc, SSL_CTX *ssl_ctx, int ver_mode,
int (*verify_callback)(int, X509_STORE_CTX *));
/* Call caNl proxy certificate verification callback directly. Use it only
when you really know what you are doing. canl_ssl_ctx_set_clb() should be
called before. (X509_STORE_CTX param of this function must correspond to
SSL_CTX of canl_ssl_ctx_set_clb())
Return - 0 varification OK, 1 verification failed
Note: This is one of the funcions that accept NULL as canl_ctx
parameter, since it is intended to be called inside
other callback funcion.
*/
int CANL_CALLCONV
canl_direct_pv_clb(canl_ctx cc, X509_STORE_CTX *store_ctx, int ok);
canl_err_code CANL_CALLCONV
canl_ocsp_set_url(canl_ctx cc, const char *ocsp_url);
#ifdef __cplusplus
}
#endif
#endif
|