tls_select.h

Go to the documentation of this file.

/*
 * $Id: tls_select.h 4680 2008-08-12 07:26:43Z klaus_darilion $
 *
 * Copyright (C) 2006 enum.at
 *
 * This file is part of Kamailio, a free SIP server.
 *
 * Kamailio is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version
 *
 * Kamailio is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 * GNU General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License 
 * along with this program; if not, write to the Free Software 
 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA  02111-1307  USA
 */

#ifndef _TLS_SELECT_H_
#define _TLS_SELECT_H_

#include <openssl/ssl.h>

#include "../../parser/msg_parser.h"
#include "../../pvar.h"

enum {
   CERT_LOCAL      = 1<<0,   /* Select local certificate */
   CERT_PEER       = 1<<1,   /* Select peer certificate */
   CERT_SUBJECT    = 1<<2,   /* Select subject part of certificate */
   CERT_ISSUER     = 1<<3,   /* Select issuer part of certificate */

   CERT_VERIFIED   = 1<<4,   /* Test for verified certificate */
   CERT_REVOKED    = 1<<5,   /* Test for revoked certificate */
   CERT_EXPIRED    = 1<<6,   /* Expiration certificate test */
   CERT_SELFSIGNED = 1<<7,   /* self-signed certificate test */
   CERT_NOTBEFORE  = 1<<8,   /* Select validity end from certificate */
   CERT_NOTAFTER   = 1<<9,   /* Select validity start from certificate */

   COMP_CN = 1<<10,          /* Common name */
   COMP_O  = 1<<11,          /* Organization name */
   COMP_OU = 1<<12,          /* Organization unit */
   COMP_C  = 1<<13,          /* Country name */
   COMP_ST = 1<<14,          /* State */
   COMP_L  = 1<<15,          /* Locality/town */

   COMP_HOST = 1<<16,        /* hostname from subject/alternative */
   COMP_URI  = 1<<17,        /* URI from subject/alternative */
   COMP_E    = 1<<18,        /* Email address */
   COMP_IP   = 1<<19,        /* IP from subject/alternative */

   TLSEXT_SNI = 1<<20,       /* Peer's server name (TLS extension) */
};


typedef int select_t;

int tlsops_cipher(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_bits(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_version(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_desc(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_cert_version(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

/*
 * Check whether peer certificate exists and verify the result
 * of certificate verification
 */
int tlsops_check_cert(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_validity(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_sn(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_comp(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_alt(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

int tlsops_tlsext(struct sip_msg *msg, pv_param_t *param,
      pv_value_t *res);

#endif