Greg Kroah-Hartman
598cf27219
Link: https://lore.kernel.org/r/20260217200002.683975158@linuxfoundation.org Tested-by: Florian Fainelli <florian.fainelli@broadcom.com> Tested-by: Takeshi Ogasawara <takeshi.ogasawara@futuring-girl.com> Tested-by: Peter Schneider <pschneider1968@googlemail.com> Tested-by: Jon Hunter <jonathanh@nvidia.com> Tested-by: Salvatore Bonaccorso <carnil@debian.org> Tested-by: Brett A C Sheffield <bacs@librecast.net> Tested-by: Mark Brown <broonie@kernel.org> Tested-by: Luna Jernberg <droidbittin@gmail.com> Tested-by: Ronald Warsow <rwarsow@gmx.de> Tested-by: Justin M. Forbes <jforbes@fedoraproject.org> Tested-by: Ron Economos <re@w6rz.net> Tested-by: Miguel Ojeda <ojeda@kernel.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
50 lines
1.4 KiB
C
50 lines
1.4 KiB
C
/* SPDX-License-Identifier: GPL-2.0-only */
|
|
/*
|
|
* Generic netlink HANDSHAKE service.
|
|
*
|
|
* Author: Chuck Lever <chuck.lever@oracle.com>
|
|
*
|
|
* Copyright (c) 2023, Oracle and/or its affiliates.
|
|
*/
|
|
|
|
#ifndef _NET_HANDSHAKE_H
|
|
#define _NET_HANDSHAKE_H
|
|
|
|
enum {
|
|
TLS_NO_KEYRING = 0,
|
|
TLS_NO_PEERID = 0,
|
|
TLS_NO_CERT = 0,
|
|
TLS_NO_PRIVKEY = 0,
|
|
};
|
|
|
|
typedef void (*tls_done_func_t)(void *data, int status,
|
|
key_serial_t peerid);
|
|
|
|
struct tls_handshake_args {
|
|
struct socket *ta_sock;
|
|
tls_done_func_t ta_done;
|
|
void *ta_data;
|
|
const char *ta_peername;
|
|
unsigned int ta_timeout_ms;
|
|
key_serial_t ta_keyring;
|
|
key_serial_t ta_my_cert;
|
|
key_serial_t ta_my_privkey;
|
|
unsigned int ta_num_peerids;
|
|
key_serial_t ta_my_peerids[5];
|
|
};
|
|
|
|
int tls_client_hello_anon(const struct tls_handshake_args *args, gfp_t flags);
|
|
int tls_client_hello_x509(const struct tls_handshake_args *args, gfp_t flags);
|
|
int tls_client_hello_psk(const struct tls_handshake_args *args, gfp_t flags);
|
|
int tls_server_hello_x509(const struct tls_handshake_args *args, gfp_t flags);
|
|
int tls_server_hello_psk(const struct tls_handshake_args *args, gfp_t flags);
|
|
|
|
bool tls_handshake_cancel(struct sock *sk);
|
|
void tls_handshake_close(struct socket *sock);
|
|
|
|
u8 tls_get_record_type(const struct sock *sk, const struct cmsghdr *msg);
|
|
void tls_alert_recv(const struct sock *sk, const struct msghdr *msg,
|
|
u8 *level, u8 *description);
|
|
|
|
#endif /* _NET_HANDSHAKE_H */
|