package core:crypto/tls

Source

Alpn_Protocols :: enum int {
	None,                // Invalid
	Http_0_9,            // "http/0.9"
	Http_1_0,            // "http/1.0"
	Http_1_1,            // "http/1.1"
	Spdy_1,              // "spdy/1"
	Spdy_2,              // "spdy/2"
	Spdy_3,              // "spdy/3"
	Turn,                // "stun.turn"
	Stun,                // "stun.nat-discovery"
	Http_2,              // "h2"
	// Http_2_Tcp,       // "h2c" (Not valid for TLS ALPN)
	Webrtc,              // "webrtc"
	Confidential_Webrtc, // "c-webrtc"
	Ftp,                 // "ftp"
	Imap,                // "imap"
	Pop3,                // "pop3"
	Managesieve,         // "managesieve"
	Coap_Tls,            // "coap"
	Coap_Dtls,           // "co"
	Xmpp_Client,         // "xmpp-client"
	Xmpp_Server,         // "xmpp-server"
	Acme_Tls_1,          // "acme-tls/1"
	Mqtt,                // "mqtt"
	Dot,                 // "dot" (DNS-over-TLS)
	Ntske_1,             // "ntske/1"
	Sunrpc,              // "sunrpc"
	Http_3,              // "h3"
	Smb2,                // "smb"
	Irc,                 // "irc"
	Nntp_Reading,        // "nntp"
	Nntp_Transit,        // "nnsp"
	Doq,                 // "doq"
	Sip,                 // "sip/2"
	Tds_8_0,             // "tds/8.0"
	Dicom,               // "dicom"
	Postgresql,          // "postgresql"
	Radius_1_0,          // "radius/1.0"
	Radius_1_1,          // "radius/1.1"
	Npmp_Control,        // "netperfmeter/control"
	Npmp_Data,           // "netperfmeter/data"
	N_Pamp,              // "n-pamp/2"
	Eoq,                 // "EoQ"
	Snif_Over_Quic,      // "snifq/1"
}

Error :: union {
	runtime.Allocator_Error, 
	io.Error, 
	net.TCP_Send_Error, 
	net.TCP_Recv_Error, 
	General_Error, 
	Protocol_Error, 
}

General_Error :: enum int {
	Nonblocking_Socket, 
	Invalid_SNI_Hostname, 
	Failed_Key_Share_Generation, 
	Unsupported_Client_Certificate_Requested, 
}

Protocol_Error :: enum int {
	None                            = 0, 
	// Alerts
	Close_Notify, 
	Unexpected_Message, 
	Bad_Record_Mac, 
	Record_Overflow, 
	Handshake_Failure, 
	Bad_Certificate, 
	Unsupported_Certificate, 
	Certificate_Revoked, 
	Certificate_Expired, 
	Certificate_Unknown, 
	Illegal_Parameter, 
	Unknown_Ca, 
	Access_Denied, 
	Decode_Error, 
	Decrypt_Error, 
	Protocol_Version, 
	Insufficient_Security, 
	Internal_Error, 
	Inappropriate_Fallback, 
	User_Canceled, 
	Missing_Extension, 
	Unsupported_Extension, 
	Unrecognized_Name, 
	Bad_Certificate_Status_Response, 
	Unknown_Psk_Identity, 
	Certificate_Required, 
	General_Error, 
	No_Application_Protocol, 
}

Socket :: struct {
	fd:            net.TCP_Socket,
	cipher_suite:  Cipher_Suite,
	alpn_protocol: Alpn_Protocols,
	_state:        Socket_State,
}

Stream :: io.Stream

SNI_MAX_HOSTNAME_SIZE :: 253

@(require_results)
client_handshake :: proc(
	socket:               ^Socket, 
	net_socket:           net.TCP_Socket, 
	host_name:            string, 
	trust_roots:          []^x509.Certificate, 
	alpn_protocols:       []Alpn_Protocols = nil, 
	unsafe_skip_verify:   bool = false, 
	unsafe_secret_logger: ^os.File = nil, 
	allocator := context.allocator, 
) -> Error {…}

close :: proc(socket: ^Socket, max_close_wait: time.Duration = 100 * time.Millisecond) {…}

@(require_results)
recv :: proc(socket: ^Socket, buf: []u8) -> (n: int, err: Error) {…}

@(require_results)
send :: proc(socket: ^Socket, buf: []u8) -> (n: int, err: Error) {…}

@(require_results)
socket_error :: proc(socket: ^Socket) -> (err: Error) {…}

@(require_results)
to_stream :: proc(socket: ^Socket) -> io.Stream {…}