tlsnke.h   [plain text]

/*
 * Copyright (c) 2012,2014 Apple Inc. All Rights Reserved.
 *
 * @APPLE_LICENSE_HEADER_START@
 * 
 * This file contains Original Code and/or Modifications of Original Code
 * as defined in and that are subject to the Apple Public Source License
 * Version 2.0 (the 'License'). You may not use this file except in
 * compliance with the License. Please obtain a copy of the License at
 * http://www.opensource.apple.com/apsl/ and read it before using this
 * file.
 * 
 * The Original Code and all software distributed under the License are
 * distributed on an 'AS IS' basis, WITHOUT WARRANTY OF ANY KIND, EITHER
 * EXPRESS OR IMPLIED, AND APPLE HEREBY DISCLAIMS ALL SUCH WARRANTIES,
 * INCLUDING WITHOUT LIMITATION, ANY WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT OR NON-INFRINGEMENT.
 * Please see the License for the specific language governing rights and
 * limitations under the License.
 * 
 * @APPLE_LICENSE_HEADER_END@
 */


#ifndef __TLSNKE_H__
#define __TLSNKE_H__

/* Those should be defined in kernel headers eg <sys/scoket.h> */


#define TLS_HANDLE_IP4 0xBABABABA		/* Temp hack to identify this filter */
#define TLS_HANDLE_IP6 0xABABABAB		/* Temp hack to identify this filter */


/*
SO_TLS_HANDLE: 
Get the DTLS handle used to enable utun to dtls bypass. (getsockopt only) 
option_value type: int
*/
#define SO_TLS_HANDLE 0x20000

/*
SO_TLS_INIT_CIPHER:
Initialize the new cipher key material. (setsockopt only)
option_value type: 
struct {
    uint16_t cipherspec;
    bool server;
    int keylen;
    char key[keylen];
} 
*/
#define SO_TLS_INIT_CIPHER 0x20001

/*
SO_TLS_PROTOCOL_VERSION:
Set the protocol version. (setsockopt only)
option_value type: int
*/
#define SO_TLS_PROTOCOL_VERSION 0x20002

/*
SO_TLS_ADVANCE_READ_CIPHER:
Update the read cipher to use the new key. (setsockopt only)
No option value.
*/
#define SO_TLS_ADVANCE_READ_CIPHER 0x20003

/*
SO_TLS_ADVANCE_WRITE_CIPHER:
Update the write cipher to use the new key. (setsockopt only)
No option value.
*/
#define SO_TLS_ADVANCE_WRITE_CIPHER 0x20004

/*
SO_TLS_ROLLBACK_WRITE_CIPHER: 
Rollback the write cipher to the previous key. (setsockopt only)
No option value.
*/
#define SO_TLS_ROLLBACK_WRITE_CIPHER 0x20005

/*
 SO_TLS_SERVICE_WRITE_QUEUE:
 Service the record write queue
 No option value.
 */
#define SO_TLS_SERVICE_WRITE_QUEUE 0x20006


/* 
SCM_TLS_HEADER: 
 Type of anciallary data for DTLS record header
*/

#define SCM_TLS_HEADER 0x12345

typedef struct tls_record_hdr{
    uint8_t content_type;
    uint16_t protocol_version;
} *tls_record_hdr_t;


#endif /* __TLSNKE_H__ */