#ifndef _CUPS_HTTP_PRIVATE_H_
# define _CUPS_HTTP_PRIVATE_H_
# include "config.h"
# include <cups/language.h>
# include <stddef.h>
# include <stdlib.h>
# ifdef __sun
# include <sys/select.h>
# endif
# include <limits.h>
# ifdef WIN32
# include <io.h>
# include <winsock2.h>
# define CUPS_SOCAST (const char *)
# else
# include <unistd.h>
# include <fcntl.h>
# include <sys/socket.h>
# define CUPS_SOCAST
# endif
# ifdef HAVE_GSSAPI
# ifdef HAVE_GSS_GSSAPI_H
# include <GSS/gssapi.h>
# elif defined(HAVE_GSSAPI_GSSAPI_H)
# include <gssapi/gssapi.h>
# elif defined(HAVE_GSSAPI_H)
# include <gssapi.h>
# endif
# ifndef HAVE_GSS_C_NT_HOSTBASED_SERVICE
# define GSS_C_NT_HOSTBASED_SERVICE gss_nt_service_name
# endif
# endif
# ifdef HAVE_AUTHORIZATION_H
# include <Security/Authorization.h>
# endif
# if defined(__APPLE__) && !defined(_SOCKLEN_T)
typedef int socklen_t;
# endif
# include <cups/http.h>
# include "md5-private.h"
# include "ipp-private.h"
# ifdef HAVE_GNUTLS
# include <gnutls/gnutls.h>
# include <gnutls/x509.h>
# elif defined(HAVE_CDSASSL)
# include <CoreFoundation/CoreFoundation.h>
# include <Security/Security.h>
# include <Security/SecureTransport.h>
# ifdef HAVE_SECURETRANSPORTPRIV_H
# include <Security/SecureTransportPriv.h>
# endif
# ifdef HAVE_SECITEM_H
# include <Security/SecItem.h>
# endif
# ifdef HAVE_SECBASEPRIV_H
# include <Security/SecBasePriv.h>
# endif
# ifdef HAVE_SECCERTIFICATE_H
# include <Security/SecCertificate.h>
# include <Security/SecIdentity.h>
# endif
# ifdef HAVE_SECCERTIFICATEPRIV_H
# include <Security/SecCertificatePriv.h>
# else
# ifdef __cplusplus
extern "C" {
# endif
# ifndef _SECURITY_VERSION_GREATER_THAN_57610_
typedef CF_OPTIONS(uint32_t, SecKeyUsage) {
kSecKeyUsageAll = 0x7FFFFFFF
};
# endif
extern const void * kSecCSRChallengePassword;
extern const void * kSecSubjectAltName;
extern const void * kSecCertificateKeyUsage;
extern const void * kSecCSRBasicContraintsPathLen;
extern const void * kSecCertificateExtensions;
extern const void * kSecCertificateExtensionsEncoded;
extern const void * kSecOidCommonName;
extern const void * kSecOidCountryName;
extern const void * kSecOidStateProvinceName;
extern const void * kSecOidLocalityName;
extern const void * kSecOidOrganization;
extern const void * kSecOidOrganizationalUnit;
extern SecCertificateRef SecCertificateCreateWithBytes(CFAllocatorRef allocator, const UInt8 *bytes, CFIndex length);
extern bool SecCertificateIsValid(SecCertificateRef certificate, CFAbsoluteTime verifyTime);
extern CFAbsoluteTime SecCertificateNotValidAfter(SecCertificateRef certificate);
extern SecCertificateRef SecGenerateSelfSignedCertificate(CFArrayRef subject, CFDictionaryRef parameters, SecKeyRef publicKey, SecKeyRef privateKey);
extern SecIdentityRef SecIdentityCreate(CFAllocatorRef allocator, SecCertificateRef certificate, SecKeyRef privateKey);
# ifdef __cplusplus
}
# endif
# endif
# ifdef HAVE_SECITEMPRIV_H
# include <Security/SecItemPriv.h>
# endif
# ifdef HAVE_SECIDENTITYSEARCHPRIV_H
# include <Security/SecIdentitySearchPriv.h>
# endif
# ifdef HAVE_SECPOLICYPRIV_H
# include <Security/SecPolicyPriv.h>
# endif
# elif defined(HAVE_SSPISSL)
# include <wincrypt.h>
# include <wintrust.h>
# include <schannel.h>
# define SECURITY_WIN32
# include <security.h>
# include <sspi.h>
# endif
# ifndef WIN32
# include <net/if.h>
# include <resolv.h>
# ifdef HAVE_GETIFADDRS
# include <ifaddrs.h>
# else
# include <sys/ioctl.h>
# ifdef HAVE_SYS_SOCKIO_H
# include <sys/sockio.h>
# endif
# endif
# endif
# ifdef HAVE_LIBZ
# include <zlib.h>
# endif
# ifdef __cplusplus
extern "C" {
# endif
#define _HTTP_MAX_SBUFFER 65536
#define _HTTP_RESOLVE_DEFAULT 0
#define _HTTP_RESOLVE_STDERR 1
#define _HTTP_RESOLVE_FQDN 2
#define _HTTP_RESOLVE_FAXOUT 4
#define _HTTP_TLS_NONE 0
#define _HTTP_TLS_ALLOW_RC4 1
#define _HTTP_TLS_ALLOW_SSL3 2
#define _HTTP_TLS_ALLOW_DH 4
#define _HTTP_TLS_DENY_TLS10 16
# ifdef HAVE_GNUTLS
typedef gnutls_session_t http_tls_t;
typedef gnutls_certificate_credentials_t *http_tls_credentials_t;
# elif defined(HAVE_CDSASSL)
# if !defined(HAVE_SECBASEPRIV_H) && defined(HAVE_CSSMERRORSTRING)
extern const char *cssmErrorString(int error);
# endif
# if !defined(HAVE_SECIDENTITYSEARCHPRIV_H) && defined(HAVE_SECIDENTITYSEARCHCREATEWITHPOLICY)
extern OSStatus SecIdentitySearchCreateWithPolicy(SecPolicyRef policy,
CFStringRef idString, CSSM_KEYUSE keyUsage,
CFTypeRef keychainOrArray,
Boolean returnOnlyValidIdentities,
SecIdentitySearchRef* searchRef);
# endif
# if !defined(HAVE_SECPOLICYPRIV_H) && defined(HAVE_SECPOLICYSETVALUE)
extern OSStatus SecPolicySetValue(SecPolicyRef policyRef,
const CSSM_DATA *value);
# endif
typedef SSLContextRef http_tls_t;
typedef CFArrayRef http_tls_credentials_t;
# elif defined(HAVE_SSPISSL)
typedef struct _http_sspi_s
{
CredHandle creds;
CtxtHandle context;
BOOL contextInitialized;
SecPkgContext_StreamSizes streamSizes;
BYTE *decryptBuffer;
size_t decryptBufferLength;
size_t decryptBufferUsed;
BYTE *readBuffer;
int readBufferLength;
int readBufferUsed;
BYTE *writeBuffer;
int writeBufferLength;
PCCERT_CONTEXT localCert,
remoteCert;
char error[256];
} _http_sspi_t;
typedef _http_sspi_t *http_tls_t;
typedef PCCERT_CONTEXT http_tls_credentials_t;
# else
typedef void *http_tls_t;
typedef void *http_tls_credentials_t;
# endif
typedef enum _http_coding_e
{
_HTTP_CODING_IDENTITY,
_HTTP_CODING_GZIP,
_HTTP_CODING_DEFLATE,
_HTTP_CODING_GUNZIP,
_HTTP_CODING_INFLATE
} _http_coding_t;
typedef enum _http_mode_e
{
_HTTP_MODE_CLIENT,
_HTTP_MODE_SERVER
} _http_mode_t;
# ifndef _HTTP_NO_PRIVATE
struct _http_s
{
int fd;
int blocking;
int error;
time_t activity;
http_state_t state;
http_status_t status;
http_version_t version;
http_keepalive_t keep_alive;
struct sockaddr_in _hostaddr;
char hostname[HTTP_MAX_HOST],
fields[HTTP_FIELD_ACCEPT_ENCODING][HTTP_MAX_VALUE];
char *data;
http_encoding_t data_encoding;
int _data_remaining;
int used;
char buffer[HTTP_MAX_BUFFER];
int _auth_type;
_cups_md5_state_t md5_state;
char nonce[HTTP_MAX_VALUE];
int nonce_count;
http_tls_t tls;
http_encryption_t encryption;
fd_set *input_set;
http_status_t expect;
char *cookie;
char _authstring[HTTP_MAX_VALUE],
userpass[HTTP_MAX_VALUE];
int digest_tries;
off_t data_remaining;
http_addr_t *hostaddr;
http_addrlist_t *addrlist;
char wbuffer[HTTP_MAX_BUFFER];
int wused;
char *field_authorization;
char *authstring;
# ifdef HAVE_GSSAPI
gss_OID gssmech;
gss_ctx_id_t gssctx;
gss_name_t gssname;
# endif
# ifdef HAVE_AUTHORIZATION_H
AuthorizationRef auth_ref;
# endif
http_tls_credentials_t tls_credentials;
http_timeout_cb_t timeout_cb;
void *timeout_data;
double timeout_value;
int wait_value;
# ifdef HAVE_GSSAPI
char gsshost[256];
# endif
int tls_upgrade;
_http_mode_t mode;
char *accept_encoding,
*allow,
*server,
*default_accept_encoding,
*default_server,
*default_user_agent;
# ifdef HAVE_LIBZ
_http_coding_t coding;
z_stream stream;
Bytef *sbuffer;
# endif
};
# endif
# ifndef HAVE_HSTRERROR
extern const char *_cups_hstrerror(int error);
# define hstrerror _cups_hstrerror
# endif
# if !defined(WIN32) && !defined(HAVE_GETIFADDRS)
# ifdef ifa_dstaddr
# undef ifa_dstaddr
# endif
# ifndef ifr_netmask
# define ifr_netmask ifr_addr
# endif
struct ifaddrs
{
struct ifaddrs *ifa_next;
char *ifa_name;
unsigned int ifa_flags;
struct sockaddr *ifa_addr,
*ifa_netmask;
union
{
struct sockaddr *ifu_broadaddr;
struct sockaddr *ifu_dstaddr;
} ifa_ifu;
void *ifa_data;
};
# ifndef ifa_broadaddr
# define ifa_broadaddr ifa_ifu.ifu_broadaddr
# endif
# ifndef ifa_dstaddr
# define ifa_dstaddr ifa_ifu.ifu_dstaddr
# endif
extern int _cups_getifaddrs(struct ifaddrs **addrs);
# define getifaddrs _cups_getifaddrs
extern void _cups_freeifaddrs(struct ifaddrs *addrs);
# define freeifaddrs _cups_freeifaddrs
# endif
extern void _httpAddrSetPort(http_addr_t *addr, int port);
extern http_tls_credentials_t
_httpCreateCredentials(cups_array_t *credentials);
extern char *_httpDecodeURI(char *dst, const char *src,
size_t dstsize);
extern void _httpDisconnect(http_t *http);
extern char *_httpEncodeURI(char *dst, const char *src,
size_t dstsize);
extern void _httpFreeCredentials(http_tls_credentials_t credentials);
extern const char *_httpResolveURI(const char *uri, char *resolved_uri,
size_t resolved_size, int options,
int (*cb)(void *context),
void *context);
extern const char *_httpStatus(cups_lang_t *lang, http_status_t status);
extern void _httpTLSInitialize(void);
extern size_t _httpTLSPending(http_t *http);
extern int _httpTLSRead(http_t *http, char *buf, int len);
extern int _httpTLSSetCredentials(http_t *http);
extern void _httpTLSSetOptions(int options);
extern int _httpTLSStart(http_t *http);
extern void _httpTLSStop(http_t *http);
extern int _httpTLSWrite(http_t *http, const char *buf, int len);
extern int _httpUpdate(http_t *http, http_status_t *status);
extern int _httpWait(http_t *http, int msec, int usessl);
# ifdef __cplusplus
}
# endif
#endif