tls_server_config.h

Enable keyboard shortcuts

/* This Source Code Form is subject to the terms of the Mozilla Public

 * License, v. 2.0. If a copy of the MPL was not distributed with this file,

 * You can obtain one at http://mozilla.org/MPL/2.0/. */

#ifndef TLS_SERVER_CONFIG_H_

#define TLS_SERVER_CONFIG_H_

#include <cstddef>

#include <cstdint>

#include <ostream>

#include "prio.h"

#include "sslt.h"

#ifdef IS_DTLS_FUZZ

#define SSL_VERSION_RANGE_MIN_VALID 0x0302

#else

#define SSL_VERSION_RANGE_MIN_VALID 0x0301

#endif

#define SSL_VERSION_RANGE_MAX_VALID 0x0304

class ServerConfig {

 public:

  ServerConfig(const uint8_t* data, size_t len);

  void SetCallbacks(PRFileDesc* fd);

  void SetSocketOptions(PRFileDesc* fd);

  SSLHashType PskHashType() {

    if (config_ % 2) return ssl_hash_sha256;

    return ssl_hash_sha384;

};

  SSLVersionRange SslVersionRange() { return ssl_version_range_; };

  bool EnableExtendedMasterSecret() { return config_ & (1 << 0); };

  bool RequestCertificate() { return config_ & (1 << 1); };

  bool RequireCertificate() { return config_ & (1 << 2); };

  bool EnableDeflate() { return config_ & (1 << 3); };

  bool EnableCbcRandomIv() { return config_ & (1 << 4); };

  bool RequireSafeNegotiation() { return config_ & (1 << 5); };

  bool NoCache() { return config_ & (1 << 6); };

  bool EnableGrease() { return config_ & (1 << 7); };

  bool SetCertificateCompressionAlgorithm() { return config_ & (1 << 8); };

  bool SetVersionRange() { return config_ & (1 << 9); };

  bool AddExternalPsk() { return config_ & (1 << 10); };

  bool EnableZeroRtt() { return config_ & (1 << 11); };

  bool EnableAlpn() { return config_ & (1 << 12); };

  bool EnableFallbackScsv() { return config_ & (1 << 13); };

  bool EnableSessionTickets() { return config_ & (1 << 14); };

  bool NoLocks() { return config_ & (1 << 15); };

  bool FailCertificateAuthentication() { return config_ & (1 << 16); }

 private:

  uint32_t config_;

  SSLVersionRange ssl_version_range_;

};

std::ostream& operator<<(std::ostream& out, ServerConfig& config);

#endif  // TLS_SERVER_CONFIG_H_