1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
/*
* Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
*
* Licensed under the Apache License, Version 2.0 (the "License").
* You may not use this file except in compliance with the License.
* A copy of the License is located at
*
* http://aws.amazon.com/apache2.0
*
* or in the "license" file accompanying this file. This file is distributed
* on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
* express or implied. See the License for the specific language governing
* permissions and limitations under the License.
*/
#pragma once
#include "api/s2n.h"
/*
* APIs intended to support an external implementation of the QUIC protocol:
* https://datatracker.ietf.org/wg/quic/about/
*
* QUIC requires access to parts of S2N not usually surfaced to customers. These APIs change
* the behavior of S2N in potentially dangerous ways and should only be used by implementations
* of the QUIC protocol.
*
* Additionally, the QUIC RFC is not yet finalized, so all QUIC APIs are considered experimental
* and are subject to change without notice. They should only be used for testing purposes.
*/
S2N_API int s2n_config_enable_quic(struct s2n_config *config);
/*
* Set the data to be sent in the quic_transport_parameters extension.
* The data provided will be copied into a buffer owned by S2N.
*/
S2N_API int s2n_connection_set_quic_transport_parameters(struct s2n_connection *conn,
const uint8_t *data_buffer, uint16_t data_len);
/*
* Retrieve the data from the peer's quic_transport_parameters extension.
* data_buffer will be set to a buffer owned by S2N which will be freed when the connection is freed.
* data_len will be set to the length of the data returned.
*
* S2N treats the extension data as opaque bytes and performs no validation.
*/
S2N_API int s2n_connection_get_quic_transport_parameters(struct s2n_connection *conn,
const uint8_t **data_buffer, uint16_t *data_len);
typedef enum {
S2N_CLIENT_EARLY_TRAFFIC_SECRET = 0,
S2N_CLIENT_HANDSHAKE_TRAFFIC_SECRET,
S2N_SERVER_HANDSHAKE_TRAFFIC_SECRET,
S2N_CLIENT_APPLICATION_TRAFFIC_SECRET,
S2N_SERVER_APPLICATION_TRAFFIC_SECRET,
} s2n_secret_type_t;
/*
* Called when S2N begins using a new key.
*
* The memory pointed to by "secret" will be wiped after this method returns and should be copied by
* the application if necessary. The application should also be very careful managing the memory and
* lifespan of the secret: if the secret is compromised, TLS is compromised.
*/
typedef int (*s2n_secret_cb) (void* context, struct s2n_connection *conn,
s2n_secret_type_t secret_type,
uint8_t *secret, uint8_t secret_size);
/*
* Set the function to be called when S2N begins using a new key.
*
* The callback function will ONLY be triggered if QUIC is enabled. This API is not intended to be
* used outside of a QUIC implementation.
*/
int s2n_connection_set_secret_callback(struct s2n_connection *conn, s2n_secret_cb cb_func, void *ctx);
|
