OpenVPN
ssl_verify_mbedtls.h
Go to the documentation of this file.
1 /*
2  * OpenVPN -- An application to securely tunnel IP networks
3  * over a single TCP/UDP port, with support for SSL/TLS-based
4  * session authentication and key exchange,
5  * packet encryption, packet authentication, and
6  * packet compression.
7  *
8  * Copyright (C) 2002-2023 OpenVPN Inc <sales@openvpn.net>
9  * Copyright (C) 2010-2021 Fox Crypto B.V. <openvpn@foxcrypto.com>
10  *
11  * This program is free software; you can redistribute it and/or modify
12  * it under the terms of the GNU General Public License version 2
13  * as published by the Free Software Foundation.
14  *
15  * This program is distributed in the hope that it will be useful,
16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18  * GNU General Public License for more details.
19  *
20  * You should have received a copy of the GNU General Public License along
21  * with this program; if not, write to the Free Software Foundation, Inc.,
22  * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
23  */
24 
29 #ifndef SSL_VERIFY_MBEDTLS_H_
30 #define SSL_VERIFY_MBEDTLS_H_
31 
32 #include "syshead.h"
33 #include <mbedtls/x509_crt.h>
34 
35 #ifndef __OPENVPN_X509_CERT_T_DECLARED
36 #define __OPENVPN_X509_CERT_T_DECLARED
37 typedef mbedtls_x509_crt openvpn_x509_cert_t;
38 #endif
39 
72 int verify_callback(void *session_obj, mbedtls_x509_crt *cert, int cert_depth,
73  uint32_t *flags);
74 
77 #endif /* SSL_VERIFY_MBEDTLS_H_ */
openvpn_x509_cert_t
mbedtls_x509_crt openvpn_x509_cert_t
Definition: ssl_verify_mbedtls.h:37
syshead.h
verify_callback
int verify_callback(void *session_obj, mbedtls_x509_crt *cert, int cert_depth, uint32_t *flags)
Verify that the remote OpenVPN peer's certificate allows setting up a VPN tunnel.