#include <ssl_common.h>

Collaboration diagram for tls_options:

[legend]

Data Fields
struct tls_root_ctx	ssl_ctx

struct key_type	key_type

bool	server

bool	xmit_hold

const char *	local_options

const char *	remote_options

bool	replay

bool	single_session

bool	disable_occ

int	mode

bool	pull

int	push_peer_info_detail
	The detail of info we push in peer info. More...

int	transition_window

int	handshake_window

interval_t	packet_timeout

int	renegotiate_bytes

int	renegotiate_packets

interval_t	renegotiate_seconds

const char *	verify_command

const char *	verify_export_cert

int	verify_x509_type

const char *	verify_x509_name

const char *	crl_file

bool	crl_file_inline

int	ns_cert_type

unsigned	remote_cert_ku [MAX_PARMS]

const char *	remote_cert_eku

struct verify_hash_list *	verify_hash

int	verify_hash_depth

bool	verify_hash_no_ca

hash_algo_type	verify_hash_algo

char *	x509_username_field [2]

unsigned int	crypto_flags

int	replay_window

int	replay_time

bool	tcp_mode

const char *	config_ciphername

const char *	config_ncp_ciphers

bool	tls_crypt_v2

const char *	tls_crypt_v2_verify_script

struct tls_wrap_ctx	tls_wrap
	TLS handshake wrapping state. More...

struct frame	frame

const char *	auth_user_pass_verify_script

bool	auth_user_pass_verify_script_via_file

const char *	tmp_dir

const char *	auth_user_pass_file

bool	auth_token_generate
	Generate auth-tokens on successful user/pass auth,seet via options->auth_token_generate. More...

bool	auth_token_call_auth
	always call normal authentication More...

unsigned int	auth_token_lifetime

struct key_ctx	auth_token_key

const char *	client_config_dir_exclusive

struct env_set *	es

openvpn_net_ctx_t *	net_ctx

const struct plugin_list *	plugins

unsigned int	ssl_flags

struct man_def_auth_context *	mda_context

const struct x509_track *	x509_track

const struct static_challenge_info *	sci

int	gremlin

const char *	ekm_label

size_t	ekm_label_size

size_t	ekm_size

Detailed Description

Definition at line 282 of file ssl_common.h.

Field Documentation

◆ auth_token_call_auth

bool tls_options::auth_token_call_auth

always call normal authentication

Definition at line 372 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and verify_user_pass().

◆ auth_token_generate

bool tls_options::auth_token_generate

Generate auth-tokens on successful user/pass auth,seet via options->auth_token_generate.

Definition at line 369 of file ssl_common.h.

Referenced by add_session_token_env(), do_init_crypto_tls(), setup(), and verify_user_pass().

◆ auth_token_key

struct key_ctx tls_options::auth_token_key

Definition at line 375 of file ssl_common.h.

Referenced by auth_token_fail_invalid_key(), auth_token_test_key_load(), auth_token_test_random_keys(), do_init_crypto_tls(), generate_auth_token(), setup(), teardown(), and verify_auth_token().

◆ auth_token_lifetime

unsigned int tls_options::auth_token_lifetime

Definition at line 373 of file ssl_common.h.

Referenced by auth_token_test_timeout(), do_init_crypto_tls(), setup(), and verify_auth_token().

◆ auth_user_pass_file

const char* tls_options::auth_user_pass_file

Definition at line 367 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and key_method_2_write().

◆ auth_user_pass_verify_script

const char* tls_options::auth_user_pass_verify_script

Definition at line 364 of file ssl_common.h.

Referenced by do_init_crypto_tls(), tls_session_user_pass_enabled(), verify_user_pass(), and verify_user_pass_script().

◆ auth_user_pass_verify_script_via_file

bool tls_options::auth_user_pass_verify_script_via_file

Definition at line 365 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and verify_user_pass_script().

◆ client_config_dir_exclusive

const char* tls_options::client_config_dir_exclusive

Definition at line 378 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and verify_final_auth_checks().

◆ config_ciphername

const char* tls_options::config_ciphername

Definition at line 352 of file ssl_common.h.

Referenced by do_init_crypto_tls(), tls_session_update_crypto_params(), and tls_session_update_crypto_params_do_work().

◆ config_ncp_ciphers

const char* tls_options::config_ncp_ciphers

Definition at line 353 of file ssl_common.h.

Referenced by do_init_crypto_tls(), get_p2p_ncp_cipher(), and push_peer_info().

◆ crl_file

const char* tls_options::crl_file

Definition at line 330 of file ssl_common.h.

Referenced by do_init_crypto_tls(), tls_process(), tls_verify_crl_missing(), and verify_cert().

◆ crl_file_inline

bool tls_options::crl_file_inline

Definition at line 331 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and tls_process().

◆ crypto_flags

unsigned int tls_options::crypto_flags

Definition at line 346 of file ssl_common.h.

Referenced by do_init_crypto_tls(), generate_key_expansion(), p2p_mode_ncp(), p2p_ncp_set_options(), tls_session_generate_data_channel_keys(), tls_session_update_crypto_params(), and tls_session_update_crypto_params_do_work().

◆ disable_occ

bool tls_options::disable_occ

Definition at line 304 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and key_method_2_read().

◆ ekm_label

const char* tls_options::ekm_label

Definition at line 418 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and export_user_keying_material().

◆ ekm_label_size

size_t tls_options::ekm_label_size

Definition at line 419 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and export_user_keying_material().

◆ ekm_size

size_t tls_options::ekm_size

Definition at line 420 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and export_user_keying_material().

◆ es

struct env_set* tls_options::es

Definition at line 381 of file ssl_common.h.

Referenced by add_session_token_env(), do_init_crypto_tls(), export_user_keying_material(), key_method_2_read(), key_state_gen_auth_control_files(), push_peer_info(), receive_cr_response(), set_verify_user_pass_env(), setenv_untrusted(), tls_process(), verify_cert(), verify_user_pass_management(), verify_user_pass_plugin(), and verify_user_pass_script().

◆ frame

struct frame tls_options::frame

Definition at line 361 of file ssl_common.h.

Referenced by do_init_crypto_tls(), do_init_finalize_tls_frame(), key_state_init(), tls_auth_standalone_init(), tls_multi_init_finalize(), tls_process(), and tls_session_init().

◆ gremlin

int tls_options::gremlin

Definition at line 415 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and tls_multi_process().

◆ handshake_window

int tls_options::handshake_window

Definition at line 319 of file ssl_common.h.

Referenced by auth_deferred_expire_window(), do_init_crypto_tls(), send_auth_pending_messages(), and tls_process().

◆ key_type

struct key_type tls_options::key_type

Definition at line 288 of file ssl_common.h.

Referenced by do_init_crypto_tls(), generate_key_expansion(), generate_key_expansion_openvpn_prf(), tls_session_generate_data_channel_keys(), and tls_session_update_crypto_params_do_work().

◆ local_options

const char* tls_options::local_options

Definition at line 298 of file ssl_common.h.

Referenced by key_method_2_write(), and tls_multi_init_set_options().

◆ mda_context

struct man_def_auth_context* tls_options::mda_context

Definition at line 405 of file ssl_common.h.

Referenced by do_init_crypto_tls(), key_state_init(), receive_cr_response(), and verify_user_pass_management().

◆ mode

int tls_options::mode

Definition at line 305 of file ssl_common.h.

Referenced by do_init_crypto_tls(), key_method_2_write(), push_peer_info(), and tls_process().

◆ net_ctx

openvpn_net_ctx_t* tls_options::net_ctx

Definition at line 382 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and push_peer_info().

◆ ns_cert_type

int tls_options::ns_cert_type

Definition at line 332 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and verify_peer_cert().

◆ packet_timeout

interval_t tls_options::packet_timeout

Definition at line 320 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and key_state_init().

◆ plugins

const struct plugin_list* tls_options::plugins

Definition at line 383 of file ssl_common.h.

Referenced by do_init_crypto_tls(), key_method_2_read(), tls_session_user_pass_enabled(), verify_cert(), verify_user_pass(), and verify_user_pass_plugin().

◆ pull

bool tls_options::pull

Definition at line 306 of file ssl_common.h.

Referenced by do_init_crypto_tls(), key_method_2_read(), key_method_2_write(), and push_peer_info().

◆ push_peer_info_detail

int tls_options::push_peer_info_detail

The detail of info we push in peer info.

0 - nothing at all, P2MP server only 1 - only the most basic information to negotiate cipher and features for P2P NCP 2 - normal setting for clients 3 - full information including "sensitive data" like IV_HWADDR enabled by –push-peer-info

Definition at line 317 of file ssl_common.h.

Referenced by do_init_crypto_tls(), and push_peer_info().