mirror of
https://github.com/netdata/netdata.git
synced 2025-04-27 14:16:20 +00:00
ca1799280d
* SSL_backend Begin of the encryptation of backend! * SSL_backend changing opentsdb! * SSL_backend fix HTTP message with JSON! * SSL_backend HTTP API done! * SSL_fix_format preparing to connect with proxy! * SSL_backend wip SSL send/receive ! * SSL_backend working with proxy * SSL_backend removing comments! * SSL_backend docummentation! * SSL_backend review]! * SSL_backend organizing! * Alarm_backend remove comments! * SSL_backend! * SSL_backend typedef! * SSL_backend bring switch! * SSL_backend commiting format changes! * SSL_backend fix github parser! * SSL_Backend fix format! * SSL_backend switch everything! * SSL_backend reviewing! * SSL_backend comments! * SSL_backend indentation! * SSL_backend indentation 3! * SSL_backend documentation! * SSL_backend hidden pointer! * SSL_backend missing space * SSL_backend change documentation! * SSL_backend change documentation 2!
47 lines
1.7 KiB
C
47 lines
1.7 KiB
C
#ifndef NETDATA_SECURITY_H
|
|
# define NETDATA_SECURITY_H
|
|
|
|
# define NETDATA_SSL_HANDSHAKE_COMPLETE 0 //All the steps were successful
|
|
# define NETDATA_SSL_START 1 //Starting handshake, conn variable is NULL
|
|
# define NETDATA_SSL_WANT_READ 2 //The connection wanna read from socket
|
|
# define NETDATA_SSL_WANT_WRITE 4 //The connection wanna write on socket
|
|
# define NETDATA_SSL_NO_HANDSHAKE 8 //Continue without encrypt connection.
|
|
# define NETDATA_SSL_OPTIONAL 16 //Flag to define the HTTP request
|
|
# define NETDATA_SSL_FORCE 32 //We only accepts HTTPS request
|
|
# define NETDATA_SSL_INVALID_CERTIFICATE 64 //Accepts invalid certificate
|
|
# define NETDATA_SSL_VALID_CERTIFICATE 128 //Accepts invalid certificate
|
|
|
|
#define NETDATA_SSL_CONTEXT_SERVER 0
|
|
#define NETDATA_SSL_CONTEXT_STREAMING 1
|
|
#define NETDATA_SSL_CONTEXT_OPENTSDB 2
|
|
|
|
# ifdef ENABLE_HTTPS
|
|
|
|
# include <openssl/ssl.h>
|
|
# include <openssl/err.h>
|
|
# if (SSLEAY_VERSION_NUMBER >= 0x0907000L) && (OPENSSL_VERSION_NUMBER < 0x10100000L)
|
|
# include <openssl/conf.h>
|
|
# endif
|
|
|
|
struct netdata_ssl{
|
|
SSL *conn; //SSL connection
|
|
int flags;
|
|
};
|
|
|
|
extern SSL_CTX *netdata_opentsdb_ctx;
|
|
extern SSL_CTX *netdata_client_ctx;
|
|
extern SSL_CTX *netdata_srv_ctx;
|
|
extern const char *security_key;
|
|
extern const char *security_cert;
|
|
extern int netdata_use_ssl_on_stream;
|
|
extern int netdata_use_ssl_on_http;
|
|
extern int netdata_validate_server;
|
|
|
|
void security_openssl_library();
|
|
void security_clean_openssl();
|
|
void security_start_ssl(int selector);
|
|
int security_process_accept(SSL *ssl,int msg);
|
|
int security_test_certificate(SSL *ssl);
|
|
|
|
# endif //ENABLE_HTTPS
|
|
#endif //NETDATA_SECURITY_H
|