mirror of
https://github.com/nginx/nginx.git
synced 2025-07-24 14:16:20 +08:00
d0ebfa4cb9
New files:
src/event/ngx_event_quic_protection.h
src/event/ngx_event_quic_protection.c
The protection.h header provides interface to the crypto part of the QUIC:
2 functions to initialize corresponding secrets:
ngx_quic_set_initial_secret()
ngx_quic_set_encryption_secret()
and 2 functions to deal with packet processing:
ngx_quic_encrypt()
ngx_quic_decrypt()
Also, structures representing secrets are defined there.
All functions require SSL connection and a pool, only crypto operations
inside, no access to nginx connections or events.
Currently pool->log is used for the logging (instead of original c->log).
47 lines
1.1 KiB
C
47 lines
1.1 KiB
C
|
|
/*
|
|
* Copyright (C) Nginx, Inc.
|
|
*/
|
|
|
|
|
|
#ifndef _NGX_EVENT_QUIC_PROTECTION_H_INCLUDED_
|
|
#define _NGX_EVENT_QUIC_PROTECTION_H_INCLUDED_
|
|
|
|
|
|
struct ngx_quic_secret_s {
|
|
ngx_str_t secret;
|
|
ngx_str_t key;
|
|
ngx_str_t iv;
|
|
ngx_str_t hp;
|
|
};
|
|
|
|
|
|
typedef struct {
|
|
ngx_quic_secret_t in;
|
|
ngx_quic_secret_t hs;
|
|
ngx_quic_secret_t ad;
|
|
} ngx_quic_peer_secrets_t;
|
|
|
|
|
|
typedef struct {
|
|
ngx_quic_peer_secrets_t client;
|
|
ngx_quic_peer_secrets_t server;
|
|
} ngx_quic_secrets_t;
|
|
|
|
|
|
ngx_int_t ngx_quic_set_initial_secret(ngx_pool_t *pool,
|
|
ngx_quic_secrets_t *secrets, ngx_str_t *secret);
|
|
|
|
int ngx_quic_set_encryption_secret(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
|
|
enum ssl_encryption_level_t level, const uint8_t *secret, size_t secret_len,
|
|
ngx_quic_peer_secrets_t *qsec);
|
|
|
|
ngx_int_t ngx_quic_encrypt(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
|
|
ngx_quic_header_t *pkt, ngx_str_t *payload, ngx_str_t *res);
|
|
|
|
ngx_int_t ngx_quic_decrypt(ngx_pool_t *pool, ngx_ssl_conn_t *ssl_conn,
|
|
ngx_quic_header_t *pkt);
|
|
|
|
|
|
#endif /* _NGX_EVENT_QUIC_PROTECTION_H_INCLUDED_ */
|