1 files changed, 71 insertions, 0 deletions
diff --git a/smtpd/ssl.h b/smtpd/ssl.h
new file mode 100644
index 00000000..11c80c68
--- /dev/null
+++ b/smtpd/ssl.h
@@ -0,0 +1,71 @@
+/*	$OpenBSD: ssl.h,v 1.21 2019/09/18 11:26:30 eric Exp $	*/
+/*
+ * Copyright (c) 2013 Gilles Chehade <gilles@poolp.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#define SSL_CIPHERS		"HIGH:!aNULL:!MD5"
+#define	SSL_SESSION_TIMEOUT	300
+
+struct pki {
+	char			 pki_name[HOST_NAME_MAX+1];
+
+	char			*pki_cert_file;
+	char			*pki_cert;
+	off_t			 pki_cert_len;
+
+	char			*pki_key_file;
+	char			*pki_key;
+	off_t			 pki_key_len;
+
+	EVP_PKEY		*pki_pkey;
+
+	int			 pki_dhe;
+};
+
+struct ca {
+	char			 ca_name[HOST_NAME_MAX+1];
+
+	char			*ca_cert_file;
+	char			*ca_cert;
+	off_t			 ca_cert_len;
+};
+
+
+/* ssl.c */
+void		ssl_init(void);
+int		ssl_setup(SSL_CTX **, struct pki *,
+    int (*)(SSL *, int *, void *), const char *);
+SSL_CTX	       *ssl_ctx_create(const char *, char *, off_t, const char *);
+int	        ssl_cmp(struct pki *, struct pki *);
+char	       *ssl_load_file(const char *, off_t *, mode_t);
+char	       *ssl_load_key(const char *, off_t *, char *, mode_t, const char *);
+
+const char     *ssl_to_text(const SSL *);
+void		ssl_error(const char *);
+
+int		ssl_load_certificate(struct pki *, const char *);
+int		ssl_load_keyfile(struct pki *, const char *, const char *);
+int		ssl_load_cafile(struct ca *, const char *);
+int		ssl_load_pkey(const void *, size_t, char *, off_t,
+		    X509 **, EVP_PKEY **);
+int		ssl_ctx_fake_private_key(SSL_CTX *, const void *, size_t,
+		    char *, off_t, X509 **, EVP_PKEY **);
+
+/* ssl_privsep.c */
+int		ssl_by_mem_ctrl(X509_LOOKUP *, int, const char *, long, char **);
+int SSL_CTX_use_certificate_chain_mem(SSL_CTX *, void *, int);
+
+/* ssl_verify.c */
+int ssl_check_name(X509 *, const char *, int *);