_ Git - BoarSSL/blob - SSLTLS/IServerChoices.cs

   1 /*
   2  * Copyright (c) 2017 Thomas Pornin <pornin@bolet.org>
   3  *
   4  * Permission is hereby granted, free of charge, to any person obtaining
   5  * a copy of this software and associated documentation files (the
   6  * "Software"), to deal in the Software without restriction, including
   7  * without limitation the rights to use, copy, modify, merge, publish,
   8  * distribute, sublicense, and/or sell copies of the Software, and to
   9  * permit persons to whom the Software is furnished to do so, subject to
  10  * the following conditions:
  11  *
  12  * The above copyright notice and this permission notice shall be
  13  * included in all copies or substantial portions of the Software.
  14  *
  15  * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
  16  * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
  17  * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
  18  * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
  19  * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
  20  * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
  21  * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
  22  * SOFTWARE.
  23  */
  24
  25 using System;
  26 using System.IO;
  27
  28 namespace SSLTLS {
  29
  30 /*
  31  * An IServerChoices instance represents the server policy choices for
  32  * a given connection. It returns the certificate chain and cipher suite
  33  * to send to the client, and it computes private key operations.
  34  */
  35
  36 public interface IServerChoices {
  37
  38         /*
  39          * Get the selected cipher suite.
  40          */
  41         int GetCipherSuite();
  42
  43         /*
  44          * Get the certificate chain to send to the client.
  45          */
  46         byte[][] GetCertificateChain();
  47
  48         /*
  49          * Compute the key exchange, based on the value sent by the
  50          * client. Returned value is the premaster secret. This method
  51          * is invoked only if the selected cipher suite is of type
  52          * RSA or static ECDH.
  53          */
  54         byte[] DoKeyExchange(byte[] cke);
  55
  56         /*
  57          * Compute the signature on the provided ServerKeyExchange
  58          * message. The 'hashAlgo' and 'sigAlgo' values are set to
  59          * the symbolic values corresponding to the used signature
  60          * algorithm. This method is invoked only if the selected cipher
  61          * suite is of type ECDHE.
  62          */
  63         byte[] DoSign(byte[] ske, out int hashAlgo, out int sigAlgo);
  64 }
  65
  66 }