golden hour

/opt/alt/php71/usr/include/php/ext/swoole/include

File/Folder	Size	Actions
swoole.h	19.74 KB
swoole_api.h	2.76 KB
swoole_asm_context.h	1.47 KB
swoole_async.h	2.13 KB
swoole_atomic.h	2.24 KB
swoole_base64.h	1.29 KB
swoole_buffer.h	2.02 KB
swoole_c_api.h	1.89 KB
swoole_channel.h	2.36 KB
swoole_client.h	7.85 KB
swoole_config.h	9.26 KB
swoole_coroutine.h	6.25 KB
swoole_coroutine_c_api.h	3.7 KB
swoole_coroutine_channel.h	4.04 KB
swoole_coroutine_context.h	2.39 KB
swoole_coroutine_socket.h	17.16 KB
swoole_coroutine_system.h	3.05 KB
swoole_dtls.h	2.38 KB
swoole_error.h	4.72 KB
swoole_file.h	4.04 KB
swoole_file_hook.h	1.95 KB
swoole_hash.h	9.69 KB
swoole_heap.h	1.79 KB
swoole_http.h	4.63 KB
swoole_http2.h	8 KB
swoole_lock.h	2.62 KB
swoole_log.h	15.53 KB
swoole_lru_cache.h	3.2 KB
swoole_memory.h	2.57 KB
swoole_mime_type.h	1.44 KB
swoole_mqtt.h	2.11 KB
swoole_msg_queue.h	1.84 KB
swoole_pipe.h	2.64 KB
swoole_process_pool.h	5.82 KB
swoole_protocol.h	5 KB
swoole_proxy.h	2.07 KB
swoole_reactor.h	10.47 KB
swoole_redis.h	2.18 KB
swoole_server.h	32.83 KB
swoole_signal.h	1.55 KB
swoole_socket.h	15.48 KB
swoole_socket_hook.h	2.12 KB
swoole_ssl.h	3.58 KB
swoole_static_handler.h	2.8 KB
swoole_string.h	6.87 KB
swoole_table.h	5.74 KB
swoole_timer.h	4.08 KB
swoole_util.h	3.59 KB
swoole_version.h	2.21 KB
swoole_websocket.h	5.07 KB
swoole_wheel_timer.h	2.48 KB

Edit: swoole_ssl.h

/*
  +----------------------------------------------------------------------+
  | Swoole                                                               |
  +----------------------------------------------------------------------+
  | This source file is subject to version 2.0 of the Apache license,    |
  | that is bundled with this package in the file LICENSE, and is        |
  | available through the world-wide-web at the following url:           |
  | http://www.apache.org/licenses/LICENSE-2.0.html                      |
  | If you did not receive a copy of the Apache2.0 license and are unable|
  | to obtain it through the world-wide-web, please send a note to       |
  | license@php.net so we can mail you a copy immediately.               |
  +----------------------------------------------------------------------+
  | Author: Tianfeng Han  <mikan.tenny@gmail.com>                        |
  +----------------------------------------------------------------------+
*/

#pragma once

#include "swoole.h"

#ifdef SW_USE_OPENSSL

#include <openssl/ssl.h>
#include <openssl/bio.h>
#include <openssl/err.h>
#include <openssl/conf.h>
#include <openssl/ossl_typ.h>
#include <openssl/crypto.h>
#include <openssl/x509.h>
#include <openssl/x509v3.h>
#include <openssl/rand.h>

#if OPENSSL_VERSION_NUMBER >= 0x10100000L
#define SW_SUPPORT_DTLS
#endif

enum swSSL_create_flag {
    SW_SSL_SERVER = 1,
    SW_SSL_CLIENT = 2,
};

struct swSSL_option {
    char *cert_file;
    char *key_file;
    char *passphrase;
    char *client_cert_file;
#ifdef SSL_CTRL_SET_TLSEXT_HOSTNAME
    uchar disable_tls_host_name : 1;
    char *tls_host_name;
#endif
    char *cafile;
    char *capath;
    uint8_t verify_depth;
    uchar disable_compress : 1;
    uchar verify_peer : 1;
    uchar allow_self_signed : 1;
    uint32_t protocols;
    uint8_t create_flag;
};

enum swSSL_state {
    SW_SSL_STATE_HANDSHAKE = 0,
    SW_SSL_STATE_READY = 1,
    SW_SSL_STATE_WAIT_STREAM = 2,
};

enum swSSL_version {
    SW_SSL_SSLv2 = 1u << 1,
    SW_SSL_SSLv3 = 1u << 2,
    SW_SSL_TLSv1 = 1u << 3,
    SW_SSL_TLSv1_1 = 1u << 4,
    SW_SSL_TLSv1_2 = 1u << 5,
    SW_SSL_TLSv1_3 = 1u << 6,
    SW_SSL_DTLS = 1u << 7,
};

enum swSSL_method {
    SW_SSLv23_METHOD = 0,
    SW_SSLv3_METHOD,
    SW_SSLv3_SERVER_METHOD,
    SW_SSLv3_CLIENT_METHOD,
    SW_SSLv23_SERVER_METHOD,
    SW_SSLv23_CLIENT_METHOD,
    SW_TLSv1_METHOD,
    SW_TLSv1_SERVER_METHOD,
    SW_TLSv1_CLIENT_METHOD,
#ifdef TLS1_1_VERSION
    SW_TLSv1_1_METHOD,
    SW_TLSv1_1_SERVER_METHOD,
    SW_TLSv1_1_CLIENT_METHOD,
#endif
#ifdef TLS1_2_VERSION
    SW_TLSv1_2_METHOD,
    SW_TLSv1_2_SERVER_METHOD,
    SW_TLSv1_2_CLIENT_METHOD,
#endif
#ifdef SW_SUPPORT_DTLS
    SW_DTLS_CLIENT_METHOD,
    SW_DTLS_SERVER_METHOD,
#endif
};

struct swSSL_config {
    uchar http : 1;
    uchar http_v2 : 1;
    uchar prefer_server_ciphers : 1;
    uchar session_tickets : 1;
    uchar stapling : 1;
    uchar stapling_verify : 1;
    char *ciphers;
    char *ecdh_curve;
    char *session_cache;
    char *dhparam;
};

void swSSL_init(void);
void swSSL_init_thread_safety();
int swSSL_server_set_cipher(SSL_CTX *ssl_context, swSSL_config *cfg);
void swSSL_server_http_advise(SSL_CTX *ssl_context, swSSL_config *cfg);
SSL_CTX *swSSL_get_context(swSSL_option *option);
void swSSL_free_context(SSL_CTX *ssl_context);
int swSSL_set_client_certificate(SSL_CTX *ctx, const char *cert_file, int depth);
int swSSL_set_capath(swSSL_option *cfg, SSL_CTX *ctx);
const char *swSSL_get_error();
int swSSL_get_ex_connection_index();
#endif