https.h

Go to the documentation of this file.

 
#ifndef __CWIST_HTTPS_H__
#define __CWIST_HTTPS_H__
 
#include <cwist/net/http/http.h>
#include <cwist/sys/err/cwist_err.h>
#include <openssl/ssl.h>
#include <openssl/err.h>
#include <pthread.h>
 
#define HTTPS_THREAD_POOL_SIZE HTTP_THREAD_POOL_SIZE
 
typedef enum cwist_https_protocol {
    CWIST_HTTPS_PROTOCOL_NONE = 0,
    CWIST_HTTPS_PROTOCOL_HTTP11,
    CWIST_HTTPS_PROTOCOL_HTTP2,
    CWIST_HTTPS_PROTOCOL_HTTP3
} cwist_https_protocol;
 
typedef struct cwist_https_context {
    SSL_CTX *ctx;
    bool http2_enabled;
    bool http3_enabled;
    void *ticket_key; 
    pthread_rwlock_t ctx_lock;
} cwist_https_context;
 
typedef struct cwist_https_connection {
    int fd;
    SSL *ssl;
    char *read_buf;
    size_t buf_len;
    bool negotiated_http2;
    cwist_https_protocol negotiated_protocol;
    bool http3_enabled;
    bool http2_sequenced_data; /*< Enable CWIST-specific sequenced DATA frames. */
    bool deferred;             /*< True when response processing has been deferred. */
    /* Idle parking (cwist_https_park). Internal to the HTTPS pool. */
    bool park_expired;         /*< Resumed because the parked idle deadline passed. */
    void *proto_state;         /*< Protocol session kept while parked (HTTP/2). */
    void (*proto_state_free)(void *state);
    struct cwist_https_context *pool_ctx; /*< Pool task that serves this connection. */
    void (*pool_handler)(struct cwist_https_connection *, void *);
    void *pool_user_ctx;
} cwist_https_connection;
 
typedef enum cwist_https_park_class {
    CWIST_HTTPS_PARK_HTTP1 = 0, /*< Expiry closes the connection. */
    CWIST_HTTPS_PARK_HTTP2 = 1  /*< Expiry resubmits it with park_expired set (GOAWAY). */
} cwist_https_park_class;
 
typedef struct cwist_app cwist_app;
 
typedef struct cwist_https_options {
    bool enable_http2;
    bool enable_http3;
} cwist_https_options;
 
bool cwist_https_park(cwist_https_connection *conn, uint64_t idle_ms, cwist_https_park_class cls);
 
bool cwist_https_conn_idle(cwist_https_connection *conn);
 
uint64_t cwist_https_idle_timeout_ms(void);
 
cwist_error_t cwist_https_init_context(cwist_https_context **ctx, const char *cert_path,
                                       const char *key_path);
 
cwist_error_t cwist_https_init_context_with_options(cwist_https_context **ctx,
                                                    const char *cert_path, const char *key_path,
                                                    const cwist_https_options *options,
                                                    cwist_app *app);
 
void cwist_https_destroy_context(cwist_https_context *ctx);
 
cwist_error_t cwist_https_reload_context(cwist_https_context *ctx, const char *cert_path,
                                         const char *key_path, cwist_app *app);
 
cwist_error_t cwist_https_accept(cwist_https_context *ctx, int client_fd,
                                 cwist_https_connection **conn);
 
bool cwist_https_connection_uses_http2(const cwist_https_connection *conn);
 
cwist_https_protocol cwist_https_connection_protocol(const cwist_https_connection *conn);
 
void cwist_https_close_connection(cwist_https_connection *conn);
 
cwist_http_request *cwist_https_receive_request(cwist_https_connection *conn);
 
cwist_error_t cwist_https_send_response(cwist_https_connection *conn, cwist_http_response *res);
cwist_error_t cwist_https_send_response_head(cwist_https_connection *conn,
                                             cwist_http_response *res);
 
cwist_error_t cwist_https_server_loop(int server_fd, cwist_https_context *ctx,
                                      void (*handler)(cwist_https_connection *conn, void *),
                                      void *user_ctx);
 
int https_pool_init(void);
void https_pool_submit(int client_fd, cwist_https_context *ctx,
                       void (*handler)(cwist_https_connection *, void *), void *user_ctx);
void https_pool_submit_conn(cwist_https_connection *conn, cwist_https_context *ctx,
                            void (*handler)(cwist_https_connection *, void *), void *user_ctx);
void https_pool_destroy(void);
 
void cwist_https_dispatch(int client_fd, cwist_https_context *ctx,
                          void (*handler)(cwist_https_connection *, void *), void *user_ctx);
 
long cwist_https_pending_handshakes(void);
 
/* --- TLS observability counters (mirrored into the Prometheus /metrics
 * exposition by the metrics registry; see src/sys/metrics/metrics.c) --- */
 
long cwist_https_tls_handshakes_total(void);
long cwist_https_tls_handshakes_resumed_total(void);
long cwist_https_tls_handshakes_tls12_total(void);
long cwist_https_tls_handshakes_tls13_total(void);
long cwist_https_tls_ciphers_aes128_gcm_total(void);
long cwist_https_tls_ciphers_aes256_gcm_total(void);
long cwist_https_tls_ciphers_chacha20_total(void);
long cwist_https_tls_ciphers_other_total(void);
long cwist_https_tls_connections_active(void);
 
#endif