server.h

Go to the documentation of this file.

#ifndef WIRED_SERVER_SERVER_H
#define WIRED_SERVER_SERVER_H
 
#include "common/bytes/span/span.h"
#include "common/platform/sys/syscall.h"
#include "tls/handshake/core/sdrv/sdrv.h"
#include "tls/handshake/roles/srvfin/complete.h"
#include "tls/keys/kuswitch/twogen.h"
#include "transport/conn/loop/crecv/collect.h"
#include "transport/io/socket/io/udp.h"


#define WIRED_SERVER_FLIGHT_MAX 2048
#define WIRED_SERVER_TRANSCRIPT_MAX 16384
#define WIRED_SERVER_DATAGRAM_MAX 1500

enum {
  WIRED_SERVER_HS_INITIAL = 0, 
  WIRED_SERVER_HS_CH_RECVD,    
  WIRED_SERVER_HS_FLIGHT_SENT, 
  WIRED_SERVER_HS_CONFIRMED    
};

typedef struct {
  i64          fd;              
  sockaddr     peer;            
  sdrv         sdrv;            
  keysched     sched;           
  keyset       keys;            
  srvfin_state fin;             
  crecv        crecv;           
  int          phase;           
  int          hs_done_sent;    
  u8           server_priv[32]; 
  u8  tr[WIRED_SERVER_TRANSCRIPT_MAX]; 
  usz tr_len;                
  usz tr_through_sh;         
  usz tr_through_flight;     
  usz tr_through_client_fin; 
  u8 client_random[32]; 
  const char*    keylog_path; 
  kuswitch_state ku; 
  u8 ku_secret[TLS_HASH_MAX];      
  kuswitch_state ku_send;          
  u8 ku_send_secret[TLS_HASH_MAX]; 
  int ku_seeded; 
  u64 ku_send_count;
  u64 ku_auth_fail;
} wired_server;

typedef struct {
  const u8*         server_priv_x25519; 
  const u8*         server_pub_x25519;  
  const u8*         cert_seed;   
  const wired_span* chain;       
  usz               chain_count; 
  const u8* san_ipv4;
  u64 now_secs;
  const u8* ticket_key;
} wired_server_init_in;

void wired_server_init(wired_server* s, const wired_server_init_in* in);

int wired_server_set_cids(wired_server* s, wired_span odcid, wired_span iscid);

void wired_server_set_limits(
    wired_server* s,
    u64           max_data,
    u64           max_streams_bidi,
    u64           max_streams_uni,
    u64           max_datagram_frame_size);

void wired_server_set_reset_token(wired_server* s, const u8 token[16]);

void wired_server_set_keylog_path(wired_server* s, const char* path);

int wired_server_recv_initial(wired_server* s, const u8* ch_msg, usz ch_len);

int wired_server_build_hrr(wired_server* s, wired_obuf* out);

int wired_server_build_flight(
    wired_server* s, const u8* server_random, const sdrv_flight_out* out);

int wired_server_feed(wired_server* s, const u8* crypto_payload, usz len);

int wired_server_handshake_done(wired_server* s, wired_obuf* out);

int wired_server_is_confirmed(const wired_server* s);

int wired_server_early_data_used(const wired_server* s);

int wired_server_early_send_keys(wired_server* s);

int wired_server_resumption_secret(const wired_server* s, u8* out);

int wired_server_listen(wired_server* s, u16 port);

int wired_server_pump(wired_server* s);

int wired_server_run_handshake(wired_server* s, int max_iterations);

void wired_server_close(wired_server* s);
 
#endif