Lines Matching defs:g_context
24 * g_context A coap_gnutls_context_t * (held in c_context->dtls_context)
298 coap_gnutls_context_t *g_context =
301 if (!g_context || !setup_data)
304 g_context->setup_data = *setup_data;
305 if (!g_context->setup_data.verify_peer_cert) {
307 g_context->setup_data.check_common_ca = 0;
308 if (g_context->setup_data.is_rpk_not_cert) {
310 g_context->setup_data.allow_self_signed = 0;
311 g_context->setup_data.allow_expired_certs = 0;
312 g_context->setup_data.cert_chain_validation = 0;
313 g_context->setup_data.cert_chain_verify_depth = 0;
314 g_context->setup_data.check_cert_revocation = 0;
315 g_context->setup_data.allow_no_crl = 0;
316 g_context->setup_data.allow_expired_crl = 0;
317 g_context->setup_data.allow_bad_md_hash = 0;
318 g_context->setup_data.allow_short_rsa_length = 0;
321 g_context->setup_data.allow_self_signed = 1;
322 g_context->setup_data.allow_expired_certs = 1;
323 g_context->setup_data.cert_chain_validation = 1;
324 g_context->setup_data.cert_chain_verify_depth = 10;
325 g_context->setup_data.check_cert_revocation = 1;
326 g_context->setup_data.allow_no_crl = 1;
327 g_context->setup_data.allow_expired_crl = 1;
328 g_context->setup_data.allow_bad_md_hash = 1;
329 g_context->setup_data.allow_short_rsa_length = 1;
332 g_context->psk_pki_enabled |= IS_PKI;
344 coap_gnutls_context_t *g_context =
346 if (!g_context) {
357 if (g_context->root_ca_file) {
358 gnutls_free(g_context->root_ca_file);
359 g_context->root_ca_file = NULL;
362 g_context->root_ca_file = gnutls_strdup(ca_file);
364 if (g_context->root_ca_path) {
365 gnutls_free(g_context->root_ca_path);
366 g_context->root_ca_path = NULL;
370 g_context->root_ca_path = gnutls_strdup(ca_path);
387 coap_gnutls_context_t *g_context =
390 if (!g_context || !setup_data)
393 g_context->psk_pki_enabled |= IS_PSK;
407 coap_gnutls_context_t *g_context =
410 if (!g_context || !setup_data)
413 g_context->psk_pki_enabled |= IS_PSK;
424 coap_gnutls_context_t *g_context =
426 return g_context->psk_pki_enabled ? 1 : 0;
468 * return +ve new g_context
475 coap_gnutls_context_t *g_context =
479 if (g_context) {
484 memset(g_context, 0, sizeof(coap_gnutls_context_t));
485 g_context->alpn_proto.data = gnutls_malloc(4);
486 if (g_context->alpn_proto.data) {
487 memcpy(g_context->alpn_proto.data, "coap", 4);
488 g_context->alpn_proto.size = 4;
498 ret = gnutls_priority_init(&g_context->priority_cache, priority, &err);
507 return g_context;
510 if (g_context)
511 coap_dtls_free_context(g_context);
518 coap_gnutls_context_t *g_context = (coap_gnutls_context_t *)handle;
520 gnutls_free(g_context->alpn_proto.data);
521 gnutls_free(g_context->root_ca_file);
522 gnutls_free(g_context->root_ca_path);
523 for (i = 0; i < g_context->pki_sni_count; i++) {
524 gnutls_free(g_context->pki_sni_entry_list[i].sni);
526 g_context->pki_sni_entry_list[i].pki_credentials);
528 if (g_context->pki_sni_entry_list)
529 gnutls_free(g_context->pki_sni_entry_list);
531 for (i = 0; i < g_context->psk_sni_count; i++) {
532 gnutls_free(g_context->psk_sni_entry_list[i].sni);
535 g_context->psk_sni_entry_list[i].psk_credentials);
537 if (g_context->psk_sni_entry_list)
538 gnutls_free(g_context->psk_sni_entry_list);
540 gnutls_priority_deinit(g_context->priority_cache);
543 gnutls_free(g_context);
559 coap_gnutls_context_t *g_context;
574 g_context = (coap_gnutls_context_t *)c_session->context->dtls_context;
575 if (g_context == NULL)
734 check_rpk_cert(coap_gnutls_context_t *g_context,
739 if (g_context->setup_data.validate_cn_call_back) {
752 if (!g_context->setup_data.validate_cn_call_back(COAP_DTLS_RPK_CERT_CN,
758 g_context->setup_data.cn_call_back_arg)) {
778 coap_gnutls_context_t *g_context =
790 if (!check_rpk_cert(g_context, &cert_info, c_session)) {
798 if (cert_info.cert_list_size == 0 && !g_context->setup_data.verify_peer_cert)
808 if (g_context->setup_data.allow_expired_certs) {
825 if (g_context->setup_data.allow_expired_crl) {
841 if (g_context->setup_data.allow_self_signed &&
842 !g_context->setup_data.check_common_ca) {
856 if (!g_context->setup_data.verify_peer_cert) {
883 if (g_context->setup_data.validate_cn_call_back) {
901 if (!g_context->setup_data.validate_cn_call_back(OUTPUT_CERT_NAME,
907 g_context->setup_data.cn_call_back_arg)) {
913 if (g_context->setup_data.additional_tls_setup_call_back) {
915 if (!g_context->setup_data.additional_tls_setup_call_back(g_session,
916 &g_context->setup_data)) {
1040 coap_gnutls_context_t *g_context,
1370 if (g_context->root_ca_file) {
1372 g_context->root_ca_file,
1378 if (g_context->root_ca_path) {
1381 g_context->root_ca_path,
1388 if (!(g_context->psk_pki_enabled & IS_PKI)) {
1427 coap_gnutls_context_t *g_context COAP_UNUSED,
1457 coap_gnutls_context_t *g_context =
1505 for (i = 0; i < g_context->psk_sni_count; i++) {
1506 if (strcasecmp(name, g_context->psk_sni_entry_list[i].sni) == 0) {
1510 if (i == g_context->psk_sni_count) {
1526 g_context->psk_sni_entry_list =
1527 gnutls_realloc(g_context->psk_sni_entry_list,
1529 g_context->psk_sni_entry_list[i].sni = gnutls_strdup(name);
1530 g_context->psk_sni_entry_list[i].psk_info = *new_entry;
1534 &g_context->psk_sni_entry_list[i].psk_credentials,
1535 g_context,
1544 g_context->psk_sni_count++;
1547 g_context->psk_sni_entry_list[i].psk_credentials),
1550 &g_context->psk_sni_entry_list[i].psk_info.hint);
1552 &g_context->psk_sni_entry_list[i].psk_info.key);
1571 coap_gnutls_context_t *g_context =
1577 if (g_context->setup_data.validate_sni_call_back) {
1619 for (i = 0; i < g_context->pki_sni_count; i++) {
1620 if (strcasecmp(name, g_context->pki_sni_entry_list[i].sni) == 0) {
1624 if (i == g_context->pki_sni_count) {
1629 g_context->setup_data.validate_sni_call_back(name,
1630 g_context->setup_data.sni_call_back_arg);
1639 g_context->pki_sni_entry_list = gnutls_realloc(
1640 g_context->pki_sni_entry_list,
1642 g_context->pki_sni_entry_list[i].sni = gnutls_strdup(name);
1643 g_context->pki_sni_entry_list[i].pki_key = *new_entry;
1644 sni_setup_data = g_context->setup_data;
1647 &g_context->pki_sni_entry_list[i].pki_credentials,
1649 g_context,
1658 g_context->pki_sni_count++;
1661 g_context->pki_sni_entry_list[i].pki_credentials),
1681 coap_gnutls_context_t *g_context =
1685 g_context->psk_pki_enabled |= IS_CLIENT;
1686 if (g_context->psk_pki_enabled & IS_PSK) {
1728 if ((g_context->psk_pki_enabled & IS_PKI) ||
1729 (g_context->psk_pki_enabled & (IS_PSK | IS_PKI)) == 0) {
1734 coap_dtls_pki_t *setup_data = &g_context->setup_data;
1736 g_context, setup_data,
1746 &g_context->alpn_proto, 1, 0),
1778 coap_gnutls_context_t *g_context;
1786 g_context = (coap_gnutls_context_t *)c_session->context->dtls_context;
1787 if (g_context == NULL)
1827 coap_gnutls_context_t *g_context =
1831 g_context->psk_pki_enabled |= IS_SERVER;
1832 if (g_context->psk_pki_enabled & IS_PSK) {
1835 g_context,
1846 if (g_context->psk_pki_enabled & IS_PKI) {
1847 coap_dtls_pki_t *setup_data = &g_context->setup_data;
1849 g_context, setup_data,
1995 coap_gnutls_context_t *g_context =
2022 G_CHECK(gnutls_priority_set(g_env->g_session, g_context->priority_cache),
2055 coap_dtls_free_gnutls_env(coap_gnutls_context_t *g_context,
2069 if (g_context->psk_pki_enabled & IS_PSK) {
2070 if ((g_context->psk_pki_enabled & IS_CLIENT) &&
2081 if ((g_context->psk_pki_enabled & IS_PKI) ||
2082 (g_context->psk_pki_enabled &
2652 coap_gnutls_context_t *g_context =
2674 gnutls_priority_set(g_env->g_session, g_context->priority_cache);
2698 coap_gnutls_context_t *g_context =
2721 gnutls_priority_set(g_env->g_session, g_context->priority_cache);