Tls.hpp

//------------------------------------------------------------------------------
//This file is part of embKernel. 
//See license.txt for the full license governing this code.
//------------------------------------------------------------------------------

#ifndef TLS_HPP_
#define TLS_HPP_

#include "TlsChiper.hpp"
#include "LibStreamOut.hpp"
#include "LibStreamIn.hpp"

class Tls {
public:
    Tls();
    ~Tls();

    typedef enum {
        RES_SUCCESS = 0
    } RESULT;

    RESULT handshake(LibStreamIn& in, LibStreamOut& out);

private:
    //See RFC2246
    typedef struct {
        uint8_t major;
        uint8_t minor;
    }__attribute__((packed)) PROTOCOL_VERSION;

    typedef enum :uint8_t {
        CT_CHANGE_CIPHER_SPEC = 20,
        CT_ALERT = 21,
        CT_HANDSHAKE = 22,
        CT_APPLICATION_DATA = 23
    } CONTENT_TYPE;

    typedef struct {
        CONTENT_TYPE type;
        PROTOCOL_VERSION version;
        uint16_t length;
    }__attribute__((packed)) TLS_HEADER;

    typedef enum:uint8_t {
        warning = 1,
        fatal = 2
    }ALERT_LEVEL;

    typedef enum :uint8_t {
        AD_CLOSE_NOTIFY = 0,
        AD_UNEXPECTED_MESSAGE = 10,
        AD_BAD_RECORD_MAC = 20,
        AD_DECRYPTION_FAILED = 21,
        AD_RECORD_OVERFLOW = 22,
        AD_DECOMPRESSION_FAILURE = 30,
        AD_HANDSHAKE_FAILURE = 40,
        AD_BAD_CERTIFICATE = 42,
        AD_UNSUPPORTED_CERTIFICATE = 43,
        AD_CERTIFICATE_REVOKED = 44,
        AD_CERTIFICATE_EXPIRED = 45,
        AD_CERTIFICATE_UNKNOWN = 46,
        AD_ILLEGAL_PARAMETER = 47,
        AD_UNKNOWN_CA = 48,
        AD_ACCESS_DENIED = 49,
        AD_DECODE_ERROR = 50,
        AD_DECRYPT_ERROR = 51,
        AD_EXPORT_RESTRICTION = 60,
        AD_PROTOCOL_VERSION = 70,
        AD_INSUFFICIENT_SECURITY = 71,
        AD_INTERNAL_ERROR = 80,
        AD_USER_CANCELED = 90,
        AD_NO_RENEGOTIATION = 100,
    }ALERT_DESCRIPTION;

    typedef struct {
        ALERT_LEVEL level;
        ALERT_DESCRIPTION description;
    }__attribute__((packed)) Alert;

    typedef enum :uint8_t {
        AT_HELLO_REQUEST = 0,
        AT_CLIENT_HELLO = 1,
        AT_SERVER_HELLO = 2,
        AT_CERTIFICATE = 11,
        AT_SERVER_KEY_EXCHANGE = 12,
        AT_CERTIFICATE_REQUEST = 13,
        AT_SERVER_HELLO_DONE = 14,
        AT_CERTIFICATE_VERIFY = 15,
        AT_CLIENT_KEY_EXCHANGE = 16,
        AT_FINISHED = 20
    }HANDSHAKE_TYPE;

    typedef struct {
        HANDSHAKE_TYPE msg_type;
        uint8_t zero;
        uint16_t length;
        PROTOCOL_VERSION version;
    }__attribute__((packed)) HANDSHAKE;

    typedef struct {
        uint32_t gmt_unix_time;
        uint8_t random_bytes[28];
    }__attribute__((packed)) RANDOM;

    typedef struct {
        PROTOCOL_VERSION client_version;
        RANDOM random;
        //SessionID session_id;
        //CipherSuite cipher_suites<2..2^16-1>;
        //CompressionMethod compression_methods<1..2^8-1>;
    }__attribute__((packed)) CLIENT_HELLO;

    typedef struct {
        PROTOCOL_VERSION server_version;
        RANDOM random;
        //SessionID session_id;
        //CipherSuite cipher_suite;
        //CompressionMethod compression_method;
    }__attribute__((packed)) SERVER_HELLO;

    typedef struct {
        uint8_t idHi;
        uint8_t idLo;
        TlsChiper* chiper;
    }CIPHER_SUITE;

    const static CIPHER_SUITE mCiphers[];

    const static int CIPHER_COUNT = 2;
};

#endif /* TLS_HPP_ */