OpenVPN
ssl_verify_mbedtls.h
Go to the documentation of this file.
1/*
2 * OpenVPN -- An application to securely tunnel IP networks
3 * over a single TCP/UDP port, with support for SSL/TLS-based
4 * session authentication and key exchange,
5 * packet encryption, packet authentication, and
6 * packet compression.
7 *
8 * Copyright (C) 2002-2024 OpenVPN Inc <sales@openvpn.net>
9 * Copyright (C) 2010-2021 Fox Crypto B.V. <openvpn@foxcrypto.com>
10 *
11 * This program is free software; you can redistribute it and/or modify
12 * it under the terms of the GNU General Public License version 2
13 * as published by the Free Software Foundation.
14 *
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
19 *
20 * You should have received a copy of the GNU General Public License along
21 * with this program; if not, write to the Free Software Foundation, Inc.,
22 * 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
23 */
24
30#ifndef SSL_VERIFY_MBEDTLS_H_
31#define SSL_VERIFY_MBEDTLS_H_
32
33#include "syshead.h"
34#include <mbedtls/x509_crt.h>
35
36#ifndef __OPENVPN_X509_CERT_T_DECLARED
37#define __OPENVPN_X509_CERT_T_DECLARED
38typedef mbedtls_x509_crt openvpn_x509_cert_t;
39#endif
40
73int verify_callback(void *session_obj, mbedtls_x509_crt *cert, int cert_depth,
74 uint32_t *flags);
75
78#endif /* SSL_VERIFY_MBEDTLS_H_ */
int verify_callback(void *session_obj, mbedtls_x509_crt *cert, int cert_depth, uint32_t *flags)
Verify that the remote OpenVPN peer's certificate allows setting up a VPN tunnel.
mbedtls_x509_crt openvpn_x509_cert_t