forked from osmocom/wireshark
![Peter Wu](/assets/img/avatar_default.png)
In preparation for QUIC packet decryption, add a method to retrieve the cipher used in a TLS session. (QUIC embeds the TLS handshake.) Change-Id: If58e16bd0a01808dafa455ddc6c67ad23f33d7da Reviewed-on: https://code.wireshark.org/review/26558 Petri-Dish: Peter Wu <peter@lekensteyn.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Peter Wu <peter@lekensteyn.nl>
47 lines
1.7 KiB
C
47 lines
1.7 KiB
C
/* packet-ssl.h
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
*
|
|
* SPDX-License-Identifier: GPL-2.0-or-later
|
|
*/
|
|
|
|
#ifndef __PACKET_SSL_H__
|
|
#define __PACKET_SSL_H__
|
|
|
|
#include "ws_symbol_export.h"
|
|
#include <epan/packet.h>
|
|
|
|
/** Maps Session-ID to pre-master secrets. */
|
|
WS_DLL_PUBLIC GHashTable *ssl_session_hash;
|
|
/** Maps Client Random to pre-master secrets. */
|
|
WS_DLL_PUBLIC GHashTable *ssl_crandom_hash;
|
|
|
|
WS_DLL_PUBLIC void ssl_dissector_add(guint port, dissector_handle_t handle);
|
|
WS_DLL_PUBLIC void ssl_dissector_delete(guint port, dissector_handle_t handle);
|
|
|
|
WS_DLL_PUBLIC void ssl_set_master_secret(guint32 frame_num, address *addr_srv, address *addr_cli,
|
|
port_type ptype, guint32 port_srv, guint32 port_cli,
|
|
guint32 version, gint cipher, const guchar *_master_secret,
|
|
const guchar *_client_random, const guchar *_server_random,
|
|
guint32 client_seq, guint32 server_seq);
|
|
/**
|
|
* Retrieves Libgcrypt identifiers for the current TLS cipher. Only valid after
|
|
* the Server Hello has been processed and if the current conversation has TLS.
|
|
*/
|
|
extern gboolean
|
|
tls_get_cipher_info(packet_info *pinfo, int *cipher_algo, int *cipher_mode, int *hash_algo);
|
|
|
|
/**
|
|
* Computes the TLS 1.3 "TLS-Exporter(label, context_value, key_length)" value.
|
|
* On success, the secret is in "out" (free with "wmem_free(NULL, out)").
|
|
*/
|
|
gboolean
|
|
tls13_exporter(packet_info *pinfo, gboolean is_early,
|
|
const char *label, guint8 *context,
|
|
guint context_length, guint key_length, guchar **out);
|
|
|
|
#endif /* __PACKET_SSL_H__ */
|