/*
  *  OpenVPN -- An application to securely tunnel IP networks
  *             over a single TCP/UDP port, with support for SSL/TLS-based
  *             session authentication and key exchange,
  *             packet encryption, packet authentication, and
  *             packet compression.
  *

  *  Copyright (C) 2002-2018 OpenVPN Inc <sales@openvpn.net>
  *  Copyright (C) 2010-2018 Fox Crypto B.V. <openvpn@fox-it.com>

  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License version 2
  *  as published by the Free Software Foundation.
  *
  *  This program is distributed in the hope that it will be useful,
  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  *  GNU General Public License for more details.
  *

  *  You should have received a copy of the GNU General Public License along
  *  with this program; if not, write to the Free Software Foundation, Inc.,
  *  51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.

  */
 
 /**
  * @file Control Channel OpenSSL Backend
  */
 
 #ifndef SSL_OPENSSL_H_
 #define SSL_OPENSSL_H_
 
 #include <openssl/ssl.h>
 

 /**

  * Structure that wraps the TLS context. Contents differ depending on the
  * SSL library used.
  */
 struct tls_root_ctx {
     SSL_CTX *ctx;

     time_t crl_last_mtime;

     off_t crl_last_size;

 };
 

 struct key_state_ssl {

     SSL *ssl;                   /* SSL object -- new obj created for each new key */
     BIO *ssl_bio;                       /* read/write plaintext from here */
     BIO *ct_in;                 /* write ciphertext to here */
     BIO *ct_out;                        /* read ciphertext from here */

 };
 

 /**

  * Allocate space in SSL objects in which to store a struct tls_session
  * pointer back to parent.
  */
 extern int mydata_index; /* GLOBAL */
 

 void openssl_set_mydata_index(void);

 #endif /* SSL_OPENSSL_H_ */