X-Git-Url: https://www.tinc-vpn.org/git/browse?a=blobdiff_plain;f=src%2Fconnection.h;h=0c93fedfe1f853a1fb43d8960e4d4691cb5cf33d;hb=refs%2Fheads%2F1.0-gnutls;hp=f075f19a1b600a4d7d3aebeff01f4ee49c9bfef6;hpb=0e59fb022c6c015a5be7ed70e0378cb011be98b5;p=tinc

diff --git a/src/connection.h b/src/connection.h
index f075f19a..0c93fedf 100644
--- a/src/connection.h
+++ b/src/connection.h
@@ -17,19 +17,19 @@
     along with this program; if not, write to the Free Software
     Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 
-    $Id: connection.h,v 1.1.2.37 2003/11/10 22:31:53 guus Exp $
+    $Id: connection.h,v 1.1.2.40 2003/12/20 21:25:17 guus Exp $
 */
 
 #ifndef __TINC_CONNECTION_H__
 #define __TINC_CONNECTION_H__
 
-#include <openssl/rsa.h>
-#include <openssl/evp.h>
+#include <gnutls/gnutls.h>
 
 #include "avl_tree.h"
 
 #define OPTION_INDIRECT		0x0001
 #define OPTION_TCPONLY		0x0002
+#define OPTION_PMTU_DISCOVERY	0x0004
 
 typedef struct connection_status_t {
 	int pinged:1;				/* sent ping */
@@ -41,9 +41,7 @@ typedef struct connection_status_t {
 	int encryptout:1;			/* 1 if we can encrypt outgoing traffic */
 	int decryptin:1;			/* 1 if we have to decrypt incoming traffic */
 	int mst:1;				/* 1 if this connection is part of a minimum spanning tree */
-	int opaque:1;				/* 1 if we do not forward information about other nodes */
-	int strict:1;				/* 1 if we strictly check edges and subnets received from this connection */
-	int unused:18;
+	int unused:23;
 } connection_status_t;
 
 #include "edge.h"
@@ -52,14 +50,14 @@ typedef struct connection_status_t {
 #include "node.h"
 
 typedef struct connection_t {
-	char *name;					/* name he claims to have */
+	char *name;			/* name he claims to have */
 
-	union sockaddr_t address;			/* his real (internet) ip */
-	char *hostname;				/* the hostname of its real ip */
+	union sockaddr_t address;	/* his real (internet) ip */
+	char *hostname;			/* the hostname of its real ip */
 	int protocol_version;		/* used protocol */
 
-	int socket;					/* socket used for this connection */
-	long int options;			/* options for this connection */
+	int socket;			/* socket used for this connection */
+	long int options;		/* options for this connection */
 	struct connection_status_t status;	/* status info */
 	int estimated_weight;		/* estimation for the weight of the edge for this connection */
 	struct timeval start;		/* time this connection was started, used for above estimation */
@@ -68,29 +66,14 @@ typedef struct connection_t {
 	struct node_t *node;		/* node associated with the other end */
 	struct edge_t *edge;		/* edge associated with this connection */
 
-	RSA *rsa_key;				/* his public/private key */
-	const EVP_CIPHER *incipher;	/* Cipher he will use to send data to us */
-	const EVP_CIPHER *outcipher;	/* Cipher we will use to send data to him */
-	EVP_CIPHER_CTX *inctx;		/* Context of encrypted meta data that will come from him to us */
-	EVP_CIPHER_CTX *outctx;		/* Context of encrypted meta data that will be sent from us to him */
-	char *inkey;				/* His symmetric meta key + iv */
-	char *outkey;				/* Our symmetric meta key + iv */
-	int inkeylength;			/* Length of his key + iv */
-	int outkeylength;			/* Length of our key + iv */
-	const EVP_MD *indigest;
-	const EVP_MD *outdigest;
-	int inmaclength;
-	int outmaclength;
-	int incompression;
-	int outcompression;
-	char *mychallenge;			/* challenge we received from him */
-	char *hischallenge;			/* challenge we sent to him */
+	gnutls_session session;
+	gnutls_certificate_credentials credentials;
 
 	char buffer[MAXBUFSIZE];	/* metadata input buffer */
-	int buflen;					/* bytes read into buffer */
-	int reqlen;					/* length of incoming request */
-	int tcplen;					/* length of incoming TCPpacket */
-	int allow_request;			/* defined if there's only one request possible */
+	int buflen;			/* bytes read into buffer */
+	int reqlen;			/* length of incoming request */
+	int tcplen;			/* length of incoming TCPpacket */
+	int allow_request;		/* defined if there's only one request possible */
 
 	time_t last_ping_time;		/* last time we saw some activity from the other end */