Module Tls.Handshake_common

val src : Logs.src
module Log : Logs.LOG
val trace_cipher : [< `AES_128_CCM_SHA256 | `AES_128_GCM_SHA256 | `AES_256_GCM_SHA384 | `CHACHA20_POLY1305_SHA256 | `DHE_RSA_WITH_3DES_EDE_CBC_SHA | `DHE_RSA_WITH_AES_128_CBC_SHA | `DHE_RSA_WITH_AES_128_CBC_SHA256 | `DHE_RSA_WITH_AES_128_CCM | `DHE_RSA_WITH_AES_128_GCM_SHA256 | `DHE_RSA_WITH_AES_256_CBC_SHA | `DHE_RSA_WITH_AES_256_CBC_SHA256 | `DHE_RSA_WITH_AES_256_CCM | `DHE_RSA_WITH_AES_256_GCM_SHA384 | `DHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | `ECDHE_RSA_WITH_3DES_EDE_CBC_SHA | `ECDHE_RSA_WITH_AES_128_CBC_SHA | `ECDHE_RSA_WITH_AES_128_CBC_SHA256 | `ECDHE_RSA_WITH_AES_128_GCM_SHA256 | `ECDHE_RSA_WITH_AES_256_CBC_SHA | `ECDHE_RSA_WITH_AES_256_CBC_SHA384 | `ECDHE_RSA_WITH_AES_256_GCM_SHA384 | `ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 | `RSA_WITH_3DES_EDE_CBC_SHA | `RSA_WITH_AES_128_CBC_SHA | `RSA_WITH_AES_128_CBC_SHA256 | `RSA_WITH_AES_128_CCM | `RSA_WITH_AES_128_GCM_SHA256 | `RSA_WITH_AES_256_CBC_SHA | `RSA_WITH_AES_256_CBC_SHA256 | `RSA_WITH_AES_256_CCM | `RSA_WITH_AES_256_GCM_SHA384 ] -> unit
val empty : 'a list -> bool
val change_cipher_spec : Packet.content_type * Cstruct.t
val host_name_opt : string option -> [ `host ] Domain_name.t option
val hostname : Core.client_hello -> [ `host ] Domain_name.t option
val groups : Core.client_hello -> [> `FFDHE2048 | `FFDHE3072 | `FFDHE4096 | `FFDHE6144 | `FFDHE8192 | `P256 | `X25519 ] list
val find_matching : [ `host ] Domain_name.t -> (X509.Certificate.t list * 'a) list -> (X509.Certificate.t list * 'a) option
val agreed_cert : [> `Multiple of (X509.Certificate.t list * 'a) list | `Multiple_default of (X509.Certificate.t list * 'a) * (X509.Certificate.t list * 'a) list | `None | `Single of X509.Certificate.t list * 'a ] -> [ `host ] Domain_name.t option -> (X509.Certificate.t list * 'a) State.t
val get_secure_renegotiation : [> `SecureRenegotiation of 'a ] list -> 'a option
val get_alpn_protocols : Core.client_hello -> string list option
val alpn_protocol : Config.config -> Core.client_hello -> string option State.t
val get_alpn_protocol : Core.server_hello -> string option
val empty_common_session_data : State.common_session_data
val empty_session : State.session_data
val empty_session13 : Ciphersuite.ciphersuite13 -> State.session_data13
val common_session_data_of_epoch : Core.epoch_data -> State.common_session_data -> State.common_session_data
val session_of_epoch : Core.epoch_data -> State.session_data
val session13_of_epoch : Ciphersuite.ciphersuite13 -> Core.epoch_data -> State.session_data13
val supported_protocol_version : ([< `TLS_1_0 | `TLS_1_1 | `TLS_1_2 | `TLS_1_3 ] * [< `TLS_1_0 | `TLS_1_1 | `TLS_1_2 | `TLS_1_3 ]) -> [< `TLS_1_0 | `TLS_1_1 | `TLS_1_2 | `TLS_1_3 ] as 'a -> 'a option
val to_client_ext_type : [< `ALPN of 'a | `Cookie of 'b | `Draft of 'c | `ECPointFormats of 'd | `EarlyDataIndication | `ExtendedMasterSecret | `Hostname of 'e | `KeyShare of 'f | `MaxFragmentLength of 'g | `Padding of 'h | `PostHandshakeAuthentication | `PreSharedKeys of 'i | `PskKeyExchangeModes of 'j | `SecureRenegotiation of 'k | `SignatureAlgorithms of 'l | `SupportedGroups of 'm | `SupportedVersions of 'n | `UnknownExtension of 'o ] -> [> `ALPN | `Cookie | `Draft | `ECPointFormats | `EarlyDataIndication | `ExtendedMasterSecret | `Hostname | `KeyShare | `MaxFragmentLength | `Padding | `PostHandshakeAuthentication | `PreSharedKey | `PskKeyExchangeMode | `SecureRenegotiation | `SignatureAlgorithms | `SupportedGroups | `SupportedVersion | `UnknownExtension ]
val to_server_ext_type : [< `ALPN of 'a | `Draft of 'b | `ECPointFormats of 'c | `EarlyDataIndication | `ExtendedMasterSecret | `Hostname | `KeyShare of 'd | `MaxFragmentLength of 'e | `PreSharedKey of 'f | `SecureRenegotiation of 'g | `SelectedVersion of 'h | `UnknownExtension of 'i ] -> [> `ALPN | `Draft | `ECPointFormats | `EarlyDataIndication | `ExtendedMasterSecret | `Hostname | `KeyShare | `MaxFragmentLength | `PreSharedKey | `SecureRenegotiation | `SupportedVersion | `UnknownExtension ]
val extension_types : ('a -> [> `UnknownExtension ] as 'b) -> 'a list -> 'b list
val server_exts_subset_of_client : [< `ALPN of 'a | `Draft of 'b | `ECPointFormats of 'c | `EarlyDataIndication | `ExtendedMasterSecret | `Hostname | `KeyShare of 'd | `MaxFragmentLength of 'e | `PreSharedKey of 'f | `SecureRenegotiation of 'g | `SelectedVersion of 'h | `UnknownExtension of 'i ] list -> [< `ALPN of 'j | `Cookie of 'k | `Draft of 'l | `ECPointFormats of 'm | `EarlyDataIndication | `ExtendedMasterSecret | `Hostname of 'n | `KeyShare of 'o | `MaxFragmentLength of 'p | `Padding of 'q | `PostHandshakeAuthentication | `PreSharedKeys of 'r | `PskKeyExchangeModes of 's | `SecureRenegotiation of 't | `SignatureAlgorithms of 'u | `SupportedGroups of 'v | `SupportedVersions of 'w | `UnknownExtension of 'x ] list -> bool
module Group : sig ... end
module GroupSet : sig ... end
val of_list : GroupSet.elt list -> GroupSet.t
val client_hello_valid : [< `SSL_3 | `TLS_1_0 | `TLS_1_1 | `TLS_1_2 | `TLS_1_3 | `TLS_1_X of 'a ] -> Core.client_hello -> [> `Error of [> `EmptyCiphersuites | `HasSignatureAlgorithmsExtension | `NoGoodSignatureAlgorithms of Core.signature_algorithm list | `NoKeyShareExtension | `NoSignatureAlgorithmsExtension | `NoSupportedCiphersuite of Packet.any_ciphersuite list | `NoSupportedGroupExtension | `NotSetExtension of Core.client_extension list | `NotSetKeyShare of (Packet.named_group * Cstruct_sexp.t) list | `NotSetSupportedGroup of Packet.named_group list | `NotSubsetKeyShareSupportedGroup of Packet.named_group list * (Packet.named_group * Cstruct_sexp.t) list ] | `Ok ]
val server_hello_valid : Core.server_hello -> bool
val (<+>) : Cstruct.t -> Cstruct.t -> Cstruct.t
val to_sign_1_3 : string option -> Cstruct.t
val signature : [< `TLS_1_0 | `TLS_1_1 | `TLS_1_2 | `TLS_1_3 ] -> ?⁠context_string:string -> Cstruct.t -> Core.signature_algorithm list option -> Core.signature_algorithm list -> Mirage_crypto_pk.Rsa.priv -> Cstruct.t State.t
val peer_rsa_key : X509.Certificate.t option -> Mirage_crypto_pk.Rsa.pub State.t
val verify_digitally_signed : [< `TLS_1_0 | `TLS_1_1 | `TLS_1_2 | `TLS_1_3 ] -> ?⁠context_string:string -> Core.signature_algorithm list -> Cstruct.t -> Cstruct.t -> X509.Certificate.t option -> unit State.t
val validate_chain : (host:'a -> X509.Certificate.t list -> (('b list * 'c) option, State.V_err.t) Stdlib.result) option -> Cstruct.t list -> 'a -> (X509.Certificate.t option * X509.Certificate.t list * 'b list * 'c option) State.t
val output_key_update : request:bool -> State.state -> (State.state * (Packet.content_type * Cstruct.t)) State.t