ssl_config.h

/*NB_REVISION*/
 
/*NB_COPYRIGHT*/
 
#ifndef _SSL_CONFIG_H_
#define _SSL_CONFIG_H_

 
/*
 * SSL Certificate Source Options
 * These define where the SSL certificate/key pair comes from
 */
#define SSL_CERT_SOURCE_LIBRARY_DEFAULT  ((uint8_t)0x00)  // Use auto-generated certificate
#define SSL_CERT_SOURCE_USER_INSTALLED   ((uint8_t)0x01)  // User-installed via web upload
 
/*
 * Certificate and Key Size Limits
 * Based on typical certificate sizes:
 * - RSA 2048-bit certificates are typically 1-2KB
 * - RSA 4096-bit certificates can be up to 4KB
 * - ECDSA certificates are typically smaller
 */
#define SSL_CERTIFICATE_SIZE_MAX      ((2 * 1024) - 1)      // Max DER/binary size
#define SSL_CERTIFICATE_SIZE_MAX_PEM  ((3 * 1024) - 1)      // Max PEM-encoded size
#define SSL_KEY_SIZE_MAX_PEM          ((4 * 1024) - 1)      // Max PEM-encoded key size
 
/*
 * File names for stored certificates on flash
 */
#define SSL_FILE_NAME_CERT  "cert.crt"
#define SSL_FILE_NAME_KEY   "cert.key"
 
/*
 * SSL Status codes for certificate operations
 */
#define SSL_STATUS_VALID              (0)
#define SSL_STATUS_NOT_FOUND          (1)
#define SSL_STATUS_INVALID            (2)
#define SSL_STATUS_CERT_INVALID       (3)
#define SSL_STATUS_KEY_INVALID        (4)
#define SSL_STATUS_CERT_KEY_MISMATCH  (5)
 
/*
 * HTTPS Service Status
 * Tracks the state of HTTPS certificate generation and availability
 */
enum HttpsServiceStatus : uint8_t
{
    HTTPS_STATUS_DISABLED = 0,           // HTTPS disabled in config
    HTTPS_STATUS_WAITING_FOR_GPS = 1,    // Waiting for GPS time to generate cert
    HTTPS_STATUS_GENERATING_CERT = 2,    // Currently generating certificate
    HTTPS_STATUS_CERT_FAILED = 3,        // Certificate generation failed
    HTTPS_STATUS_ACTIVE = 4,             // HTTPS is active with valid cert
    HTTPS_STATUS_USER_CERT = 5,          // HTTPS active with user-installed cert
};
 
// Global status variable (defined in main.cpp)
extern volatile HttpsServiceStatus gHttpsStatus;
 
#endif /* _SSL_CONFIG_H_ */