The cl-tls Reference Manual

4.1.1 cl-tls/cl-tls.asd

Source

cl-tls.asd.

Parent Component

cl-tls (system).

ASDF Systems

cl-tls.

---

4.1.2 cl-tls/src/package.lisp

Source

cl-tls.asd.

Parent Component

src (module).

Packages

cl-tls.

---

4.1.3 cl-tls/src/utils.lisp

Source

cl-tls.asd.

Parent Component

src (module).

Internals

• asn-type-matches-p (function).
• bytes-in-int (function).
• cat-vectors (function).
• dns-match-p (function).
• dump-to-file (function).
• find-certificates (function).
• get-contents (function).
• get-random-octets (function).
• get-sequence (function).
• gmt-unix-time (function).
• integer-to-octets (function).
• make-octet-vector (function).
• octet (type).
• octet-vector (type).
• octets-to-integer (function).
• split-string (function).
• stream-octets-to-integer (function).
• timing-independent-compare (function).
• with-specification-map (macro).

---

4.1.4 cl-tls/src/ASN.1/asn.1.lisp

Source

cl-tls.asd.

Parent Component

asn.1 (module).

Public Interface

• asn-sequence-to-list (function).
• asn-serialize (function).
• create-asn-sequence (function).
• encode-oid (function).
• parse-der (function).

Internals

• *max-int-len* (special variable).
• +asn1_application+ (constant).
• +asn1_constructed+ (constant).
• +asn1_context_specific+ (constant).
• +asn1_primitive+ (constant).
• +asn1_private+ (constant).
• +asn1_universal+ (constant).
• asn-sequence-to-indices (function).
• asn.1-decoding-error (condition).
• create-explicit-tag (function).
• decode-oid (function).
• from-stream-parse-der (function).
• get-der-contents-indices (function).
• integer-to-vlq (function).
• make-octet-stream (function).
• octet-stream (class).
• ov-buffer-position (function).
• ov-read-byte (generic function).
• ov-read-sequence (generic function).
• text (reader method).

---

4.1.5 cl-tls/src/pkcs/pkcs1.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Public Interface

• rsa-decrypt (function).
• rsa-encrypt (function).
• rsassa-pkcs1.5-sign (function).
• rsassa-pkcs1.5-verify (function).

Internals

• emsa-pkcs1-v1.5-encode (function).
• fill-random-nonzero-octets (function).

---

4.1.6 cl-tls/src/pkcs/pkcs3.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Internals

• compute-shared-secret (function).
• dh-params (class).
• generate-dh-params (function).
• generator (reader method).
• make-dh-key-pair (function).
• prime-modulus (reader method).
• strong-random-range (function).

---

4.1.7 cl-tls/src/pkcs/pkcs5.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Public Interface

pbes2-decrypt (function).

Internals

• parse-enc-scheme (function).
• parse-kdf (function).
• remove-padding (function).

---

4.1.8 cl-tls/src/pkcs/pkcs8.lisp

Source

cl-tls.asd.

Parent Component

pkcs (module).

Internals

• load-der-priv-key (function).
• load-pem-priv-key (function).
• load-priv-key (function).
• parse-priv-key (function).

---

4.1.9 cl-tls/src/x509/extensions.lisp

Source

cl-tls.asd.

Parent Component

x509 (module).

Internals

• parse-access-description (function).
• parse-general-name (function).
• parse-general-names (function).
• parse-qualifier (function).
• process-extension (generic function).

---

4.1.10 cl-tls/src/x509/x509.lisp

Dependency

extensions.lisp (file).

Source

cl-tls.asd.

Parent Component

x509 (module).

Public Interface

• print-object (method).
• x509-decode (function).

Internals

• +md2withrsaencryption+ (constant).
• +md5withrsaencryption+ (constant).
• +sha1withrsaencryption+ (constant).
• +sha224withrsaencryption+ (constant).
• +sha256withrsaencryption+ (constant).
• +sha384withrsaencryption+ (constant).
• +sha512withrsaencryption+ (constant).
• asn-time-to-universal-time (function).
• authority-information-access (reader method).
• (setf authority-information-access) (writer method).
• authority-key-identifier (reader method).
• (setf authority-key-identifier) (writer method).
• basic-constraints (reader method).
• (setf basic-constraints) (writer method).
• bind-tbs (macro).
• certificate-policies (reader method).
• (setf certificate-policies) (writer method).
• crl-distribution-points (reader method).
• (setf crl-distribution-points) (writer method).
• extended-key-usage (reader method).
• (setf extended-key-usage) (writer method).
• extensions (reader method).
• (setf extensions) (writer method).
• get-raw-tbs (function).
• hash (reader method).
• (setf hash) (writer method).
• issuer (reader method).
• (setf issuer) (writer method).
• issuer-alternative-name (reader method).
• (setf issuer-alternative-name) (writer method).
• issuer-unique-id (reader method).
• (setf issuer-unique-id) (writer method).
• key-usage (reader method).
• (setf key-usage) (writer method).
• parse-directory-name (function).
• parse-pka (function).
• parse-pub-key (function).
• parse-signature-algorithm (function).
• parse-tbs-certificate (function).
• policy-mappings (reader method).
• (setf policy-mappings) (writer method).
• process-extensions (function).
• raw (reader method).
• (setf raw) (writer method).
• serial (reader method).
• (setf serial) (writer method).
• signature (reader method).
• signature (reader method).
• (setf signature) (writer method).
• (setf signature) (writer method).
• signature-algorithm (reader method).
• (setf signature-algorithm) (writer method).
• subject (reader method).
• (setf subject) (writer method).
• subject-alternative-name (reader method).
• (setf subject-alternative-name) (writer method).
• subject-information-access (reader method).
• (setf subject-information-access) (writer method).
• subject-key-identifier (reader method).
• (setf subject-key-identifier) (writer method).
• subject-pki (reader method).
• (setf subject-pki) (writer method).
• subject-unique-id (reader method).
• (setf subject-unique-id) (writer method).
• tbs-certificate (reader method).
• (setf tbs-certificate) (writer method).
• tbs-certificate (class).
• text (reader method).
• time-valid-p (function).
• validity (reader method).
• (setf validity) (writer method).
• verify-signature (function).
• version (reader method).
• (setf version) (writer method).
• x509-decoding-error (condition).
• x509-extension (class).
• x509v3-certificate (class).

---

4.1.11 cl-tls/src/x509/ocsp.lisp

Dependency

x509.lisp (file).

Source

cl-tls.asd.

Parent Component

x509 (module).

Internals

• *id-ad-ocsp* (special variable).
• check-ocsp (function).
• create-cert-id (function).
• create-request (function).
• create-tbs-request (function).
• log-info (reader method).
• (setf log-info) (writer method).
• ocsp-catch-asn-error (macro).
• ocsp-error (condition).
• parse-response-data (function).
• prepare-ocsp-request (function).
• verify-ocsp-signature (function).

---

4.1.12 cl-tls/src/x509/validate.lisp

Dependency

ocsp.lisp (file).

Source

cl-tls.asd.

Parent Component

x509 (module).

Internals

• check-certificate-status (function).
• get-issuer-octets (function).
• get-pubkey-octets (function).
• validate (function).

---

4.1.13 cl-tls/src/PEM/rfc7468.lisp

Source

cl-tls.asd.

Parent Component

pem (module).

Internals

• decapsulate (function).
• parse-pem (function).

---

4.1.14 cl-tls/src/tls/transport.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Public Interface

• address (class).
• host (reader method).
• (setf host) (writer method).
• port (reader method).
• (setf port) (writer method).
• request-stream-to-address (generic function).

---

4.1.15 cl-tls/src/tls/http.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Public Interface

• host (reader method).
• (setf host) (writer method).
• port (reader method).
• (setf port) (writer method).

Internals

• *crlf* (special variable).
• *max-content-length* (special variable).
• header-value (function).
• http-error (condition).
• http-request (function).
• log-info (reader method).
• (setf log-info) (writer method).
• parse-headers-from-stream (function).
• parse-uri (function).
• path (reader method).
• (setf path) (writer method).
• read-chunk (function).
• read-chunked-response (function).
• read-header (function).
• scheme (reader method).
• (setf scheme) (writer method).
• split-header (function).
• trim-space (function).
• uri (class).

---

4.1.16 cl-tls/src/tls/ciphersuites.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

• *supported-cipher-suites* (special variable).
• +3des-block-size+ (special variable).
• +3des-encryption-suites+ (special variable).
• +aes-128-ciphers+ (special variable).
• +aes-256-ciphers+ (special variable).
• +aes-block-size+ (special variable).
• +aes-encryption-suites+ (special variable).
• +anon-authentication-suites+ (special variable).
• +cbc-mode-ciphers+ (special variable).
• +dh-key-exchange-suites+ (special variable).
• +dhe-key-exchange-suites+ (special variable).
• +dss-authentication-suites+ (special variable).
• +md5-ciphers+ (special variable).
• +rc4-encryption-suites+ (special variable).
• +rsa-authentication-suites+ (special variable).
• +rsa-key-exchange-suites+ (special variable).
• +sha1-ciphers+ (special variable).
• +sha256-ciphers+ (special variable).
• +tls_dh_anon_with_3des_ede_cbc_sha+ (special variable).
• +tls_dh_anon_with_aes_128_cbc_sha+ (special variable).
• +tls_dh_anon_with_aes_128_cbc_sha256+ (special variable).
• +tls_dh_anon_with_aes_256_cbc_sha+ (special variable).
• +tls_dh_anon_with_aes_256_cbc_sha256+ (special variable).
• +tls_dh_anon_with_rc4_128_md5+ (special variable).
• +tls_dh_dss_with_3des_ede_cbc_sha+ (special variable).
• +tls_dh_dss_with_aes_128_cbc_sha+ (special variable).
• +tls_dh_dss_with_aes_128_cbc_sha256+ (special variable).
• +tls_dh_dss_with_aes_256_cbc_sha+ (special variable).
• +tls_dh_dss_with_aes_256_cbc_sha256+ (special variable).
• +tls_dh_rsa_with_3des_ede_cbc_sha+ (special variable).
• +tls_dh_rsa_with_aes_128_cbc_sha+ (special variable).
• +tls_dh_rsa_with_aes_128_cbc_sha256+ (special variable).
• +tls_dh_rsa_with_aes_256_cbc_sha+ (special variable).
• +tls_dh_rsa_with_aes_256_cbc_sha256+ (special variable).
• +tls_dhe_dss_with_3des_ede_cbc_sha+ (special variable).
• +tls_dhe_dss_with_aes_128_cbc_sha+ (special variable).
• +tls_dhe_dss_with_aes_128_cbc_sha256+ (special variable).
• +tls_dhe_dss_with_aes_256_cbc_sha+ (special variable).
• +tls_dhe_dss_with_aes_256_cbc_sha256+ (special variable).
• +tls_dhe_rsa_with_3des_ede_cbc_sha+ (special variable).
• +tls_dhe_rsa_with_aes_128_cbc_sha+ (special variable).
• +tls_dhe_rsa_with_aes_128_cbc_sha256+ (special variable).
• +tls_dhe_rsa_with_aes_256_cbc_sha+ (special variable).
• +tls_dhe_rsa_with_aes_256_cbc_sha256+ (special variable).
• +tls_rsa_with_3des_ede_cbc_sha+ (special variable).
• +tls_rsa_with_aes_128_cbc_sha+ (special variable).
• +tls_rsa_with_aes_128_cbc_sha256+ (special variable).
• +tls_rsa_with_aes_256_cbc_sha+ (special variable).
• +tls_rsa_with_aes_256_cbc_sha256+ (special variable).
• +tls_rsa_with_null_md5+ (special variable).
• +tls_rsa_with_null_sha+ (special variable).
• +tls_rsa_with_null_sha256+ (special variable).
• +tls_rsa_with_rc4_128_md5+ (special variable).
• +tls_rsa_with_rc4_128_sha+ (special variable).

---

4.1.17 cl-tls/src/tls/alert.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

• +access-denied+ (constant).
• +bad-certificate+ (constant).
• +bad-record-mac+ (constant).
• +certificate-expired+ (constant).
• +certificate-revoked+ (constant).
• +certificate-unknown+ (constant).
• +close-notify+ (constant).
• +decode-error+ (constant).
• +decompression-failure+ (constant).
• +decrypt-error+ (constant).
• +decryption-failed-reserved+ (constant).
• +export-restriction-reserved+ (constant).
• +fatal+ (constant).
• +handshake-failure+ (constant).
• +illegal-parameter+ (constant).
• +insufficient-security+ (constant).
• +internal-error+ (constant).
• +no-certificate-reserved+ (constant).
• +no-renegotiation+ (constant).
• +protocol-version+ (constant).
• +record-overflow+ (constant).
• +unexpected-message+ (constant).
• +unknown-ca+ (constant).
• +unsupported-certificate+ (constant).
• +unsupported-extension+ (constant).
• +user-canceled+ (constant).
• +warning+ (constant).
• alert-record-to-text (function).
• send-alert (function).

---

4.1.18 cl-tls/src/tls/crypto.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

• digitally-sign (function).
• endpoint-decryption-key (symbol macro).
• endpoint-encryption-key (symbol macro).
• gen-key-material (function).
• p-hash (function).
• prf (function).
• sign-dh-params (function).
• verify-signed-data (function).
• verify-signed-params (function).

---

4.1.19 cl-tls/src/tls/extensions.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Internals

• create-cert-status-request (function).
• create-sni (function).
• pack-extension (function).
• parse-extension (generic function).

---

4.1.20 cl-tls/src/tls/tls.lisp

Source

cl-tls.asd.

Parent Component

tls (module).

Public Interface

• accept-tunnel (function).
• initialize-listener (function).
• request-tunnel (function).
• tls-error (condition).
• tls-stream-error (condition).

Internals

• *certificate-request-msg* (special variable).
• *debug-stream* (special variable).
• *log-level* (special variable).
• *max-certificate-chain-length* (special variable).
• *max-fragment-length* (special variable).
• *version* (special variable).
• +alert+ (constant).
• +application-data+ (constant).
• +certificate+ (constant).
• +certificate-request+ (constant).
• +certificate-verify+ (constant).
• +change-cipher-spec+ (constant).
• +client-hello+ (constant).
• +client-key-exchange+ (constant).
• +finished+ (constant).
• +handshake+ (constant).
• +hello-request+ (constant).
• +server-hello+ (constant).
• +server-hello-done+ (constant).
• +server-key-exchange+ (constant).
• add-handshake-header (function).
• alert (reader method).
• (setf alert) (writer method).
• calculate-mac (function).
• calculate-verification-mac (function).
• cipher-suite-supported-p (function).
• ciphertext-to-compressed (generic function).
• client-certificate-url (reader method).
• (setf client-certificate-url) (writer method).
• client-session (class).
• create-cipher-vector (function).
• create-listener-session (function).
• create-session (function).
• decrypt (generic function).
• dhparams-from-key-file (function).
• encrypt (generic function).
• encrypt-and-send (function).
• endpoint-mac-decryption-key (symbol macro).
• endpoint-mac-encryption-key (symbol macro).
• exception (condition).
• get-application-data (function).
• get-ca-certificates (function).
• get-change-cipher-spec (function).
• get-dh-params (function).
• get-handshake-message (function).
• get-private-key (function).
• get-record (generic function).
• get-session-id (function).
• handle-handshake (generic function).
• handshake-messages (reader method).
• (setf handshake-messages) (writer method).
• hello-extensions (class).
• host-name (reader method).
• (setf host-name) (writer method).
• initiate-connection (generic function).
• log-info (reader method).
• (setf log-info) (writer method).
• max-fragment-length (reader method).
• (setf max-fragment-length) (writer method).
• parse-cipher-suite (function).
• pre-master-secret (reader method).
• (setf pre-master-secret) (writer method).
• pub-key (reader method).
• (setf pub-key) (writer method).
• reassemble-handshake-message (function).
• send (generic function).
• send-change-cipher-spec (generic function).
• send-handshake (generic function).
• send-record (generic function).
• server-session (class).
• session (class).
• shared-session-slots (class).
• supported-signature-algorithms (reader method).
• (setf supported-signature-algorithms) (writer method).
• symbol-to-suite-list (function).
• text (reader method).
• (setf text) (writer method).

---

4.2.1 cl-tls/README

Source

cl-tls.asd.

Parent Component

cl-tls (system).

---

4.2.2 cl-tls/LICENSE

Dependency

readme (file).

Source

cl-tls.asd.

Parent Component

cl-tls (system).

---

6.1.1 Ordinary functions

Function: accept-tunnel (&key io-stream input-stream output-stream) ¶

As a server, accept a new connection from a client

Package

cl-tls.

Source

tls.lisp.

Function: asn-sequence-to-list (vec &key mode) ¶

Given an asn sequence, return a list of the raw der elements

Package

cl-tls.

Source

asn.1.lisp.

Function: asn-serialize (obj type &key class primitivep) ¶

Create an ASN structure

Package

cl-tls.

Source

asn.1.lisp.

Function: create-asn-sequence (&rest coll) ¶

Package

cl-tls.

Source

asn.1.lisp.

Function: encode-oid (nums) ¶

Package

cl-tls.

Source

asn.1.lisp.

Function: initialize-listener (&key certificate private-key ca-certificates include-ciphers exclude-ciphers force-reinitialize authenticate-client-p require-authentication-p dh-params) ¶

Initialize a TLS server session with the given arguments

Package

cl-tls.

Source

tls.lisp.

Function: parse-der (obj &key start mode) ¶

Serialized mode returns the plain contents octets. deserialized mode deserializes the contents octets. Octet strings and Bit Strings are not deserialized

Package

cl-tls.

Source

asn.1.lisp.

Function: pbes2-decrypt (ov &optional passphrase) ¶

Package

cl-tls.

Source

pkcs5.lisp.

Function: request-tunnel (&key certificate private-key ca-certificates io-stream input-stream output-stream include-ciphers exclude-ciphers peer-dns-name peer-ip-addresses) ¶

As a client, request a TLS connection from a server

Package

cl-tls.

Source

tls.lisp.

Function: rsa-decrypt (data private-key) ¶

Returns raw data after decrypting and parsing the Encryption-block

Package

cl-tls.

Source

pkcs1.lisp.

Function: rsa-encrypt (data key) ¶

Converts data into an encryption block then calls ironclad

Package

cl-tls.

Source

pkcs1.lisp.

Function: rsassa-pkcs1.5-sign (priv-key msg hash-algorithm) ¶

Package

cl-tls.

Source

pkcs1.lisp.

Function: rsassa-pkcs1.5-verify (pub-key msg signature hash-algorithm) ¶

Package

cl-tls.

Source

pkcs1.lisp.

Function: x509-decode (octet-vector) ¶

Deserialize an x509 certificate from an octet-vector

Package

cl-tls.

Source

x509.lisp.

---

6.1.2 Generic functions

Generic Reader: host (object) ¶

Package

cl-tls.

Methods

Reader Method: host ((uri uri)) ¶

automatically generated reader method

Source

http.lisp.

Target Slot

host.

Reader Method: host ((address address)) ¶

automatically generated reader method

Source

transport.lisp.

Target Slot

host.

Generic Writer: (setf host) (object) ¶

Package

cl-tls.

Methods

Writer Method: (setf host) ((uri uri)) ¶

automatically generated writer method

Source

http.lisp.

Target Slot

host.

Writer Method: (setf host) ((address address)) ¶

automatically generated writer method

Source

transport.lisp.

Target Slot

host.

Generic Reader: port (object) ¶

Package

cl-tls.

Methods

Reader Method: port ((uri uri)) ¶

automatically generated reader method

Source

http.lisp.

Target Slot

port.

Reader Method: port ((address address)) ¶

automatically generated reader method

Source

transport.lisp.

Target Slot

port.

Generic Writer: (setf port) (object) ¶

Package

cl-tls.

Methods

Writer Method: (setf port) ((uri uri)) ¶

automatically generated writer method

Source

http.lisp.

Target Slot

port.

Writer Method: (setf port) ((address address)) ¶

automatically generated writer method

Source

transport.lisp.

Target Slot

port.

Generic Function: request-stream-to-address (address) ¶

Package

cl-tls.

Source

transport.lisp.

Methods

Method: request-stream-to-address ((addr address)) ¶

---

6.1.3 Standalone methods

Method: print-object ((cert x509v3-certificate) stream) ¶

Source

x509.lisp.

---

6.1.4 Conditions

Condition: tls-error ¶

Package

cl-tls.

Source

tls.lisp.

Direct superclasses

error.

Direct methods

• (setf text).
• text.

Direct slots

Slot: text ¶

Initargs

:text

Readers

text.

Writers

(setf text).

Condition: tls-stream-error ¶

Package

cl-tls.

Source

tls.lisp.

Direct superclasses

stream-error.

---

6.1.5 Classes

Class: address ¶

Package

cl-tls.

Source

transport.lisp.

Direct methods

• (setf host).
• host.
• (setf port).
• port.
• request-stream-to-address.

Direct slots

Slot: host ¶

Initargs

:host

Readers

host.

Writers

(setf host).

Slot: port ¶

Initargs

:port

Readers

port.

Writers

(setf port).

---

6.2.1 Constants

Constant: +access-denied+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +alert+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +application-data+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +asn1_application+ ¶

Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_constructed+ ¶

Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_context_specific+ ¶

Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_primitive+ ¶

Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_private+ ¶

Package

cl-tls.

Source

asn.1.lisp.

Constant: +asn1_universal+ ¶

Package

cl-tls.

Source

asn.1.lisp.

Constant: +bad-certificate+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +bad-record-mac+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +certificate+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +certificate-expired+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +certificate-request+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +certificate-revoked+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +certificate-unknown+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +certificate-verify+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +change-cipher-spec+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +client-hello+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +client-key-exchange+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +close-notify+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +decode-error+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +decompression-failure+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +decrypt-error+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +decryption-failed-reserved+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +export-restriction-reserved+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +fatal+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +finished+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +handshake+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +handshake-failure+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +hello-request+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +illegal-parameter+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +insufficient-security+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +internal-error+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +md2withrsaencryption+ ¶

Package

cl-tls.

Source

x509.lisp.

Constant: +md5withrsaencryption+ ¶

Package

cl-tls.

Source

x509.lisp.

Constant: +no-certificate-reserved+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +no-renegotiation+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +protocol-version+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +record-overflow+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +server-hello+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +server-hello-done+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +server-key-exchange+ ¶

Package

cl-tls.

Source

tls.lisp.

Constant: +sha1withrsaencryption+ ¶

Package

cl-tls.

Source

x509.lisp.

Constant: +sha224withrsaencryption+ ¶

Package

cl-tls.

Source

x509.lisp.

Constant: +sha256withrsaencryption+ ¶

Package

cl-tls.

Source

x509.lisp.

Constant: +sha384withrsaencryption+ ¶

Package

cl-tls.

Source

x509.lisp.

Constant: +sha512withrsaencryption+ ¶

Package

cl-tls.

Source

x509.lisp.

Constant: +unexpected-message+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +unknown-ca+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +unsupported-certificate+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +unsupported-extension+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +user-canceled+ ¶

Package

cl-tls.

Source

alert.lisp.

Constant: +warning+ ¶

Package

cl-tls.

Source

alert.lisp.

---

6.2.2 Special variables

Special Variable: *certificate-request-msg* ¶

Package

cl-tls.

Source

tls.lisp.

Special Variable: *crlf* ¶

Package

cl-tls.

Source

http.lisp.

Special Variable: *debug-stream* ¶

Package

cl-tls.

Source

tls.lisp.

Special Variable: *id-ad-ocsp* ¶

Package

cl-tls.

Source

ocsp.lisp.

Special Variable: *log-level* ¶

Package

cl-tls.

Source

tls.lisp.

Special Variable: *max-certificate-chain-length* ¶

Package

cl-tls.

Source

tls.lisp.

Special Variable: *max-content-length* ¶

Package

cl-tls.

Source

http.lisp.

Special Variable: *max-fragment-length* ¶

Package

cl-tls.

Source

tls.lisp.

Special Variable: *max-int-len* ¶

Package

cl-tls.

Source

asn.1.lisp.

Special Variable: *supported-cipher-suites* ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: *version* ¶

Package

cl-tls.

Source

tls.lisp.

Special Variable: +3des-block-size+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +3des-encryption-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-128-ciphers+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-256-ciphers+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-block-size+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +aes-encryption-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +anon-authentication-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +cbc-mode-ciphers+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +dh-key-exchange-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +dhe-key-exchange-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +dss-authentication-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +md5-ciphers+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +rc4-encryption-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +rsa-authentication-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +rsa-key-exchange-suites+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +sha1-ciphers+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +sha256-ciphers+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_3des_ede_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_128_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_128_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_256_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_aes_256_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_anon_with_rc4_128_md5+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_3des_ede_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_128_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_128_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_256_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_dss_with_aes_256_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_3des_ede_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_128_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_128_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_256_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dh_rsa_with_aes_256_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_3des_ede_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_128_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_128_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_256_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_dss_with_aes_256_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_3des_ede_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_128_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_128_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_256_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_dhe_rsa_with_aes_256_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_3des_ede_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_128_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_128_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_256_cbc_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_aes_256_cbc_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_null_md5+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_null_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_null_sha256+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_rc4_128_md5+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

Special Variable: +tls_rsa_with_rc4_128_sha+ ¶

Package

cl-tls.

Source

ciphersuites.lisp.

---

6.2.3 Symbol macros

Symbol Macro: endpoint-decryption-key ¶

Package

cl-tls.

Source

crypto.lisp.

Symbol Macro: endpoint-encryption-key ¶

Package

cl-tls.

Source

crypto.lisp.

Symbol Macro: endpoint-mac-decryption-key ¶

Package

cl-tls.

Source

tls.lisp.

Symbol Macro: endpoint-mac-encryption-key ¶

Package

cl-tls.

Source

tls.lisp.

---

6.2.4 Macros

Macro: bind-tbs (tbs &body body) ¶

Package

cl-tls.

Source

x509.lisp.

Macro: ocsp-catch-asn-error (&body body) ¶

Package

cl-tls.

Source

ocsp.lisp.

Macro: with-specification-map (map vec error-clause &body b) ¶

Package

cl-tls.

Source

utils.lisp.

---

6.2.5 Ordinary functions

Function: add-handshake-header (handshake-type buffer) ¶

Package

cl-tls.

Source

tls.lisp.

Function: alert-record-to-text (content) ¶

Package

cl-tls.

Source

alert.lisp.

Function: asn-sequence-to-indices (vec &optional contents-start) ¶

Given an asn sequence, return a list of the types of elements in them and their start and end positions in the vector

Package

cl-tls.

Source

asn.1.lisp.

Function: asn-time-to-universal-time (time-string) ¶

Converts utcTime or GeneralTime to universal time

Package

cl-tls.

Source

x509.lisp.

Function: asn-type-matches-p (type info) ¶

Package

cl-tls.

Source

utils.lisp.

Function: bytes-in-int (int) ¶

Return the least number of octets needed to represent an integer

Package

cl-tls.

Source

utils.lisp.

Function: calculate-mac (session content-type message) ¶

Package

cl-tls.

Source

tls.lisp.

Function: calculate-verification-mac (session content-type message) ¶

Package

cl-tls.

Source

tls.lisp.

Function: cat-vectors (&rest vectors) ¶

Package

cl-tls.

Source

utils.lisp.

Function: check-certificate-status (session subject issuer) ¶

Check certificate status via OCSP.
If the OCSP request is successful and the status os good, return true. Return false in every other case

Package

cl-tls.

Source

validate.lisp.

Function: check-ocsp (subject issuer) ¶

Return the status of the certificate or signal an error

Package

cl-tls.

Source

ocsp.lisp.

Function: cipher-suite-supported-p (cs session) ¶

Package

cl-tls.

Source

tls.lisp.

Function: compute-shared-secret (dh-params secret-exp dh-public-value) ¶

Generates the final secret, given the dh-params and the dh-public-value of the other party

Package

cl-tls.

Source

pkcs3.lisp.

Function: create-cert-id (issuer-dn issuer-pub-key cert-serial-number &optional hash-algorithm) ¶

Package

cl-tls.

Source

ocsp.lisp.

Function: create-cert-status-request () ¶

Package

cl-tls.

Source

extensions.lisp.

Function: create-cipher-vector (include exclude &optional authentication-method) ¶

Package

cl-tls.

Source

tls.lisp.

Function: create-explicit-tag (contents number &optional class) ¶

Package

cl-tls.

Source

asn.1.lisp.

Function: create-listener-session (&key private-key certificate ca-certificates include-ciphers exclude-ciphers dh-params authenticate-client-p require-authentication-p) ¶

Package

cl-tls.

Source

tls.lisp.

Function: create-request (cert-id) ¶

Package

cl-tls.

Source

ocsp.lisp.

Function: create-session (role &key certificate private-key ca-certificates io-stream input-stream output-stream include-ciphers exclude-ciphers peer-dns-name peer-ip-addresses) ¶

Package

cl-tls.

Source

tls.lisp.

Function: create-sni (fqdn) ¶

Package

cl-tls.

Source

extensions.lisp.

Function: create-tbs-request (identifiers) ¶

identifiers is a list of lists with identifier-dn identifier-pub-key, and serial number

Package

cl-tls.

Source

ocsp.lisp.

Function: decapsulate (txt prefix suffix &key start end) ¶

Read string encapsulated between a prefix and suffix

Package

cl-tls.

Source

rfc7468.lisp.

Function: decode-oid (vec) ¶

Decode an OID into a list of integers

Package

cl-tls.

Source

asn.1.lisp.

Function: dhparams-from-key-file (path) ¶

Package

cl-tls.

Source

tls.lisp.

Function: digitally-sign (session data) ¶

Create a digitally-signed-struct

Package

cl-tls.

Source

crypto.lisp.

Function: dns-match-p (pattern dns-name) ¶

Simple pattern matching for dns names. Only accepts one wildcard subdomain name.

Package

cl-tls.

Source

utils.lisp.

Function: dump-to-file (ov file-spec) ¶

Package

cl-tls.

Source

utils.lisp.

Function: emsa-pkcs1-v1.5-encode (m emlen hash-algorithm) ¶

Package

cl-tls.

Source

pkcs1.lisp.

Function: encrypt-and-send (session content-type content &key start end) ¶

Package

cl-tls.

Source

tls.lisp.

Function: fill-random-nonzero-octets (buffer &optional start end) ¶

Package

cl-tls.

Source

pkcs1.lisp.

Function: find-certificates (dir) ¶

Package

cl-tls.

Source

utils.lisp.

Function: from-stream-parse-der (octet-stream &key mode) ¶

Parse a single DER element from the stream. Maximum length
of integer values is max-int-len
If mode is :serialized, this function returns the plain contents octets
If mode is :deserialized, this function attempt to convert the contents octets into a lisp object if the class type is universal.

Package

cl-tls.

Source

asn.1.lisp.

Function: gen-key-material (client) ¶

Generate the session keying material

Package

cl-tls.

Source

crypto.lisp.

Function: generate-dh-params (&key l p g) ¶

Package

cl-tls.

Source

pkcs3.lisp.

Function: get-application-data (session eof-error-p eof-value) ¶

Get application data, take care of renegotiation transparently

Package

cl-tls.

Source

tls.lisp.

Function: get-ca-certificates (path) ¶

Package

cl-tls.

Source

tls.lisp.

Function: get-change-cipher-spec (session) ¶

Package

cl-tls.

Source

tls.lisp.

Function: get-contents (path) ¶

Get the contents of the file, either as text if it is text content or as an octet vector otherwise

Package

cl-tls.

Source

utils.lisp.

Function: get-der-contents-indices (octet-stream) ¶

Decodes the Type and length fields, and returns bounding array indices of the contents octets.

Package

cl-tls.

Source

asn.1.lisp.

Function: get-dh-params (path) ¶

Package

cl-tls.

Source

tls.lisp.

Function: get-handshake-message (session &optional handshake-fragment) ¶

Package

cl-tls.

Source

tls.lisp.

Function: get-issuer-octets (cert) ¶

Get the raw der-encoded contents of the issuer field in the certificate

Package

cl-tls.

Source

validate.lisp.

Function: get-private-key (path) ¶

Package

cl-tls.

Source

tls.lisp.

Function: get-pubkey-octets (cert) ¶

Get the raw der-encoded contents of the public key field in the certificate

Package

cl-tls.

Source

validate.lisp.

Function: get-random-octets (n &optional buffer) ¶

Return a series of n octets from a cryptographically secure source

Package

cl-tls.

Source

utils.lisp.

Function: get-raw-tbs (cert) ¶

Get the raw octets of the DER-encoded tbsCertificate structure

Package

cl-tls.

Source

x509.lisp.

Function: get-sequence (stream length) ¶

Package

cl-tls.

Source

utils.lisp.

Function: get-session-id () ¶

Package

cl-tls.

Source

tls.lisp.

Function: gmt-unix-time () ¶

Return a number representing the seconds that have elapsed since January 1, 1970

Package

cl-tls.

Source

utils.lisp.

Function: header-value (header-key headers) ¶

Package

cl-tls.

Source

http.lisp.

Function: http-request (url &key method body content-type) ¶

Retrieve response body of http transaction

Package

cl-tls.

Source

http.lisp.

Function: integer-to-octets (int &optional length) ¶

Convert an integer into a network-byte-ordered vector of octets, padded with zeros if the number of octets in int is less than length.

Package

cl-tls.

Source

utils.lisp.

Function: integer-to-vlq (n) ¶

Package

cl-tls.

Source

asn.1.lisp.

Function: load-der-priv-key (octet-vector) ¶

Load a PKCS#8-encoded (rfc5208) private key file

Package

cl-tls.

Source

pkcs8.lisp.

Function: load-pem-priv-key (character-vector) ¶

Load a PEM-encoded Private key; PEM-encoded keys should be just base64-encoded PKCS#8 PrivateKeyInfo structures with a header and a footer. But they’re sometimes not, instead being just the privateKey-RSAPrivateKey and DSAPrivateKey.

Package

cl-tls.

Source

pkcs8.lisp.

Function: load-priv-key (obj) ¶

Package

cl-tls.

Source

pkcs8.lisp.

Function: make-dh-key-pair (dh-params &optional static) ¶

Generate a Private/Public key pair

Package

cl-tls.

Source

pkcs3.lisp.

Function: make-octet-stream (octet-vector) ¶

Package

cl-tls.

Source

asn.1.lisp.

Function: make-octet-vector (&key length initial-contents) ¶

Package

cl-tls.

Source

utils.lisp.

Function: octets-to-integer (ov &key start end) ¶

Package

cl-tls.

Source

utils.lisp.

Function: ov-buffer-position (os) ¶

Package

cl-tls.

Source

asn.1.lisp.

Function: p-hash (secret data output-length &optional digest-algorithm) ¶

Package

cl-tls.

Source

crypto.lisp.

Function: pack-extension (extension-type extension-data) ¶

Package

cl-tls.

Source

extensions.lisp.

Function: parse-access-description (value) ¶

Package

cl-tls.

Source

extensions.lisp.

Function: parse-cipher-suite (cipher-suite session) ¶

Package

cl-tls.

Source

tls.lisp.

Function: parse-directory-name (rdns) ¶

Parse DER-encoded distinguishedName sequence

Package

cl-tls.

Source

x509.lisp.

Function: parse-enc-scheme (enc-scheme) ¶

Package

cl-tls.

Source

pkcs5.lisp.

Function: parse-general-name (general-name) ¶

Package

cl-tls.

Source

extensions.lisp.

Function: parse-general-names (general-names) ¶

Return a bag of generalNames

Package

cl-tls.

Source

extensions.lisp.

Function: parse-headers-from-stream (stream) ¶

Repeatedly read headers from stream

Package

cl-tls.

Source

http.lisp.

Function: parse-kdf (kdf) ¶

Package

cl-tls.

Source

pkcs5.lisp.

Function: parse-pem (text) ¶

Package

cl-tls.

Source

rfc7468.lisp.

Function: parse-pka (public-key-algorithm) ¶

Parse the OID in the SubjectPublicKeyInfo and the parameters

Package

cl-tls.

Source

x509.lisp.

Function: parse-priv-key (ov private-key-algorithm) ¶

Package

cl-tls.

Source

pkcs8.lisp.

Function: parse-pub-key (ov algorithm) ¶

Package

cl-tls.

Source

x509.lisp.

Function: parse-qualifier (policy-qualifier-id qualifier) ¶

Package

cl-tls.

Source

extensions.lisp.

Function: parse-response-data (data serial) ¶

Package

cl-tls.

Source

ocsp.lisp.

Function: parse-signature-algorithm (sig) ¶

Parse the sequence containing OID + optional parameters

Package

cl-tls.

Source

x509.lisp.

Function: parse-tbs-certificate (tbs-certificate) ¶

Package

cl-tls.

Source

x509.lisp.

Function: parse-uri (uri) ¶

Parse URI into its components as specified in rfc3986

Package

cl-tls.

Source

http.lisp.

Function: prepare-ocsp-request (identifiers) ¶

Package

cl-tls.

Source

ocsp.lisp.

Function: prf (secret label seed output-length) ¶

Package

cl-tls.

Source

crypto.lisp.

Function: process-extensions (extensions) ¶

Package

cl-tls.

Source

x509.lisp.

Function: read-chunk (stream) ¶

Read a single chunk, or nil upon receiving 0-length header

Package

cl-tls.

Source

http.lisp.

Function: read-chunked-response (stream) ¶

Package

cl-tls.

Source

http.lisp.

Function: read-header (stream) ¶

Read one header from stream

Package

cl-tls.

Source

http.lisp.

Function: reassemble-handshake-message (session &optional handshake-fragment) ¶

Handle defragmentation of handshake messages

Package

cl-tls.

Source

tls.lisp.

Function: remove-padding (ov) ¶

Remove rfc1423 padding from octet-vector ov

Package

cl-tls.

Source

pkcs5.lisp.

Function: send-alert (session level description) ¶

Send an alert record

Package

cl-tls.

Source

alert.lisp.

Function: sign-dh-params (session params) ¶

Package

cl-tls.

Source

crypto.lisp.

Function: split-header (header) ¶

Split header into its key and value components

Package

cl-tls.

Source

http.lisp.

Function: split-string (str target) ¶

Package

cl-tls.

Source

utils.lisp.

Function: stream-octets-to-integer (stream length) ¶

Package

cl-tls.

Source

utils.lisp.

Function: strong-random-range (a b) ¶

Generate a random integer between a and b, inclusive

Package

cl-tls.

Source

pkcs3.lisp.

Function: symbol-to-suite-list (sym) ¶

Package

cl-tls.

Source

tls.lisp.

Function: time-valid-p (cert) ¶

Package

cl-tls.

Source

x509.lisp.

Function: timing-independent-compare (vec1 vec2) ¶

Compare octet vectors in a time-independent manner

Package

cl-tls.

Source

utils.lisp.

Function: trim-space (str) ¶

Package

cl-tls.

Source

http.lisp.

Function: validate (session chain) ¶

Certificate Path validation, including status checking

Package

cl-tls.

Source

validate.lisp.

Function: verify-ocsp-signature (signing-certificate response-data signature signature-algorithm) ¶

Package

cl-tls.

Source

ocsp.lisp.

Function: verify-signature (subject issuer) ¶

Package

cl-tls.

Source

x509.lisp.

Function: verify-signed-data (session data algorithm signature) ¶

Package

cl-tls.

Source

crypto.lisp.

Function: verify-signed-params (session dh-params algorithm signature) ¶

Package

cl-tls.

Source

crypto.lisp.

---