shared

const (
	HTTPHeaderXPadding   string = "X-Padding"
	HTTPHeaderXNoiseInit string = "X-Noise-Init"
	HTTPHeaderXNoiseResp string = "X-Noise-Resp"
)

const (
	ConfKeyClientServer                        string = "client.server"                           // Example: "wss://example.org:8443"
	ConfKeyClientHeadersLengthRandomPaddingMin string = "client.header_length_random_padding.min" // Example: "32"
	ConfKeyClientHeadersLengthRandomPaddingMax string = "client.header_length_random_padding.max" // Example: "128"
	ConfKeyClientAuthMethod                    string = "client.auth.method"                      // Example: "bearer"
	ConfKeyClientAuthPayload                   string = "client.auth.payload"                     // Value is auth payload
	ConfKeyClientTLSVerifyMode                 string = "client.tls.verify.mode"                  // Example: "strict"
	ConfKeyClientTLSServerName                 string = "client.tls.server_name"                  // Example: "example.org"
	ConfKeyClientTLSMeek                       string = "client.tls.meek"                         // Example: "chrome"
	ConfKeyClientTLSCertPinning                string = "client.tls.cert_pinning"                 // Example: "pubkey"
	ConfKeyClientTLSCertPinned                 string = "client.tls.cert_pinned"                  // Value is the hash of whole cert or public key
	ConfKeyClientNoiseServerPublicKey          string = "client.noise.server.public_key"          // Value is Base64 encoded Noise public key of server
	ConfKeyClientNoiseClientPublicKey          string = "client.noise.client.public_key"          // Value is Base64 encoded Noise public key of client
	ConfKeyClientNoiseClientPrivateKey         string = "client.noise.client.private_key"         // Value is Base64 encoded Noise private key of client
	ConfKeyClientNoisePSK                      string = "client.noise.psk"                        // Value is Base64 encoded Noise PSK for post-quantum security
	ConfKeyClientInboundProcessorPath          string = "client.processor.inbound.path"           // Example: "/opt/demoprocessor"
	ConfKeyClientInboundProcessorArgs          string = "client.processor.inbound.args"           // Example: "-in"
	ConfKeyClientOutboundProcessorPath         string = "client.processor.outbound.path"          // Example: "/opt/demoprocessor"
	ConfKeyClientOutboundProcessorArgs         string = "client.processor.outbound.args"          // Example: "-out"
)

const (
	ConfKeyServerListen                string = "server.listen"                   // Example: "127.0.0.1:8443"
	ConfKeyServerTransport             string = "server.transport"                // Currently, value should be "wss" only
	ConfKeyServerTLSCert               string = "server.tls.cert"                 // Value is Base64 encoded cert data (PEM format)
	ConfKeyServerTLSKey                string = "server.tls.key"                  // Value is Base64 encoded cert key data (PEM format)
	ConfKeyServerAuthType              string = "server.auth.type"                // Example: "bearer"
	ConfKeyServerEntryPath             string = "server.entry_path"               // Example: "/a702a023-d435-481f-83ab-7563c978e5ac"
	ConfKeyServerAuthOnFailAction      string = "server.auth.on_fail.action"      // Example: "meek"
	ConfKeyServerAuthOnFailArgs        string = "server.auth.on_fail.args"        // Example: "nginx.403"
	ConfKeyServerNoisePSK              string = "server.noise.psk"                // Value is Base64 encoded Noise PSK for post-quantum security
	ConfKeyServerNoiseServerPublicKey  string = "server.noise.server.public_key"  // Value is Base64 encoded Noise public key of server
	ConfKeyServerNoiseServerPrivateKey string = "server.noise.server.private_key" // Value is Base64 encoded Noise private key of server
	ConfKeyServerInboundProcessorPath  string = "server.processor.inbound.path"   // Example: "/opt/demoprocessor"
	ConfKeyServerInboundProcessorArgs  string = "server.processor.inbound.args"   // Example: "-in"
	ConfKeyServerOutboundProcessorPath string = "server.processor.outbound.path"  // Example: "/opt/demoprocessor"
	ConfKeyServerOutboundProcessorArgs string = "server.processor.outbound.args"  // Example: "-out"
)

const (
	ConfKeyNukeOverwritePasses  string = "nuke.overwrite.passes"  // Example: "3"
	ConfKeyNukeOverwritePattern string = "nuke.overwrite.pattern" // Example: "01R"
	ConfKeyNukePostNuke         string = "nuke.post_nuke"         // Example: "reboot_to_memtest86+.sh"
)

const (
	QueryGetConf string = "SELECT VALUE FROM `CONFIG` WHERE `KEY` = ? LIMIT 1;"
	QueryGetMemo string = "SELECT VALUE FROM `MEMO` WHERE `KEY` = ? LIMIT 1;"
)

const (
	LogLevelDebugStr   string = "DEBUG"
	LogLevelInfoStr    string = "INFO"
	LogLevelWarnStr    string = "WARN"
	LogLevelErrorStr   string = "ERROR"
	LogLevelFatalStr   string = "FATAL" // Fatal will ALWAYS trigger a panic! Be careful!
	LogLevelUnknownStr string = "UNKNOWN"
)

const (
	MemoKeyClientSessionNextEpoch string = "client.session.next_epoch"
	MemoKeyClientSessionNextSeq   string = "client.session.next_seq"
)

const (
	TLSVerifyModeStrict   string = "strict"   // Full + OCSP
	TLSVerifyModeFull     string = "full"     // Pinned + regular verification
	TLSVerifyModePinned   string = "pinned"   // Only match cert pinning, can NOT be used with TLSCertPinningModeOff
	TLSVerifyModeDisabled string = "disabled" // Disable all TLS cert verification (INSECURE! FOR TESTING ONLY!)
)

const (
	TLSCertPinningModePubKey string = "pubkey" // Pinning the cert by the SHA-512 of public key, more convenient
	TLSCertPinningModeCert   string = "cert"   // Pinning the cert by the SHA-512 of the whole cert, more secure
	TLSCertPinningModeOff    string = "off"    // Do not use cert pinning, vulnerable if any trust CA is compromised, and can NOT be used with TLSVerifyModePinned
)

const (
	TLSClientMeekFirefox          string = "firefox"            // Let TLS handshakes look like Firefox
	TLSClientMeekChrome           string = "chrome"             // Let TLS handshakes look like Chrome
	TLSClientMeekEdge             string = "edge"               // Let TLS handshakes look like Edge
	TLSClientMeekSafari           string = "safari"             // Let TLS handshakes look like Safari on Mac systems
	TLSClientMeekAndroid11OkHttp  string = "android_11_okhttp"  // Let TLS handshakes look like the OkHttp library on Android 11
	TLSClientMeekIOS              string = "ios"                // Let TLS handshakes look like Safari on IOS systems
	TLSClientMeekQQ               string = "qq"                 // Let TLS handshakes look like QQ Browser
	TLSClientMeek360              string = "360"                // Let TLS handshakes look like 360 Browser
	TLSClientMeekRandomized       string = "randomized"         // Let TLS handshakes use a randomized client hello schema, maybe with or with no ALPN
	TLSClientMeekRandomizedALPN   string = "randomized_alpn"    // Let TLS handshakes use a randomized client hello schema with ALPN
	TLSClientMeekRandomizedNoALPN string = "randomized_no_alpn" // Let TLS handshakes use a randomized client hello schema with no ALPN
	TLSClientMeekGolang           string = "golang"             // Let TLS handshakes look like a regular Golang based program using standard library, functionally equals to no meek
)

const (
	ContentTypeOCSPRequest string = "application/ocsp-request"
)

const (
	QuerySetMemo string = "UPDATE `MEMO` SET `VALUE` = ? WHERE `KEY` = ?"
)