@gjsify/tls-native 0.4.30 → 0.4.31

package/lib/esm/index.gjs.spec.js

@@ -1 +1 @@
-import{__name as e}from"./_virtual/_rolldown/runtime.js";import{OcspCertStatus as t,OcspResponseStatus as n,hasNativeTls as r,nativeTls as i,parseOcspResponse as a}from"./index.js";import{describe as o,expect as s,it as c,on as l}from"@gjsify/unit";var u=e(async()=>{await l(`Gjs`,async()=>{await o(`@gjsify/tls-native — module loading`,async()=>{await c(`loads the GjsifyTls typelib successfully`,()=>{s(r()).toBe(!0),s(i).not.toBeNull(),s(typeof i?.Tls.parse_ocsp_response).toBe(`function`)})}),await o(`@gjsify/tls-native — parse_ocsp_response`,async()=>{await c(`returns null for empty input`,()=>{s(a(new Uint8Array)).toBeNull()}),await c(`returns null for non-OCSP garbage bytes`,()=>{s(a(new Uint8Array([255,255,255,255,1,2,3]))).toBeNull()}),await c(`returns null for truncated DER (sequence header only)`,()=>{s(a(new Uint8Array([48,1,0]))).toBeNull()})}),await o(`@gjsify/tls-native — symbolic constants`,async()=>{await c(`exposes OcspCertStatus enum-style constants`,()=>{s(t.GOOD).toBe(0),s(t.REVOKED).toBe(1),s(t.UNKNOWN).toBe(2)}),await c(`exposes OcspResponseStatus enum-style constants`,()=>{s(n.SUCCESSFUL).toBe(0),s(n.MALFORMED_REQUEST).toBe(1),s(n.INTERNAL_ERROR).toBe(2),s(n.TRY_LATER).toBe(3),s(n.SIG_REQUIRED).toBe(5),s(n.UNAUTHORIZED).toBe(6)})})})},`default`);export{u as default};
+import{__name as e}from"./_virtual/_rolldown/runtime.js";import{OcspCertStatus as t,OcspResponseStatus as n,TlsChannelBindingType as r,createSessionAccess as i,hasNativeTls as a,hasTlsSessionAccess as o,nativeTls as s,parseOcspResponse as c}from"./index.js";import{describe as l,expect as u,it as d,on as f}from"@gjsify/unit";var p=e(async()=>{await f(`Gjs`,async()=>{await l(`@gjsify/tls-native — module loading`,async()=>{await d(`loads the GjsifyTls typelib successfully`,()=>{u(a()).toBe(!0),u(s).not.toBeNull(),u(typeof s?.Tls.parse_ocsp_response).toBe(`function`)})}),await l(`@gjsify/tls-native — parse_ocsp_response`,async()=>{await d(`returns null for empty input`,()=>{u(c(new Uint8Array)).toBeNull()}),await d(`returns null for non-OCSP garbage bytes`,()=>{u(c(new Uint8Array([255,255,255,255,1,2,3]))).toBeNull()}),await d(`returns null for truncated DER (sequence header only)`,()=>{u(c(new Uint8Array([48,1,0]))).toBeNull()})}),await l(`@gjsify/tls-native — symbolic constants`,async()=>{await d(`exposes OcspCertStatus enum-style constants`,()=>{u(t.GOOD).toBe(0),u(t.REVOKED).toBe(1),u(t.UNKNOWN).toBe(2)}),await d(`exposes OcspResponseStatus enum-style constants`,()=>{u(n.SUCCESSFUL).toBe(0),u(n.MALFORMED_REQUEST).toBe(1),u(n.INTERNAL_ERROR).toBe(2),u(n.TRY_LATER).toBe(3),u(n.SIG_REQUIRED).toBe(5),u(n.UNAUTHORIZED).toBe(6)}),await d(`exposes TlsChannelBindingType enum-style constants`,()=>{u(r.TLS_UNIQUE).toBe(0),u(r.TLS_SERVER_END_POINT).toBe(1),u(r.TLS_EXPORTER).toBe(2)})}),await l(`@gjsify/tls-native — SessionAccess (Phase 2 POC)`,async()=>{await d(`exposes the SessionAccess class on the native module`,()=>{u(s).not.toBeNull(),u(typeof s?.SessionAccess.is_supported).toBe(`function`),u(typeof s?.SessionAccess.for_connection).toBe(`function`)}),await d(`hasTlsSessionAccess() returns false until the gnutls_session_t access lands`,()=>{u(o()).toBe(!1)}),await d(`SessionAccess.is_supported() matches hasTlsSessionAccess()`,()=>{u(s?.SessionAccess.is_supported()).toBe(!1)}),await d(`createSessionAccess(null) returns null`,()=>{u(i(null)).toBeNull()}),await d(`SessionAccess.for_connection(null) returns null`,()=>{u(s?.SessionAccess.for_connection(null)).toBeNull()})})})},`default`);export{p as default};

package/lib/esm/index.js

@@ -1 +1 @@
-import"./_virtual/_rolldown/runtime.js";let e=null;const t=globalThis.imports?.gi;if(t)try{e=t.GjsifyTls}catch{}const n=e;function hasNativeTls(){return e!==null}function parseOcspResponse(t){if(!e)throw Error(`@gjsify/tls-native: native typelib not loaded. Check hasNativeTls() first.`);return e.Tls.parse_ocsp_response(t)}const r={GOOD:0,REVOKED:1,UNKNOWN:2},i={SUCCESSFUL:0,MALFORMED_REQUEST:1,INTERNAL_ERROR:2,TRY_LATER:3,SIG_REQUIRED:5,UNAUTHORIZED:6};export{r as OcspCertStatus,i as OcspResponseStatus,hasNativeTls,n as nativeTls,parseOcspResponse};
+import"./_virtual/_rolldown/runtime.js";const e={TLS_UNIQUE:0,TLS_SERVER_END_POINT:1,TLS_EXPORTER:2};let t=null;const n=globalThis.imports?.gi;if(n)try{t=n.GjsifyTls}catch{}const r=t;function hasNativeTls(){return t!==null}function parseOcspResponse(e){if(!t)throw Error(`@gjsify/tls-native: native typelib not loaded. Check hasNativeTls() first.`);return t.Tls.parse_ocsp_response(e)}const i={GOOD:0,REVOKED:1,UNKNOWN:2},a={SUCCESSFUL:0,MALFORMED_REQUEST:1,INTERNAL_ERROR:2,TRY_LATER:3,SIG_REQUIRED:5,UNAUTHORIZED:6};function hasTlsSessionAccess(){if(!t)return!1;try{return t.SessionAccess.is_supported()}catch{return!1}}function createSessionAccess(e){return t?t.SessionAccess.for_connection(e):null}export{i as OcspCertStatus,a as OcspResponseStatus,e as TlsChannelBindingType,createSessionAccess,hasNativeTls,hasTlsSessionAccess,r as nativeTls,parseOcspResponse};

package/lib/types/index.d.ts

@@ -40,8 +40,78 @@ export interface NativeTls {
      */
     parse_ocsp_response(bytes: Uint8Array): OcspResponseInfo | null;
 }
+/**
+ * Symbolic channel-binding type per RFC 5929 / RFC 9266.
+ *
+ * Mirrors `GjsifyTls.ChannelBindingType` in the GIR. Values are stable
+ * across GnuTLS / OpenSSL / Node — the RFCs assign them implicitly via
+ * the wire-protocol identifier ("tls-unique", "tls-server-end-point",
+ * "tls-exporter").
+ */
+export declare const TlsChannelBindingType: {
+    /** `tls-unique` (RFC 5929 §3) — TLS 1.0–1.2 only. */
+    readonly TLS_UNIQUE: 0;
+    /** `tls-server-end-point` (RFC 5929 §4) — hash of the server cert. */
+    readonly TLS_SERVER_END_POINT: 1;
+    /** `tls-exporter` (RFC 9266) — TLS 1.3 replacement for `tls-unique`. */
+    readonly TLS_EXPORTER: 2;
+};
+export type TlsChannelBindingType = (typeof TlsChannelBindingType)[keyof typeof TlsChannelBindingType];
+/**
+ * Minimal Gio.TlsConnection shape — typed structurally so this module
+ * doesn't take a value-level dep on `@girs/gio-2.0` (would force every
+ * consumer to install the GIR-types package even on Node). Real
+ * connections come from `@gjsify/tls`'s `TLSSocket._tlsConnection`.
+ */
+export interface TlsConnectionHandle {
+    /** Tag for type-narrowing — present on real Gio.TlsConnection. */
+    __isTlsConnection?: never;
+}
+/**
+ * Native SessionAccess wrapper (Phase 2 POC).
+ *
+ * Mirrors `GjsifyTls.SessionAccess` from the GIR. Every method currently
+ * throws a GLib.Error with domain `gjsify-tls-session-access-error-quark`
+ * and code `NOT_SUPPORTED` — see `docs/poc/tls-phase2-session-access.md`
+ * for the open struct-layout question gating the real implementation.
+ *
+ * The shape is locked in now so flipping the native side from
+ * throw → real is a transparent change for JS callers.
+ */
+export interface NativeSessionAccess {
+    /** `gnutls_session_is_resumed` — true if the session was resumed. */
+    is_session_reused(): boolean;
+    /** `gnutls_session_get_data2` — serialized session blob. */
+    get_session_data(): unknown;
+    /** `gnutls_session_set_data` — inject a session blob before handshake. */
+    set_session_data(data: unknown): void;
+    /** `gnutls_session_channel_binding` for a specific binding type. */
+    get_channel_binding(binding: TlsChannelBindingType): unknown;
+    /** Convenience: TLS-Finished bytes we sent (Node compat). */
+    get_finished(): unknown;
+    /** Convenience: TLS-Finished bytes the peer sent (Node compat). */
+    get_peer_finished(): unknown;
+    /** Negotiated protocol version as a stable string. */
+    get_negotiated_protocol_version(): string;
+}
+/** Native `SessionAccess` class constructor surface (GIR static methods). */
+export interface NativeSessionAccessClass {
+    /**
+     * Returns whether the native session access layer is functional.
+     * Currently always `false` — see `hasTlsSessionAccess()` for the
+     * preferred predicate that callers should use.
+     */
+    is_supported(): boolean;
+    /**
+     * Build a SessionAccess for a live `Gio.TlsConnection`. Returns
+     * `null` if @connection is `null`.
+     */
+    for_connection(connection: TlsConnectionHandle | null): NativeSessionAccess | null;
+}
 export interface GjsifyTlsModule {
     Tls: NativeTls;
+    SessionAccess: NativeSessionAccessClass;
+    ChannelBindingType: typeof TlsChannelBindingType;
 }
 /** The native GjsifyTls module, or `null` if not installed. */
 export declare const nativeTls: GjsifyTlsModule | null;
@@ -83,3 +153,28 @@ export declare const OcspResponseStatus: {
     readonly UNAUTHORIZED: 6;
 };
 export type OcspResponseStatus = (typeof OcspResponseStatus)[keyof typeof OcspResponseStatus];
+/**
+ * Returns `true` when the Phase 2 session-access bridge is functional.
+ *
+ * Today this always returns `false` even when the native typelib is
+ * loaded — the underlying gnutls_session_t extraction from
+ * `Gio.TlsConnection` is not yet implemented. See
+ * `docs/poc/tls-phase2-session-access.md` for the open question.
+ *
+ * Callers (e.g. `@gjsify/tls`'s `TLSSocket.getFinished()`) should gate
+ * with this predicate so consumers can detect "not supported on this
+ * platform / version" without triggering a thrown error.
+ *
+ * When the native side becomes functional this predicate flips to
+ * `true` automatically (it reads `GjsifyTls.SessionAccess.is_supported()`).
+ */
+export declare function hasTlsSessionAccess(): boolean;
+/**
+ * Build a {@link NativeSessionAccess} wrapper around a live
+ * `Gio.TlsConnection`. Returns `null` if @connection is `null` or
+ * the native typelib is unavailable.
+ *
+ * The returned object's methods THROW until {@link hasTlsSessionAccess}
+ * starts returning `true` — surface stays stable across the impl flip.
+ */
+export declare function createSessionAccess(connection: TlsConnectionHandle | null): NativeSessionAccess | null;

package/meson.build

@@ -5,16 +5,28 @@ root_dir = meson.current_source_dir()
 dependencies = [
     dependency('glib-2.0'),
     dependency('gobject-2.0'),
+    dependency('gio-2.0'),
     dependency('gnutls'),
 ]
 
 sources = files(
     'src/vala/tls.vala',
+    'src/vala/session-access.vala',
 )
 
+# Sibling vapis: `gnutls-ocsp.vapi` (Phase 1 OCSP parser) and
+# `gnutls-session.vapi` (Phase 2 channel-binding API). The bundled
+# Vala 0.56 gnutls.vapi has session-data set/get/get2 and is_resumed
+# already, but not `gnutls_session_channel_binding` — added in the
+# sibling vapi.
 libGjsifyTls = library('gjsifytls', sources,
     dependencies: dependencies,
-    vala_args: ['--pkg=gnutls', '--vapidir=' + meson.current_source_dir() / 'src/vala', '--pkg=gnutls-ocsp'],
+    vala_args: [
+        '--pkg=gnutls',
+        '--vapidir=' + meson.current_source_dir() / 'src/vala',
+        '--pkg=gnutls-ocsp',
+        '--pkg=gnutls-session',
+    ],
     vala_gir: meson.project_name() + '-1.0.gir',
     install: true,
     install_dir: [true, true, true, true],

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gjsify/tls-native",
-    "version": "0.4.30",
+    "version": "0.4.31",
     "description": "Optional Vala/GObject bridge providing GnuTLS capabilities not exposed by Gio.TlsConnection — OCSP-response parsing (RFC 6960), session resumption data extraction, channel binding (tls-finished bytes for SCRAM-SHA-*). Enhances @gjsify/tls when installed.",
     "type": "module",
     "main": "lib/esm/index.js",
@@ -53,8 +53,8 @@
         "@girs/gobject-2.0": "2.88.0-4.0.1"
     },
     "devDependencies": {
-        "@gjsify/cli": "^0.4.30",
-        "@gjsify/unit": "^0.4.30",
+        "@gjsify/cli": "^0.4.31",
+        "@gjsify/unit": "^0.4.31",
         "@ts-for-gir/cli": "^4.0.0-rc.15",
         "@types/node": "^25.9.1",
         "typescript": "^6.0.3"

package/prebuilds/linux-aarch64/GjsifyTls-1.0.gir

@@ -2,10 +2,22 @@
 <!-- GjsifyTls-1.0.gir generated by valac 0.56.19, do not modify. -->
 <repository version="1.2" xmlns="http://www.gtk.org/introspection/core/1.0" xmlns:c="http://www.gtk.org/introspection/c/1.0" xmlns:doc="http://www.gtk.org/introspection/doc/1.0" xmlns:glib="http://www.gtk.org/introspection/glib/1.0">
 <include name="GObject" version="2.0"/>
+<include name="Gio" version="2.0"/>
+<include name="GLib" version="2.0"/>
 <package name="gjsifytls"/>
 <c:include name="gjsifytls.h"/>
 <doc:format name="unknown"/>
 <namespace name="GjsifyTls" version="1.0" shared-library="libgjsifytls.so" c:prefix="GjsifyTls" c:identifier-prefixes="GjsifyTls" c:symbol-prefixes="gjsify_tls">
+	<enumeration name="ChannelBindingType" c:type="GjsifyTlsChannelBindingType" glib:type-name="GjsifyTlsChannelBindingType" glib:get-type="gjsify_tls_channel_binding_type_get_type">
+		<member name="tls_unique" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_UNIQUE" value="0"/>
+		<member name="tls_server_end_point" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_SERVER_END_POINT" value="1"/>
+		<member name="tls_exporter" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_EXPORTER" value="2"/>
+	</enumeration>
+	<enumeration name="SessionAccessError" c:type="GjsifyTlsSessionAccessError" glib:type-name="GjsifyTlsSessionAccessError" glib:get-type="gjsify_tls_session_access_error_get_type" glib:error-domain="gjsify-tls-session-access-error-quark">
+		<member name="not_supported" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_SUPPORTED" value="0"/>
+		<member name="not_ready" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_READY" value="1"/>
+		<member name="gnutls_error" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_GNUTLS_ERROR" value="2"/>
+	</enumeration>
 	<class name="OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo" c:symbol-prefix="ocsp_response_info" glib:type-name="GjsifyTlsOcspResponseInfo" glib:get-type="gjsify_tls_ocsp_response_info_get_type" glib:type-struct="OcspResponseInfoClass" parent="GObject.Object">
 		<field name="parent_instance" readable="0" private="1">
 			<type name="GObject.Object" c:type="GObject"/>
@@ -150,5 +162,115 @@
 		</field>
 	</record>
 	<record name="TlsPrivate" c:type="GjsifyTlsTlsPrivate" disguised="1"/>
+	<class name="SessionAccess" c:type="GjsifyTlsSessionAccess" c:symbol-prefix="session_access" glib:type-name="GjsifyTlsSessionAccess" glib:get-type="gjsify_tls_session_access_get_type" glib:type-struct="SessionAccessClass" parent="GObject.Object">
+		<field name="parent_instance" readable="0" private="1">
+			<type name="GObject.Object" c:type="GObject"/>
+		</field>
+		<field name="priv" readable="0" private="1">
+			<type name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate*"/>
+		</field>
+		<function name="is_supported" c:identifier="gjsify_tls_session_access_is_supported">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+		</function>
+		<function name="for_connection" c:identifier="gjsify_tls_session_access_for_connection">
+			<return-value transfer-ownership="full" nullable="1">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+			<parameters>
+				<parameter name="connection" transfer-ownership="none" nullable="1">
+					<type name="Gio.TlsConnection" c:type="GTlsConnection*"/>
+				</parameter>
+			</parameters>
+		</function>
+		<method name="is_session_reused" c:identifier="gjsify_tls_session_access_is_session_reused" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_session_data" c:identifier="gjsify_tls_session_access_get_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="set_session_data" c:identifier="gjsify_tls_session_access_set_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="none" c:type="void"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="data" transfer-ownership="none">
+					<type name="GLib.Bytes" c:type="GBytes*"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_channel_binding" c:identifier="gjsify_tls_session_access_get_channel_binding" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="binding" transfer-ownership="none">
+					<type name="GjsifyTls.ChannelBindingType" c:type="GjsifyTlsChannelBindingType"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_finished" c:identifier="gjsify_tls_session_access_get_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_peer_finished" c:identifier="gjsify_tls_session_access_get_peer_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_negotiated_protocol_version" c:identifier="gjsify_tls_session_access_get_negotiated_protocol_version">
+			<return-value transfer-ownership="full">
+				<type name="utf8" c:type="gchar*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<constructor name="new" c:identifier="gjsify_tls_session_access_new">
+			<return-value transfer-ownership="full">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+		</constructor>
+	</class>
+	<record name="SessionAccessClass" c:type="GjsifyTlsSessionAccessClass" glib:is-gtype-struct-for="SessionAccess">
+		<field name="parent_class" readable="0" private="1">
+			<type name="GObject.ObjectClass" c:type="GObjectClass"/>
+		</field>
+	</record>
+	<record name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate" disguised="1"/>
 </namespace>
 </repository>

package/prebuilds/linux-ppc64/GjsifyTls-1.0.gir

@@ -2,10 +2,22 @@
 <!-- GjsifyTls-1.0.gir generated by valac 0.56.19, do not modify. -->
 <repository version="1.2" xmlns="http://www.gtk.org/introspection/core/1.0" xmlns:c="http://www.gtk.org/introspection/c/1.0" xmlns:doc="http://www.gtk.org/introspection/doc/1.0" xmlns:glib="http://www.gtk.org/introspection/glib/1.0">
 <include name="GObject" version="2.0"/>
+<include name="Gio" version="2.0"/>
+<include name="GLib" version="2.0"/>
 <package name="gjsifytls"/>
 <c:include name="gjsifytls.h"/>
 <doc:format name="unknown"/>
 <namespace name="GjsifyTls" version="1.0" shared-library="libgjsifytls.so" c:prefix="GjsifyTls" c:identifier-prefixes="GjsifyTls" c:symbol-prefixes="gjsify_tls">
+	<enumeration name="ChannelBindingType" c:type="GjsifyTlsChannelBindingType" glib:type-name="GjsifyTlsChannelBindingType" glib:get-type="gjsify_tls_channel_binding_type_get_type">
+		<member name="tls_unique" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_UNIQUE" value="0"/>
+		<member name="tls_server_end_point" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_SERVER_END_POINT" value="1"/>
+		<member name="tls_exporter" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_EXPORTER" value="2"/>
+	</enumeration>
+	<enumeration name="SessionAccessError" c:type="GjsifyTlsSessionAccessError" glib:type-name="GjsifyTlsSessionAccessError" glib:get-type="gjsify_tls_session_access_error_get_type" glib:error-domain="gjsify-tls-session-access-error-quark">
+		<member name="not_supported" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_SUPPORTED" value="0"/>
+		<member name="not_ready" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_READY" value="1"/>
+		<member name="gnutls_error" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_GNUTLS_ERROR" value="2"/>
+	</enumeration>
 	<class name="OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo" c:symbol-prefix="ocsp_response_info" glib:type-name="GjsifyTlsOcspResponseInfo" glib:get-type="gjsify_tls_ocsp_response_info_get_type" glib:type-struct="OcspResponseInfoClass" parent="GObject.Object">
 		<field name="parent_instance" readable="0" private="1">
 			<type name="GObject.Object" c:type="GObject"/>
@@ -150,5 +162,115 @@
 		</field>
 	</record>
 	<record name="TlsPrivate" c:type="GjsifyTlsTlsPrivate" disguised="1"/>
+	<class name="SessionAccess" c:type="GjsifyTlsSessionAccess" c:symbol-prefix="session_access" glib:type-name="GjsifyTlsSessionAccess" glib:get-type="gjsify_tls_session_access_get_type" glib:type-struct="SessionAccessClass" parent="GObject.Object">
+		<field name="parent_instance" readable="0" private="1">
+			<type name="GObject.Object" c:type="GObject"/>
+		</field>
+		<field name="priv" readable="0" private="1">
+			<type name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate*"/>
+		</field>
+		<function name="is_supported" c:identifier="gjsify_tls_session_access_is_supported">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+		</function>
+		<function name="for_connection" c:identifier="gjsify_tls_session_access_for_connection">
+			<return-value transfer-ownership="full" nullable="1">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+			<parameters>
+				<parameter name="connection" transfer-ownership="none" nullable="1">
+					<type name="Gio.TlsConnection" c:type="GTlsConnection*"/>
+				</parameter>
+			</parameters>
+		</function>
+		<method name="is_session_reused" c:identifier="gjsify_tls_session_access_is_session_reused" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_session_data" c:identifier="gjsify_tls_session_access_get_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="set_session_data" c:identifier="gjsify_tls_session_access_set_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="none" c:type="void"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="data" transfer-ownership="none">
+					<type name="GLib.Bytes" c:type="GBytes*"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_channel_binding" c:identifier="gjsify_tls_session_access_get_channel_binding" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="binding" transfer-ownership="none">
+					<type name="GjsifyTls.ChannelBindingType" c:type="GjsifyTlsChannelBindingType"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_finished" c:identifier="gjsify_tls_session_access_get_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_peer_finished" c:identifier="gjsify_tls_session_access_get_peer_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_negotiated_protocol_version" c:identifier="gjsify_tls_session_access_get_negotiated_protocol_version">
+			<return-value transfer-ownership="full">
+				<type name="utf8" c:type="gchar*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<constructor name="new" c:identifier="gjsify_tls_session_access_new">
+			<return-value transfer-ownership="full">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+		</constructor>
+	</class>
+	<record name="SessionAccessClass" c:type="GjsifyTlsSessionAccessClass" glib:is-gtype-struct-for="SessionAccess">
+		<field name="parent_class" readable="0" private="1">
+			<type name="GObject.ObjectClass" c:type="GObjectClass"/>
+		</field>
+	</record>
+	<record name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate" disguised="1"/>
 </namespace>
 </repository>

package/prebuilds/linux-riscv64/GjsifyTls-1.0.gir

@@ -2,9 +2,21 @@
 <!-- GjsifyTls-1.0.gir generated by valac 0.56.18, do not modify. -->
 <repository version="1.2" xmlns="http://www.gtk.org/introspection/core/1.0" xmlns:c="http://www.gtk.org/introspection/c/1.0" xmlns:glib="http://www.gtk.org/introspection/glib/1.0">
 <include name="GObject" version="2.0"/>
+<include name="Gio" version="2.0"/>
+<include name="GLib" version="2.0"/>
 <package name="gjsifytls"/>
 <c:include name="gjsifytls.h"/>
 <namespace name="GjsifyTls" version="1.0" shared-library="libgjsifytls.so" c:prefix="GjsifyTls" c:identifier-prefixes="GjsifyTls" c:symbol-prefixes="gjsify_tls">
+	<enumeration name="ChannelBindingType" c:type="GjsifyTlsChannelBindingType" glib:type-name="GjsifyTlsChannelBindingType" glib:get-type="gjsify_tls_channel_binding_type_get_type">
+		<member name="tls_unique" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_UNIQUE" value="0"/>
+		<member name="tls_server_end_point" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_SERVER_END_POINT" value="1"/>
+		<member name="tls_exporter" c:identifier="GJSIFY_TLS_CHANNEL_BINDING_TYPE_TLS_EXPORTER" value="2"/>
+	</enumeration>
+	<enumeration name="SessionAccessError" c:type="GjsifyTlsSessionAccessError" glib:type-name="GjsifyTlsSessionAccessError" glib:get-type="gjsify_tls_session_access_error_get_type" glib:error-domain="gjsify-tls-session-access-error-quark">
+		<member name="not_supported" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_SUPPORTED" value="0"/>
+		<member name="not_ready" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_NOT_READY" value="1"/>
+		<member name="gnutls_error" c:identifier="GJSIFY_TLS_SESSION_ACCESS_ERROR_GNUTLS_ERROR" value="2"/>
+	</enumeration>
 	<class name="OcspResponseInfo" c:type="GjsifyTlsOcspResponseInfo" c:symbol-prefix="ocsp_response_info" glib:type-name="GjsifyTlsOcspResponseInfo" glib:get-type="gjsify_tls_ocsp_response_info_get_type" glib:type-struct="OcspResponseInfoClass" parent="GObject.Object">
 		<field name="parent_instance" readable="0" private="1">
 			<type name="GObject.Object" c:type="GObject"/>
@@ -149,5 +161,115 @@
 		</field>
 	</record>
 	<record name="TlsPrivate" c:type="GjsifyTlsTlsPrivate" disguised="1"/>
+	<class name="SessionAccess" c:type="GjsifyTlsSessionAccess" c:symbol-prefix="session_access" glib:type-name="GjsifyTlsSessionAccess" glib:get-type="gjsify_tls_session_access_get_type" glib:type-struct="SessionAccessClass" parent="GObject.Object">
+		<field name="parent_instance" readable="0" private="1">
+			<type name="GObject.Object" c:type="GObject"/>
+		</field>
+		<field name="priv" readable="0" private="1">
+			<type name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate*"/>
+		</field>
+		<function name="is_supported" c:identifier="gjsify_tls_session_access_is_supported">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+		</function>
+		<function name="for_connection" c:identifier="gjsify_tls_session_access_for_connection">
+			<return-value transfer-ownership="full" nullable="1">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+			<parameters>
+				<parameter name="connection" transfer-ownership="none" nullable="1">
+					<type name="Gio.TlsConnection" c:type="GTlsConnection*"/>
+				</parameter>
+			</parameters>
+		</function>
+		<method name="is_session_reused" c:identifier="gjsify_tls_session_access_is_session_reused" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="gboolean" c:type="gboolean"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_session_data" c:identifier="gjsify_tls_session_access_get_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="set_session_data" c:identifier="gjsify_tls_session_access_set_session_data" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="none" c:type="void"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="data" transfer-ownership="none">
+					<type name="GLib.Bytes" c:type="GBytes*"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_channel_binding" c:identifier="gjsify_tls_session_access_get_channel_binding" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+				<parameter name="binding" transfer-ownership="none">
+					<type name="GjsifyTls.ChannelBindingType" c:type="GjsifyTlsChannelBindingType"/>
+				</parameter>
+			</parameters>
+		</method>
+		<method name="get_finished" c:identifier="gjsify_tls_session_access_get_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_peer_finished" c:identifier="gjsify_tls_session_access_get_peer_finished" throws="1">
+			<return-value transfer-ownership="full">
+				<type name="GLib.Bytes" c:type="GBytes*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<method name="get_negotiated_protocol_version" c:identifier="gjsify_tls_session_access_get_negotiated_protocol_version">
+			<return-value transfer-ownership="full">
+				<type name="utf8" c:type="gchar*"/>
+			</return-value>
+			<parameters>
+				<instance-parameter name="self" transfer-ownership="none">
+					<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+				</instance-parameter>
+			</parameters>
+		</method>
+		<constructor name="new" c:identifier="gjsify_tls_session_access_new">
+			<return-value transfer-ownership="full">
+				<type name="GjsifyTls.SessionAccess" c:type="GjsifyTlsSessionAccess*"/>
+			</return-value>
+		</constructor>
+	</class>
+	<record name="SessionAccessClass" c:type="GjsifyTlsSessionAccessClass" glib:is-gtype-struct-for="SessionAccess">
+		<field name="parent_class" readable="0" private="1">
+			<type name="GObject.ObjectClass" c:type="GObjectClass"/>
+		</field>
+	</record>
+	<record name="SessionAccessPrivate" c:type="GjsifyTlsSessionAccessPrivate" disguised="1"/>
 </namespace>
 </repository>