XrdSecProtocolgsi Class Reference

#include <XrdSecProtocolgsi.hh>

Inheritance diagram for XrdSecProtocolgsi:

List of all members.

Public Member Functions
int	Authenticate (XrdSecCredentials *cred, XrdSecParameters **parms, XrdOucErrInfo *einfo=0)
XrdSecCredentials *	getCredentials (XrdSecParameters *parm=0, XrdOucErrInfo *einfo=0)
	XrdSecProtocolgsi (int opts, const char *hname, const struct sockaddr *ipadd, const char *parms=0)
virtual	~XrdSecProtocolgsi ()
void	Delete ()
int	Encrypt (const char *inbuf, int inlen, XrdSecBuffer **outbuf)
int	Decrypt (const char *inbuf, int inlen, XrdSecBuffer **outbuf)
int	Sign (const char *inbuf, int inlen, XrdSecBuffer **outbuf)
int	Verify (const char *inbuf, int inlen, const char *sigbuf, int siglen)
int	getKey (char *kbuf=0, int klen=0)
int	setKey (char *kbuf, int klen)
Static Public Member Functions
static char *	Init (gsiOptions o, XrdOucErrInfo *erp)
Private Member Functions
int	ParseClientInput (XrdSutBuffer *br, XrdSutBuffer **bm, String &emsg)
int	ClientDoInit (XrdSutBuffer *br, XrdSutBuffer **bm, String &cmsg)
int	ClientDoCert (XrdSutBuffer *br, XrdSutBuffer **bm, String &cmsg)
int	ClientDoPxyreq (XrdSutBuffer *br, XrdSutBuffer **bm, String &cmsg)
int	ParseServerInput (XrdSutBuffer *br, XrdSutBuffer **bm, String &cmsg)
int	ServerDoCertreq (XrdSutBuffer *br, XrdSutBuffer **bm, String &cmsg)
int	ServerDoCert (XrdSutBuffer *br, XrdSutBuffer **bm, String &cmsg)
int	ServerDoSigpxy (XrdSutBuffer *br, XrdSutBuffer **bm, String &cmsg)
int	ParseCrypto (String cryptlist)
int	ParseCAlist (String calist)
int	GetCA (const char *cahash)
bool	ServerCertNameOK (const char *subject, String &e)
XrdSecCredentials *	ErrC (XrdOucErrInfo *einfo, XrdSutBuffer *b1, XrdSutBuffer *b2, XrdSutBuffer *b3, kXR_int32 ecode, const char *msg1=0, const char *msg2=0, const char *msg3=0)
int	ErrS (String ID, XrdOucErrInfo *einfo, XrdSutBuffer *b1, XrdSutBuffer *b2, XrdSutBuffer *b3, kXR_int32 ecode, const char *msg1=0, const char *msg2=0, const char *msg3=0)
bool	CheckTimeStamp (XrdSutBuffer *b, int skew, String &emsg)
bool	CheckRtag (XrdSutBuffer *bm, String &emsg)
int	AddSerialized (char opt, kXR_int32 step, String ID, XrdSutBuffer *bls, XrdSutBuffer *buf, kXR_int32 type, XrdCryptoCipher *cip)
Static Private Member Functions
static int	LoadCADir (int timestamp)
static String	GetCApath (const char *cahash)
static bool	VerifyCA (int opt, X509Chain *cca, XrdCryptoFactory *cf)
static XrdCryptoX509Crl *	LoadCRL (XrdCryptoX509 *xca, XrdCryptoFactory *CF)
static int	QueryProxy (bool checkcache, XrdSutCache *cache, const char *tag, XrdCryptoFactory *cf, int timestamp, ProxyIn_t *pi, ProxyOut_t *po)
static int	InitProxy (ProxyIn_t *pi, X509Chain *ch=0, XrdCryptoRSA **key=0)
static void	ErrF (XrdOucErrInfo *einfo, kXR_int32 ecode, const char *msg1, const char *msg2=0, const char *msg3=0)
static int	LoadGMAP (int now)
static XrdSecgsiGMAP_t	LoadGMAPFun (const char *plugin, const char *parms)
static XrdSecgsiAuthz_t	LoadAuthzFun (const char *plugin, const char *parms)
static void	QueryGMAP (XrdCryptoX509Chain *chain, int now, String &name)
Private Attributes
int	options
sockaddr	hostaddr
XrdCryptoFactory *	sessionCF
XrdCryptoCipher *	sessionKey
XrdSutBucket *	bucketKey
XrdCryptoMsgDigest *	sessionMD
XrdCryptoRSA *	sessionKsig
XrdCryptoRSA *	sessionKver
X509Chain *	proxyChain
bool	srvMode
gsiHSVars *	hs
Static Private Attributes
static XrdSysMutex	gsiContext
static String	CAdir
static String	CRLdir
static String	DefCRLext
static String	SrvCert
static String	SrvKey
static String	UsrProxy
static String	UsrCert
static String	UsrKey
static String	PxyValid
static int	DepLength
static int	DefBits
static int	CACheck
static int	CRLCheck
static String	DefCrypto
static String	DefCipher
static String	DefMD
static String	DefError
static String	GMAPFile
static int	GMAPOpt
static int	GMAPCacheTimeOut
static XrdSysPlugin *	GMAPPlugin
static XrdSecgsiGMAP_t	GMAPFun
static XrdSysPlugin *	AuthzPlugin
static XrdSecgsiAuthz_t	AuthzFun
static int	PxyReqOpts
static int	AuthzPxy
static String	SrvAllowedNames
static int	ncrypt
static XrdCryptoFactory *	cryptF [XrdCryptoMax]
static int	cryptID [XrdCryptoMax]
static String	cryptName [XrdCryptoMax]
static XrdCryptoCipher *	refcip [XrdCryptoMax]
static XrdSutCache	cacheCA
static XrdSutCache	cacheCert
static XrdSutCache	cachePxy
static XrdSutCache	cacheGMAP
static XrdSutCache	cacheGMAPFun
static int	Debug
static bool	Server
static int	TimeSkew
static XrdSysLogger	Logger
static XrdSysError	eDest
static XrdOucTrace *	GSITrace

---

Detailed Description

Definition at line 233 of file XrdSecProtocolgsi.hh.

---

Constructor & Destructor Documentation

XrdSecProtocolgsi::XrdSecProtocolgsi	(	int	opts,
		const char *	hname,
		const struct sockaddr *	ipadd,
		const char *	parms = 0
	)

Definition at line 227 of file XrdSecProtocolgsi.cc.

References bucketKey, DEBUG, XrdSecProtocol::Entity, EPNAME, XrdNetDNS::getHostName(), XrdSecEntity::host, hostaddr, hs, options, p, gsiHSVars::Parms, PRINT, proxyChain, QTRACE, Server, sessionCF, sessionKey, sessionKsig, sessionKver, sessionMD, srvMode, gsiHSVars::TimeStamp, gsiHSVars::Tty, Version, XrdSecPROTOIDENT, and XrdSecPROTOIDLEN.

virtual XrdSecProtocolgsi::~XrdSecProtocolgsi

(

)

[inline, virtual]

Definition at line 245 of file XrdSecProtocolgsi.hh.

---

Member Function Documentation

int XrdSecProtocolgsi::Authenticate	(	XrdSecCredentials *	cred,
		XrdSecParameters **	parms,
		XrdOucErrInfo *	einfo = 0
	)			[virtual]

Implements XrdSecProtocol.

Definition at line 1496 of file XrdSecProtocolgsi.cc.

References XrdSutBuffer::AddBucket(), AddSerialized(), AuthzPxy, b, XrdSecBuffer::buffer, XrdOucString::c_str(), gsiHSVars::Cbck, gsiHSVars::Chain, CheckRtag(), ClientStepStr(), CryptList, XrdSutBuffer::Deactivate(), DEBUG, DefCipher, DefMD, XrdSutBuffer::Dump(), XrdCryptoX509Chain::EEChash(), XrdSecEntity::endorsements, XrdSecProtocol::Entity, EPNAME, ErrS(), XrdSutBuffer::GetBucket(), XrdSutBuffer::GetProtocol(), XrdSutBuffer::GetStep(), GMAPOpt, hs, gsiHSVars::ID, kGSErrAddBucket, kGSErrBadOpt, kGSErrBadProtocol, kGSErrBadRndmTag, kGSErrDecodeBuffer, kGSErrError, kGSErrNoPublic, kGSErrParseBuffer, kGSErrSerialBuffer, kgST_error, kgST_more, kgST_ok, kXGC_cert, kXGC_certreq, kXGC_sigpxy, kXGS_cert, kXGS_none, kXGS_pxyreq, kXRS_cipher_alg, kXRS_main, kXRS_md_alg, kXRS_message, kXRS_puk, kXRS_user, XrdOucString::length(), name, XrdSecEntity::name, ok, gsiHSVars::Options, ParseServerInput(), PRINT, XrdSecEntity::prot, XrdCryptoCipher::Public(), gsiHSVars::PxyChain, QTRACE, QueryGMAP(), gsiHSVars::Rcip, REL2, XrdSutBuffer::Remove(), gsiHSVars::RemVers, XrdOucString::replace(), s, SafeDelete, XrdSutBuffer::Serialized(), ServerStepStr(), sessionKey, XrdSecBuffer::size, STR_NPOS, XrdSecEntity::tident, gsiHSVars::TimeStamp, XrdSutBucket::ToString(), u, XrdCryptosslX509ExportChain(), XrdSecPROTOIDENT, XrdSecPROTOIDLEN, and XrdSutBuckStr().

XrdSecCredentials * XrdSecProtocolgsi::getCredentials	(	XrdSecParameters *	parm = 0,
		XrdOucErrInfo *	einfo = 0
	)			[virtual]

Implements XrdSecProtocol.

Definition at line 1234 of file XrdSecProtocolgsi.cc.

References XrdSutBuffer::AddBucket(), AddSerialized(), XrdCryptoX509Chain::Begin(), XrdSutBucket::buffer, XrdSecBuffer::buffer, c, XrdOucString::c_str(), gsiHSVars::Cbck, CheckRtag(), ClientStepStr(), CryptList, gsiHSVars::CryptoMod, DEBUG, XrdSutBuffer::Dump(), XrdSecProtocol::Entity, EPNAME, ErrC(), getenv(), XrdSutBuffer::GetProtocol(), XrdSutBuffer::GetStep(), hs, gsiHSVars::ID, gsiHSVars::Iter, XrdCryptoX509::kCA, kGSErrAddBucket, kGSErrBadOpt, kGSErrBadProtocol, kGSErrBadRndmTag, kGSErrCreateBucket, kGSErrDecodeBuffer, kGSErrError, kGSErrNoBuffer, kGSErrNoCipher, kGSErrNoPublic, kGSErrParseBuffer, kGSErrSerialBuffer, kXGC_cert, kXGC_certreq, kXGC_none, kXGC_sigpxy, kXGS_cert, kXGS_init, kXGS_pxyreq, kXRS_clnt_opts, kXRS_cryptomod, kXRS_issuer_hash, kXRS_main, kXRS_message, kXRS_puk, kXRS_user, kXRS_version, XrdOucString::length(), malloc(), XrdSutBuffer::MarshalBucket(), XrdSecEntity::name, XrdCryptoX509Chain::Next(), gsiHSVars::Options, gsiHSVars::Parms, ParseClientInput(), proxyChain, XrdCryptoCipher::Public(), gsiHSVars::PxyChain, QTRACE, REL2, XrdSutBuffer::Remove(), gsiHSVars::RemVers, XrdOucString::replace(), XrdSutBuffer::Serialized(), ServerStepStr(), sessionCF, sessionKey, XrdSutBuffer::SetStep(), XrdSutBucket::size, XrdSecBuffer::size, srvMode, gsiHSVars::TimeStamp, XrdSutBuffer::UpdateBucket(), Version, XrdCryptoFactory::X509ExportChain(), XrdSecPROTOIDENT, and XrdSutBuckStr().

char * XrdSecProtocolgsi::Init	(	gsiOptions	o,
		XrdOucErrInfo *	erp
	)			[static]

Definition at line 298 of file XrdSecProtocolgsi.cc.

References access, XrdSutCache::Add(), AuthzFun, gsiOptions::authzfun, gsiOptions::authzfunparms, AuthzPxy, gsiOptions::authzpxy, gsiOptions::bits, XrdSutPFBuf::buf, XrdSutPFEntry::buf1, XrdSutPFEntry::buf2, XrdSutPFEntry::buf3, XrdOucString::c_str(), gsiOptions::ca, cacheCA, cacheCert, CACheck, cacheGMAP, cacheGMAPFun, cachePxy, CAdir, gsiOptions::cert, gsiOptions::certdir, gsiOptions::cipher, XrdCryptoFactory::Cipher(), gsiOptions::clist, XrdSutPFEntry::cnt, gsiOptions::crl, CRLCheck, gsiOptions::crldir, CRLdir, gsiOptions::crlext, cryptF, cryptID, cryptName, cryptoTRACE_Debug, cryptoTRACE_Dump, gsiOptions::debug, Debug, DEBUG, DefBits, DefCipher, DefCRLext, DefCrypto, DefMD, gsiOptions::deplen, DepLength, gsiOptions::dlgpxy, XrdSutCache::Dump(), eDest, XrdSutCache::Empty(), XrdOucString::endswith(), EPNAME, XrdOucString::erase(), ErrF(), gsiOptions::exppxy, XrdOucString::find(), XrdCryptoFactory::GetCryptoFactory(), XrdOucErrInfo::getErrText(), GMAPCacheTimeOut, GMAPFile, gsiOptions::gmapfun, GMAPFun, gsiOptions::gmapfunparms, GMAPOpt, gsiOptions::gmapto, gsiOptions::gridmap, gsiTrace, GSITrace, gUsrPxyDef, i, XrdCryptoFactory::ID(), XrdSutCache::Init(), XrdOucString::insert(), int, XrdCryptoRSA::kComplete, XrdCryptoX509::kEEC, gsiOptions::key, kGSErrError, kGSErrInit, kOptsDlgPxy, kOptsFwdPxy, kOptsPxFile, kOptsSigReq, kOptsSrvReq, kPFE_ok, XrdSutPFBuf::len, XrdOucString::length(), LoadAuthzFun(), LoadCADir(), LoadGMAP(), LoadGMAPFun(), Logger, XrdSysError::logger(), gsiOptions::md, gsiOptions::mode, XrdSutPFEntry::mtime, XrdCryptoFactory::Name(), ncrypt, gsiOptions::ogmap, PRINT, gsiOptions::proxy, passwd::pw_uid, PxyReqOpts, PxyValid, QTRACE, R_OK, refcip, XrdSutCache::Rehash(), XrdSutCache::Reset(), Server, XrdCryptoFactory::SetTrace(), gsiOptions::sigpxy, sprintf(), SrvAllowedNames, SrvCert, SrvKey, gsiOptions::srvnames, stat, XrdSutPFEntry::status, STR_NPOS, XrdOucString::tokenize(), TRACE_Authen, TRACE_Debug, UsrCert, UsrKey, UsrProxy, gsiOptions::valid, XrdSysPrivGuard::Valid(), Version, XrdOucTrace::What, XrdCryptoMax, XrdCryptoSetTrace(), XrdSutExpand(), XrdSutHome(), and XrdSutSetTrace().

Referenced by XrdSecProtocolgsiInit().

void XrdSecProtocolgsi::Delete

(

)

[virtual]

Implements XrdSecProtocol.

Definition at line 913 of file XrdSecProtocolgsi.cc.

References bucketKey, XrdSecEntity::endorsements, XrdSecProtocol::Entity, XrdSecEntity::grps, XrdSecEntity::host, hs, XrdSecEntity::name, proxyChain, XrdSecEntity::role, SafeDelete, SafeFree, sessionKey, sessionKsig, sessionKver, sessionMD, and XrdSecEntity::vorg.

int XrdSecProtocolgsi::Encrypt	(	const char *	inbuf,
		int	inlen,
		XrdSecBuffer **	outbuf
	)			[virtual]

Reimplemented from XrdSecProtocol.

Definition at line 941 of file XrdSecProtocolgsi.cc.

References buf, DEBUG, XrdCryptoCipher::EncOutLength(), XrdCryptoCipher::Encrypt(), EPNAME, len, malloc(), SafeFree, and sessionKey.

int XrdSecProtocolgsi::Decrypt	(	const char *	inbuf,
		int	inlen,
		XrdSecBuffer **	outbuf
	)			[virtual]

Reimplemented from XrdSecProtocol.

Definition at line 985 of file XrdSecProtocolgsi.cc.

References buf, DEBUG, XrdCryptoCipher::DecOutLength(), XrdCryptoCipher::Decrypt(), EPNAME, len, malloc(), SafeFree, and sessionKey.

int XrdSecProtocolgsi::Sign	(	const char *	inbuf,
		int	inlen,
		XrdSecBuffer **	outbuf
	)			[virtual]

Reimplemented from XrdSecProtocol.

Definition at line 1024 of file XrdSecProtocolgsi.cc.

References buf, XrdCryptoBasic::Buffer(), DEBUG, XrdCryptoRSA::EncryptPrivate(), EPNAME, XrdCryptoMsgDigest::Final(), XrdCryptoRSA::GetOutlen(), len, XrdCryptoBasic::Length(), malloc(), XrdCryptoMsgDigest::Reset(), SafeFree, sessionKsig, sessionMD, and XrdCryptoMsgDigest::Update().

int XrdSecProtocolgsi::Verify	(	const char *	inbuf,
		int	inlen,
		const char *	sigbuf,
		int	siglen
	)			[virtual]

Reimplemented from XrdSecProtocol.

Definition at line 1075 of file XrdSecProtocolgsi.cc.

References buf, XrdCryptoBasic::Buffer(), DEBUG, XrdCryptoRSA::DecryptPublic(), EPNAME, XrdCryptoMsgDigest::Final(), XrdCryptoRSA::GetOutlen(), len, XrdCryptoBasic::Length(), XrdCryptoMsgDigest::Reset(), sessionKver, sessionMD, and XrdCryptoMsgDigest::Update().

int XrdSecProtocolgsi::getKey	(	char *	kbuf = 0,
		int	klen = 0
	)			[virtual]

Reimplemented from XrdSecProtocol.

Definition at line 1134 of file XrdSecProtocolgsi.cc.

References XrdCryptoCipher::AsBucket(), bucketKey, XrdSutBucket::buffer, DEBUG, EPNAME, sessionKey, XrdSutBucket::size, and size.

int XrdSecProtocolgsi::setKey	(	char *	kbuf,
		int	klen
	)			[virtual]

Reimplemented from XrdSecProtocol.

Definition at line 1180 of file XrdSecProtocolgsi.cc.

References XrdCryptoFactory::Cipher(), DEBUG, EPNAME, SafeDelete, sessionCF, sessionKey, and XrdSutBucket::SetBuf().

int XrdSecProtocolgsi::ParseClientInput	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	emsg
	)			[private]

Definition at line 2235 of file XrdSecProtocolgsi.cc.

References ClientDoCert(), ClientDoInit(), ClientDoPxyreq(), DEBUG, EPNAME, XrdSutBuffer::GetStep(), kXGS_cert, kXGS_init, and kXGS_pxyreq.

Referenced by getCredentials().

int XrdSecProtocolgsi::ClientDoInit	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	cmsg
	)			[private]

Definition at line 2281 of file XrdSecProtocolgsi.cc.

References XrdOucString::assign(), XrdOucString::c_str(), cachePxy, CAdir, ProxyOut_t::cbck, gsiHSVars::Cbck, gsiHSVars::Chain, ProxyOut_t::chain, gsiHSVars::Cref, DEBUG, DefBits, DefCrypto, DepLength, emsg(), XrdSecProtocol::Entity, EPNAME, XrdOucString::erase(), XrdOucString::find(), XrdSutBuffer::GetOptions(), XrdSutBuffer::GetProtocol(), XrdSecEntity::grps, XrdSecEntity::host, hs, ProxyOut_t::ksig, XrdSecEntity::name, gsiHSVars::Options, opts, ParseCAlist(), ParseCrypto(), pi, gsiHSVars::PxyChain, PxyReqOpts, PxyValid, QueryProxy(), gsiHSVars::RemVers, XrdCryptoFactory::RSA(), sessionCF, sessionKsig, XrdSutPFEntry::status, gsiHSVars::TimeStamp, UsrCert, UsrKey, UsrProxy, Version, XrdSecEntity::vorg, and XrdSutResolve().

Referenced by ParseClientInput().

int XrdSecProtocolgsi::ClientDoCert	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	cmsg
	)			[private]

Definition at line 2391 of file XrdSecProtocolgsi.cc.

References XrdSutBucket::buffer, XrdOucString::c_str(), gsiHSVars::Chain, XrdCryptoFactory::Cipher(), gsiHSVars::Cref, gsiHSVars::Crl, XrdSutBuffer::Deactivate(), DEBUG, emsg(), XrdCryptoX509Chain::End(), EPNAME, XrdSutBuffer::GetBucket(), hs, XrdCryptoRSA::IsValid(), XrdCryptoX509Chain::kNone, kOptsDelChn, kXRS_cipher_alg, kXRS_main, kXRS_md_alg, kXRS_puk, kXRS_x509, XrdCryptoX509Chain::LastError(), XrdOucString::length(), XrdCryptoFactory::MsgDigest(), XrdSutPFEntry::mtime, gsiHSVars::Options, XrdCryptoX509::PKI(), gsiHSVars::RemVers, XrdCryptoFactory::RSA(), SafeDelete, ServerCertNameOK(), sessionCF, sessionKey, sessionKver, sessionMD, XrdSutBucket::size, XrdSutPFEntry::status, XrdCryptoX509::Subject(), XrdCryptoFactory::SupportedCipher(), XrdCryptoFactory::SupportedMsgDigest(), TimeSkew, gsiHSVars::TimeStamp, XrdOucString::tokenize(), XrdSutBucket::ToString(), XrdSutBuffer::UpdateBucket(), XrdCryptosslgsiX509Chain::Verify(), and XrdCryptoFactory::X509ParseBucket().

Referenced by ParseClientInput().

int XrdSecProtocolgsi::ClientDoPxyreq	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	cmsg
	)			[private]

Definition at line 2564 of file XrdSecProtocolgsi.cc.

References XrdSutBucket::buffer, XrdCryptoCipher::Decrypt(), emsg(), XrdCryptoX509Chain::End(), XrdCryptoX509::Export(), XrdCryptoRSA::ExportPrivate(), XrdSutBuffer::GetBucket(), hs, kOptsFwdPxy, kOptsSigReq, kXRS_main, kXRS_x509, kXRS_x509_req, gsiHSVars::Options, XrdCryptoX509::PKI(), gsiHSVars::PxyChain, gsiHSVars::RemVers, sessionCF, sessionKey, XrdCryptoX509Req::SetVersion(), XrdSutBucket::size, XrdCryptoFactory::X509Req(), and XrdSslgsiX509SignProxyReq().

Referenced by ParseClientInput().

int XrdSecProtocolgsi::ParseServerInput	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	cmsg
	)			[private]

Definition at line 2666 of file XrdSecProtocolgsi.cc.

References DEBUG, EPNAME, XrdSutBuffer::GetStep(), kXGC_cert, kXGC_certreq, kXGC_sigpxy, ServerDoCert(), ServerDoCertreq(), and ServerDoSigpxy().

Referenced by Authenticate().

int XrdSecProtocolgsi::ServerDoCertreq	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	cmsg
	)			[private]

Definition at line 2715 of file XrdSecProtocolgsi.cc.

References b, XrdSutPFBuf::buf, XrdSutPFEntry::buf2, XrdSutPFEntry::buf3, XrdSutBucket::buffer, XrdOucString::c_str(), cacheCert, CAdir, gsiHSVars::Cbck, gsiHSVars::Cref, XrdSutBuffer::Deactivate(), XrdSutCache::Get(), XrdSutBuffer::GetBucket(), hs, gsiHSVars::ID, k, kPFE_special, kXRS_clnt_opts, kXRS_cryptomod, kXRS_issuer_hash, kXRS_main, kXRS_version, XrdSutPFEntry::mtime, XrdCryptoFactory::Name(), gsiHSVars::Options, ParseCAlist(), ParseCrypto(), pi, PxyValid, QueryProxy(), gsiHSVars::RemVers, XrdCryptoFactory::RSA(), sessionCF, sessionKsig, XrdSutBucket::size, SrvCert, SrvKey, XrdSutPFEntry::status, gsiHSVars::TimeStamp, XrdSutBucket::ToString(), XrdSutBuffer::UnmarshalBucket(), UsrProxy, and Version.

Referenced by ParseServerInput().

int XrdSecProtocolgsi::ServerDoCert	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	cmsg
	)			[private]

Definition at line 2830 of file XrdSecProtocolgsi.cc.

References XrdSutPFBuf::buf, XrdSutPFEntry::buf4, XrdSutBucket::buffer, XrdOucString::c_str(), gsiHSVars::Chain, XrdCryptoFactory::Cipher(), gsiHSVars::Cref, gsiHSVars::Crl, XrdSutBuffer::Deactivate(), DEBUG, XrdCryptoCipher::Decrypt(), DefCipher, DefMD, XrdCryptoX509Chain::End(), EPNAME, XrdCryptoX509Req::Export(), XrdOucString::find(), XrdSutBuffer::GetBucket(), hs, XrdCryptoRSA::IsValid(), XrdCryptoX509Chain::kNone, kOptsDelChn, kOptsDlgPxy, kOptsFwdPxy, kOptsSigReq, kOptsSrvReq, kXRS_cipher_alg, kXRS_main, kXRS_md_alg, kXRS_puk, kXRS_version, kXRS_x509, XrdCryptoX509Chain::LastError(), XrdCryptoFactory::MsgDigest(), XrdSutPFEntry::mtime, gsiHSVars::Options, XrdCryptoX509::PKI(), gsiHSVars::PxyChain, PxyReqOpts, gsiHSVars::Rcip, gsiHSVars::RemVers, XrdCryptoX509Chain::Reorder(), XrdCryptoFactory::RSA(), SafeDelete, sessionCF, sessionKey, sessionKver, sessionMD, XrdSutBucket::size, TimeSkew, gsiHSVars::TimeStamp, XrdSutBucket::ToString(), XrdCryptosslgsiX509Chain::Verify(), Version, XrdCryptoFactory::X509ParseBucket(), and XrdSslgsiX509CreateProxyReq().

Referenced by ParseServerInput().

int XrdSecProtocolgsi::ServerDoSigpxy	(	XrdSutBuffer *	br,
		XrdSutBuffer **	bm,
		String &	cmsg
	)			[private]

Definition at line 3059 of file XrdSecProtocolgsi.cc.

References XrdSutPFBuf::buf, XrdSutPFEntry::buf4, XrdSutBucket::buffer, c, XrdOucString::c_str(), gsiHSVars::Cref, DEBUG, XrdCryptoCipher::Decrypt(), XrdCryptoX509Chain::Dump(), XrdCryptoX509Chain::EECname(), XrdCryptoX509Chain::End(), XrdSecProtocol::Entity, EPNAME, XrdSutBuffer::GetBucket(), XrdSecEntity::grps, XrdSecEntity::host, hs, if(), XrdCryptoRSA::ImportPrivate(), int, kOptsFwdPxy, kOptsPxFile, kXRS_main, kXRS_message, kXRS_user, kXRS_x509, XrdOucString::length(), m, name, XrdSecEntity::name, XrdCryptoRSA::Opaque(), gsiHSVars::Options, XrdCryptoX509::PKI(), proxyChain, XrdCryptoX509Chain::PushBack(), passwd::pw_name, passwd::pw_uid, gsiHSVars::PxyChain, PxyReqOpts, QTRACE, XrdCryptoX509Chain::SearchBySubject(), sessionCF, sessionKey, XrdCryptoX509::SetPKI(), XrdSutBucket::size, STR_NPOS, XrdSutBucket::ToString(), UsrProxy, XrdSecEntity::vorg, XrdCryptoFactory::X509(), XrdCryptoFactory::X509ChainToFile(), and XrdSutResolve().

Referenced by ParseServerInput().

int XrdSecProtocolgsi::ParseCrypto

(

String

cryptlist

)

[private]

Definition at line 4000 of file XrdSecProtocolgsi.cc.

References XrdOucString::c_str(), cryptF, cryptID, gsiHSVars::CryptoMod, DEBUG, EPNAME, XrdCryptoFactory::GetCryptoFactory(), GSITrace, hs, i, XrdCryptoFactory::ID(), XrdOucString::length(), ncrypt, gsiHSVars::Rcip, refcip, sessionCF, XrdCryptoFactory::SetTrace(), XrdOucString::tokenize(), XrdOucTrace::What, and XrdCryptoMax.

Referenced by ClientDoInit(), and ServerDoCertreq().

int XrdSecProtocolgsi::ParseCAlist

(

String

calist

)

[private]

Definition at line 3965 of file XrdSecProtocolgsi.cc.

References XrdOucString::c_str(), gsiHSVars::Chain, DEBUG, EPNAME, GetCA(), hs, XrdOucString::length(), and XrdOucString::tokenize().

Referenced by ClientDoInit(), and ServerDoCertreq().

int XrdSecProtocolgsi::LoadCADir

(

int

timestamp

)

[static, private]

Definition at line 3353 of file XrdSecProtocolgsi.cc.

References XrdSutCache::Add(), XrdSutPFBuf::buf, XrdSutPFEntry::buf1, XrdSutPFEntry::buf2, XrdOucString::c_str(), cacheCA, CACheck, CAdir, chain, closedir, XrdSutPFEntry::cnt, CRLCheck, cryptF, cryptID, DEBUG, EPNAME, i, XrdSutCache::Init(), XrdCryptoX509Crl::IsExpired(), kPFE_ok, XrdSutPFBuf::len, XrdOucString::length(), LoadCRL(), XrdSutPFEntry::mtime, ncrypt, ok, opendir, readdir, XrdSutCache::Rehash(), SafeDelete, XrdSutPFEntry::status, XrdOucString::tokenize(), VerifyCA(), and XrdCryptoFactory::X509ParseFile().

Referenced by Init().

int XrdSecProtocolgsi::GetCA

(

const char *

cahash

)

[private]

Definition at line 3768 of file XrdSecProtocolgsi.cc.

References XrdSutCache::Add(), XrdCryptoX509Chain::Begin(), XrdSutPFBuf::buf, XrdSutPFEntry::buf1, XrdSutPFEntry::buf2, XrdOucString::c_str(), cacheCA, CACheck, gsiHSVars::Chain, XrdSutPFEntry::cnt, gsiHSVars::Crl, CRLCheck, DEBUG, EPNAME, XrdSutCache::Get(), GetCApath(), hs, XrdCryptoFactory::ID(), XrdCryptoX509Crl::IsExpired(), kPFE_ok, XrdSutPFBuf::len, LoadCRL(), XrdSutPFEntry::mtime, ok, XrdSutCache::Rehash(), sessionCF, XrdSutPFEntry::status, gsiHSVars::TimeStamp, VerifyCA(), and XrdCryptoFactory::X509ParseFile().

Referenced by ParseCAlist().

String XrdSecProtocolgsi::GetCApath

(

const char *

cahash

)

[static, private]

Definition at line 3645 of file XrdSecProtocolgsi.cc.

References access, XrdOucString::c_str(), CAdir, XrdOucString::endswith(), XrdOucString::length(), R_OK, and XrdOucString::tokenize().

Referenced by GetCA(), and VerifyCA().

bool XrdSecProtocolgsi::VerifyCA	(	int	opt,
		X509Chain *	cca,
		XrdCryptoFactory *	cf
	)			[static, private]

Definition at line 3671 of file XrdSecProtocolgsi.cc.

References XrdCryptoX509Chain::Begin(), XrdOucString::c_str(), CACheck, CF, XrdCryptoX509Chain::CheckCA(), DEBUG, EPNAME, GetCApath(), XrdCryptoX509::IssuerHash(), XrdCryptoX509Chain::kUnknown, XrdCryptoX509Chain::kValid, XrdOucString::length(), XrdCryptoX509Chain::Next(), PRINT, XrdCryptoX509Chain::PutInFront(), XrdCryptoX509Chain::Remove(), SafeDelete, XrdCryptoX509Chain::SetStatusCA(), XrdCryptoX509::SubjectHash(), XrdCryptosslgsiX509Chain::Verify(), and XrdCryptoFactory::X509ParseFile().

Referenced by GetCA(), and LoadCADir().

bool XrdSecProtocolgsi::ServerCertNameOK	(	const char *	subject,
		String &	e
	)			[private]

Definition at line 4575 of file XrdSecProtocolgsi.cc.

References XrdOucString::assign(), XrdOucString::beginswith(), XrdOucString::c_str(), emsg(), XrdSecProtocol::Entity, XrdOucString::erasefromstart(), XrdOucString::find(), XrdSecEntity::host, XrdOucString::length(), XrdOucString::matches(), SrvAllowedNames, and STR_NPOS.

Referenced by ClientDoCert().

XrdCryptoX509Crl * XrdSecProtocolgsi::LoadCRL	(	XrdCryptoX509 *	xca,
		XrdCryptoFactory *	CF
	)			[static, private]

Definition at line 3460 of file XrdSecProtocolgsi.cc.

References XrdOucString::c_str(), CACheck, CF, closedir, CRLCheck, CRLdir, DEBUG, DefCRLext, EPNAME, XrdOucString::find(), fopen, XrdCryptoX509Crl::Issuer(), XrdCryptoX509::Issuer(), XrdCryptoX509::IssuerHash(), XrdOucString::length(), line, opendir, readdir, SafeDelete, XrdCryptoX509::Subject(), XrdCryptoX509::SubjectHash(), XrdOucString::tokenize(), XrdCryptoX509Crl::Verify(), XrdCryptoFactory::X509(), and XrdCryptoFactory::X509Crl().

Referenced by GetCA(), and LoadCADir().

int XrdSecProtocolgsi::QueryProxy	(	bool	checkcache,
		XrdSutCache *	cache,
		const char *	tag,
		XrdCryptoFactory *	cf,
		int	timestamp,
		ProxyIn_t *	pi,
		ProxyOut_t *	po
	)			[static, private]

Definition at line 4061 of file XrdSecProtocolgsi.cc.

References XrdSutCache::Add(), XrdSutPFBuf::buf, XrdSutPFEntry::buf1, XrdSutPFEntry::buf2, XrdSutPFEntry::buf3, CACheck, ProxyOut_t::cbck, ProxyOut_t::chain, XrdCryptoX509Chain::CheckCA(), XrdCryptoX509Chain::CheckValidity(), XrdCryptoX509Chain::Cleanup(), XrdSutPFEntry::cnt, DEBUG, XrdCryptoX509Chain::End(), EPNAME, XrdSutCache::Get(), getenv(), InitProxy(), int, XrdCryptoRSA::kComplete, kPFE_special, ProxyOut_t::ksig, kXRS_x509, XrdSutPFBuf::len, XrdSutPFEntry::mtime, XrdCryptoX509::NotAfter(), pi, XrdCryptoX509::PKI(), XrdSutCache::Rehash(), XrdCryptoX509Chain::Reorder(), SafeDelete, XrdSutBucket::SetBuf(), XrdSutPFEntry::status, XrdCryptoRSA::status, XrdCryptoFactory::X509ExportChain(), XrdCryptoFactory::X509ParseBucket(), and XrdCryptoFactory::X509ParseFile().

Referenced by ClientDoInit(), and ServerDoCertreq().

int XrdSecProtocolgsi::InitProxy	(	ProxyIn_t *	pi,
		X509Chain *	ch = 0,
		XrdCryptoRSA **	key = 0
	)			[static, private]

Definition at line 3868 of file XrdSecProtocolgsi.cc.

References XrdOucString::c_str(), DEBUG, EPNAME, XrdOucString::erase(), XrdOucString::find(), getenv(), kMAXBUFLEN, pi, XrdSslgsiX509CreateProxy(), and XrdSutParseTime().

Referenced by QueryProxy().

void XrdSecProtocolgsi::ErrF	(	XrdOucErrInfo *	einfo,
		kXR_int32	ecode,
		const char *	msg1,
		const char *	msg2 = 0,
		const char *	msg3 = 0
	)			[static, private]

Definition at line 3202 of file XrdSecProtocolgsi.cc.

References Debug, DEBUG, EPNAME, gGSErrStr, i, k, kGSErrError, kGSErrParseBuffer, QTRACE, XrdOucErrInfo::setErrInfo(), and sprintf().

Referenced by ErrC(), ErrS(), and Init().

XrdSecCredentials * XrdSecProtocolgsi::ErrC	(	XrdOucErrInfo *	einfo,
		XrdSutBuffer *	b1,
		XrdSutBuffer *	b2,
		XrdSutBuffer *	b3,
		kXR_int32	ecode,
		const char *	msg1 = 0,
		const char *	msg2 = 0,
		const char *	msg3 = 0
	)			[private]

Definition at line 3257 of file XrdSecProtocolgsi.cc.

References ErrF(), and REL3.

Referenced by getCredentials().

int XrdSecProtocolgsi::ErrS	(	String	ID,
		XrdOucErrInfo *	einfo,
		XrdSutBuffer *	b1,
		XrdSutBuffer *	b2,
		XrdSutBuffer *	b3,
		kXR_int32	ecode,
		const char *	msg1 = 0,
		const char *	msg2 = 0,
		const char *	msg3 = 0
	)			[private]

Definition at line 3279 of file XrdSecProtocolgsi.cc.

References ErrF(), kgST_error, and REL3.

Referenced by Authenticate().

bool XrdSecProtocolgsi::CheckTimeStamp	(	XrdSutBuffer *	b,
		int	skew,
		String &	emsg
	)			[private]

bool XrdSecProtocolgsi::CheckRtag	(	XrdSutBuffer *	bm,
		String &	emsg
	)			[private]

Definition at line 3298 of file XrdSecProtocolgsi.cc.

References XrdSutPFBuf::buf, XrdSutPFEntry::buf1, XrdSutBucket::buffer, gsiHSVars::Cref, XrdSutBuffer::Deactivate(), DEBUG, XrdCryptoRSA::DecryptPublic(), emsg(), EPNAME, XrdSutBuffer::GetBucket(), hs, kXRS_signed_rtag, XrdSutPFBuf::len, gsiHSVars::RtagOK, SafeDelete, sessionKver, and XrdSutPFBuf::SetBuf().

Referenced by Authenticate(), and getCredentials().

int XrdSecProtocolgsi::AddSerialized	(	char	opt,
		kXR_int32	step,
		String	ID,
		XrdSutBuffer *	bls,
		XrdSutBuffer *	buf,
		kXR_int32	type,
		XrdCryptoCipher *	cip
	)			[private]

Definition at line 2136 of file XrdSecProtocolgsi.cc.

References XrdSutBuffer::AddBucket(), buf, XrdSutPFEntry::buf1, XrdSutBucket::buffer, gsiHSVars::Cref, DEBUG, XrdCryptoCipher::Encrypt(), XrdCryptoRSA::EncryptPrivate(), EPNAME, XrdSutBuffer::GetBucket(), XrdSutRndm::GetRndmTag(), hs, kXRS_rtag, kXRS_signed_rtag, gsiHSVars::LastStep, XrdSutPFEntry::mtime, sessionKsig, XrdSutPFBuf::SetBuf(), XrdSutBuffer::SetStep(), XrdSutBucket::size, gsiHSVars::TimeStamp, XrdSutBucket::Update(), and XrdSutBuckStr().

Referenced by Authenticate(), and getCredentials().

int XrdSecProtocolgsi::LoadGMAP

(

int

now

)

[static, private]

Definition at line 4261 of file XrdSecProtocolgsi.cc.

References XrdSutCache::Add(), XrdSutPFBuf::buf, XrdSutPFEntry::buf1, XrdOucString::c_str(), cacheGMAP, XrdSutPFEntry::cnt, DEBUG, XrdSutCache::Empty(), EPNAME, fclose(), fopen, GMAPFile, XrdSutCache::Init(), kPFE_ok, XrdSutPFBuf::len, XrdOucString::length(), line, XrdSutPFEntry::mtime, p0(), PRINT, XrdSutCache::Rehash(), XrdSutCache::Reset(), SafeFree, stat, and XrdSutPFEntry::status.

Referenced by Init(), and QueryGMAP().

XrdSecgsiGMAP_t XrdSecProtocolgsi::LoadGMAPFun	(	const char *	plugin,
		const char *	parms
	)			[static, private]

Definition at line 4460 of file XrdSecProtocolgsi.cc.

References DEBUG, eDest, EPNAME, XrdSysPlugin::getPlugin(), GMAPPlugin, p, params, PRINT, and XrdSysPlugin.

Referenced by Init().

XrdSecgsiAuthz_t XrdSecProtocolgsi::LoadAuthzFun	(	const char *	plugin,
		const char *	parms
	)			[static, private]

Definition at line 4518 of file XrdSecProtocolgsi.cc.

References AuthzPlugin, DEBUG, eDest, EPNAME, XrdSysPlugin::getPlugin(), p, params, PRINT, and XrdSysPlugin.

Referenced by Init().

void XrdSecProtocolgsi::QueryGMAP	(	XrdCryptoX509Chain *	chain,
		int	now,
		String &	name
	)			[static, private]

Definition at line 4357 of file XrdSecProtocolgsi.cc.

References XrdSutCache::Add(), AuthzFun, XrdSutPFBuf::buf, XrdSutPFEntry::buf1, cacheGMAP, cacheGMAPFun, chain, XrdSutPFEntry::cnt, DEBUG, EPNAME, XrdSutCache::Get(), GMAPCacheTimeOut, GMAPFun, kPFE_allowed, kPFE_ok, XrdSutPFBuf::len, XrdOucString::length(), LoadGMAP(), XrdSutPFEntry::mtime, name, PRINT, XrdSutCache::Rehash(), XrdSutCache::Remove(), s, SafeFree, XrdSutPFEntry::status, XrdSutBucket::ToString(), and XrdCryptosslX509ExportChain().

Referenced by Authenticate().

---

Member Data Documentation

XrdSysMutex XrdSecProtocolgsi::gsiContext [static, private]

Definition at line 271 of file XrdSecProtocolgsi.hh.

String XrdSecProtocolgsi::CAdir [static, private]

Definition at line 272 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), GetCApath(), Init(), LoadCADir(), and ServerDoCertreq().

String XrdSecProtocolgsi::CRLdir [static, private]

Definition at line 273 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and LoadCRL().

String XrdSecProtocolgsi::DefCRLext [static, private]

Definition at line 274 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and LoadCRL().

String XrdSecProtocolgsi::SrvCert [static, private]

Definition at line 275 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and ServerDoCertreq().

String XrdSecProtocolgsi::SrvKey [static, private]

Definition at line 276 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and ServerDoCertreq().

String XrdSecProtocolgsi::UsrProxy [static, private]

Definition at line 277 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), Init(), ServerDoCertreq(), and ServerDoSigpxy().

String XrdSecProtocolgsi::UsrCert [static, private]

Definition at line 278 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), and Init().

String XrdSecProtocolgsi::UsrKey [static, private]

Definition at line 279 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), and Init().

String XrdSecProtocolgsi::PxyValid [static, private]

Definition at line 280 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), Init(), and ServerDoCertreq().

int XrdSecProtocolgsi::DepLength [static, private]

Definition at line 281 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), and Init().

int XrdSecProtocolgsi::DefBits [static, private]

Definition at line 282 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), and Init().

int XrdSecProtocolgsi::CACheck [static, private]

Definition at line 283 of file XrdSecProtocolgsi.hh.

Referenced by GetCA(), Init(), LoadCADir(), LoadCRL(), QueryProxy(), and VerifyCA().

int XrdSecProtocolgsi::CRLCheck [static, private]

Definition at line 284 of file XrdSecProtocolgsi.hh.

Referenced by GetCA(), Init(), LoadCADir(), and LoadCRL().

String XrdSecProtocolgsi::DefCrypto [static, private]

Definition at line 285 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), and Init().

String XrdSecProtocolgsi::DefCipher [static, private]

Definition at line 286 of file XrdSecProtocolgsi.hh.

Referenced by Authenticate(), Init(), and ServerDoCert().

String XrdSecProtocolgsi::DefMD [static, private]

Definition at line 287 of file XrdSecProtocolgsi.hh.

Referenced by Authenticate(), Init(), and ServerDoCert().

String XrdSecProtocolgsi::DefError [static, private]

Definition at line 288 of file XrdSecProtocolgsi.hh.

String XrdSecProtocolgsi::GMAPFile [static, private]

Definition at line 289 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and LoadGMAP().

int XrdSecProtocolgsi::GMAPOpt [static, private]

Definition at line 290 of file XrdSecProtocolgsi.hh.

Referenced by Authenticate(), and Init().

int XrdSecProtocolgsi::GMAPCacheTimeOut [static, private]

Definition at line 291 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and QueryGMAP().

XrdSysPlugin * XrdSecProtocolgsi::GMAPPlugin [static, private]

Definition at line 292 of file XrdSecProtocolgsi.hh.

Referenced by LoadGMAPFun().

XrdSecgsiGMAP_t XrdSecProtocolgsi::GMAPFun [static, private]

Definition at line 293 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and QueryGMAP().

XrdSysPlugin * XrdSecProtocolgsi::AuthzPlugin [static, private]

Definition at line 294 of file XrdSecProtocolgsi.hh.

Referenced by LoadAuthzFun().

XrdSecgsiAuthz_t XrdSecProtocolgsi::AuthzFun [static, private]

Definition at line 295 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and QueryGMAP().

int XrdSecProtocolgsi::PxyReqOpts [static, private]

Definition at line 296 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), Init(), ServerDoCert(), and ServerDoSigpxy().

int XrdSecProtocolgsi::AuthzPxy [static, private]

Definition at line 297 of file XrdSecProtocolgsi.hh.

Referenced by Authenticate(), and Init().

String XrdSecProtocolgsi::SrvAllowedNames [static, private]

Definition at line 298 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and ServerCertNameOK().

int XrdSecProtocolgsi::ncrypt [static, private]

Definition at line 301 of file XrdSecProtocolgsi.hh.

Referenced by Init(), LoadCADir(), and ParseCrypto().

XrdCryptoFactory * XrdSecProtocolgsi::cryptF [static, private]

Definition at line 302 of file XrdSecProtocolgsi.hh.

Referenced by Init(), LoadCADir(), and ParseCrypto().

int XrdSecProtocolgsi::cryptID [static, private]

Definition at line 303 of file XrdSecProtocolgsi.hh.

Referenced by Init(), LoadCADir(), and ParseCrypto().

String XrdSecProtocolgsi::cryptName [static, private]

Definition at line 304 of file XrdSecProtocolgsi.hh.

Referenced by Init().

XrdCryptoCipher * XrdSecProtocolgsi::refcip [static, private]

Definition at line 305 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and ParseCrypto().

XrdSutCache XrdSecProtocolgsi::cacheCA [static, private]

Definition at line 308 of file XrdSecProtocolgsi.hh.

Referenced by GetCA(), Init(), and LoadCADir().

XrdSutCache XrdSecProtocolgsi::cacheCert [static, private]

Definition at line 309 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and ServerDoCertreq().

XrdSutCache XrdSecProtocolgsi::cachePxy [static, private]

Definition at line 310 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoInit(), and Init().

XrdSutCache XrdSecProtocolgsi::cacheGMAP [static, private]

Definition at line 311 of file XrdSecProtocolgsi.hh.

Referenced by Init(), LoadGMAP(), and QueryGMAP().

XrdSutCache XrdSecProtocolgsi::cacheGMAPFun [static, private]

Definition at line 312 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and QueryGMAP().

int XrdSecProtocolgsi::Debug [static, private]

Definition at line 315 of file XrdSecProtocolgsi.hh.

Referenced by ErrF(), and Init().

bool XrdSecProtocolgsi::Server [static, private]

Definition at line 316 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and XrdSecProtocolgsi().

int XrdSecProtocolgsi::TimeSkew [static, private]

Definition at line 317 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoCert(), and ServerDoCert().

XrdSysLogger XrdSecProtocolgsi::Logger [static, private]

Definition at line 320 of file XrdSecProtocolgsi.hh.

Referenced by Init().

XrdSysError XrdSecProtocolgsi::eDest [static, private]

Definition at line 321 of file XrdSecProtocolgsi.hh.

Referenced by Init(), LoadAuthzFun(), and LoadGMAPFun().

XrdOucTrace * XrdSecProtocolgsi::GSITrace [static, private]

Definition at line 322 of file XrdSecProtocolgsi.hh.

Referenced by Init(), and ParseCrypto().

int XrdSecProtocolgsi::options [private]

Definition at line 325 of file XrdSecProtocolgsi.hh.

Referenced by XrdSecProtocolgsi().

struct sockaddr XrdSecProtocolgsi::hostaddr [private]

Definition at line 326 of file XrdSecProtocolgsi.hh.

Referenced by XrdSecProtocolgsi().

XrdCryptoFactory* XrdSecProtocolgsi::sessionCF [private]

Definition at line 327 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoCert(), ClientDoInit(), ClientDoPxyreq(), GetCA(), getCredentials(), ParseCrypto(), ServerDoCert(), ServerDoCertreq(), ServerDoSigpxy(), setKey(), and XrdSecProtocolgsi().

XrdCryptoCipher* XrdSecProtocolgsi::sessionKey [private]

Definition at line 328 of file XrdSecProtocolgsi.hh.

Referenced by Authenticate(), ClientDoCert(), ClientDoPxyreq(), Decrypt(), Delete(), Encrypt(), getCredentials(), getKey(), ServerDoCert(), ServerDoSigpxy(), setKey(), and XrdSecProtocolgsi().

XrdSutBucket* XrdSecProtocolgsi::bucketKey [private]

Definition at line 329 of file XrdSecProtocolgsi.hh.

Referenced by Delete(), getKey(), and XrdSecProtocolgsi().

XrdCryptoMsgDigest* XrdSecProtocolgsi::sessionMD [private]

Definition at line 330 of file XrdSecProtocolgsi.hh.

Referenced by ClientDoCert(), Delete(), ServerDoCert(), Sign(), Verify(), and XrdSecProtocolgsi().

XrdCryptoRSA* XrdSecProtocolgsi::sessionKsig [private]

Definition at line 331 of file XrdSecProtocolgsi.hh.

Referenced by AddSerialized(), ClientDoInit(), Delete(), ServerDoCertreq(), Sign(), and XrdSecProtocolgsi().

XrdCryptoRSA* XrdSecProtocolgsi::sessionKver [private]

Definition at line 332 of file XrdSecProtocolgsi.hh.

Referenced by CheckRtag(), ClientDoCert(), Delete(), ServerDoCert(), Verify(), and XrdSecProtocolgsi().

X509Chain* XrdSecProtocolgsi::proxyChain [private]

Definition at line 333 of file XrdSecProtocolgsi.hh.

Referenced by Delete(), getCredentials(), ServerDoSigpxy(), and XrdSecProtocolgsi().

bool XrdSecProtocolgsi::srvMode [private]

Definition at line 334 of file XrdSecProtocolgsi.hh.

Referenced by getCredentials(), and XrdSecProtocolgsi().

gsiHSVars* XrdSecProtocolgsi::hs [private]

Definition at line 337 of file XrdSecProtocolgsi.hh.

Referenced by AddSerialized(), Authenticate(), CheckRtag(), ClientDoCert(), ClientDoInit(), ClientDoPxyreq(), Delete(), GetCA(), getCredentials(), ParseCAlist(), ParseCrypto(), ServerDoCert(), ServerDoCertreq(), ServerDoSigpxy(), and XrdSecProtocolgsi().

---

The documentation for this class was generated from the following files:

• net/xrootd/src/xrootd/src/XrdSecgsi/XrdSecProtocolgsi.hh
• net/xrootd/src/xrootd/src/XrdSecgsi/XrdSecProtocolgsi.cc

---