grst_verifycallback.c File Reference

#include "grst_verifycallback.h"
#include "gridsite.h"
#include <openssl/x509v3.h>
#include <string.h>

Go to the source code of this file.

Defines
#define	X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION   34
Functions
int	ssl_callback_SSLVerify (int ok, X509_STORE_CTX *ctx)
int	ssl_callback_SSLVerify_CRL (int ok, X509_STORE_CTX *ctx)
int	GRST_X509_check_issued_wrapper (X509_STORE_CTX *ctx, X509 *x, X509 *issuer)
int	GRST_verify_cert_wrapper (X509_STORE_CTX *ctx, void *p)
int	GRST_callback_SSLVerify_wrapper (int ok, X509_STORE_CTX *ctx)
void	GRST_print_ssl_creds (void *in_chain)
char *	GRST_get_voms_roles_and_free (void *in_chain)
void	GRST_free_chain (void *in_chain)
X509_STORE *	SSL_X509_STORE_create (char *cpFile, char *cpPath)
int	SSL_X509_STORE_lookup (X509_STORE *pStore, int nType, X509_NAME *pName, X509_OBJECT *pObj)
Variables
X509_STORE *	grst_store = NULL
int	grst_verify = 0
int	grst_depth = 0
char *	grst_cadir = "/etc/grid-certificates/certificates"
char *	grst_vomsdir = "/etc/grid-certificates/vomsdir"

---

Define Documentation

#define X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION   34

Referenced by GRST_callback_SSLVerify_wrapper(), and GRSTx509VerifyCallback().

---

Function Documentation

int GRST_callback_SSLVerify_wrapper	(	int	ok,
		X509_STORE_CTX *	ctx
	)

Definition at line 114 of file grst_verifycallback.c.

References FALSE, grst_cadir, GRST_LOG_DEBUG, GRST_LOG_ERR, GRST_LOG_INFO, GRST_RET_OK, grst_vomsdir, GRSTerrorLog, GRSTx509ChainFree(), GRSTx509ChainLoadCheck(), GRSTx509KnownCriticalExts(), NULL, ssl_callback_SSLVerify(), TRUE, and X509_V_ERR_UNHANDLED_CRITICAL_EXTENSION.

Referenced by XrdSecProtocolssl::secClient(), and XrdSecProtocolsslInit().

void GRST_free_chain

(

void *

in_chain

)

Definition at line 320 of file grst_verifycallback.c.

References GRSTx509ChainFree().

Referenced by XrdSecProtocolssl::secServer().

char* GRST_get_voms_roles_and_free

(

void *

in_chain

)

Definition at line 252 of file grst_verifycallback.c.

References GRSTx509Cert::delegation, GRSTx509Chain::firstcert, GRST_CERT_TYPE_EEC, GRST_CERT_TYPE_PROXY, GRST_CERT_TYPE_VOMS, GRST_LOG_DEBUG, GRST_LOG_INFO, GRSTerrorLog, GRSTx509ChainFree(), i, malloc(), GRSTx509Cert::next, GRSTx509Cert::notafter, GRSTx509Cert::notbefore, NULL, strcat(), GRSTx509Cert::type, and GRSTx509Cert::value.

Referenced by XrdSecProtocolssl::secClient(), and XrdSecProtocolssl::secServer().

void GRST_print_ssl_creds

(

void *

in_chain

)

Definition at line 209 of file grst_verifycallback.c.

References GRSTx509Cert::delegation, GRSTx509Cert::dn, GRSTx509Chain::firstcert, GRST_CERT_TYPE_EEC, GRST_CERT_TYPE_PROXY, GRST_CERT_TYPE_VOMS, GRST_LOG_DEBUG, GRST_LOG_INFO, GRSTerrorLog, i, GRSTx509Cert::next, GRSTx509Cert::notafter, GRSTx509Cert::notbefore, NULL, GRSTx509Cert::type, and GRSTx509Cert::value.

Referenced by XrdSecProtocolssl::secClient(), and XrdSecProtocolssl::secServer().

int GRST_verify_cert_wrapper	(	X509_STORE_CTX *	ctx,
		void *	p
	)

Definition at line 98 of file grst_verifycallback.c.

References GRST_X509_check_issued_wrapper().

Referenced by XrdSecProtocolssl::secClient(), and XrdSecProtocolsslInit().

int GRST_X509_check_issued_wrapper	(	X509_STORE_CTX *	ctx,
		X509 *	x,
		X509 *	issuer
	)

Definition at line 69 of file grst_verifycallback.c.

Referenced by GRST_verify_cert_wrapper().

int ssl_callback_SSLVerify	(	int	ok,
		X509_STORE_CTX *	ctx
	)

Definition at line 341 of file grst_verifycallback.c.

References depth, FALSE, grst_depth, GRST_LOG_DEBUG, GRST_LOG_ERR, grst_verify, GRST_VERIFY_OPTIONAL_NO_CA, GRSTerrorLog, NULL, ssl_callback_SSLVerify_CRL(), and TRUE.

Referenced by GRST_callback_SSLVerify_wrapper().

int ssl_callback_SSLVerify_CRL	(	int	ok,
		X509_STORE_CTX *	ctx
	)

Definition at line 436 of file grst_verifycallback.c.

References GRST_LOG_DEBUG, GRST_LOG_ERR, grst_store, GRSTerrorLog, i, n, NULL, SSL_X509_STORE_lookup(), and t.

Referenced by ssl_callback_SSLVerify().

X509_STORE* SSL_X509_STORE_create	(	char *	cpFile,
		char *	cpPath
	)

Definition at line 604 of file grst_verifycallback.c.

References NULL.

Referenced by XrdSecProtocolssl::secServer(), and XrdSecProtocolsslInit().

int SSL_X509_STORE_lookup	(	X509_STORE *	pStore,
		int	nType,
		X509_NAME *	pName,
		X509_OBJECT *	pObj
	)

Definition at line 630 of file grst_verifycallback.c.

References NULL.

Referenced by ssl_callback_SSLVerify_CRL().

---

Variable Documentation

char* grst_cadir = "/etc/grid-certificates/certificates"

Definition at line 61 of file grst_verifycallback.c.

Referenced by GRST_callback_SSLVerify_wrapper(), XrdSecProtocolssl::secClient(), and XrdSecProtocolsslInit().

int grst_depth = 0

Definition at line 60 of file grst_verifycallback.c.

Referenced by XrdSecProtocolssl::secClient(), ssl_callback_SSLVerify(), and XrdSecProtocolsslInit().

X509_STORE* grst_store = NULL

Definition at line 58 of file grst_verifycallback.c.

Referenced by ssl_callback_SSLVerify_CRL().

int grst_verify = 0

Definition at line 59 of file grst_verifycallback.c.

Referenced by ssl_callback_SSLVerify().

char* grst_vomsdir = "/etc/grid-certificates/vomsdir"

Definition at line 62 of file grst_verifycallback.c.

Referenced by GRST_callback_SSLVerify_wrapper(), XrdSecProtocolssl::secClient(), and XrdSecProtocolsslInit().

---