xrootd
 All Classes Namespaces Files Functions Variables Typedefs Enumerations Enumerator Friends Macros
XrdCryptosslAux.hh
Go to the documentation of this file.
1 #ifndef __CRYPTO_SSLAUX_H__
2 #define __CRYPTO_SSLAUX_H__
3 /******************************************************************************/
4 /* */
5 /* X r d C r y p t o S s l A u x . h h */
6 /* */
7 /* (c) 2004 by the Board of Trustees of the Leland Stanford, Jr., University */
8 /* Produced by Gerri Ganis for CERN */
9 /* */
10 /* This file is part of the XRootD software suite. */
11 /* */
12 /* XRootD is free software: you can redistribute it and/or modify it under */
13 /* the terms of the GNU Lesser General Public License as published by the */
14 /* Free Software Foundation, either version 3 of the License, or (at your */
15 /* option) any later version. */
16 /* */
17 /* XRootD is distributed in the hope that it will be useful, but WITHOUT */
18 /* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or */
19 /* FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public */
20 /* License for more details. */
21 /* */
22 /* You should have received a copy of the GNU Lesser General Public License */
23 /* along with XRootD in a file called COPYING.LESSER (LGPL license) and file */
24 /* COPYING (GPL license). If not, see <http://www.gnu.org/licenses/>. */
25 /* */
26 /* The copyright holder's institutional names and contributor's names may not */
27 /* be used to endorse or promote products derived from this software without */
28 /* specific prior written permission of the institution or contributor. */
29 /******************************************************************************/
30 
31 /* ************************************************************************** */
32 /* */
33 /* OpenSSL utility functions */
34 /* */
35 /* ************************************************************************** */
36 
40 #include <openssl/asn1.h>
41 
42 #define kSslKDFunDefLen 24
43 
44 //
45 // Password-Based Key Derivation Function 2, specified in PKCS #5
46 //
47 int XrdCryptosslKDFunLen(); // default buffer length
48 int XrdCryptosslKDFun(const char *pass, int plen, const char *salt, int slen,
49  char *key, int len);
50 //
51 // X509 manipulation: certificate verification
53 // chain verification
54 bool XrdCryptosslX509VerifyChain(XrdCryptoX509Chain *chain, int &errcode);
55 // chain export to bucket
57 // chain export to file (proxy file creation)
58 int XrdCryptosslX509ChainToFile(XrdCryptoX509Chain *c, const char *fn);
59 // certificates from file parsing
60 int XrdCryptosslX509ParseFile(const char *fname, XrdCryptoX509Chain *c);
61 // certificates from bucket parsing
63 //
64 // Function to convert from ASN1 time format into UTC since Epoch (Jan 1, 1970)
65 time_t XrdCryptosslASN1toUTC(const ASN1_TIME *tsn1);
66 
67 // Function to convert X509_NAME into a one-line human readable string
68 void XrdCryptosslNameOneLine(X509_NAME *nm, XrdOucString &s);
69 
70 //
71 // X509 proxy auxilliary functions
72 // Function to check presence of a proxyCertInfo and retrieve the path length
73 // constraint. Written following RFC3820 and examples in openssl-<vers>/crypto
74 // source code. Extracts the policy field but ignores it contents.
75 bool XrdCryptosslProxyCertInfo(const void *ext, int &pathlen, bool *haspolicy = 0);
76 void XrdCryptosslSetPathLenConstraint(void *ext, int pathlen);
77 // Create proxy certificates
78 int XrdCryptosslX509CreateProxy(const char *, const char *, XrdProxyOpt_t *,
79  XrdCryptogsiX509Chain *, XrdCryptoRSA **, const char *);
80 // Create a proxy certificate request
83 // Sign a proxy certificate request
86 // Check a proxy certificate GSI 3
88 // Get VOMS attributes, if any
90 
91 /******************************************************************************/
92 /* E r r o r L o g g i n g / T r a c i n g F l a g s */
93 /******************************************************************************/
94 #define sslTRACE_ALL 0x0007
95 #define sslTRACE_Dump 0x0004
96 #define sslTRACE_Debug 0x0002
97 #define sslTRACE_Notify 0x0001
98 
99 /******************************************************************************/
100 /* E r r o r s i n P r o x y M a n i p u l a t i o n s */
101 /******************************************************************************/
102 #define kErrPX_Error 1 // Generic error condition
103 #define kErrPX_BadEECfile 2 // Absent or bad EEC cert or key file
104 #define kErrPX_BadEECkey 3 // Inconsistent EEC key
105 #define kErrPX_ExpiredEEC 4 // EEC is expired
106 #define kErrPX_NoResources 5 // Unable to create new objects
107 #define kErrPX_SetAttribute 6 // Unable to set a certificate attribute
108 #define kErrPX_SetPathDepth 7 // Unable to set path depth
109 #define kErrPX_Signing 8 // Problems signing
110 #define kErrPX_GenerateKey 9 // Problem generating the RSA key
111 #define kErrPX_ProxyFile 10 // Problem creating / updating proxy file
112 #define kErrPX_BadNames 11 // Names in certificates are bad
113 #define kErrPX_BadSerial 12 // Problems resolving serial number
114 #define kErrPX_BadExtension 13 // Problems with the extensions
115 
116 #endif
117 
Definition: XrdCryptoRSA.hh:50
bool XrdCryptosslX509VerifyChain(XrdCryptoX509Chain *chain, int &errcode)
int XrdCryptosslX509CheckProxy3(XrdCryptoX509 *, XrdOucString &)
int XrdCryptosslX509ChainToFile(XrdCryptoX509Chain *c, const char *fn)
int XrdCryptosslX509GetVOMSAttr(XrdCryptoX509 *, XrdOucString &)
Definition: XrdCryptoFactory.hh:94
int XrdCryptosslX509ParseBucket(XrdSutBucket *b, XrdCryptoX509Chain *c)
int XrdCryptosslX509CreateProxy(const char *, const char *, XrdProxyOpt_t *, XrdCryptogsiX509Chain *, XrdCryptoRSA **, const char *)
Definition: XrdCryptoX509Req.hh:50
int XrdCryptosslX509SignProxyReq(XrdCryptoX509 *, XrdCryptoRSA *, XrdCryptoX509Req *, XrdCryptoX509 **)
time_t XrdCryptosslASN1toUTC(const ASN1_TIME *tsn1)
int XrdCryptosslKDFunLen()
XrdSutBucket * XrdCryptosslX509ExportChain(XrdCryptoX509Chain *c, bool key=0)
void XrdCryptosslSetPathLenConstraint(void *ext, int pathlen)
int XrdCryptosslKDFun(const char *pass, int plen, const char *salt, int slen, char *key, int len)
bool XrdCryptosslProxyCertInfo(const void *ext, int &pathlen, bool *haspolicy=0)
int XrdCryptosslX509CreateProxyReq(XrdCryptoX509 *, XrdCryptoX509Req **, XrdCryptoRSA **)
Definition: XrdCryptogsiX509Chain.hh:50
Definition: XrdSutBucket.hh:43
int XrdCryptosslX509ParseFile(const char *fname, XrdCryptoX509Chain *c)
void XrdCryptosslNameOneLine(X509_NAME *nm, XrdOucString &s)
bool XrdCryptosslX509VerifyCert(XrdCryptoX509 *c, XrdCryptoX509 *r)
Definition: XrdCryptoX509.hh:51
Definition: XrdOucString.hh:254
Definition: XrdCryptoX509Chain.hh:80