diff options
Diffstat (limited to '')
| -rw-r--r-- | src/lib/libssl/src/ssl/kssl.h | 114 | 
1 files changed, 0 insertions, 114 deletions
| diff --git a/src/lib/libssl/src/ssl/kssl.h b/src/lib/libssl/src/ssl/kssl.h index ec75188a8e..5070066cb3 100644 --- a/src/lib/libssl/src/ssl/kssl.h +++ b/src/lib/libssl/src/ssl/kssl.h | |||
| @@ -65,118 +65,4 @@ | |||
| 65 | 65 | ||
| 66 | #include <openssl/opensslconf.h> | 66 | #include <openssl/opensslconf.h> | 
| 67 | 67 | ||
| 68 | #ifndef OPENSSL_NO_KRB5 | ||
| 69 | |||
| 70 | #include <stdio.h> | ||
| 71 | #include <ctype.h> | ||
| 72 | #include <krb5.h> | ||
| 73 | |||
| 74 | #ifdef __cplusplus | ||
| 75 | extern "C" { | ||
| 76 | #endif | ||
| 77 | |||
| 78 | /* | ||
| 79 | ** Depending on which KRB5 implementation used, some types from | ||
| 80 | ** the other may be missing. Resolve that here and now | ||
| 81 | */ | ||
| 82 | #ifdef KRB5_HEIMDAL | ||
| 83 | typedef unsigned char krb5_octet; | ||
| 84 | #define FAR | ||
| 85 | #else | ||
| 86 | |||
| 87 | #ifndef FAR | ||
| 88 | #define FAR | ||
| 89 | #endif | ||
| 90 | |||
| 91 | #endif | ||
| 92 | |||
| 93 | /* Uncomment this to debug kssl problems or | ||
| 94 | ** to trace usage of the Kerberos session key | ||
| 95 | ** | ||
| 96 | ** #define KSSL_DEBUG | ||
| 97 | */ | ||
| 98 | |||
| 99 | #ifndef KRB5SVC | ||
| 100 | #define KRB5SVC "host" | ||
| 101 | #endif | ||
| 102 | |||
| 103 | #ifndef KRB5KEYTAB | ||
| 104 | #define KRB5KEYTAB "/etc/krb5.keytab" | ||
| 105 | #endif | ||
| 106 | |||
| 107 | #ifndef KRB5SENDAUTH | ||
| 108 | #define KRB5SENDAUTH 1 | ||
| 109 | #endif | ||
| 110 | |||
| 111 | #ifndef KRB5CHECKAUTH | ||
| 112 | #define KRB5CHECKAUTH 1 | ||
| 113 | #endif | ||
| 114 | |||
| 115 | #ifndef KSSL_CLOCKSKEW | ||
| 116 | #define KSSL_CLOCKSKEW 300; | ||
| 117 | #endif | ||
| 118 | |||
| 119 | #define KSSL_ERR_MAX 256 | ||
| 120 | typedef struct kssl_err_st { | ||
| 121 | int reason; | ||
| 122 | char text[KSSL_ERR_MAX]; | ||
| 123 | } KSSL_ERR; | ||
| 124 | |||
| 125 | |||
| 126 | /* Context for passing | ||
| 127 | ** (1) Kerberos session key to SSL, and | ||
| 128 | ** (2) Config data between application and SSL lib | ||
| 129 | */ | ||
| 130 | typedef struct kssl_ctx_st { | ||
| 131 | /* used by: disposition: */ | ||
| 132 | char *service_name; /* C,S default ok (kssl) */ | ||
| 133 | char *service_host; /* C input, REQUIRED */ | ||
| 134 | char *client_princ; /* S output from krb5 ticket */ | ||
| 135 | char *keytab_file; /* S NULL (/etc/krb5.keytab) */ | ||
| 136 | char *cred_cache; /* C NULL (default) */ | ||
| 137 | krb5_enctype enctype; | ||
| 138 | int length; | ||
| 139 | krb5_octet FAR *key; | ||
| 140 | } KSSL_CTX; | ||
| 141 | |||
| 142 | #define KSSL_CLIENT 1 | ||
| 143 | #define KSSL_SERVER 2 | ||
| 144 | #define KSSL_SERVICE 3 | ||
| 145 | #define KSSL_KEYTAB 4 | ||
| 146 | |||
| 147 | #define KSSL_CTX_OK 0 | ||
| 148 | #define KSSL_CTX_ERR 1 | ||
| 149 | #define KSSL_NOMEM 2 | ||
| 150 | |||
| 151 | /* Public (for use by applications that use OpenSSL with Kerberos 5 support */ | ||
| 152 | krb5_error_code kssl_ctx_setstring(KSSL_CTX *kssl_ctx, int which, char *text); | ||
| 153 | KSSL_CTX *kssl_ctx_new(void); | ||
| 154 | KSSL_CTX *kssl_ctx_free(KSSL_CTX *kssl_ctx); | ||
| 155 | void kssl_ctx_show(KSSL_CTX *kssl_ctx); | ||
| 156 | krb5_error_code kssl_ctx_setprinc(KSSL_CTX *kssl_ctx, int which, | ||
| 157 | krb5_data *realm, krb5_data *entity, int nentities); | ||
| 158 | krb5_error_code kssl_cget_tkt(KSSL_CTX *kssl_ctx, krb5_data **enc_tktp, | ||
| 159 | krb5_data *authenp, KSSL_ERR *kssl_err); | ||
| 160 | krb5_error_code kssl_sget_tkt(KSSL_CTX *kssl_ctx, krb5_data *indata, | ||
| 161 | krb5_ticket_times *ttimes, KSSL_ERR *kssl_err); | ||
| 162 | krb5_error_code kssl_ctx_setkey(KSSL_CTX *kssl_ctx, krb5_keyblock *session); | ||
| 163 | void kssl_err_set(KSSL_ERR *kssl_err, int reason, char *text); | ||
| 164 | void kssl_krb5_free_data_contents(krb5_context context, krb5_data *data); | ||
| 165 | krb5_error_code kssl_build_principal_2(krb5_context context, | ||
| 166 | krb5_principal *princ, int rlen, const char *realm, int slen, | ||
| 167 | const char *svc, int hlen, const char *host); | ||
| 168 | krb5_error_code kssl_validate_times(krb5_timestamp atime, | ||
| 169 | krb5_ticket_times *ttimes); | ||
| 170 | krb5_error_code kssl_check_authent(KSSL_CTX *kssl_ctx, krb5_data *authentp, | ||
| 171 | krb5_timestamp *atimep, KSSL_ERR *kssl_err); | ||
| 172 | unsigned char *kssl_skip_confound(krb5_enctype enctype, unsigned char *authn); | ||
| 173 | |||
| 174 | void SSL_set0_kssl_ctx(SSL *s, KSSL_CTX *kctx); | ||
| 175 | KSSL_CTX *SSL_get0_kssl_ctx(SSL *s); | ||
| 176 | char *kssl_ctx_get0_client_princ(KSSL_CTX *kctx); | ||
| 177 | |||
| 178 | #ifdef __cplusplus | ||
| 179 | } | ||
| 180 | #endif | ||
| 181 | #endif /* OPENSSL_NO_KRB5 */ | ||
| 182 | #endif /* KSSL_H */ | 68 | #endif /* KSSL_H */ | 
