00001
00002
00003
00004
00005
00006
00007
00008
00009
00010
00011
00012
00013
00014
00015
00016
00017
00018
00019
00020
00021
00022
00023
00024
00025
00026 #ifndef VOMS_API_H
00027 #define VOMS_API_H
00028
00029 #include <fstream>
00030 #include <string>
00031 #include <vector>
00032
00033 #define NOGLOBUS
00034 extern "C" {
00035 #ifndef GSSAPI_H_
00036
00037
00038
00039
00040
00041 #ifndef _GSSAPI_H_
00042 typedef void * gss_cred_id_t;
00043 typedef void * gss_ctx_id_t;
00044 #endif
00045 #endif
00046
00047 #include <openssl/x509.h>
00048 #include <openssl/bio.h>
00049 #include <sys/types.h>
00050 #include "newformat.h"
00051 }
00052
00055 struct data {
00056 std::string group;
00057 std::string role;
00058 std::string cap;
00059 };
00060
00063 struct attribute {
00064 std::string name;
00065 std::string qualifier;
00066 std::string value;
00067 };
00068
00069 struct attributelist {
00070 std::string grantor;
00071 std::vector<attribute> attributes;
00072 };
00073
00074
00077 enum data_type {
00078 TYPE_NODATA,
00079 TYPE_STD,
00080 TYPE_CUSTOM
00081 };
00082
00083 struct contactdata {
00087 std::string nick;
00088 std::string host;
00089 std::string contact;
00090 std::string vo;
00091 int port;
00093 int version;
00094 };
00095
00096 class vomspriv;
00097
00098 struct voms {
00099 friend class vomsdata;
00100 int version;
00101 int siglen;
00102 std::string signature;
00103 std::string user;
00104 std::string userca;
00105 std::string server;
00106 std::string serverca;
00107 std::string voname;
00108 std::string uri;
00109 std::string date1;
00110 std::string date2;
00111 data_type type;
00112 std::vector<data> std;
00113 std::string custom;
00114
00115 std::vector<std::string> fqan;
00116 std::string serial;
00117
00118
00119 private:
00120 void *realdata;
00121 X509 *holder;
00122 public:
00123 voms(const voms &);
00124 voms();
00125 voms &operator=(const voms &);
00126 ~voms();
00127
00128 private:
00129 struct vomsr *translate();
00130 friend int TranslateVOMS(struct vomsdatar *vd, std::vector<voms>&v, int *error);
00131
00132 public:
00133 AC *GetAC();
00134
00135 public:
00136 std::vector<attributelist>& GetAttributes();
00137 std::vector<std::string> GetTargets();
00138
00139 private:
00140 vomspriv *vp;
00141 };
00142
00143 enum recurse_type {
00144 RECURSE_CHAIN,
00145 RECURSE_NONE,
00146 RECURSE_DEEP
00147 };
00148
00149 enum verify_type {
00150 VERIFY_FULL = 0xffffffff,
00151 VERIFY_NONE = 0x00000000,
00152 VERIFY_DATE = 0x00000001,
00153 VERIFY_TARGET = 0x00000002,
00154 VERIFY_KEY = 0x00000004,
00155 VERIFY_SIGN = 0x00000008,
00156 VERIFY_ORDER = 0x00000010,
00157 VERIFY_ID = 0x00000020,
00158 VERIFY_CERTLIST = 0x00000040
00159 };
00160
00163 enum verror_type {
00164 VERR_NONE,
00165 VERR_NOSOCKET,
00166 VERR_NOIDENT,
00167 VERR_COMM,
00168 VERR_PARAM,
00169 VERR_NOEXT,
00170 VERR_NOINIT,
00171 VERR_TIME,
00172 VERR_IDCHECK,
00173 VERR_EXTRAINFO,
00174 VERR_FORMAT,
00175 VERR_NODATA,
00176 VERR_PARSE,
00177 VERR_DIR,
00178 VERR_SIGN,
00179 VERR_SERVER,
00180 VERR_MEM,
00181 VERR_VERIFY,
00182
00183 VERR_TYPE,
00184 VERR_ORDER,
00185 VERR_SERVERCODE,
00186 VERR_NOTAVAIL,
00187 VERR_FILE
00188 };
00189
00190 typedef bool (*check_sig)(X509 *, void *, verror_type &);
00192 class vomsdatapriv;
00193
00194 struct vomsdata {
00195 private:
00196 class Initializer {
00197 public:
00198 Initializer();
00199 private:
00200 Initializer(Initializer &);
00201 };
00202
00203 private:
00204 static Initializer init;
00205 std::string ca_cert_dir;
00206 std::string voms_cert_dir;
00207 int duration;
00208 std::string ordering;
00209 std::vector<contactdata> servers;
00210 std::vector<std::string> targets;
00211
00212 public:
00213 verror_type error;
00215 vomsdata(std::string voms_dir = "",
00216 std::string cert_dir = "");
00227 bool LoadSystemContacts(std::string dir = "");
00234 bool LoadUserContacts(std::string dir = "");
00244 std::vector<contactdata> FindByAlias(std::string alias);
00252 std::vector<contactdata> FindByVO(std::string vo);
00260 void Order(std::string att);
00267 void ResetOrder(void);
00269 void AddTarget(std::string target);
00274 std::vector<std::string> ListTargets(void);
00276 void ResetTargets(void);
00277 std::string ServerErrors(void);
00279 bool Retrieve(X509 *cert, STACK_OF(X509) *chain,
00280 recurse_type how = RECURSE_CHAIN);
00289 bool Contact(std::string hostname, int port,
00290 std::string servsubject,
00291 std::string command);
00301 bool Contact(std::string hostname, int port,
00302 std::string servsubject,
00303 std::string command,
00304 int timeout);
00316 bool ContactRaw(std::string hostname, int port,
00317 std::string servsubject,
00318 std::string command,
00319 std::string &raw,
00320 int& version);
00329 bool ContactRaw(std::string hostname, int port,
00330 std::string servsubject,
00331 std::string command,
00332 std::string &raw,
00333 int& version,
00334 int timeout);
00345 void SetVerificationType(verify_type how);
00349 void SetLifetime(int lifetime);
00353 bool Import(std::string buffer);
00360 bool Export(std::string &data);
00367 bool DefaultData(voms &);
00370 std::vector<voms> data;
00373 std::string workvo;
00374 std::string extra_data;
00383 private:
00384 bool loadfile(std::string, uid_t uid, gid_t gid);
00385 bool loadfile0(std::string, uid_t uid, gid_t gid);
00386 bool verifydata(std::string &message, std::string subject, std::string ca,
00387 X509 *holder, voms &v);
00388 bool check_cert(X509 *cert);
00389 bool retrieve(X509 *cert, STACK_OF(X509) *chain, recurse_type how,
00390 AC_SEQ **listnew, std::string &subject, std::string &ca,
00391 X509 **holder);
00392 verify_type ver_type;
00393
00394 std::string serverrors;
00395 std::string errmessage;
00396
00397 void seterror(verror_type, std::string);
00398
00399 bool check_sig_ac(X509 *, void *);
00400 X509 *check(void *);
00401 bool contact(const std::string&, int, const std::string&,
00402 const std::string&, std::string&, std::string&,
00403 std::string&, int timeout);
00404 bool verifydata(AC *ac, const std::string& subject, const std::string& ca,
00405 X509 *holder, voms &v);
00406 bool evaluate(AC_SEQ *, const std::string&, const std::string&, X509*);
00407
00408 public:
00409
00410 std::string ErrorMessage(void);
00413 #ifdef NOGLOBUS
00414 bool RetrieveFromCtx(gss_ctx_id_t context, recurse_type how);
00419 bool RetrieveFromCred(gss_cred_id_t credential, recurse_type how);
00423 #endif
00424
00425 bool Retrieve(X509_EXTENSION *ext);
00429 bool RetrieveFromProxy(recurse_type how);
00433 bool Retrieve(FILE *file, recurse_type how);
00440 bool Retrieve(AC *ac);
00444 ~vomsdata();
00445 private:
00446
00447 bool check_cert(STACK_OF(X509) *);
00448 X509 *check_from_certs(AC *ac, const std::string& voname);
00449 X509 *check_from_file(AC *, std::ifstream&, const std::string &vo, const std::string &filename);
00450
00451 public:
00452 vomsdata(const vomsdata &);
00453
00454 private:
00455 int retry_count;
00456
00457 public:
00458 void SetRetryCount(int retryCount);
00459
00460 public:
00461 void SetVerificationTime(time_t);
00462
00463 private:
00464 time_t verificationtime;
00465 bool verifyac(X509 *, X509 *, AC*, time_t, voms&);
00466
00467 public:
00468 bool LoadCredentials(X509*, EVP_PKEY *, STACK_OF(X509) *);
00469 bool ContactRESTRaw(const std::string&, int, const std::string&, std::string&, int, int);
00470
00471 private:
00472 bool InterpretOutput(const std::string&, std::string&);
00473
00474 private:
00475 vomsdatapriv *vdp;
00476 };
00477
00478
00479 extern "C" {
00480 int getVOMSMajorVersionNumber(void);
00481 int getVOMSMinorVersionNumber(void);
00482 int getVOMSPatchVersionNumber(void);
00483 }
00484
00485 #endif