My Project
gridsite.h
Go to the documentation of this file.
1 /*
2  Copyright (c) 2002-10, Andrew McNab, University of Manchester
3  All rights reserved.
4 
5  Redistribution and use in source and binary forms, with or
6  without modification, are permitted provided that the following
7  conditions are met:
8 
9  o Redistributions of source code must retain the above
10  copyright notice, this list of conditions and the following
11  disclaimer.
12  o Redistributions in binary form must reproduce the above
13  copyright notice, this list of conditions and the following
14  disclaimer in the documentation and/or other materials
15  provided with the distribution.
16 
17  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
18  CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
19  INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
20  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
21  DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
22  BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
23  EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
24  TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
25  DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
26  ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
27  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28  OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29  POSSIBILITY OF SUCH DAMAGE.
30 */
31 
32 /*---------------------------------------------------------------*
33  * For more about GridSite: http://www.gridsite.org/ *
34  *---------------------------------------------------------------*/
35 
36 #ifndef HEADER_GRIDSITE_H
37 #define HEADER_GRIDSITE_H
38 
39 #ifndef GRST_VERSION
40 #define GRST_VERSION 010500
41 #endif
42 
43 #ifdef __cplusplus
44 extern "C" {
45 #endif
46 
47 #ifndef GRST_NO_OPENSSL
48 
49 #ifndef HEADER_SSL_H
50 #include <openssl/ssl.h>
51 #endif
52 
53 #ifndef HEADER_CRYPTO_H
54 #include <openssl/crypto.h>
55 #endif
56 
57 #endif
58 
59 #ifndef _TIME_H
60 #include <time.h>
61 #endif
62 
63 #ifndef _STDIO_H
64 #include <stdio.h>
65 #endif
66 
67 #ifndef _STDINT_H
68 #include <stdint.h>
69 #endif
70 
71 #ifndef FALSE
72 #define FALSE (0)
73 #endif
74 #ifndef TRUE
75 #define TRUE (!FALSE)
76 #endif
77 
78 // Everything ok (= OpenSSL X509_V_OK)
79 #define GRST_RET_OK 0
80 
81 // Failed for unspecified reason
82 #define GRST_RET_FAILED 1000
83 
84 // Failed to find certificate in some cert store / directory
85 #define GRST_RET_CERT_NOT_FOUND 1001
86 
87 // Bad signature
88 #define GRST_RET_BAD_SIGNATURE 1002
89 
90 // No such file or directory
91 #define GRST_RET_NO_SUCH_FILE 1003
92 
93 /* We use && now rather than if so this macro can be used inside if...else
94  but that means the function must return an int rather than be void */
95 #define GRSTerrorLog(GRSTerrorLevel, ...) ((GRSTerrorLogFunc != NULL) && ((GRSTerrorLogFunc)(__FILE__, __LINE__, GRSTerrorLevel, __VA_ARGS__)))
96 
97 extern int (*GRSTerrorLogFunc)(char *, int, int, char *, ...);
98 
99 /* these levels are the same as Unix syslog() and Apache ap_log_error() */
100 
101 #define GRST_LOG_EMERG 0
102 #define GRST_LOG_ALERT 1
103 #define GRST_LOG_CRIT 2
104 #define GRST_LOG_ERR 3
105 #define GRST_LOG_WARNING 4
106 #define GRST_LOG_NOTICE 5
107 #define GRST_LOG_INFO 6
108 #define GRST_LOG_DEBUG 7
109 
110 #define GRST_MAX_TIME_T INT32_MAX
111 
112 typedef struct { char *auri;
114  int nist_loa;
115  time_t notbefore;
116  time_t notafter;
117  void *next; } GRSTgaclCred;
118 
119 /* used by pre-AURI GRSTgaclCred structs */
120 __attribute__ ((deprecated))
121 typedef struct { char *name;
122  char *value;
123  void *next; } GRSTgaclNamevalue;
124 
125 typedef int GRSTgaclAction;
126 typedef unsigned int GRSTgaclPerm;
127 
128 typedef struct { GRSTgaclCred *firstcred;
131  void *next; } GRSTgaclEntry;
132 
133 typedef struct { GRSTgaclEntry *firstentry; } GRSTgaclAcl;
134 
135 typedef struct { GRSTgaclCred *firstcred; char *dnlists; } GRSTgaclUser;
136 
137 #define GRST_PERM_NONE 0
138 #define GRST_PERM_READ 1
139 #define GRST_PERM_EXEC 2
140 #define GRST_PERM_LIST 4
141 #define GRST_PERM_WRITE 8
142 #define GRST_PERM_ADMIN 16
143 #define GRST_PERM_ALL 31
144 
145 /* DO NOT USE PermIsNone!! */
146 #define GRSTgaclPermIsNone(perm) ((perm) == 0)
147 
148 #define GRSTgaclPermHasNone(perm) ((perm) == 0)
149 #define GRSTgaclPermHasRead(perm) (((perm) & GRST_PERM_READ ) != 0)
150 #define GRSTgaclPermHasExec(perm) (((perm) & GRST_PERM_EXEC ) != 0)
151 #define GRSTgaclPermHasList(perm) (((perm) & GRST_PERM_LIST ) != 0)
152 #define GRSTgaclPermHasWrite(perm) (((perm) & GRST_PERM_WRITE) != 0)
153 #define GRSTgaclPermHasAdmin(perm) (((perm) & GRST_PERM_ADMIN) != 0)
154 
155 #define GRST_ACTION_ALLOW 0
156 #define GRST_ACTION_DENY 1
157 
158 #define GRST_HIST_PREFIX ".grsthist"
159 #define GRST_ACL_FILE ".gacl"
160 #define GRST_DN_LISTS "/etc/grid-security/dn-lists"
161 #define GRST_RECURS_LIMIT 9
162 
163 #define GRST_PROXYCERTINFO_OLD_OID "1.3.6.1.4.1.3536.1.222"
164 #define GRST_PROXYCERTINFO_OID "1.3.6.1.5.5.7.1.14"
165 #define GRST_VOMS_OID "1.3.6.1.4.1.8005.100.100.5"
166 #define GRST_VOMS_PK_CERT_LIST_OID "1.3.6.1.4.1.8005.100.100.10"
167 #define GRST_VOMS_DIR "/etc/grid-security/vomsdir"
168 #define GRST_KEYUSAGE_OID "2.5.29.15"
169 
170 #define GRST_ASN1_MAXCOORDLEN 50
171 #define GRST_ASN1_MAXTAGS 500
172 
173 struct GRSTasn1TagList { char treecoords[GRST_ASN1_MAXCOORDLEN+1];
174  int start;
176  int length;
177  int tag; } ;
178 
179 #define GRST_X509_SERIAL_DIGITS 49
180 
181 typedef struct { int type; /* CA, user, proxy, VOMS, ... */
182  int errors; /* unchecked, bad sig, bad time */
183  char *issuer; /* Cert CA DN, EEC of PC, or VOMS DN */
184  char *dn; /* Cert DN, or VOMS AC holder DN */
185  char *value; /* VOMS FQAN or NULL */
186  time_t notbefore;
187  time_t notafter;
188  int delegation; /* relative to END of any chain */
189  char serial[GRST_X509_SERIAL_DIGITS+1];
190  char *ocsp; /* accessLocation field */
191  void *raw; /* X509 or VOMS Extension object */
192  void *next; } GRSTx509Cert;
193 
194 #define GRST_CERT_BAD_FORMAT 1
195 #define GRST_CERT_BAD_CHAIN 2
196 #define GRST_CERT_BAD_SIG 4
197 #define GRST_CERT_BAD_TIME 8
198 #define GRST_CERT_BAD_OCSP 16
199 
200 #define GRST_CERT_TYPE_CA 1
201 #define GRST_CERT_TYPE_EEC 2
202 #define GRST_CERT_TYPE_PROXY 3
203 #define GRST_CERT_TYPE_VOMS 4
204 #define GRST_CERT_TYPE_ROBOT 5
205 
206 /* a chain of certs, starting from the first CA */
207 typedef struct { GRSTx509Cert *firstcert; } GRSTx509Chain;
208 
209 #ifndef GRST_NO_OPENSSL
211 int GRSTx509ChainLoad(GRSTx509Chain **chain,
212  STACK_OF(X509) *certstack, X509 *lastcert,
213  char *capath, char *vomsdir);
214 int GRSTx509ChainLoadCheck(GRSTx509Chain **, STACK_OF(X509) *, X509 *, char *, char *);
215 #endif
217 
218 #define GRST_HTTP_PORT 777
219 #define GRST_HTTPS_PORT 488
220 #define GRST_HTCP_PORT 777
221 #define GRST_GSIFTP_PORT 2811
222 
223 #define GRSThtcpNOPop 0
224 #define GRSThtcpTSTop 1
225 
226 typedef struct { unsigned char length_msb;
227  unsigned char length_lsb;
228  char text[1]; } GRSThtcpCountstr;
229 
230 #define GRSThtcpCountstrLen(string) (256*((string)->length_msb) + (string)->length_lsb)
231 
232 typedef struct { unsigned char total_length_msb;
233  unsigned char total_length_lsb;
234  unsigned char version_msb;
235  unsigned char version_lsb;
236  unsigned char data_length_msb;
237  unsigned char data_length_lsb;
238  unsigned int response : 4;
239  unsigned int opcode : 4;
240  unsigned int rr : 1;
241  unsigned int f1 : 1;
242  unsigned int reserved : 6;
243  unsigned int trans_id; /* must be 4 bytes */
251 
252 int GRSTgaclInit(void);
253 
254 __attribute__ ((deprecated))
256 
257 GRSTgaclCred *GRSTgaclCredCreate(char *, char *);
258 
259 __attribute__ ((deprecated))
260 int GRSTgaclCredAddValue(GRSTgaclCred *, char *, char *);
261 
262 #define GRSTgaclCredGetAuri(cred) ((cred)->auri)
263 
264 #define GRSTgaclCredSetNotBefore(cred, time) ((cred)->notbefore = (time))
265 #define GRSTgaclCredGetNotBefore(cred) ((cred)->notbefore)
266 
267 #define GRSTgaclCredSetNotAfter(cred, time) ((cred)->notafter = (time))
268 #define GRSTgaclCredGetNotAfter(cred) ((cred)->notafter)
269 
270 #define GRSTgaclCredSetDelegation(cred, level) ((cred)->delegation = (level))
271 #define GRSTgaclCredGetDelegation(cred) ((cred)->delegation)
272 
273 #define GRSTgaclCredSetNistLoa(cred, level) ((cred)->nist_loa = (level))
274 #define GRSTgaclCredGetNistLoa(cred) ((cred)->nist_loa)
275 
276 /* #define GACLfreeCred(x) GRSTgaclCredFree((x)) */
278 
279 /* #define GACLaddCred(x,y) GRSTgaclEntryAddCred((x),(y)) */
281 
282 /* #define GACLdelCred(x,y) GRSTgaclEntryDelCred((x),(y)) */
284 
285 /* #define GACLprintCred(x,y) GRSTgaclCredPrint((x),(y)) */
287 
289 
290 /* #define GACLnewEntry(x) GRSTgaclEntryNew((x)) */
292 
293 /* #define GACLfreeEntry(x) GRSTgaclEntryFree((x)) */
295 
296 /* #define GACLaddEntry(x,y) GRSTgaclAclAddEntry((x),(y)) */
298 
299 /* #define GACLprintEntry(x,y) GRSTgaclEntryPrint((x),(y)) */
300 int GRSTgaclEntryPrint(GRSTgaclEntry *, FILE *);
301 
302 
303 /* #define GACLprintPerm(x,y) GRSTgaclPermPrint((x),(y)) */
304 int GRSTgaclPermPrint(GRSTgaclPerm, FILE *);
305 
306 /* #define GACLallowPerm(x,y) GRSTgaclEntryAllowPerm((x),(y)) */
308 
309 /* #define GACLunallowPerm(x,y) GRSTgaclEntryUnallowPerm((x),(y)) */
311 
312 /* #define GACLdenyPerm(x,y) GRSTgaclEntryDenyPerm((x),(y)) */
314 
315 /* #define GACLundenyPerm(x,y) GRSTgaclEntryUndenyPerm((x),(y)) */
317 
318 /* #define GACLpermToChar(x) GRSTgaclPermToChar((x)) */
320 
321 /* #define GACLcharToPerm(x) GRSTgaclPermFromChar((x)) */
323 
324 /* #define GACLnewAcl(x) GRSTgaclAclNew((x)) */
326 
327 /* #define GACLfreeAcl(x) GRSTgaclAclFree((x)) */
329 
330 /* #define GACLprintAcl(x,y) GRSTgaclAclPrint((x),(y)) */
331 int GRSTgaclAclPrint(GRSTgaclAcl *, FILE *);
332 
333 /* #define GACLsaveAcl(x,y) GRSTgaclAclSave((y),(x)) */
334 int GRSTgaclAclSave(GRSTgaclAcl *, char *);
335 
336 /* #define GACLloadAcl(x) GRSTgaclFileLoadAcl((x)) */
338 
339 /* #define GACLfindAclForFile(x) GRSTgaclFileFindAclname((x)) */
340 char *GRSTgaclFileFindAclname(char *);
341 
342 /* #define GACLloadAclForFile(x) GRSTgaclFileLoadAcl((x)) */
344 
345 /* #define GACLisAclFile(x) GRSTgaclFileIsAcl((x)) */
346 int GRSTgaclFileIsAcl(char *);
347 
348 
349 /* #define GACLnewUser(x) GRSTgaclUserNew((x)) */
351 
352 /* #define GACLfreeUser(x) GRSTgaclUserFree((x)) */
354 
355 /* #define GACLuserAddCred(x,y) GRSTgaclUserAddCred((x),(y)) */
357 
358 /* #define GACLuserHasCred(x,y) GRSTgaclUserHasCred((x),(y)) */
360 
361 __attribute__ ((deprecated))
362 int GRSTgaclUserSetDNlists(GRSTgaclUser *, char *);
363 
365 
366 /* #define GACLuserFindCredType(x,y) GRSTgaclUserFindCredtype((x),(y)) */
368 
369 __attribute__ ((deprecated))
370 int GRSTgaclDNlistHasUser(char *, GRSTgaclUser *);
371 
372 int GRSTgaclUserHasAURI(GRSTgaclUser *, char *);
373 
374 /* #define GACLtestUserAcl(x,y) GRSTgaclAclTestUser((x),(y)) */
376 
377 /* #define GACLtestExclAcl(x,y) GRSTgaclAclTestexclUser((x),(y)) */
379 
380 char *GRSThttpUrlDecode(char *);
381 
382 /* #define GACLurlEncode(x) GRSThttpUrlEncode((x)) */
383 char *GRSThttpUrlEncode(char *);
384 
385 /* #define GACLmildUrlEncode(x) GRSThttpMildUrlEncode((x)) */
386 char *GRSThttpUrlMildencode(char *);
387 
388 int GRSTx509NameCmp(char *, char *);
389 
390 #ifndef GRST_NO_OPENSSL
391 int GRSTx509KnownCriticalExts(X509 *);
392 
393 int GRSTx509IsCA(X509 *);
394 int GRSTx509CheckChain(int *, X509_STORE_CTX *);
395 int GRSTx509VerifyCallback(int, X509_STORE_CTX *);
396 
397 __attribute__ ((deprecated))
398 int GRSTx509GetVomsCreds(int *, int, size_t, char *, X509 *, STACK_OF(X509) *, char *);
399 
400 __attribute__ ((deprecated))
402 
403 __attribute__ ((deprecated))
404 int GRSTx509CompactCreds(int *, int, size_t, char *, STACK_OF(X509) *, char *, X509 *);
405 #endif
406 
407 char *GRSTx509CachedProxyFind(char *, char *, char *);
408 char *GRSTx509FindProxyFileName(void);
409 int GRSTx509MakeProxyCert(char **, FILE *, char *, char *, char *, int);
410 #ifndef GRST_NO_OPENSSL
411 char *GRSTx509CachedProxyKeyFind(char *, char *, char *, STACK_OF(X509) *);
412 #endif
413 int GRSTx509ProxyDestroy(char *, char *, char *);
414 int GRSTx509ProxyGetTimes(char *, char *, char *, time_t *, time_t *);
415 /*use GRSTx509CreateProxyRequestKS instead*/
416 int GRSTx509CreateProxyRequest(char **, char **, char *);
417 int GRSTx509CreateProxyRequestKS(char **reqtxt, char **keytxt, char *ocspurl, int keysize);
418 /*use GRSTx509MakeProxyRequestKS istead*/
419 int GRSTx509MakeProxyRequest(char **, char *, char *, char *);
420 int GRSTx509MakeProxyRequestKS(char **reqtxt, char *proxydir,
421  char *delegation_id, char *user_dn, int keysize);
422 
423 char *GRSTx509MakeDelegationID(void);
424 
425 #ifndef GRST_NO_OPENSSL
426 int GRSTx509StringToChain(STACK_OF(X509) **, char *);
427 char *GRSTx509MakeProxyFileName(char *, STACK_OF(X509) *);
428 #endif
429 
430 int GRSTx509CacheProxy(char *, char *, char *, char *);
431 int GRST_is_id_safe(const char *);
432 
433 #define GRST_HEADFILE "gridsitehead.txt"
434 #define GRST_FOOTFILE "gridsitefoot.txt"
435 #define GRST_ADMIN_FILE "gridsite-admin.cgi"
436 
437 typedef struct { char *text;
439 
440 typedef struct { size_t size;
443 
445 void GRSThttpPrintf(GRSThttpBody *, char *, ...);
446 int GRSThttpCopy(GRSThttpBody *, char *);
448 int GRSThttpPrintHeaderFooter(GRSThttpBody *, char *, char *);
449 int GRSThttpPrintHeader(GRSThttpBody *, char *);
450 int GRSThttpPrintFooter(GRSThttpBody *, char *);
451 char *GRSThttpGetCGI(char *);
452 
453 time_t GRSTasn1TimeToTimeT(char *, size_t);
454 int GRSTasn1SearchTaglist(struct GRSTasn1TagList taglist[], int, char *);
455 #ifndef GRST_NO_OPENSSL
456 int GRSTasn1ParseDump(BIO *, unsigned char *, long,
457  struct GRSTasn1TagList taglist[], int, int *);
458 #endif
459 int GRSTasn1GetX509Name(char *, int, char *, char *,
460  struct GRSTasn1TagList taglist[], int);
461 
462 int GRSThtcpNOPrequestMake(char **, int *, unsigned int);
463 int GRSThtcpNOPresponseMake(char **, int *, unsigned int);
464 int GRSThtcpTSTrequestMake(char **, int *, unsigned int, char *, char *, char *);
465 int GRSThtcpTSTresponseMake(char **, int *, unsigned int, char *, char *, char *);
466 int GRSThtcpMessageParse(GRSThtcpMessage *, char *, int);
467 
468 #ifndef GRST_PASSCODE_JS
469 //#define __GRST_PASSCODE_JS__
470 #define GRST_PASSCODE_JS "<script type=\"text/javascript\" language=\"Javascript\"><!--\nfunction changeValue(formName){ if( document.forms[formName].passcode.value==\"\" ) document.forms[formName].passcode.value=getCookie(\"GRIDHTTP_PASSCODE\"); return true; } \nfunction getCookie(c_name){ if (document.cookie.length>0) { c_start=document.cookie.indexOf(c_name + \"=\"); if (c_start!=-1) { c_start=c_start + c_name.length+1; c_end=document.cookie.indexOf(\";\",c_start); if (c_end==-1) c_end=document.cookie.length; return unescape(document.cookie.substring(c_start,c_end)); }} return \"\"; } \n -->\n</script>"
471 #endif
472 
473 #ifdef __cplusplus
474 } // extern "C"
475 #endif
476 
477 #endif // HEADER_GRIDSITE_H
GRSTgaclPermFromChar
GRSTgaclPerm GRSTgaclPermFromChar(char *)
Definition: grst_gacl.c:546
GRSTgaclPermToChar
char * GRSTgaclPermToChar(GRSTgaclPerm)
Definition: grst_gacl.c:531
GRSTx509CachedProxyKeyFind
char * GRSTx509CachedProxyKeyFind(char *, char *, char *, STACK_OF(X509) *)
Find a temporary proxy private key file in the proxy cache.
Definition: grst_canl_x509.c:2091
GRSThttpUrlEncode
char * GRSThttpUrlEncode(char *)
Definition: grst_http.c:369
GRSTgaclUserAddCred
int GRSTgaclUserAddCred(GRSTgaclUser *, GRSTgaclCred *)
Definition: grst_gacl.c:959
GRSTx509CheckChain
int GRSTx509CheckChain(int *, X509_STORE_CTX *)
Definition: grst_canl_x509.c:1355
GRSTx509MakeProxyRequestKS
int GRSTx509MakeProxyRequestKS(char **reqtxt, char *proxydir, char *delegation_id, char *user_dn, int keysize)
Definition: grst_canl_x509.c:2338
GRSThttpGetCGI
char * GRSThttpGetCGI(char *)
Definition: grst_http.c:237
GRSTgaclEntryNew
GRSTgaclEntry * GRSTgaclEntryNew(void)
Definition: grst_gacl.c:367
GRSTx509MakeProxyRequest
int GRSTx509MakeProxyRequest(char **, char *, char *, char *)
Create a X.509 request for a GSI proxy and its private key.
Definition: grst_canl_x509.c:2352
GRSThtcpCountstr::length_msb
unsigned char length_msb
Definition: gridsite.h:226
GRSThttpCharsList::next
void * next
Definition: gridsite.h:438
GRSTx509Cert::next
void * next
Definition: gridsite.h:192
GRSTx509Chain
Definition: gridsite.h:207
GRSTgaclCred::next
void * next
Definition: gridsite.h:117
GRSThttpWriteOut
void GRSThttpWriteOut(GRSThttpBody *)
Definition: grst_http.c:150
GRSTx509Cert
Definition: gridsite.h:181
GRSTgaclPermPrint
int GRSTgaclPermPrint(GRSTgaclPerm, FILE *)
Definition: grst_gacl.c:489
GRSTgaclEntryAllowPerm
int GRSTgaclEntryAllowPerm(GRSTgaclEntry *, GRSTgaclPerm)
Definition: grst_gacl.c:503
GRSTgaclCred
Definition: gridsite.h:112
GRSTgaclDNlistHasUser
int GRSTgaclDNlistHasUser(char *listurl, GRSTgaclUser *user)
Definition: grst_gacl.c:1279
GRSTx509CachedProxyFind
char char X509 *char * GRSTx509CachedProxyFind(char *, char *, char *)
Find a proxy file in the proxy cache.
Definition: grst_canl_x509.c:2056
GRSTasn1GetX509Name
int GRSTasn1GetX509Name(char *, int, char *, char *, struct GRSTasn1TagList taglist[], int)
Definition: grst_asn1.c:497
GRSTgaclCredNew
GRSTgaclCred * GRSTgaclCredNew(char *type)
Definition: grst_gacl.c:137
GRSTgaclUserFindCredtype
GRSTgaclCred * GRSTgaclUserFindCredtype(GRSTgaclUser *, char *)
Definition: grst_gacl.c:1046
GRSTgaclUserNew
GRSTgaclUser * GRSTgaclUserNew(GRSTgaclCred *)
Definition: grst_gacl.c:929
GRSTgaclCred::notafter
time_t notafter
Definition: gridsite.h:116
GRSThtcpMessage::total_length_lsb
unsigned char total_length_lsb
Definition: gridsite.h:233
GRSTx509CreateProxyRequest
int GRSTx509CreateProxyRequest(char **, char **, char *)
Create a X.509 request for a GSI proxy and its private key.
Definition: grst_canl_x509.c:2236
GRSTgaclCred::delegation
int delegation
Definition: gridsite.h:113
GRSTx509StringToChain
int GRSTx509StringToChain(STACK_OF(X509) **, char *)
Create a stack of X509 certificate from a PEM-encoded string.
Definition: grst_canl_x509.c:2593
GRSTgaclEntry::allowed
GRSTgaclPerm allowed
Definition: gridsite.h:129
GRSTgaclAcl
Definition: gridsite.h:133
GRSTasn1TagList::start
int start
Definition: gridsite.h:174
GRSTgaclCredCmpAuri
int GRSTgaclCredCmpAuri(GRSTgaclCred *, GRSTgaclCred *)
Definition: grst_gacl.c:342
GRSTx509CreateProxyRequestKS
int GRSTx509CreateProxyRequestKS(char **reqtxt, char **keytxt, char *ocspurl, int keysize)
Definition: grst_canl_x509.c:2225
GRSTasn1TagList::headerlength
int headerlength
Definition: gridsite.h:175
GRSThtcpMessage::data_length_msb
unsigned char data_length_msb
Definition: gridsite.h:236
GRSTgaclEntry::next
void * next
Definition: gridsite.h:131
GRSTgaclUserHasAURI
GRSTgaclUser *int GRSTgaclUserHasAURI(GRSTgaclUser *, char *)
Definition: grst_gacl.c:1284
GRSTgaclCred::auri
char * auri
Definition: gridsite.h:112
GRSThtcpTSTrequestMake
int GRSThtcpTSTrequestMake(char **, int *, unsigned int, char *, char *, char *)
Definition: grst_htcp.c:116
GRSThtcpMessage::version_lsb
unsigned char version_lsb
Definition: gridsite.h:235
GRSTgaclEntryPrint
int GRSTgaclEntryPrint(GRSTgaclEntry *, FILE *)
Definition: grst_gacl.c:449
GRSTgaclEntryUndenyPerm
int GRSTgaclEntryUndenyPerm(GRSTgaclEntry *, GRSTgaclPerm)
Definition: grst_gacl.c:524
GRSTgaclFileIsAcl
int GRSTgaclFileIsAcl(char *)
Definition: grst_gacl.c:835
GRSTgaclEntry
Definition: gridsite.h:128
GRSTgaclUser::firstcred
GRSTgaclCred * firstcred
Definition: gridsite.h:135
GRSTgaclUserHasCred
int GRSTgaclUserHasCred(GRSTgaclUser *, GRSTgaclCred *)
Definition: grst_gacl.c:982
GRSTx509FindProxyFileName
char * GRSTx509FindProxyFileName(void)
Find proxy file name of the current user.
Definition: grst_canl_x509.c:1740
GRSTasn1TimeToTimeT
time_t GRSTasn1TimeToTimeT(char *, size_t)
ASN1 time string (in a char *) to time_t.
Definition: grst_asn1.c:24
GRSTx509Cert::issuer
char * issuer
Definition: gridsite.h:183
GRSTgaclAction
int GRSTgaclAction
Definition: gridsite.h:125
GRSTgaclEntryDenyPerm
int GRSTgaclEntryDenyPerm(GRSTgaclEntry *, GRSTgaclPerm)
Definition: grst_gacl.c:517
GRSThtcpMessage::f1
unsigned int f1
Definition: gridsite.h:241
GRSTasn1ParseDump
int GRSTasn1ParseDump(BIO *, unsigned char *, long, struct GRSTasn1TagList taglist[], int, int *)
Definition: grst_asn1.c:457
GRSTgaclCredCreate
GRSTgaclCred * GRSTgaclCredCreate(char *, char *)
Definition: grst_gacl.c:97
GRSTgaclEntryAddCred
int GRSTgaclEntryAddCred(GRSTgaclEntry *, GRSTgaclCred *)
Definition: grst_gacl.c:267
GRSTgaclCredAddValue
int GRSTgaclCredAddValue(GRSTgaclCred *cred, char *name, char *rawvalue)
Definition: grst_gacl.c:160
GRSThtcpMessage::opcode
unsigned int opcode
Definition: gridsite.h:239
GRSThttpBodyInit
void GRSThttpBodyInit(GRSThttpBody *)
Definition: grst_http.c:53
GRSThtcpMessage
Definition: gridsite.h:232
GRSThttpBody
Definition: gridsite.h:440
GRSTx509ChainLoadCheck
int GRSTx509ChainLoadCheck(GRSTx509Chain **, STACK_OF(X509) *, X509 *, char *, char *)
Check certificate chain for GSI proxy acceptability.
Definition: grst_canl_x509.c:1323
GRSTx509ProxyGetTimes
int GRSTx509ProxyGetTimes(char *, char *, char *, time_t *, time_t *)
Get start and finish validity times of stored GSI proxy file.
Definition: grst_canl_x509.c:2551
GRSTx509Cert::type
int type
Definition: gridsite.h:181
GRSThtcpMessage::total_length_msb
unsigned char total_length_msb
Definition: gridsite.h:232
GRSTx509Cert::notafter
time_t notafter
Definition: gridsite.h:187
GRSThtcpMessage::response
unsigned int response
Definition: gridsite.h:238
GRSTx509IsCA
int GRSTx509IsCA(X509 *)
Check if certificate can be used as a CA to sign standard X509 certs.
Definition: grst_canl_x509.c:299
GRSThtcpMessage::uri
GRSThtcpCountstr * uri
Definition: gridsite.h:245
GRSThttpUrlMildencode
char * GRSThttpUrlMildencode(char *)
Definition: grst_http.c:402
GRSTgaclUser
Definition: gridsite.h:135
GRSTx509Cert::notbefore
time_t notbefore
Definition: gridsite.h:186
GRSThttpUrlDecode
char * GRSThttpUrlDecode(char *)
Definition: grst_http.c:330
GRSTx509MakeProxyFileName
char * GRSTx509MakeProxyFileName(char *, STACK_OF(X509) *)
Return the short file name for the given delegation_id and user_dn.
Definition: grst_canl_x509.c:2692
GRSTx509MakeProxyCert
int GRSTx509MakeProxyCert(char **, FILE *, char *, char *, char *, int)
Make a GSI Proxy chain from a request, certificate and private key.
Definition: grst_canl_x509.c:1768
GRSTx509KnownCriticalExts
int GRSTx509KnownCriticalExts(X509 *)
Check critical extensions.
Definition: grst_canl_x509.c:262
GRSTx509ProxyDestroy
int GRSTx509ProxyDestroy(char *, char *, char *)
Destroy stored GSI proxy files.
Definition: grst_canl_x509.c:2503
GRSTx509GetVomsCreds
int GRSTx509GetVomsCreds(int *lastcred, int maxcreds, size_t credlen, char *creds, X509 *usercert, STACK_OF(X509) *certstack, char *vomsdir)
Get the VOMS attributes in the extensions to the given cert stack.
Definition: grst_canl_x509.c:1538
GRSTgaclPerm
unsigned int GRSTgaclPerm
Definition: gridsite.h:126
GRSTx509ChainFree
int GRSTx509ChainFree(GRSTx509Chain *)
Definition: grst_canl_x509.c:314
GRSTgaclUserLoadDNlists
char *int GRSTgaclUserLoadDNlists(GRSTgaclUser *, char *)
Definition: grst_gacl.c:1185
GRSThtcpMessage::entity_hdrs
GRSThtcpCountstr * entity_hdrs
Definition: gridsite.h:249
GRSThtcpMessage::rr
unsigned int rr
Definition: gridsite.h:240
GRSTgaclFileFindAclname
char * GRSTgaclFileFindAclname(char *)
Definition: grst_gacl.c:848
GRSThttpBody::last
GRSThttpCharsList * last
Definition: gridsite.h:442
GRSTgaclEntry::firstcred
GRSTgaclCred * firstcred
Definition: gridsite.h:128
GRSTgaclNamevalue
GRSTgaclNamevalue
Definition: gridsite.h:123
GRSTgaclAclSave
int GRSTgaclAclSave(GRSTgaclAcl *, char *)
Definition: grst_gacl.c:605
GRSThtcpMessage::version_msb
unsigned char version_msb
Definition: gridsite.h:234
GRSThtcpMessage::resp_hdrs
GRSThtcpCountstr * resp_hdrs
Definition: gridsite.h:248
GRSTgaclCredCredPrint
int GRSTgaclCredCredPrint(GRSTgaclCred *, FILE *)
STACK_OF
char X509 STACK_OF(X509) *
GRSTx509Chain::firstcert
GRSTx509Cert * firstcert
Definition: gridsite.h:207
GRSTgaclUserSetDNlists
int GRSTgaclUserSetDNlists(GRSTgaclUser *user, char *dnlists)
Definition: grst_gacl.c:1076
GRSTgaclEntryDelCred
int GRSTgaclEntryDelCred(GRSTgaclEntry *, GRSTgaclCred *)
Definition: grst_gacl.c:296
GRSTerrorLogFunc
int(* GRSTerrorLogFunc)(char *, int, int, char *,...)
Definition: grst_err.c:40
GRSTgaclEntryFree
int GRSTgaclEntryFree(GRSTgaclEntry *)
Definition: grst_gacl.c:386
GRSTx509CertLoad
int GRSTx509CertLoad(GRSTx509Cert *, X509 *)
GRSThtcpMessage::data_length_lsb
unsigned char data_length_lsb
Definition: gridsite.h:237
GRSThttpBody::first
GRSThttpCharsList * first
Definition: gridsite.h:441
GRSTx509CacheProxy
int GRSTx509CacheProxy(char *, char *, char *, char *)
Store a GSI proxy chain in the proxy cache, along with the private key.
Definition: grst_canl_x509.c:2779
GRSThttpCharsList
Definition: gridsite.h:437
GRSTgaclEntryUnallowPerm
int GRSTgaclEntryUnallowPerm(GRSTgaclEntry *, GRSTgaclPerm)
Definition: grst_gacl.c:510
GRSThtcpNOPresponseMake
int GRSThtcpNOPresponseMake(char **, int *, unsigned int)
Definition: grst_htcp.c:81
GRSTasn1SearchTaglist
int GRSTasn1SearchTaglist(struct GRSTasn1TagList taglist[], int, char *)
Definition: grst_asn1.c:119
GRSThttpPrintHeader
int GRSThttpPrintHeader(GRSThttpBody *, char *)
Definition: grst_http.c:205
GRSTasn1TagList::tag
int tag
Definition: gridsite.h:177
GRSTasn1TagList::length
int length
Definition: gridsite.h:176
GRSTgaclAclTestexclUser
GRSTgaclPerm GRSTgaclAclTestexclUser(GRSTgaclAcl *, GRSTgaclUser *)
Definition: grst_gacl.c:1343
GRSTgaclAclNew
GRSTgaclAcl * GRSTgaclAclNew(void)
Definition: grst_gacl.c:563
GRSTx509Cert::dn
char * dn
Definition: gridsite.h:184
GRSThtcpCountstr::length_lsb
unsigned char length_lsb
Definition: gridsite.h:227
GRSTgaclAclLoadFile
GRSTgaclAcl * GRSTgaclAclLoadFile(char *)
Definition: grst_gacl.c:758
GRSTasn1TagList
Definition: gridsite.h:173
GRSTx509VerifyCallback
int GRSTx509VerifyCallback(int, X509_STORE_CTX *)
Example VerifyCallback routine.
Definition: grst_canl_x509.c:1381
GRSThttpPrintf
void GRSThttpPrintf(GRSThttpBody *, char *,...)
Definition: grst_http.c:58
GRSTx509Cert::value
char * value
Definition: gridsite.h:185
GRSTgaclCredFree
int GRSTgaclCredFree(GRSTgaclCred *)
Definition: grst_gacl.c:223
__attribute__
__attribute__((deprecated)) typedef struct
Definition: gridsite.h:120
GRSTx509CompactToCred
GRSTgaclCred * GRSTx509CompactToCred(char *grst_cred)
Turn a Compact Cred line into a GRSTgaclCred object.
Definition: grst_canl_x509.c:1596
GRSTx509NameCmp
int GRSTx509NameCmp(char *, char *)
Compare X509 Distinguished Name strings.
Definition: grst_canl_x509.c:223
GRSThtcpMessage::version
GRSThtcpCountstr * version
Definition: gridsite.h:246
GRSThtcpMessage::cache_hdrs
GRSThtcpCountstr * cache_hdrs
Definition: gridsite.h:250
GRSThtcpMessage::req_hdrs
GRSThtcpCountstr * req_hdrs
Definition: gridsite.h:247
GRSTgaclInit
int GRSTgaclInit(void)
Definition: grst_gacl.c:77
GRSThttpCopy
int GRSThttpCopy(GRSThttpBody *, char *)
Definition: grst_http.c:95
GRSThttpCharsList::text
char * text
Definition: gridsite.h:437
GRSThtcpMessageParse
int GRSThtcpMessageParse(GRSThtcpMessage *, char *, int)
Definition: grst_htcp.c:233
GRSTgaclAclTestUser
GRSTgaclPerm GRSTgaclAclTestUser(GRSTgaclAcl *, GRSTgaclUser *)
Definition: grst_gacl.c:1298
GRSTgaclAcl::firstentry
GRSTgaclEntry * firstentry
Definition: gridsite.h:133
GRSThtcpCountstr
Definition: gridsite.h:226
GRSTgaclAclPrint
int GRSTgaclAclPrint(GRSTgaclAcl *, FILE *)
Definition: grst_gacl.c:591
GRSTgaclEntry::denied
GRSTgaclPerm denied
Definition: gridsite.h:130
GRSThttpPrintFooter
int GRSThttpPrintFooter(GRSThttpBody *, char *)
Definition: grst_http.c:221
GRSThtcpTSTresponseMake
int GRSThtcpTSTresponseMake(char **, int *, unsigned int, char *, char *, char *)
Definition: grst_htcp.c:165
GRSThtcpMessage::reserved
unsigned int reserved
Definition: gridsite.h:242
GRSTgaclAclAddEntry
int GRSTgaclAclAddEntry(GRSTgaclAcl *, GRSTgaclEntry *)
Definition: grst_gacl.c:433
GRSTx509CompactCreds
int GRSTx509CompactCreds(int *lastcred, int maxcreds, size_t credlen, char *creds, STACK_OF(X509) *certstack, char *vomsdir, X509 *peercert)
Get the credentials in an X509 cert/GSI proxy, including any VOMS.
Definition: grst_canl_x509.c:1657
GRSTasn1TagList::treecoords
char treecoords[GRST_ASN1_MAXCOORDLEN+1]
Definition: gridsite.h:173
GRSThtcpMessage::trans_id
unsigned int trans_id
Definition: gridsite.h:243
GRSTgaclUserFree
int GRSTgaclUserFree(GRSTgaclUser *)
Definition: grst_gacl.c:946
GRSTgaclCred::nist_loa
int nist_loa
Definition: gridsite.h:114
GRSTx509Cert::raw
void * raw
Definition: gridsite.h:191
GRSThttpBody::size
size_t size
Definition: gridsite.h:440
GRSTgaclAclFree
int GRSTgaclAclFree(GRSTgaclAcl *)
Definition: grst_gacl.c:579
GRSThttpPrintHeaderFooter
int GRSThttpPrintHeaderFooter(GRSThttpBody *, char *, char *)
Definition: grst_http.c:168
GRSThtcpNOPrequestMake
int GRSThtcpNOPrequestMake(char **, int *, unsigned int)
Definition: grst_htcp.c:47
GRSTx509ChainLoad
int GRSTx509ChainLoad(GRSTx509Chain **chain, STACK_OF(X509) *certstack, X509 *lastcert, char *capath, char *vomsdir)
Definition: grst_canl_x509.c:1015
GRSThtcpMessage::method
GRSThtcpCountstr * method
Definition: gridsite.h:244
GRSTx509Cert::errors
int errors
Definition: gridsite.h:182
GRSTgaclCred::notbefore
time_t notbefore
Definition: gridsite.h:115
GRSTgaclAclLoadforFile
GRSTgaclAcl * GRSTgaclAclLoadforFile(char *)
Definition: grst_gacl.c:906
GRSTx509MakeDelegationID
char * GRSTx509MakeDelegationID(void)
Returns a Delegation ID based on hash of GRST_CRED_0, ...
Definition: grst_canl_x509.c:2643
GRSTx509Cert::ocsp
char * ocsp
Definition: gridsite.h:190
GRST_is_id_safe
int GRST_is_id_safe(const char *)
Definition: grst_canl_x509.c:2876
int
int
Definition: gridsite.h:398
GRSTx509Cert::delegation
int delegation
Definition: gridsite.h:188