gridsite.h
Go to the documentation of this file.
1 /*
2  Copyright (c) 2002-10, Andrew McNab, University of Manchester
3  All rights reserved.
4 
5  Redistribution and use in source and binary forms, with or
6  without modification, are permitted provided that the following
7  conditions are met:
8 
9  o Redistributions of source code must retain the above
10  copyright notice, this list of conditions and the following
11  disclaimer.
12  o Redistributions in binary form must reproduce the above
13  copyright notice, this list of conditions and the following
14  disclaimer in the documentation and/or other materials
15  provided with the distribution.
16 
17  THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND
18  CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES,
19  INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
20  MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
21  DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS
22  BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
23  EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED
24  TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
25  DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
26  ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
27  OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
28  OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
29  POSSIBILITY OF SUCH DAMAGE.
30 */
31 
32 /*---------------------------------------------------------------*
33  * For more about GridSite: http://www.gridsite.org/ *
34  *---------------------------------------------------------------*/
35 
36 #ifndef HEADER_GRIDSITE_H
37 #define HEADER_GRIDSITE_H
38 
39 #ifndef GRST_VERSION
40 #define GRST_VERSION 010500
41 #endif
42 
43 #ifdef __cplusplus
44 extern "C" {
45 #endif
46 
47 #ifndef GRST_NO_OPENSSL
48 
49 #ifndef HEADER_SSL_H
50 #include <openssl/ssl.h>
51 #endif
52 
53 #ifndef HEADER_CRYPTO_H
54 #include <openssl/crypto.h>
55 #endif
56 
57 #endif
58 
59 #ifndef _TIME_H
60 #include <time.h>
61 #endif
62 
63 #ifndef _STDIO_H
64 #include <stdio.h>
65 #endif
66 
67 #ifndef _STDINT_H
68 #include <stdint.h>
69 #endif
70 
71 #ifndef FALSE
72 #define FALSE (0)
73 #endif
74 #ifndef TRUE
75 #define TRUE (!FALSE)
76 #endif
77 
78 // Everything ok (= OpenSSL X509_V_OK)
79 #define GRST_RET_OK 0
80 
81 // Failed for unspecified reason
82 #define GRST_RET_FAILED 1000
83 
84 // Failed to find certificate in some cert store / directory
85 #define GRST_RET_CERT_NOT_FOUND 1001
86 
87 // Bad signature
88 #define GRST_RET_BAD_SIGNATURE 1002
89 
90 // No such file or directory
91 #define GRST_RET_NO_SUCH_FILE 1003
92 
93 /* We use && now rather than if so this macro can be used inside if...else
94  but that means the function must return an int rather than be void */
95 #define GRSTerrorLog(GRSTerrorLevel, ...) ((GRSTerrorLogFunc != NULL) && ((GRSTerrorLogFunc)(__FILE__, __LINE__, GRSTerrorLevel, __VA_ARGS__)))
96 
97 extern int (*GRSTerrorLogFunc)(char *, int, int, char *, ...);
98 
99 /* these levels are the same as Unix syslog() and Apache ap_log_error() */
100 
101 #define GRST_LOG_EMERG 0
102 #define GRST_LOG_ALERT 1
103 #define GRST_LOG_CRIT 2
104 #define GRST_LOG_ERR 3
105 #define GRST_LOG_WARNING 4
106 #define GRST_LOG_NOTICE 5
107 #define GRST_LOG_INFO 6
108 #define GRST_LOG_DEBUG 7
109 
110 #define GRST_MAX_TIME_T INT32_MAX
111 
112 typedef struct { char *auri;
114  int nist_loa;
115  time_t notbefore;
116  time_t notafter;
117  void *next; } GRSTgaclCred;
118 
119 /* used by pre-AURI GRSTgaclCred structs */
120 __attribute__ ((deprecated))
121 typedef struct { char *name;
122  char *value;
123  void *next; } GRSTgaclNamevalue;
124 
125 typedef int GRSTgaclAction;
126 typedef unsigned int GRSTgaclPerm;
127 
128 typedef struct { GRSTgaclCred *firstcred;
129  GRSTgaclPerm allowed;
130  GRSTgaclPerm denied;
131  void *next; } GRSTgaclEntry;
132 
133 typedef struct { GRSTgaclEntry *firstentry; } GRSTgaclAcl;
134 
135 typedef struct { GRSTgaclCred *firstcred; char *dnlists; } GRSTgaclUser;
136 
137 #define GRST_PERM_NONE 0
138 #define GRST_PERM_READ 1
139 #define GRST_PERM_EXEC 2
140 #define GRST_PERM_LIST 4
141 #define GRST_PERM_WRITE 8
142 #define GRST_PERM_ADMIN 16
143 #define GRST_PERM_ALL 31
144 
145 /* DO NOT USE PermIsNone!! */
146 #define GRSTgaclPermIsNone(perm) ((perm) == 0)
147 
148 #define GRSTgaclPermHasNone(perm) ((perm) == 0)
149 #define GRSTgaclPermHasRead(perm) (((perm) & GRST_PERM_READ ) != 0)
150 #define GRSTgaclPermHasExec(perm) (((perm) & GRST_PERM_EXEC ) != 0)
151 #define GRSTgaclPermHasList(perm) (((perm) & GRST_PERM_LIST ) != 0)
152 #define GRSTgaclPermHasWrite(perm) (((perm) & GRST_PERM_WRITE) != 0)
153 #define GRSTgaclPermHasAdmin(perm) (((perm) & GRST_PERM_ADMIN) != 0)
154 
155 #define GRST_ACTION_ALLOW 0
156 #define GRST_ACTION_DENY 1
157 
158 #define GRST_HIST_PREFIX ".grsthist"
159 #define GRST_ACL_FILE ".gacl"
160 #define GRST_DN_LISTS "/etc/grid-security/dn-lists"
161 #define GRST_RECURS_LIMIT 9
162 
163 #define GRST_PROXYCERTINFO_OLD_OID "1.3.6.1.4.1.3536.1.222"
164 #define GRST_PROXYCERTINFO_OID "1.3.6.1.5.5.7.1.14"
165 #define GRST_VOMS_OID "1.3.6.1.4.1.8005.100.100.5"
166 #define GRST_VOMS_PK_CERT_LIST_OID "1.3.6.1.4.1.8005.100.100.10"
167 #define GRST_VOMS_DIR "/etc/grid-security/vomsdir"
168 #define GRST_KEYUSAGE_OID "2.5.29.15"
169 
170 #define GRST_ASN1_MAXCOORDLEN 50
171 #define GRST_ASN1_MAXTAGS 500
172 
173 struct GRSTasn1TagList { char treecoords[GRST_ASN1_MAXCOORDLEN+1];
174  int start;
176  int length;
177  int tag; } ;
178 
179 #define GRST_X509_SERIAL_DIGITS 49
180 
181 typedef struct { int type; /* CA, user, proxy, VOMS, ... */
182  int errors; /* unchecked, bad sig, bad time */
183  char *issuer; /* Cert CA DN, EEC of PC, or VOMS DN */
184  char *dn; /* Cert DN, or VOMS AC holder DN */
185  char *value; /* VOMS FQAN or NULL */
186  time_t notbefore;
187  time_t notafter;
188  int delegation; /* relative to END of any chain */
189  char serial[GRST_X509_SERIAL_DIGITS+1];
190  char *ocsp; /* accessLocation field */
191  void *raw; /* X509 or VOMS Extension object */
192  void *next; } GRSTx509Cert;
193 
194 #define GRST_CERT_BAD_FORMAT 1
195 #define GRST_CERT_BAD_CHAIN 2
196 #define GRST_CERT_BAD_SIG 4
197 #define GRST_CERT_BAD_TIME 8
198 #define GRST_CERT_BAD_OCSP 16
199 
200 #define GRST_CERT_TYPE_CA 1
201 #define GRST_CERT_TYPE_EEC 2
202 #define GRST_CERT_TYPE_PROXY 3
203 #define GRST_CERT_TYPE_VOMS 4
204 
205 /* a chain of certs, starting from the first CA */
206 typedef struct { GRSTx509Cert *firstcert; } GRSTx509Chain;
207 
208 #ifndef GRST_NO_OPENSSL
209 int GRSTx509CertLoad(GRSTx509Cert *, X509 *);
210 int GRSTx509ChainLoad(GRSTx509Chain **chain,
211  STACK_OF(X509) *certstack, X509 *lastcert,
212  char *capath, char *vomsdir);
213 int GRSTx509ChainLoadCheck(GRSTx509Chain **, STACK_OF(X509) *, X509 *, char *, char *);
214 #endif
216 
217 #define GRST_HTTP_PORT 777
218 #define GRST_HTTPS_PORT 488
219 #define GRST_HTCP_PORT 777
220 #define GRST_GSIFTP_PORT 2811
221 
222 #define GRSThtcpNOPop 0
223 #define GRSThtcpTSTop 1
224 
225 typedef struct { unsigned char length_msb;
226  unsigned char length_lsb;
227  char text[1]; } GRSThtcpCountstr;
228 
229 #define GRSThtcpCountstrLen(string) (256*((string)->length_msb) + (string)->length_lsb)
230 
231 typedef struct { unsigned char total_length_msb;
232  unsigned char total_length_lsb;
233  unsigned char version_msb;
234  unsigned char version_lsb;
235  unsigned char data_length_msb;
236  unsigned char data_length_lsb;
237  unsigned int response : 4;
238  unsigned int opcode : 4;
239  unsigned int rr : 1;
240  unsigned int f1 : 1;
241  unsigned int reserved : 6;
242  unsigned int trans_id; /* must be 4 bytes */
250 
251 int GRSTgaclInit(void);
252 
253 __attribute__ ((deprecated))
255 
256 GRSTgaclCred *GRSTgaclCredCreate(char *, char *);
257 
258 __attribute__ ((deprecated))
259 int GRSTgaclCredAddValue(GRSTgaclCred *, char *, char *);
260 
261 #define GRSTgaclCredGetAuri(cred) ((cred)->auri)
262 
263 #define GRSTgaclCredSetNotBefore(cred, time) ((cred)->notbefore = (time))
264 #define GRSTgaclCredGetNotBefore(cred) ((cred)->notbefore)
265 
266 #define GRSTgaclCredSetNotAfter(cred, time) ((cred)->notafter = (time))
267 #define GRSTgaclCredGetNotAfter(cred) ((cred)->notafter)
268 
269 #define GRSTgaclCredSetDelegation(cred, level) ((cred)->delegation = (level))
270 #define GRSTgaclCredGetDelegation(cred) ((cred)->delegation)
271 
272 #define GRSTgaclCredSetNistLoa(cred, level) ((cred)->nist_loa = (level))
273 #define GRSTgaclCredGetNistLoa(cred) ((cred)->nist_loa)
274 
275 /* #define GACLfreeCred(x) GRSTgaclCredFree((x)) */
276 int GRSTgaclCredFree(GRSTgaclCred *);
277 
278 /* #define GACLaddCred(x,y) GRSTgaclEntryAddCred((x),(y)) */
279 int GRSTgaclEntryAddCred(GRSTgaclEntry *, GRSTgaclCred *);
280 
281 /* #define GACLdelCred(x,y) GRSTgaclEntryDelCred((x),(y)) */
282 int GRSTgaclEntryDelCred(GRSTgaclEntry *, GRSTgaclCred *);
283 
284 /* #define GACLprintCred(x,y) GRSTgaclCredPrint((x),(y)) */
285 int GRSTgaclCredCredPrint(GRSTgaclCred *, FILE *);
286 
287 int GRSTgaclCredCmpAuri(GRSTgaclCred *, GRSTgaclCred *);
288 
289 /* #define GACLnewEntry(x) GRSTgaclEntryNew((x)) */
291 
292 /* #define GACLfreeEntry(x) GRSTgaclEntryFree((x)) */
294 
295 /* #define GACLaddEntry(x,y) GRSTgaclAclAddEntry((x),(y)) */
297 
298 /* #define GACLprintEntry(x,y) GRSTgaclEntryPrint((x),(y)) */
299 int GRSTgaclEntryPrint(GRSTgaclEntry *, FILE *);
300 
301 
302 /* #define GACLprintPerm(x,y) GRSTgaclPermPrint((x),(y)) */
303 int GRSTgaclPermPrint(GRSTgaclPerm, FILE *);
304 
305 /* #define GACLallowPerm(x,y) GRSTgaclEntryAllowPerm((x),(y)) */
306 int GRSTgaclEntryAllowPerm(GRSTgaclEntry *, GRSTgaclPerm);
307 
308 /* #define GACLunallowPerm(x,y) GRSTgaclEntryUnallowPerm((x),(y)) */
309 int GRSTgaclEntryUnallowPerm(GRSTgaclEntry *, GRSTgaclPerm);
310 
311 /* #define GACLdenyPerm(x,y) GRSTgaclEntryDenyPerm((x),(y)) */
312 int GRSTgaclEntryDenyPerm(GRSTgaclEntry *, GRSTgaclPerm);
313 
314 /* #define GACLundenyPerm(x,y) GRSTgaclEntryUndenyPerm((x),(y)) */
315 int GRSTgaclEntryUndenyPerm(GRSTgaclEntry *, GRSTgaclPerm);
316 
317 /* #define GACLpermToChar(x) GRSTgaclPermToChar((x)) */
318 char *GRSTgaclPermToChar(GRSTgaclPerm);
319 
320 /* #define GACLcharToPerm(x) GRSTgaclPermFromChar((x)) */
321 GRSTgaclPerm GRSTgaclPermFromChar(char *);
322 
323 /* #define GACLnewAcl(x) GRSTgaclAclNew((x)) */
325 
326 /* #define GACLfreeAcl(x) GRSTgaclAclFree((x)) */
328 
329 /* #define GACLprintAcl(x,y) GRSTgaclAclPrint((x),(y)) */
330 int GRSTgaclAclPrint(GRSTgaclAcl *, FILE *);
331 
332 /* #define GACLsaveAcl(x,y) GRSTgaclAclSave((y),(x)) */
333 int GRSTgaclAclSave(GRSTgaclAcl *, char *);
334 
335 /* #define GACLloadAcl(x) GRSTgaclFileLoadAcl((x)) */
337 
338 /* #define GACLfindAclForFile(x) GRSTgaclFileFindAclname((x)) */
339 char *GRSTgaclFileFindAclname(char *);
340 
341 /* #define GACLloadAclForFile(x) GRSTgaclFileLoadAcl((x)) */
343 
344 /* #define GACLisAclFile(x) GRSTgaclFileIsAcl((x)) */
345 int GRSTgaclFileIsAcl(char *);
346 
347 
348 /* #define GACLnewUser(x) GRSTgaclUserNew((x)) */
349 GRSTgaclUser *GRSTgaclUserNew(GRSTgaclCred *);
350 
351 /* #define GACLfreeUser(x) GRSTgaclUserFree((x)) */
353 
354 /* #define GACLuserAddCred(x,y) GRSTgaclUserAddCred((x),(y)) */
355 int GRSTgaclUserAddCred(GRSTgaclUser *, GRSTgaclCred *);
356 
357 /* #define GACLuserHasCred(x,y) GRSTgaclUserHasCred((x),(y)) */
358 int GRSTgaclUserHasCred(GRSTgaclUser *, GRSTgaclCred *);
359 
360 __attribute__ ((deprecated))
361 int GRSTgaclUserSetDNlists(GRSTgaclUser *, char *);
362 
363 int GRSTgaclUserLoadDNlists(GRSTgaclUser *, char *);
364 
365 /* #define GACLuserFindCredType(x,y) GRSTgaclUserFindCredtype((x),(y)) */
366 GRSTgaclCred *GRSTgaclUserFindCredtype(GRSTgaclUser *, char *);
367 
368 __attribute__ ((deprecated))
369 int GRSTgaclDNlistHasUser(char *, GRSTgaclUser *);
370 
371 int GRSTgaclUserHasAURI(GRSTgaclUser *, char *);
372 
373 /* #define GACLtestUserAcl(x,y) GRSTgaclAclTestUser((x),(y)) */
374 GRSTgaclPerm GRSTgaclAclTestUser(GRSTgaclAcl *, GRSTgaclUser *);
375 
376 /* #define GACLtestExclAcl(x,y) GRSTgaclAclTestexclUser((x),(y)) */
377 GRSTgaclPerm GRSTgaclAclTestexclUser(GRSTgaclAcl *, GRSTgaclUser *);
378 
379 char *GRSThttpUrlDecode(char *);
380 
381 /* #define GACLurlEncode(x) GRSThttpUrlEncode((x)) */
382 char *GRSThttpUrlEncode(char *);
383 
384 /* #define GACLmildUrlEncode(x) GRSThttpMildUrlEncode((x)) */
385 char *GRSThttpUrlMildencode(char *);
386 
387 int GRSTx509NameCmp(char *, char *);
388 
389 #ifndef GRST_NO_OPENSSL
390 int GRSTx509KnownCriticalExts(X509 *);
391 
392 int GRSTx509IsCA(X509 *);
393 int GRSTx509CheckChain(int *, X509_STORE_CTX *);
394 int GRSTx509VerifyCallback(int, X509_STORE_CTX *);
395 
396 __attribute__ ((deprecated))
397 int GRSTx509GetVomsCreds(int *, int, size_t, char *, X509 *, STACK_OF(X509) *, char *);
398 
399 __attribute__ ((deprecated))
400 GRSTgaclCred *GRSTx509CompactToCred(char *);
401 
402 __attribute__ ((deprecated))
403 int GRSTx509CompactCreds(int *, int, size_t, char *, STACK_OF(X509) *, char *, X509 *);
404 #endif
405 
406 char *GRSTx509CachedProxyFind(char *, char *, char *);
407 char *GRSTx509FindProxyFileName(void);
408 int GRSTx509MakeProxyCert(char **, FILE *, char *, char *, char *, int);
409 char *GRSTx509CachedProxyKeyFind(char *, char *, char *);
410 int GRSTx509ProxyDestroy(char *, char *, char *);
411 int GRSTx509ProxyGetTimes(char *, char *, char *, time_t *, time_t *);
412 /*use GRSTx509CreateProxyRequestKS instead*/
413 int GRSTx509CreateProxyRequest(char **, char **, char *);
414 int GRSTx509CreateProxyRequestKS(char **reqtxt, char **keytxt, char *ocspurl, int keysize);
415 /*use GRSTx509MakeProxyRequestKS istead*/
416 int GRSTx509MakeProxyRequest(char **, char *, char *, char *);
417 int GRSTx509MakeProxyRequestKS(char **reqtxt, char *proxydir,
418  char *delegation_id, char *user_dn, int keysize);
419 
420 char *GRSTx509MakeDelegationID(void);
421 
422 #ifndef GRST_NO_OPENSSL
423 int GRSTx509StringToChain(STACK_OF(X509) **, char *);
424 char *GRSTx509MakeProxyFileName(char *, STACK_OF(X509) *);
425 #endif
426 
427 int GRSTx509CacheProxy(char *, char *, char *, char *);
428 int GRST_is_id_safe(const char *);
429 
430 #define GRST_HEADFILE "gridsitehead.txt"
431 #define GRST_FOOTFILE "gridsitefoot.txt"
432 #define GRST_ADMIN_FILE "gridsite-admin.cgi"
433 
434 typedef struct { char *text;
436 
437 typedef struct { size_t size;
440 
442 void GRSThttpPrintf(GRSThttpBody *, char *, ...);
443 int GRSThttpCopy(GRSThttpBody *, char *);
445 int GRSThttpPrintHeaderFooter(GRSThttpBody *, char *, char *);
446 int GRSThttpPrintHeader(GRSThttpBody *, char *);
447 int GRSThttpPrintFooter(GRSThttpBody *, char *);
448 char *GRSThttpGetCGI(char *);
449 
450 time_t GRSTasn1TimeToTimeT(char *, size_t);
451 int GRSTasn1SearchTaglist(struct GRSTasn1TagList taglist[], int, char *);
452 #ifndef GRST_NO_OPENSSL
453 int GRSTasn1ParseDump(BIO *, unsigned char *, long,
454  struct GRSTasn1TagList taglist[], int, int *);
455 #endif
456 int GRSTasn1GetX509Name(char *, int, char *, char *,
457  struct GRSTasn1TagList taglist[], int);
458 
459 int GRSThtcpNOPrequestMake(char **, int *, unsigned int);
460 int GRSThtcpNOPresponseMake(char **, int *, unsigned int);
461 int GRSThtcpTSTrequestMake(char **, int *, unsigned int, char *, char *, char *);
462 int GRSThtcpTSTresponseMake(char **, int *, unsigned int, char *, char *, char *);
463 int GRSThtcpMessageParse(GRSThtcpMessage *, char *, int);
464 
465 #ifndef GRST_PASSCODE_JS
466 //#define __GRST_PASSCODE_JS__
467 #define GRST_PASSCODE_JS "<script type=\"text/javascript\" language=\"Javascript\"><!--\nfunction changeValue(formName){ if( document.forms[formName].passcode.value==\"\" ) document.forms[formName].passcode.value=getCookie(\"GRIDHTTP_PASSCODE\"); return true; } \nfunction getCookie(c_name){ if (document.cookie.length>0) { c_start=document.cookie.indexOf(c_name + \"=\"); if (c_start!=-1) { c_start=c_start + c_name.length+1; c_end=document.cookie.indexOf(\";\",c_start); if (c_end==-1) c_end=document.cookie.length; return unescape(document.cookie.substring(c_start,c_end)); }} return \"\"; } \n -->\n</script>"
468 #endif
469 
470 #ifdef __cplusplus
471 } // extern "C"
472 #endif
473 
474 #endif // HEADER_GRIDSITE_H
void * next
Definition: gridsite.h:192
time_t notbefore
Definition: gridsite.h:186
int GRSThtcpNOPrequestMake(char **request, int *request_length, unsigned int trans_id)
Definition: grst_htcp.c:47
int headerlength
Definition: gridsite.h:175
int delegation
Definition: gridsite.h:113
GRSTgaclCred * GRSTgaclCredNew(char *type)
Definition: grst_gacl.c:137
void * next
Definition: gridsite.h:131
int GRSTgaclEntryPrint(GRSTgaclEntry *entry, FILE *fp)
Definition: grst_gacl.c:449
int GRSTgaclUserHasCred(GRSTgaclUser *user, GRSTgaclCred *cred)
Definition: grst_gacl.c:982
int GRSThtcpMessageParse(GRSThtcpMessage *parsed, char *raw, int length)
Definition: grst_htcp.c:226
int GRSTx509CompactCreds(int *lastcred, int maxcreds, size_t credlen, char *creds, STACK_OF(X509)*certstack, char *vomsdir, X509 *peercert)
Get the credentials in an X509 cert/GSI proxy, including any VOMS.
Definition: grst_canl_x509.c:1465
GRSTgaclPerm GRSTgaclAclTestUser(GRSTgaclAcl *acl, GRSTgaclUser *user)
Definition: grst_gacl.c:1298
int GRSThtcpTSTrequestMake(char **request, int *request_length, unsigned int trans_id, char *method, char *uri, char *req_hdrs)
Definition: grst_htcp.c:116
void GRSThttpPrintf(GRSThttpBody *thisbody, char *fmt,...)
Definition: grst_http.c:58
int type
Definition: gridsite.h:181
char * GRSTx509FindProxyFileName(void)
Find proxy file name of the current user.
Definition: grst_canl_x509.c:1548
GRSTgaclPerm denied
Definition: gridsite.h:130
int GRSTgaclEntryAllowPerm(GRSTgaclEntry *entry, GRSTgaclPerm perm)
Definition: grst_gacl.c:503
unsigned char total_length_msb
Definition: gridsite.h:231
GRSThtcpCountstr * req_hdrs
Definition: gridsite.h:246
int GRSTgaclEntryFree(GRSTgaclEntry *entry)
Definition: grst_gacl.c:386
unsigned char total_length_lsb
Definition: gridsite.h:232
int GRSTgaclAclSave(GRSTgaclAcl *acl, char *filename)
Definition: grst_gacl.c:605
int GRSTgaclEntryDenyPerm(GRSTgaclEntry *entry, GRSTgaclPerm perm)
Definition: grst_gacl.c:517
int GRSTgaclDNlistHasUser(char *listurl, GRSTgaclUser *user)
Definition: grst_gacl.c:1279
GRSTgaclUser * GRSTgaclUserNew(GRSTgaclCred *cred)
Definition: grst_gacl.c:929
char * GRSThttpGetCGI(char *name)
Definition: grst_http.c:237
GRSTgaclAcl * GRSTgaclAclLoadforFile(char *pathandfile)
Definition: grst_gacl.c:906
int GRSTx509StringToChain(STACK_OF(X509)**certstack, char *certstring)
Create a stack of X509 certificate from a PEM-encoded string.
Definition: grst_canl_x509.c:2305
int GRSTx509ChainLoad(GRSTx509Chain **chain, STACK_OF(X509)*certstack, X509 *lastcert, char *capath, char *vomsdir)
Definition: grst_canl_x509.c:846
int GRSTgaclUserAddCred(GRSTgaclUser *user, GRSTgaclCred *cred)
Definition: grst_gacl.c:959
int GRSTgaclEntryUndenyPerm(GRSTgaclEntry *entry, GRSTgaclPerm perm)
Definition: grst_gacl.c:524
unsigned int GRSTgaclPerm
Definition: gridsite.h:126
unsigned int trans_id
Definition: gridsite.h:242
int GRSTgaclCredCmpAuri(GRSTgaclCred *cred1, GRSTgaclCred *cred2)
Definition: grst_gacl.c:342
int GRSTx509CreateProxyRequestKS(char **reqtxt, char **keytxt, char *ocspurl, int keysize)
Definition: grst_canl_x509.c:1945
unsigned char data_length_msb
Definition: gridsite.h:235
GRSTgaclNamevalue
Definition: gridsite.h:123
GRSTgaclEntry * firstentry
Definition: gridsite.h:133
int GRSTgaclEntryAddCred(GRSTgaclEntry *entry, GRSTgaclCred *cred)
Definition: grst_gacl.c:267
int GRSTx509CheckChain(int *first_non_ca, X509_STORE_CTX *store_ctx)
Definition: grst_canl_x509.c:1168
int
Definition: gridsite.h:397
char * text
Definition: gridsite.h:434
GRSTgaclCred * GRSTx509CompactToCred(char *grst_cred)
Turn a Compact Cred line into a GRSTgaclCred object.
Definition: grst_canl_x509.c:1404
int GRSTx509VerifyCallback(int ok, X509_STORE_CTX *ctx)
Example VerifyCallback routine.
Definition: grst_canl_x509.c:1194
int start
Definition: gridsite.h:174
char * ocsp
Definition: gridsite.h:190
unsigned char version_msb
Definition: gridsite.h:233
char * value
Definition: gridsite.h:185
time_t GRSTasn1TimeToTimeT(char *asn1time, size_t len)
ASN1 time string (in a char *) to time_t.
Definition: grst_asn1.c:24
char * GRSThttpUrlEncode(char *in)
Definition: grst_http.c:369
GRSTgaclAcl * GRSTgaclAclLoadFile(char *filename)
Definition: grst_gacl.c:758
Definition: gridsite.h:133
int GRSTx509GetVomsCreds(int *lastcred, int maxcreds, size_t credlen, char *creds, X509 *usercert, STACK_OF(X509)*certstack, char *vomsdir)
Get the VOMS attributes in the extensions to the given cert stack.
Definition: grst_canl_x509.c:1349
char * GRSTx509MakeProxyFileName(char *delegation_id, STACK_OF(X509)*certstack)
Return the short file name for the given delegation_id and user_dn.
Definition: grst_canl_x509.c:2395
GRSTgaclPerm allowed
Definition: gridsite.h:129
int GRSTx509IsCA(X509 *cert)
Check if certificate can be used as a CA to sign standard X509 certs.
Definition: grst_canl_x509.c:165
int GRSTgaclUserLoadDNlists(GRSTgaclUser *user, char *dnlists)
Definition: grst_gacl.c:1185
Definition: gridsite.h:173
GRSThtcpCountstr * version
Definition: gridsite.h:245
char * GRSTx509CachedProxyFind(char *proxydir, char *delegation_id, char *user_dn)
Find a proxy file in the proxy cache.
Definition: grst_canl_x509.c:1856
Definition: gridsite.h:112
int GRSTgaclFileIsAcl(char *pathandfile)
Definition: grst_gacl.c:835
time_t notafter
Definition: gridsite.h:187
int GRSTgaclEntryUnallowPerm(GRSTgaclEntry *entry, GRSTgaclPerm perm)
Definition: grst_gacl.c:510
int GRSTgaclPermPrint(GRSTgaclPerm perm, FILE *fp)
Definition: grst_gacl.c:489
int GRSTx509CreateProxyRequest(char **reqtxt, char **keytxt, char *ocspurl)
Create a X.509 request for a GSI proxy and its private key.
Definition: grst_canl_x509.c:1956
char * GRSTx509MakeDelegationID(void)
Returns a Delegation ID based on hash of GRST_CRED_0, ...
Definition: grst_canl_x509.c:2355
time_t notbefore
Definition: gridsite.h:115
int GRSTx509MakeProxyCert(char **proxychain, FILE *debugfp, char *reqtxt, char *cert, char *key, int minutes)
Make a GSI Proxy chain from a request, certificate and private key.
Definition: grst_canl_x509.c:1576
void GRSThttpWriteOut(GRSThttpBody *thisbody)
Definition: grst_http.c:150
int tag
Definition: gridsite.h:177
char X509 STACK_OF(X509)*
size_t size
Definition: gridsite.h:437
char * GRSTgaclPermToChar(GRSTgaclPerm perm)
Definition: grst_gacl.c:531
GRSThtcpCountstr * entity_hdrs
Definition: gridsite.h:248
GRSTgaclCred * GRSTgaclCredCreate(char *auri_prefix, char *auri_suffix)
Definition: grst_gacl.c:97
int GRSTx509NameCmp(char *a, char *b)
Compare X509 Distinguished Name strings.
Definition: grst_canl_x509.c:89
char * dn
Definition: gridsite.h:184
int GRSTgaclCredCredPrint(GRSTgaclCred *, FILE *)
int GRSTx509MakeProxyRequest(char **reqtxt, char *proxydir, char *delegation_id, char *user_dn)
Create a X.509 request for a GSI proxy and its private key.
Definition: grst_canl_x509.c:2072
char * GRSThttpUrlMildencode(char *in)
Definition: grst_http.c:402
char * auri
Definition: gridsite.h:112
int length
Definition: gridsite.h:176
int GRSThttpPrintHeaderFooter(GRSThttpBody *bp, char *file, char *headfootname)
Definition: grst_http.c:168
int GRSTx509ChainFree(GRSTx509Chain *chain)
Definition: grst_canl_x509.c:180
int GRSTx509CacheProxy(char *proxydir, char *delegation_id, char *user_dn, char *proxychain)
Store a GSI proxy chain in the proxy cache, along with the private key.
Definition: grst_canl_x509.c:2482
int GRSTgaclUserFree(GRSTgaclUser *user)
Definition: grst_gacl.c:946
GRSThttpCharsList * last
Definition: gridsite.h:439
int GRSTgaclCredAddValue(GRSTgaclCred *cred, char *name, char *rawvalue)
Definition: grst_gacl.c:160
Definition: gridsite.h:135
int delegation
Definition: gridsite.h:188
unsigned char data_length_lsb
Definition: gridsite.h:236
int GRSTx509CertLoad(GRSTx509Cert *, X509 *)
Definition: gridsite.h:437
GRSThttpCharsList * first
Definition: gridsite.h:438
int nist_loa
Definition: gridsite.h:114
unsigned char version_lsb
Definition: gridsite.h:234
Definition: gridsite.h:206
GRSTx509Cert * firstcert
Definition: gridsite.h:206
void * raw
Definition: gridsite.h:191
GRSTgaclPerm GRSTgaclPermFromChar(char *s)
Definition: grst_gacl.c:546
__attribute__((deprecated)) typedef struct
Definition: gridsite.h:120
GRSThtcpCountstr * resp_hdrs
Definition: gridsite.h:247
int(* GRSTerrorLogFunc)(char *, int, int, char *,...)
Definition: grst_err.c:40
char * GRSTx509CachedProxyKeyFind(char *proxydir, char *delegation_id, char *user_dn)
Find a temporary proxy private key file in the proxy cache.
Definition: grst_canl_x509.c:1888
int GRSThttpCopy(GRSThttpBody *thisbody, char *file)
Definition: grst_http.c:95
int GRSTgaclUserHasAURI(GRSTgaclUser *user, char *auri)
Definition: grst_gacl.c:1284
GRSThtcpCountstr * method
Definition: gridsite.h:243
unsigned char length_lsb
Definition: gridsite.h:226
void * next
Definition: gridsite.h:435
int GRSTgaclEntryDelCred(GRSTgaclEntry *entry, GRSTgaclCred *cred)
Definition: grst_gacl.c:296
void * next
Definition: gridsite.h:117
GRSTgaclEntry * GRSTgaclEntryNew(void)
Definition: grst_gacl.c:367
Definition: gridsite.h:128
GRSTgaclAcl * GRSTgaclAclNew(void)
Definition: grst_gacl.c:563
char * GRSTgaclFileFindAclname(char *pathandfile)
Definition: grst_gacl.c:848
int GRSTgaclUserSetDNlists(GRSTgaclUser *user, char *dnlists)
Definition: grst_gacl.c:1076
Definition: gridsite.h:434
int GRSTx509KnownCriticalExts(X509 *cert)
Check critical extensions.
Definition: grst_canl_x509.c:128
int errors
Definition: gridsite.h:182
GRSThtcpCountstr * uri
Definition: gridsite.h:244
GRSThtcpCountstr * cache_hdrs
Definition: gridsite.h:249
int GRSTasn1GetX509Name(char *x509name, int maxlength, char *coords, char *asn1string, struct GRSTasn1TagList taglist[], int lasttag)
Definition: grst_asn1.c:498
time_t notafter
Definition: gridsite.h:116
char treecoords[GRST_ASN1_MAXCOORDLEN+1]
Definition: gridsite.h:173
int GRSTx509MakeProxyRequestKS(char **reqtxt, char *proxydir, char *delegation_id, char *user_dn, int keysize)
Definition: grst_canl_x509.c:2058
int GRSTgaclInit(void)
Definition: grst_gacl.c:77
char * issuer
Definition: gridsite.h:183
int GRSTx509ProxyDestroy(char *proxydir, char *delegation_id, char *user_dn)
Destroy stored GSI proxy files.
Definition: grst_canl_x509.c:2215
int GRST_is_id_safe(const char *str)
Definition: grst_canl_x509.c:2572
Definition: gridsite.h:231
int GRSTgaclAclPrint(GRSTgaclAcl *acl, FILE *fp)
Definition: grst_gacl.c:591
int GRSThtcpTSTresponseMake(char **message, int *message_length, unsigned int trans_id, char *resp_hdrs, char *entity_hdrs, char *cache_hdrs)
Definition: grst_htcp.c:162
Definition: gridsite.h:225
int GRSTgaclAclFree(GRSTgaclAcl *acl)
Definition: grst_gacl.c:579
GRSTgaclCred * GRSTgaclUserFindCredtype(GRSTgaclUser *user, char *type)
Definition: grst_gacl.c:1046
int GRSThttpPrintFooter(GRSThttpBody *bp, char *file)
Definition: grst_http.c:221
int GRSTx509ProxyGetTimes(char *proxydir, char *delegation_id, char *user_dn, time_t *start, time_t *finish)
Get start and finish validity times of stored GSI proxy file.
Definition: grst_canl_x509.c:2263
unsigned char length_msb
Definition: gridsite.h:225
int GRSThtcpNOPresponseMake(char **message, int *message_length, unsigned int trans_id)
Definition: grst_htcp.c:81
int GRSThttpPrintHeader(GRSThttpBody *bp, char *file)
Definition: grst_http.c:205
int GRSTasn1SearchTaglist(struct GRSTasn1TagList taglist[], int lasttag, char *treecoords)
Definition: grst_asn1.c:119
GRSTgaclCred * firstcred
Definition: gridsite.h:128
int GRSTgaclAction
Definition: gridsite.h:125
char * GRSThttpUrlDecode(char *in)
Definition: grst_http.c:330
int GRSTgaclCredFree(GRSTgaclCred *cred)
Definition: grst_gacl.c:223
int GRSTx509ChainLoadCheck(GRSTx509Chain **chain, STACK_OF(X509)*certstack, X509 *lastcert, char *capath, char *vomsdir)
Check certificate chain for GSI proxy acceptability.
Definition: grst_canl_x509.c:1136
GRSTgaclCred * firstcred
Definition: gridsite.h:135
int GRSTasn1ParseDump(BIO *bp, unsigned char *pp, long len, struct GRSTasn1TagList taglist[], int maxtag, int *lasttag)
Definition: grst_asn1.c:458
GRSTgaclPerm GRSTgaclAclTestexclUser(GRSTgaclAcl *acl, GRSTgaclUser *user)
Definition: grst_gacl.c:1343
Definition: gridsite.h:181
int GRSTgaclAclAddEntry(GRSTgaclAcl *acl, GRSTgaclEntry *entry)
Definition: grst_gacl.c:433
void GRSThttpBodyInit(GRSThttpBody *thisbody)
Definition: grst_http.c:53