src/acl/CertificateData.cc

   1 /*
   2  * $Id$
   3  *
   4  * DEBUG: section 28    Access Control
   5  * AUTHOR: Duane Wessels
   6  *
   7  * SQUID Web Proxy Cache          http://www.squid-cache.org/
   8  * ----------------------------------------------------------
   9  *
  10  *  Squid is the result of efforts by numerous individuals from
  11  *  the Internet community; see the CONTRIBUTORS file for full
  12  *  details.   Many organizations have provided support for Squid's
  13  *  development; see the SPONSORS file for full details.  Squid is
  14  *  Copyrighted (C) 2001 by the Regents of the University of
  15  *  California; see the COPYRIGHT file for full details.  Squid
  16  *  incorporates software developed and/or copyrighted by other
  17  *  sources; see the CREDITS file for full details.
  18  *
  19  *  This program is free software; you can redistribute it and/or modify
  20  *  it under the terms of the GNU General Public License as published by
  21  *  the Free Software Foundation; either version 2 of the License, or
  22  *  (at your option) any later version.
  23  *
  24  *  This program is distributed in the hope that it will be useful,
  25  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  26  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  27  *  GNU General Public License for more details.
  28  *
  29  *  You should have received a copy of the GNU General Public License
  30  *  along with this program; if not, write to the Free Software
  31  *  Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
  32  *
  33  *
  34  * Copyright (c) 2003, Robert Collins <robertc@squid-cache.org>
  35  */
  36
  37 #include "squid.h"
  38 #include "acl/CertificateData.h"
  39 #include "acl/Checklist.h"
  40 #include "cache_cf.h"
  41 #include "protos.h"
  42 #include "wordlist.h"
  43
  44 ACLCertificateData::ACLCertificateData(SSLGETATTRIBUTE *sslStrategy) : attribute (NULL), values (), sslAttributeCall (sslStrategy)
  45 {}
  46
  47 ACLCertificateData::ACLCertificateData(ACLCertificateData const &old) : attribute (NULL), values (old.values), sslAttributeCall (old.sslAttributeCall)
  48 {
  49     if (old.attribute)
  50         attribute = xstrdup (old.attribute);
  51 }
  52
  53 template<class T>
  54 inline void
  55 xRefFree(T &thing)
  56 {
  57     xfree (thing);
  58 }
  59
  60 ACLCertificateData::~ACLCertificateData()
  61 {
  62     safe_free (attribute);
  63 }
  64
  65 template<class T>
  66 inline int
  67 splaystrcmp (T&l, T&r)
  68 {
  69     return strcmp ((char *)l,(char *)r);
  70 }
  71
  72 bool
  73 ACLCertificateData::match(SSL *ssl)
  74 {
  75     if (!ssl)
  76         return 0;
  77
  78     char const *value = sslAttributeCall(ssl, attribute);
  79
  80     if (value == NULL)
  81         return 0;
  82
  83     return values.match(value);
  84 }
  85
  86 static void
  87 aclDumpAttributeListWalkee(char * const & node_data, void *outlist)
  88 {
  89     /* outlist is really a wordlist ** */
  90     wordlistAdd((wordlist **)outlist, node_data);
  91 }
  92
  93 wordlist *
  94 ACLCertificateData::dump()
  95 {
  96     wordlist *wl = NULL;
  97     wordlistAdd(&wl, attribute);
  98     /* damn this is VERY inefficient for long ACL lists... filling
  99      * a wordlist this way costs Sum(1,N) iterations. For instance
 100      * a 1000-elements list will be filled in 499500 iterations.
 101      */
 102     /* XXX FIXME: don't break abstraction */
 103     values.values->walk(aclDumpAttributeListWalkee, &wl);
 104     return wl;
 105 }
 106
 107 void
 108 ACLCertificateData::parse()
 109 {
 110     char *newAttribute = strtokFile();
 111
 112     if (!newAttribute)
 113         self_destruct();
 114
 115     /* an acl must use consistent attributes in all config lines */
 116     if (attribute) {
 117         if (strcasecmp(newAttribute, attribute) != 0)
 118             self_destruct();
 119     } else
 120         attribute = xstrdup(newAttribute);
 121
 122     values.parse();
 123 }
 124
 125 bool
 126 ACLCertificateData::empty() const
 127 {
 128     return values.empty();
 129 }
 130
 131 ACLData<SSL *> *
 132 ACLCertificateData::clone() const
 133 {
 134     /* Splay trees don't clone yet. */
 135     return new ACLCertificateData(*this);
 136 }