4 * DEBUG: section 28 Access Control
5 * AUTHOR: Duane Wessels
7 * SQUID Web Proxy Cache http://www.squid-cache.org/
8 * ----------------------------------------------------------
10 * Squid is the result of efforts by numerous individuals from
11 * the Internet community; see the CONTRIBUTORS file for full
12 * details. Many organizations have provided support for Squid's
13 * development; see the SPONSORS file for full details. Squid is
14 * Copyrighted (C) 2001 by the Regents of the University of
15 * California; see the COPYRIGHT file for full details. Squid
16 * incorporates software developed and/or copyrighted by other
17 * sources; see the CREDITS file for full details.
19 * This program is free software; you can redistribute it and/or modify
20 * it under the terms of the GNU General Public License as published by
21 * the Free Software Foundation; either version 2 of the License, or
22 * (at your option) any later version.
24 * This program is distributed in the hope that it will be useful,
25 * but WITHOUT ANY WARRANTY; without even the implied warranty of
26 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
27 * GNU General Public License for more details.
29 * You should have received a copy of the GNU General Public License
30 * along with this program; if not, write to the Free Software
31 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111, USA.
34 * Copyright (c) 2003, Robert Collins <robertc@squid-cache.org>
38 #include "acl/CertificateData.h"
39 #include "acl/Checklist.h"
44 ACLCertificateData::ACLCertificateData(SSLGETATTRIBUTE
*sslStrategy
) : attribute (NULL
), values (), sslAttributeCall (sslStrategy
)
47 ACLCertificateData::ACLCertificateData(ACLCertificateData
const &old
) : attribute (NULL
), values (old
.values
), sslAttributeCall (old
.sslAttributeCall
)
50 attribute
= xstrdup (old
.attribute
);
60 ACLCertificateData::~ACLCertificateData()
62 safe_free (attribute
);
67 splaystrcmp (T
&l
, T
&r
)
69 return strcmp ((char *)l
,(char *)r
);
73 ACLCertificateData::match(SSL
*ssl
)
78 char const *value
= sslAttributeCall(ssl
, attribute
);
83 return values
.match(value
);
87 aclDumpAttributeListWalkee(char * const & node_data
, void *outlist
)
89 /* outlist is really a wordlist ** */
90 wordlistAdd((wordlist
**)outlist
, node_data
);
94 ACLCertificateData::dump()
97 wordlistAdd(&wl
, attribute
);
98 /* damn this is VERY inefficient for long ACL lists... filling
99 * a wordlist this way costs Sum(1,N) iterations. For instance
100 * a 1000-elements list will be filled in 499500 iterations.
102 /* XXX FIXME: don't break abstraction */
103 values
.values
->walk(aclDumpAttributeListWalkee
, &wl
);
108 ACLCertificateData::parse()
110 char *newAttribute
= strtokFile();
115 /* an acl must use consistent attributes in all config lines */
117 if (strcasecmp(newAttribute
, attribute
) != 0)
120 attribute
= xstrdup(newAttribute
);
126 ACLCertificateData::empty() const
128 return values
.empty();
132 ACLCertificateData::clone() const
134 /* Splay trees don't clone yet. */
135 return new ACLCertificateData(*this);