]>
git.ipfire.org Git - thirdparty/openssl.git/blob - ssl/kssl.h
1 /* ssl/kssl.h -*- mode: C; c-file-style: "eay" -*- */
2 /* Written by Vern Staats <staatsvr@asc.hpc.mil> for the OpenSSL project 2000.
5 /* ====================================================================
6 * Copyright (c) 2000 The OpenSSL Project. All rights reserved.
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in
17 * the documentation and/or other materials provided with the
20 * 3. All advertising materials mentioning features or use of this
21 * software must display the following acknowledgment:
22 * "This product includes software developed by the OpenSSL Project
23 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26 * endorse or promote products derived from this software without
27 * prior written permission. For written permission, please contact
28 * licensing@OpenSSL.org.
30 * 5. Products derived from this software may not be called "OpenSSL"
31 * nor may "OpenSSL" appear in their names without prior written
32 * permission of the OpenSSL Project.
34 * 6. Redistributions of any form whatsoever must retain the following
36 * "This product includes software developed by the OpenSSL Project
37 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50 * OF THE POSSIBILITY OF SUCH DAMAGE.
51 * ====================================================================
53 * This product includes cryptographic software written by Eric Young
54 * (eay@cryptsoft.com). This product includes software written by Tim
55 * Hudson (tjh@cryptsoft.com).
60 ** 19990701 VRS Started.
66 #include <openssl/opensslconf.h>
68 #ifndef OPENSSL_NO_KRB5
73 #ifdef OPENSSL_SYS_WIN32
74 /* These can sometimes get redefined indirectly by krb5 header files
75 * after they get undefed in ossl_typ.h
78 #undef X509_EXTENSIONS
88 * Depending on which KRB5 implementation used, some types from
89 * the other may be missing. Resolve that here and now
92 typedef unsigned char krb5_octet
;
103 * Uncomment this to debug kssl problems or
104 * to trace usage of the Kerberos session key
110 #define KRB5SVC "host"
114 #define KRB5KEYTAB "/etc/krb5.keytab"
118 #define KRB5SENDAUTH 1
121 #ifndef KRB5CHECKAUTH
122 #define KRB5CHECKAUTH 1
125 #ifndef KSSL_CLOCKSKEW
126 #define KSSL_CLOCKSKEW 300;
129 #define KSSL_ERR_MAX 255
130 typedef struct kssl_err_st
{
132 char text
[KSSL_ERR_MAX
+1];
136 /*- Context for passing
137 * (1) Kerberos session key to SSL, and
138 * (2) Config data between application and SSL lib
140 typedef struct kssl_ctx_st
142 /* used by: disposition: */
143 char *service_name
; /* C,S default ok (kssl) */
144 char *service_host
; /* C input, REQUIRED */
145 char *client_princ
; /* S output from krb5 ticket */
146 char *keytab_file
; /* S NULL (/etc/krb5.keytab) */
147 char *cred_cache
; /* C NULL (default) */
148 krb5_enctype enctype
;
153 #define KSSL_CLIENT 1
154 #define KSSL_SERVER 2
155 #define KSSL_SERVICE 3
156 #define KSSL_KEYTAB 4
158 #define KSSL_CTX_OK 0
159 #define KSSL_CTX_ERR 1
162 /* Public (for use by applications that use OpenSSL with Kerberos 5 support */
163 krb5_error_code
kssl_ctx_setstring(KSSL_CTX
*kssl_ctx
, int which
, char *text
);
164 KSSL_CTX
*kssl_ctx_new(void);
165 KSSL_CTX
*kssl_ctx_free(KSSL_CTX
*kssl_ctx
);
166 void kssl_ctx_show(KSSL_CTX
*kssl_ctx
);
167 krb5_error_code
kssl_ctx_setprinc(KSSL_CTX
*kssl_ctx
, int which
,
168 krb5_data
*realm
, krb5_data
*entity
, int nentities
);
169 krb5_error_code
kssl_cget_tkt(KSSL_CTX
*kssl_ctx
, krb5_data
**enc_tktp
,
170 krb5_data
*authenp
, KSSL_ERR
*kssl_err
);
171 krb5_error_code
kssl_sget_tkt(KSSL_CTX
*kssl_ctx
, krb5_data
*indata
,
172 krb5_ticket_times
*ttimes
, KSSL_ERR
*kssl_err
);
173 krb5_error_code
kssl_ctx_setkey(KSSL_CTX
*kssl_ctx
, krb5_keyblock
*session
);
174 void kssl_err_set(KSSL_ERR
*kssl_err
, int reason
, char *text
);
175 void kssl_krb5_free_data_contents(krb5_context context
, krb5_data
*data
);
176 krb5_error_code
kssl_build_principal_2(krb5_context context
,
177 krb5_principal
*princ
, int rlen
, const char *realm
,
178 int slen
, const char *svc
, int hlen
, const char *host
);
179 krb5_error_code
kssl_validate_times(krb5_timestamp atime
,
180 krb5_ticket_times
*ttimes
);
181 krb5_error_code
kssl_check_authent(KSSL_CTX
*kssl_ctx
, krb5_data
*authentp
,
182 krb5_timestamp
*atimep
, KSSL_ERR
*kssl_err
);
183 unsigned char *kssl_skip_confound(krb5_enctype enctype
, unsigned char *authn
);
185 void SSL_set0_kssl_ctx(SSL
*s
, KSSL_CTX
*kctx
);
186 KSSL_CTX
* SSL_get0_kssl_ctx(SSL
*s
);
187 char *kssl_ctx_get0_client_princ(KSSL_CTX
*kctx
);
192 #endif /* OPENSSL_NO_KRB5 */