s4:lib/tls: introduce tstream_tls_params_server_lpcfg()

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Volker Lendecke <vl@samba.org>

diff --git a/source4/lib/tls/tls.h b/source4/lib/tls/tls.h
index 059e2fbdeb1396f8b5eb9bdfd426ccc8fc1befad..e8c888509c55b719bb56e6cd9c0c90f6e83be863 100644 (file)
--- a/source4/lib/tls/tls.h
+++ b/source4/lib/tls/tls.h
@@ -81,6 +81,10 @@ NTSTATUS tstream_tls_params_server(TALLOC_CTX *mem_ctx,
                                   const char *dhp_file,
                                   const char *tls_priority,
                                   struct tstream_tls_params **_params);
+NTSTATUS tstream_tls_params_server_lpcfg(TALLOC_CTX *mem_ctx,
+                                        const char *dns_host_name,
+                                        struct loadparm_context *lp_ctx,
+                                        struct tstream_tls_params **_params);
 
 bool tstream_tls_params_enabled(struct tstream_tls_params *params);
 const char *tstream_tls_params_peer_name(

diff --git a/source4/lib/tls/tls_tstream.c b/source4/lib/tls/tls_tstream.c
index 09dc464cbf8ce7bc2b87910b69078ca3a4252011..dd0c2d244ad7578226ec90a1e7fdb741567d8c93 100644 (file)
--- a/source4/lib/tls/tls_tstream.c
+++ b/source4/lib/tls/tls_tstream.c
@@ -1582,6 +1582,29 @@ NTSTATUS tstream_tls_params_server(TALLOC_CTX *mem_ctx,
        return NT_STATUS_OK;
 }
 
+NTSTATUS tstream_tls_params_server_lpcfg(TALLOC_CTX *mem_ctx,
+                                        const char *dns_host_name,
+                                        struct loadparm_context *lp_ctx,
+                                        struct tstream_tls_params **_tlsp)
+{
+       TALLOC_CTX *frame = talloc_stackframe();
+       NTSTATUS status;
+
+       status = tstream_tls_params_server(mem_ctx,
+                                          dns_host_name,
+                                          lpcfg_tls_enabled(lp_ctx),
+                                          lpcfg_tls_keyfile(frame, lp_ctx),
+                                          lpcfg_tls_certfile(frame, lp_ctx),
+                                          lpcfg_tls_cafile(frame, lp_ctx),
+                                          lpcfg_tls_crlfile(frame, lp_ctx),
+                                          lpcfg_tls_dhpfile(frame, lp_ctx),
+                                          lpcfg_tls_priority(lp_ctx),
+                                          _tlsp);
+
+       TALLOC_FREE(frame);
+       return status;
+}
+
 struct tstream_tls_accept_state {
        struct tstream_context *tls_stream;
 };