Martin Willi
5ac0e66879
This validator checks for any attribute certificate it can find for validated end entity certificates and tries to extract group membership information used for connection authorization rules.
100 lines
2.1 KiB
C
100 lines
2.1 KiB
C
/*
|
|
* Copyright (C) 2014 Martin Willi
|
|
* Copyright (C) 2014 revosec AG
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms of the GNU General Public License as published by the
|
|
* Free Software Foundation; either version 2 of the License, or (at your
|
|
* option) any later version. See <http://www.fsf.org/copyleft/gpl.txt>.
|
|
*
|
|
* This program is distributed in the hope that it will be useful, but
|
|
* WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
|
|
* or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License
|
|
* for more details.
|
|
*/
|
|
|
|
#include "acert_plugin.h"
|
|
#include "acert_validator.h"
|
|
|
|
#include <library.h>
|
|
|
|
typedef struct private_acert_plugin_t private_acert_plugin_t;
|
|
|
|
/**
|
|
* private data of acert_plugin
|
|
*/
|
|
struct private_acert_plugin_t {
|
|
|
|
/**
|
|
* public functions
|
|
*/
|
|
acert_plugin_t public;
|
|
|
|
/**
|
|
* Validator implementation instance.
|
|
*/
|
|
acert_validator_t *validator;
|
|
};
|
|
|
|
METHOD(plugin_t, get_name, char*,
|
|
private_acert_plugin_t *this)
|
|
{
|
|
return "acert";
|
|
}
|
|
|
|
/**
|
|
* Register validator
|
|
*/
|
|
static bool plugin_cb(private_acert_plugin_t *this,
|
|
plugin_feature_t *feature, bool reg, void *cb_data)
|
|
{
|
|
if (reg)
|
|
{
|
|
lib->credmgr->add_validator(lib->credmgr, &this->validator->validator);
|
|
}
|
|
else
|
|
{
|
|
lib->credmgr->remove_validator(lib->credmgr, &this->validator->validator);
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
METHOD(plugin_t, get_features, int,
|
|
private_acert_plugin_t *this, plugin_feature_t *features[])
|
|
{
|
|
static plugin_feature_t f[] = {
|
|
PLUGIN_CALLBACK((plugin_feature_callback_t)plugin_cb, NULL),
|
|
PLUGIN_PROVIDE(CUSTOM, "acert"),
|
|
};
|
|
*features = f;
|
|
return countof(f);
|
|
}
|
|
|
|
METHOD(plugin_t, destroy, void,
|
|
private_acert_plugin_t *this)
|
|
{
|
|
this->validator->destroy(this->validator);
|
|
free(this);
|
|
}
|
|
|
|
/*
|
|
* see header file
|
|
*/
|
|
plugin_t *acert_plugin_create()
|
|
{
|
|
private_acert_plugin_t *this;
|
|
|
|
INIT(this,
|
|
.public = {
|
|
.plugin = {
|
|
.get_name = _get_name,
|
|
.get_features = _get_features,
|
|
.destroy = _destroy,
|
|
},
|
|
},
|
|
.validator = acert_validator_create(),
|
|
);
|
|
|
|
return &this->public.plugin;
|
|
}
|