Mon, 26 Dec 2016 16:46:55 +0100
adds support for ssl cert chain files and improves ssl error handling
/* * DO NOT ALTER OR REMOVE COPYRIGHT NOTICES OR THIS HEADER. * * Copyright 2013 Olaf Wintermann. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions are met: * * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE * POSSIBILITY OF SUCH DAMAGE. */ #ifndef KEYFILE_AUTH_H #define KEYFILE_AUTH_H #include "../public/auth.h" #include <ucx/map.h> #include <inttypes.h> #ifdef __cplusplus extern "C" { #endif typedef struct keyfile Keyfile; typedef struct keyfile_user KeyfileUser; enum KeyfileHashType { KEYFILE_SSHA = 0 }; struct keyfile { AuthDB authdb; UcxMap *users; uint32_t ref; }; struct keyfile_user { User user; sstr_t *groups; size_t numgroups; enum KeyfileHashType hash_type; char *hash; size_t hashlen; }; Keyfile* keyfile_new(); void keyfile_ref(Keyfile *keyfile); void keyfile_unref(Keyfile *keyfile); void keyfile_add_user( Keyfile *keyfile, sstr_t user, enum KeyfileHashType hash_type, sstr_t hash, sstr_t *groups, size_t ngroups); User* keyfile_get_user(AuthDB *db, char *user); int keyfile_user_verify_password(User *user, char *password); int keyfile_user_check_group(User *user, char *group); void keyfile_user_free(User *user); // SSHA password compare int ssha_verify(KeyfileUser *user, char *password); #ifdef __cplusplus } #endif #endif /* KEYFILE_AUTH_H */