diff options
Diffstat (limited to 'external_libs/python/pyzmq-14.7.0/bundled/zeromq/src/gssapi_client.cpp')
| -rw-r--r-- | external_libs/python/pyzmq-14.7.0/bundled/zeromq/src/gssapi_client.cpp | 230 |
1 files changed, 0 insertions, 230 deletions
diff --git a/external_libs/python/pyzmq-14.7.0/bundled/zeromq/src/gssapi_client.cpp b/external_libs/python/pyzmq-14.7.0/bundled/zeromq/src/gssapi_client.cpp deleted file mode 100644 index 3373c7ed..00000000 --- a/external_libs/python/pyzmq-14.7.0/bundled/zeromq/src/gssapi_client.cpp +++ /dev/null @@ -1,230 +0,0 @@ -/* - Copyright (c) 2007-2015 Contributors as noted in the AUTHORS file - - This file is part of libzmq, the ZeroMQ core engine in C++. - - libzmq is free software; you can redistribute it and/or modify it under - the terms of the GNU Lesser General Public License (LGPL) as published - by the Free Software Foundation; either version 3 of the License, or - (at your option) any later version. - - As a special exception, the Contributors give you permission to link - this library with independent modules to produce an executable, - regardless of the license terms of these independent modules, and to - copy and distribute the resulting executable under terms of your choice, - provided that you also meet, for each linked independent module, the - terms and conditions of the license of that module. An independent - module is a module which is not derived from or based on this library. - If you modify this library, you must extend this exception to your - version of the library. - - libzmq is distributed in the hope that it will be useful, but WITHOUT - ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or - FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public - License for more details. - - You should have received a copy of the GNU Lesser General Public License - along with this program. If not, see <http://www.gnu.org/licenses/>. -*/ - -#include "platform.hpp" - -#ifdef HAVE_LIBGSSAPI_KRB5 - -#ifdef ZMQ_HAVE_WINDOWS -#include "windows.hpp" -#endif - -#include <string.h> -#include <string> - -#include "msg.hpp" -#include "session_base.hpp" -#include "err.hpp" -#include "gssapi_client.hpp" -#include "wire.hpp" - -zmq::gssapi_client_t::gssapi_client_t (const options_t &options_) : - gssapi_mechanism_base_t (options_), - state (call_next_init), - token_ptr (GSS_C_NO_BUFFER), - mechs (), - security_context_established (false) -{ - const std::string::size_type service_size = options_.gss_service_principal.size(); - service_name = static_cast <char *>(malloc(service_size+1)); - assert(service_name); - memcpy(service_name, options_.gss_service_principal.c_str(), service_size+1 ); - - maj_stat = GSS_S_COMPLETE; - if(!options_.gss_principal.empty()) - { - const std::string::size_type principal_size = options_.gss_principal.size(); - principal_name = static_cast <char *>(malloc(principal_size+1)); - assert(principal_name); - memcpy(principal_name, options_.gss_principal.c_str(), principal_size+1 ); - - if (acquire_credentials (principal_name, &cred) != 0) - maj_stat = GSS_S_FAILURE; - } - - mechs.elements = NULL; - mechs.count = 0; -} - -zmq::gssapi_client_t::~gssapi_client_t () -{ - if(service_name) - free (service_name); - if(cred) - gss_release_cred(&min_stat, &cred); -} - -int zmq::gssapi_client_t::next_handshake_command (msg_t *msg_) -{ - if (state == send_ready) { - int rc = produce_ready(msg_); - if (rc == 0) - state = connected; - - return rc; - } - - if (state != call_next_init) { - errno = EAGAIN; - return -1; - } - - if (initialize_context () < 0) - return -1; - - if (produce_next_token (msg_) < 0) - return -1; - - if (maj_stat != GSS_S_CONTINUE_NEEDED && maj_stat != GSS_S_COMPLETE) - return -1; - - if (maj_stat == GSS_S_COMPLETE) { - security_context_established = true; - state = recv_ready; - } - else - state = recv_next_token; - - return 0; -} - -int zmq::gssapi_client_t::process_handshake_command (msg_t *msg_) -{ - if (state == recv_ready) { - int rc = process_ready(msg_); - if (rc == 0) - state = send_ready; - - return rc; - } - - if (state != recv_next_token) { - errno = EPROTO; - return -1; - } - - if (process_next_token (msg_) < 0) - return -1; - - if (maj_stat != GSS_S_COMPLETE && maj_stat != GSS_S_CONTINUE_NEEDED) - return -1; - - state = call_next_init; - - errno_assert (msg_->close () == 0); - errno_assert (msg_->init () == 0); - - return 0; -} - -int zmq::gssapi_client_t::encode (msg_t *msg_) -{ - zmq_assert (state == connected); - - if (do_encryption) - return encode_message (msg_); - - return 0; -} - -int zmq::gssapi_client_t::decode (msg_t *msg_) -{ - zmq_assert (state == connected); - - if (do_encryption) - return decode_message (msg_); - - return 0; -} - -zmq::mechanism_t::status_t zmq::gssapi_client_t::status () const -{ - return state == connected? mechanism_t::ready: mechanism_t::handshaking; -} - -int zmq::gssapi_client_t::initialize_context () -{ - // First time through, import service_name into target_name - if (target_name == GSS_C_NO_NAME) { - send_tok.value = service_name; - send_tok.length = strlen(service_name); - OM_uint32 maj = gss_import_name(&min_stat, &send_tok, - GSS_C_NT_HOSTBASED_SERVICE, - &target_name); - - if (maj != GSS_S_COMPLETE) - return -1; - } - - maj_stat = gss_init_sec_context(&init_sec_min_stat, cred, &context, - target_name, mechs.elements, - gss_flags, 0, NULL, token_ptr, NULL, - &send_tok, &ret_flags, NULL); - - if (token_ptr != GSS_C_NO_BUFFER) - free(recv_tok.value); - - return 0; -} - -int zmq::gssapi_client_t::produce_next_token (msg_t *msg_) -{ - if (send_tok.length != 0) { // Server expects another token - if (produce_initiate(msg_, send_tok.value, send_tok.length) < 0) { - gss_release_buffer(&min_stat, &send_tok); - gss_release_name(&min_stat, &target_name); - return -1; - } - } - gss_release_buffer(&min_stat, &send_tok); - - if (maj_stat != GSS_S_COMPLETE && maj_stat != GSS_S_CONTINUE_NEEDED) { - gss_release_name(&min_stat, &target_name); - if (context != GSS_C_NO_CONTEXT) - gss_delete_sec_context(&min_stat, &context, GSS_C_NO_BUFFER); - return -1; - } - - return 0; -} - -int zmq::gssapi_client_t::process_next_token (msg_t *msg_) -{ - if (maj_stat == GSS_S_CONTINUE_NEEDED) { - if (process_initiate(msg_, &recv_tok.value, recv_tok.length) < 0) { - gss_release_name(&min_stat, &target_name); - return -1; - } - token_ptr = &recv_tok; - } - - return 0; -} - -#endif |