1 /* ssl/kssl.h -*- mode: C; c-file-style: "eay" -*- */2 /* Written by Vern Staats <staatsvr@asc.hpc.mil> for the OpenSSL project 2000.
3 * project 2000.
4 */5 /* ====================================================================
6 * Copyright (c) 2000 The OpenSSL Project. All rights reserved.
7 *
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that the following conditions
10 * are met:
11 *
12 * 1. Redistributions of source code must retain the above copyright
13 * notice, this list of conditions and the following disclaimer.
14 *
15 * 2. Redistributions in binary form must reproduce the above copyright
16 * notice, this list of conditions and the following disclaimer in
17 * the documentation and/or other materials provided with the
18 * distribution.
19 *
20 * 3. All advertising materials mentioning features or use of this
21 * software must display the following acknowledgment:
22 * "This product includes software developed by the OpenSSL Project
23 * for use in the OpenSSL Toolkit. (http://www.OpenSSL.org/)"
24 *
25 * 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
26 * endorse or promote products derived from this software without
27 * prior written permission. For written permission, please contact
28 * licensing@OpenSSL.org.
29 *
30 * 5. Products derived from this software may not be called "OpenSSL"
31 * nor may "OpenSSL" appear in their names without prior written
32 * permission of the OpenSSL Project.
33 *
34 * 6. Redistributions of any form whatsoever must retain the following
35 * acknowledgment:
36 * "This product includes software developed by the OpenSSL Project
37 * for use in the OpenSSL Toolkit (http://www.OpenSSL.org/)"
38 *
39 * THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
40 * EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
41 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
42 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE OpenSSL PROJECT OR
43 * ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
44 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
45 * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
46 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
47 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
48 * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
49 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
50 * OF THE POSSIBILITY OF SUCH DAMAGE.
51 * ====================================================================
52 *
53 * This product includes cryptographic software written by Eric Young
54 * (eay@cryptsoft.com). This product includes software written by Tim
55 * Hudson (tjh@cryptsoft.com).
56 *
57 */58 59 /*
60 ** 19990701 VRS Started.
61 */62 63 moduledeimos.openssl.kssl;
64 65 publicimportdeimos.openssl.opensslconf;
66 67 // FIXME: krb5.h port available, thus not yet usable.68 version (OPENSSL_NO_KRB5) {} else {
69 70 importcore.stdc.stdio;
71 // #include <ctype.h>72 // #include <krb5.h>73 // #ifdef OPENSSL_SYS_WIN3274 // /* These can sometimes get redefined indirectly by krb5 header files75 // * after they get undefed in ossl_typ.h76 // */77 // #undef X509_NAME78 // #undef X509_EXTENSIONS79 // #undef OCSP_REQUEST80 // #undef OCSP_RESPONSE81 // #endif82 83 extern (C):
84 nothrow:
85 86 /*
87 ** Depending on which KRB5 implementation used, some types from
88 ** the other may be missing. Resolve that here and now
89 */90 // #ifdef KRB5_HEIMDAL91 aliasubytekrb5_octet;
92 // #define FAR93 // #else94 95 //#ifndef FAR96 //#define FAR97 //#endif98 99 100 /* Uncomment this to debug kssl problems or
101 ** to trace usage of the Kerberos session key
102 **
103 ** #define KSSL_DEBUG
104 */105 106 // #ifndef KRB5SVC107 enumKRB5SVC = "host";
108 // #endif109 110 // #ifndef KRB5KEYTAB111 enumKRB5KEYTAB = "/etc/krb5.keytab";
112 // #endif113 114 // #ifndef KRB5SENDAUTH115 enumKRB5SENDAUTH = 1;
116 // #endif117 118 // #ifndef KRB5CHECKAUTH119 enumKRB5CHECKAUTH = 1;
120 // #endif121 122 // #ifndef KSSL_CLOCKSKEW123 enumKSSL_CLOCKSKEW = 300;;
124 // #endif125 126 enumKSSL_ERR_MAX = 255;
127 structkssl_err_st {
128 intreason;
129 char[KSSL_ERR_MAX+1] text;
130 }
131 aliaskssl_err_stKSSL_ERR;
132 133 134 135 // FIXME: krb5.h not available, thus just declare an opaque type.136 structKSSL_CTX;
137 /+
138 /* Context for passing
139 ** (1) Kerberos session key to SSL, and
140 ** (2) Config data between application and SSL lib
141 */
142 struct kssl_ctx_st {
143 /* used by: disposition: */
144 char* service_name; /* C,S default ok (kssl) */
145 char* service_host; /* C input, REQUIRED */
146 char* client_princ; /* S output from krb5 ticket */
147 char* keytab_file; /* S NULL (/etc/krb5.keytab) */
148 char* cred_cache; /* C NULL (default) */
149 krb5_enctype enctype;
150 int length;
151 krb5_octet* key;
152 }
153 alias kssl_ctx_st KSSL_CTX;
154 +/155 156 enumKSSL_CLIENT = 1;
157 enumKSSL_SERVER = 2;
158 enumKSSL_SERVICE = 3;
159 enumKSSL_KEYTAB = 4;
160 161 enumKSSL_CTX_OK = 0;
162 enumKSSL_CTX_ERR = 1;
163 enumKSSL_NOMEM = 2;
164 165 /* Public (for use by applications that use OpenSSL with Kerberos 5 support */166 // FIXME: krb5.h not available.167 /+krb5_error_code kssl_ctx_setstring(KSSL_CTX* kssl_ctx, int which, char* text);
168 KSSL_CTX* kssl_ctx_new();
169 KSSL_CTX* kssl_ctx_free(KSSL_CTX* kssl_ctx);
170 void kssl_ctx_show(KSSL_CTX* kssl_ctx);
171 krb5_error_code kssl_ctx_setprinc(KSSL_CTX* kssl_ctx, int which,
172 krb5_data* realm, krb5_data* entity, int nentities);
173 krb5_error_code kssl_cget_tkt(KSSL_CTX* kssl_ctx, krb5_data** enc_tktp,
174 krb5_data* authenp, KSSL_ERR* kssl_err);
175 krb5_error_code kssl_sget_tkt(KSSL_CTX* kssl_ctx, krb5_data* indata,
176 krb5_ticket_times* ttimes, KSSL_ERR* kssl_err);
177 krb5_error_code kssl_ctx_setkey(KSSL_CTX* kssl_ctx, krb5_keyblock* session);
178 void kssl_err_set(KSSL_ERR* kssl_err, int reason, char* text);
179 void kssl_krb5_free_data_contents(krb5_context context, krb5_data* data);
180 krb5_error_code kssl_build_principal_2(krb5_context context,
181 krb5_principal* princ, int rlen, const(char)* realm,
182 int slen, const(char)* svc, int hlen, const(char)* host);
183 krb5_error_code kssl_validate_times(krb5_timestamp atime,
184 krb5_ticket_times* ttimes);
185 krb5_error_code kssl_check_authent(KSSL_CTX* kssl_ctx, krb5_data* authentp,
186 krb5_timestamp* atimep, KSSL_ERR* kssl_err);
187 ubyte* kssl_skip_confound(krb5_enctype enctype, ubyte* authn);+/188 189 importdeimos.openssl.ssl : SSL;
190 voidSSL_set0_kssl_ctx(SSL* s, KSSL_CTX* kctx);
191 KSSL_CTX* SSL_get0_kssl_ctx(SSL* s);
192 char* kssl_ctx_get0_client_princ(KSSL_CTX* kctx);
193 194 }