← Back to branch summary

~svn/ubuntu/raring/subversion/ppa

« back to all changes in this revision

Viewing changes to subversion/libsvn_client/ssl_client_cert_pw_providers.c

  • Committer: Bazaar Package Importer
  • Author(s): Adam Conrad
  • Date: 2005-12-05 01:26:14 UTC
  • mfrom: (1.1.2 upstream)
  • Revision ID: james.westby@ubuntu.com-20051205012614-qom4xfypgtsqc2xq
Tags: 1.2.3dfsg1-3ubuntu1
Merge with the final Debian release of 1.2.3dfsg1-3, bringing in
fixes to the clean target, better documentation of the libdb4.3
upgrade and build fixes to work with swig1.3_1.3.27.

Show diffs side-by-side

added added

removed removed

Lines of Context:
subversion/libsvn_client/ssl_client_cert_pw_providers.c
 
1
/*
 
2
 * ssl_client_cert_pw_providers.c: providers for
 
3
 * SVN_AUTH_CRED_SSL_CLIENT_CERT_PW
 
4
 *
 
5
 * ====================================================================
 
6
 * Copyright (c) 2000-2004 CollabNet.  All rights reserved.
 
7
 *
 
8
 * This software is licensed as described in the file COPYING, which
 
9
 * you should have received as part of this distribution.  The terms
 
10
 * are also available at http://subversion.tigris.org/license-1.html.
 
11
 * If newer versions of this license are posted there, you may use a
 
12
 * newer version instead, at your option.
 
13
 *
 
14
 * This software consists of voluntary contributions made by many
 
15
 * individuals.  For exact contribution history, see the revision
 
16
 * history and logs, available at http://subversion.tigris.org/.
 
17
 * ====================================================================
 
18
 */
 
19
 
 
20
/* ==================================================================== */
 
21
 
 
22
 
 
23
 
 
24
/*** Includes. ***/
 
25
 
 
26
#include <apr_pools.h>
 
27
#include "svn_client.h"
 
28
#include "svn_auth.h"
 
29
#include "svn_error.h"
 
30
#include "svn_config.h"
 
31
 
 
32
 
 
33
/*-----------------------------------------------------------------------*/
 
34
/* File provider                                                         */
 
35
/*-----------------------------------------------------------------------*/
 
36
 
 
37
/* retrieve and load a password for a client certificate from servers file */
 
38
static svn_error_t *
 
39
ssl_client_cert_pw_file_first_credentials (void **credentials_p,
 
40
                                           void **iter_baton,
 
41
                                           void *provider_baton,
 
42
                                           apr_hash_t *parameters,
 
43
                                           const char *realmstring,
 
44
                                           apr_pool_t *pool)
 
45
{
 
46
  svn_config_t *cfg = apr_hash_get (parameters,
 
47
                                    SVN_AUTH_PARAM_CONFIG,
 
48
                                    APR_HASH_KEY_STRING);
 
49
  const char *server_group = apr_hash_get (parameters,
 
50
                                           SVN_AUTH_PARAM_SERVER_GROUP,
 
51
                                           APR_HASH_KEY_STRING);
 
52
 
 
53
  const char *password =
 
54
    svn_config_get_server_setting (cfg, server_group,
 
55
                                   SVN_CONFIG_OPTION_SSL_CLIENT_CERT_PASSWORD,
 
56
                                   NULL);
 
57
  if (password)
 
58
    {
 
59
      svn_auth_cred_ssl_client_cert_pw_t *cred
 
60
        = apr_palloc (pool, sizeof (*cred));
 
61
      cred->password = password;
 
62
      cred->may_save = FALSE;
 
63
      *credentials_p = cred;
 
64
    }
 
65
  else *credentials_p = NULL;
 
66
  *iter_baton = NULL;
 
67
  return SVN_NO_ERROR;
 
68
}
 
69
 
 
70
 
 
71
static const svn_auth_provider_t ssl_client_cert_pw_file_provider = {
 
72
  SVN_AUTH_CRED_SSL_CLIENT_CERT_PW,
 
73
  ssl_client_cert_pw_file_first_credentials,
 
74
  NULL,
 
75
  NULL
 
76
};
 
77
 
 
78
 
 
79
/*** Public API to SSL file providers. ***/
 
80
void
 
81
svn_client_get_ssl_client_cert_pw_file_provider (
 
82
  svn_auth_provider_object_t **provider,
 
83
  apr_pool_t *pool)
 
84
{
 
85
  svn_auth_provider_object_t *po = apr_pcalloc (pool, sizeof(*po));
 
86
  po->vtable = &ssl_client_cert_pw_file_provider;
 
87
  *provider = po;
 
88
}
 
89
 
 
90
 
 
91
/*-----------------------------------------------------------------------*/
 
92
/* Prompt provider                                                       */
 
93
/*-----------------------------------------------------------------------*/
 
94
 
 
95
/* Baton type for client passphrase prompting.
 
96
   There is no iteration baton type. */
 
97
typedef struct
 
98
{
 
99
  svn_auth_ssl_client_cert_pw_prompt_func_t prompt_func;
 
100
  void *prompt_baton;
 
101
 
 
102
  /* how many times to re-prompt after the first one fails */
 
103
  int retry_limit;
 
104
} ssl_client_cert_pw_prompt_provider_baton_t;
 
105
 
 
106
/* Iteration baton. */
 
107
typedef struct
 
108
{
 
109
  /* The original provider baton */
 
110
  ssl_client_cert_pw_prompt_provider_baton_t *pb;
 
111
 
 
112
  /* The original realmstring */
 
113
  const char *realmstring;
 
114
 
 
115
  /* how many times we've reprompted */
 
116
  int retries;
 
117
} ssl_client_cert_pw_prompt_iter_baton_t;
 
118
 
 
119
 
 
120
static svn_error_t *
 
121
ssl_client_cert_pw_prompt_first_cred (void **credentials_p,
 
122
                                      void **iter_baton,
 
123
                                      void *provider_baton,
 
124
                                      apr_hash_t *parameters,
 
125
                                      const char *realmstring,
 
126
                                      apr_pool_t *pool)
 
127
{
 
128
  ssl_client_cert_pw_prompt_provider_baton_t *pb = provider_baton;
 
129
  ssl_client_cert_pw_prompt_iter_baton_t *ib =
 
130
    apr_pcalloc (pool, sizeof (*ib));
 
131
  const char *no_auth_cache = apr_hash_get (parameters, 
 
132
                                            SVN_AUTH_PARAM_NO_AUTH_CACHE,
 
133
                                            APR_HASH_KEY_STRING);
 
134
 
 
135
  SVN_ERR (pb->prompt_func ((svn_auth_cred_ssl_client_cert_pw_t **)
 
136
                            credentials_p, pb->prompt_baton, realmstring,
 
137
                            ! no_auth_cache, pool));
 
138
 
 
139
  ib->pb = pb;
 
140
  ib->realmstring = apr_pstrdup (pool, realmstring);
 
141
  ib->retries = 0;
 
142
  *iter_baton = ib;
 
143
 
 
144
  return SVN_NO_ERROR;
 
145
}
 
146
 
 
147
 
 
148
static svn_error_t *
 
149
ssl_client_cert_pw_prompt_next_cred (void **credentials_p,
 
150
                                     void *iter_baton,
 
151
                                     void *provider_baton,
 
152
                                     apr_hash_t *parameters,
 
153
                                     const char *realmstring,
 
154
                                     apr_pool_t *pool)
 
155
{
 
156
  ssl_client_cert_pw_prompt_iter_baton_t *ib = iter_baton;
 
157
  const char *no_auth_cache = apr_hash_get (parameters, 
 
158
                                            SVN_AUTH_PARAM_NO_AUTH_CACHE,
 
159
                                            APR_HASH_KEY_STRING);
 
160
 
 
161
  if (ib->retries >= ib->pb->retry_limit)
 
162
    {
 
163
      /* give up, go on to next provider. */
 
164
      *credentials_p = NULL;
 
165
      return SVN_NO_ERROR;
 
166
    }
 
167
  ib->retries++;
 
168
 
 
169
  SVN_ERR (ib->pb->prompt_func ((svn_auth_cred_ssl_client_cert_pw_t **)
 
170
                                credentials_p, ib->pb->prompt_baton,
 
171
                                ib->realmstring, ! no_auth_cache, pool));
 
172
 
 
173
  return SVN_NO_ERROR;
 
174
}
 
175
 
 
176
 
 
177
static const svn_auth_provider_t client_cert_pw_prompt_provider = {
 
178
  SVN_AUTH_CRED_SSL_CLIENT_CERT_PW,
 
179
  ssl_client_cert_pw_prompt_first_cred,
 
180
  ssl_client_cert_pw_prompt_next_cred,
 
181
  NULL
 
182
};
 
183
 
 
184
 
 
185
void svn_client_get_ssl_client_cert_pw_prompt_provider (
 
186
  svn_auth_provider_object_t **provider,
 
187
  svn_auth_ssl_client_cert_pw_prompt_func_t prompt_func,
 
188
  void *prompt_baton,
 
189
  int retry_limit,
 
190
  apr_pool_t *pool)
 
191
{
 
192
  svn_auth_provider_object_t *po = apr_pcalloc (pool, sizeof(*po));
 
193
  ssl_client_cert_pw_prompt_provider_baton_t *pb =
 
194
    apr_palloc (pool, sizeof(*pb));
 
195
 
 
196
  pb->prompt_func = prompt_func;
 
197
  pb->prompt_baton = prompt_baton;
 
198
  pb->retry_limit = retry_limit;
 
199
 
 
200
  po->vtable = &client_cert_pw_prompt_provider;
 
201
  po->provider_baton = pb;
 
202
  *provider = po;
 
203
}