include/trust_router/tid.h

   1 /*
   2  * Copyright (c) 2012, JANET(UK)
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  *
   9  * 1. Redistributions of source code must retain the above copyright
  10  *    notice, this list of conditions and the following disclaimer.
  11  *
  12  * 2. Redistributions in binary form must reproduce the above copyright
  13  *    notice, this list of conditions and the following disclaimer in the
  14  *    documentation and/or other materials provided with the distribution.
  15  *
  16  * 3. Neither the name of JANET(UK) nor the names of its contributors
  17  *    may be used to endorse or promote products derived from this software
  18  *    without specific prior written permission.
  19  *
  20  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
  21  * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
  22  * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  23  * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
  24  * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT,
  25  * INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
  26  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
  27  * SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  28  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
  29  * STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
  30  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
  31  * OF THE POSSIBILITY OF SUCH DAMAGE.
  32  *
  33  */
  34
  35 #ifndef TID_H
  36 #define TID_H
  37
  38 #include <arpa/inet.h>
  39 #include <openssl/dh.h>
  40
  41 #include <trust_router/tr_name.h>
  42 #include <trust_router/tr_versioning.h>
  43
  44 #include <gssapi.h>
  45 #include <jansson.h>
  46
  47
  48 #define TID_PORT        12309
  49
  50 typedef enum tid_rc {
  51   TID_SUCCESS = 0,
  52   TID_ERROR
  53 } TID_RC;
  54
  55 typedef struct tid_srvr_blk {
  56   struct tid_srvr_blk *next;
  57   struct in_addr aaa_server_addr;
  58   TR_NAME *key_name;
  59   DH *aaa_server_dh;            /* AAA server's public dh information */
  60 } TID_SRVR_BLK;
  61
  62 typedef struct _tr_constraint_set  TR_CONSTRAINT_SET;
  63
  64 typedef struct tid_resp {
  65   TID_RC result;
  66   TR_NAME *err_msg;
  67   TR_NAME *rp_realm;
  68   TR_NAME *realm;
  69   TR_NAME *comm;
  70   TR_CONSTRAINT_SET *cons;
  71   TR_NAME *orig_coi;
  72   TID_SRVR_BLK *servers;        /* Linked list of servers */
  73   /* TBD -- Trust Path Used */
  74 } TID_RESP;
  75
  76 typedef struct tidc_instance TIDC_INSTANCE;
  77 typedef struct tids_instance TIDS_INSTANCE;
  78 typedef struct tid_req TID_REQ;
  79
  80
  81 typedef void (TIDC_RESP_FUNC)(TIDC_INSTANCE *, TID_REQ *, TID_RESP *, void *);
  82
  83 struct tid_req {
  84   struct tid_req *next_req;
  85   int resp_sent;
  86   int conn;
  87   gss_ctx_id_t gssctx;
  88   int resp_rcvd;
  89   TR_NAME *rp_realm;
  90   TR_NAME *realm;
  91   TR_NAME *comm;
  92   TR_CONSTRAINT_SET *cons;
  93   TR_NAME *orig_coi;
  94   DH *tidc_dh;                  /* Client's public dh information */
  95   TIDC_RESP_FUNC *resp_func;
  96   void *cookie;
  97   json_t *json_references; /** References to objects dereferenced on request destruction*/
  98 };
  99
 100 struct tidc_instance {
 101   TID_REQ *req_list;
 102   // TBD -- Do we still need a separate private key */
 103   // char *priv_key;
 104   // int priv_len;
 105   DH *client_dh;                        /* Client's DH struct with priv and pub keys */
 106 };
 107
 108 typedef int (TIDS_REQ_FUNC)(TIDS_INSTANCE *, TID_REQ *, TID_RESP **, void *);
 109 typedef int (tids_auth_func)(gss_name_t client_name, TR_NAME *display_name, void *cookie);
 110
 111
 112 struct tids_instance {
 113   int req_count;
 114   char *priv_key;
 115   char *ipaddr;
 116   const char *hostname;
 117   TIDS_REQ_FUNC *req_handler;
 118   tids_auth_func *auth_handler;
 119   void *cookie;
 120 };
 121
 122 /* Utility functions for TID_REQ structures, in tid/tid_req.c */
 123 TR_EXPORT TID_REQ *tid_req_new(void);
 124 TR_EXPORT TID_REQ *tid_req_get_next_req(TID_REQ *req);
 125 void tid_req_set_next_req(TID_REQ *req, TID_REQ *next_req);
 126 TR_EXPORT int tid_req_get_resp_sent(TID_REQ *req);
 127 void tid_req_set_resp_sent(TID_REQ *req, int resp_sent);
 128 TR_EXPORT int tid_req_get_conn(TID_REQ *req);
 129 void tid_req_set_conn(TID_REQ *req, int conn);
 130 TR_EXPORT gss_ctx_id_t tid_req_get_gssctx(TID_REQ *req);
 131 void tid_req_set_gssctx(TID_REQ *req, gss_ctx_id_t gssctx);
 132 TR_EXPORT int tid_req_get_resp_rcvd(TID_REQ *req);
 133 void tid_req_set_resp_rcvd(TID_REQ *req, int resp_rcvd);
 134 TR_EXPORT TR_NAME *tid_req_get_rp_realm(TID_REQ *req);
 135 void tid_req_set_rp_realm(TID_REQ *req, TR_NAME *rp_realm);
 136 TR_EXPORT TR_NAME *tid_req_get_realm(TID_REQ *req);
 137 void tid_req_set_realm(TID_REQ *req, TR_NAME *realm);
 138 TR_EXPORT TR_NAME *tid_req_get_comm(TID_REQ *req);
 139 void tid_req_set_comm(TID_REQ *req, TR_NAME *comm);
 140 TR_EXPORT TR_NAME *tid_req_get_orig_coi(TID_REQ *req);
 141 void tid_req_set_rp_orig_coi(TID_REQ *req, TR_NAME *orig_coi);
 142 TR_EXPORT TIDC_RESP_FUNC *tid_req_get_resp_func(TID_REQ *req);
 143 void tid_req_set_resp_func(TID_REQ *req, TIDC_RESP_FUNC *resp_func);
 144 TR_EXPORT void *tid_req_get_cookie(TID_REQ *req);
 145 void tid_req_set_cookie(TID_REQ *req, void *cookie);
 146 TR_EXPORT TID_REQ *tid_dup_req (TID_REQ *orig_req);
 147
 148 /** Decrement a reference to #json when this tid_req is cleaned up. A
 149     new reference is not created; in effect the caller is handing a
 150     reference they already hold to the TID_REQ.*/
 151 void tid_req_cleanup_json(TID_REQ *, json_t *json);
 152 void TR_EXPORT tid_req_free( TID_REQ *req);
 153
 154 /* Utility functions for TID_RESP structure, in tid/tid_resp.c */
 155 TR_EXPORT TID_RC tid_resp_get_result(TID_RESP *resp);
 156 void tid_resp_set_result(TID_RESP *resp, TID_RC result);
 157 TR_EXPORT TR_NAME *tid_resp_get_err_msg(TID_RESP *resp);
 158 void tid_resp_set_err_msg(TID_RESP *resp, TR_NAME *err_msg);
 159 TR_EXPORT TR_NAME *tid_resp_get_rp_realm(TID_RESP *resp);
 160 void tid_resp_set_rp_realm(TID_RESP *resp, TR_NAME *rp_realm);
 161 TR_EXPORT TR_NAME *tid_resp_get_realm(TID_RESP *resp);
 162 void tid_resp_set_realm(TID_RESP *resp, TR_NAME *realm);
 163 TR_EXPORT TR_NAME *tid_resp_get_comm(TID_RESP *resp);
 164 void tid_resp_set_comm(TID_RESP *resp, TR_NAME *comm);
 165 TR_EXPORT TR_NAME *tid_resp_get_orig_coi(TID_RESP *resp);
 166 void tid_resp_set_orig_coi(TID_RESP *resp, TR_NAME *orig_coi);
 167 TR_EXPORT TID_SRVR_BLK *tid_resp_get_servers(TID_RESP *resp);
 168 void tid_resp_set_servers(TID_RESP *resp, TID_SRVR_BLK *servers);
 169 // TBD -- add function to add/remove items from linked list of servers?
 170
 171 /* TID Client functions, in tid/tidc.c */
 172 TR_EXPORT TIDC_INSTANCE *tidc_create (void);
 173 TR_EXPORT int tidc_open_connection (TIDC_INSTANCE *tidc, char *server, unsigned int port, gss_ctx_id_t *gssctx);
 174 TR_EXPORT int tidc_send_request (TIDC_INSTANCE *tidc, int conn, gss_ctx_id_t gssctx, char *rp_realm, char *realm, char *coi, TIDC_RESP_FUNC *resp_handler, void *cookie);
 175 TR_EXPORT int tidc_fwd_request (TIDC_INSTANCE *tidc, TID_REQ *req, TIDC_RESP_FUNC *resp_handler, void *cookie);
 176 TR_EXPORT void tidc_destroy (TIDC_INSTANCE *tidc);
 177
 178 /* TID Server functions, in tid/tids.c */
 179 TR_EXPORT TIDS_INSTANCE *tids_create (void);
 180 TR_EXPORT int tids_start (TIDS_INSTANCE *tids, TIDS_REQ_FUNC *req_handler,
 181                           tids_auth_func *auth_handler, const char *hostname,
 182                           unsigned int port, void *cookie);
 183 TR_EXPORT int tids_send_response (TIDS_INSTANCE *tids, TID_REQ *req, TID_RESP *resp);
 184 TR_EXPORT int tids_send_err_response (TIDS_INSTANCE *tids, TID_REQ *req, const char *err_msg);
 185 TR_EXPORT void tids_destroy (TIDS_INSTANCE *tids);
 186
 187 #endif