mirror of
https://github.com/rsyslog/rsyslog.git
synced 2025-12-17 16:20:43 +01:00
This permits to override the global definitions for TLS certificates at the action() level.
113 lines
5.6 KiB
C
113 lines
5.6 KiB
C
/* Definitions for the stream-based netstrmworking class.
|
|
*
|
|
* Copyright 2007-2020 Rainer Gerhards and Adiscon GmbH.
|
|
*
|
|
* This file is part of the rsyslog runtime library.
|
|
*
|
|
* The rsyslog runtime library is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* The rsyslog runtime library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with the rsyslog runtime library. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* A copy of the GPL can be found in the file "COPYING" in this distribution.
|
|
* A copy of the LGPL can be found in the file "COPYING.LESSER" in this distribution.
|
|
*/
|
|
|
|
#ifndef INCLUDED_NETSTRM_H
|
|
#define INCLUDED_NETSTRM_H
|
|
|
|
#include "tcpsrv.h"
|
|
#include "netstrms.h"
|
|
|
|
/* the netstrm object */
|
|
struct netstrm_s {
|
|
BEGINobjInstance; /* Data to implement generic object - MUST be the first data element! */
|
|
nsd_t *pDrvrData; /**< the driver's data elements (at most other places, this is called pNsd) */
|
|
nsd_if_t Drvr; /**< our stream driver */
|
|
uchar *pszDrvrAuthMode; /**< auth mode of the stream driver to use */
|
|
void *pUsr; /**< pointer to user-provided data structure */
|
|
netstrms_t *pNS; /**< pointer to our netstream subsystem object */
|
|
};
|
|
|
|
|
|
/* interface */
|
|
BEGINinterface(netstrm) /* name must also be changed in ENDinterface macro! */
|
|
rsRetVal (*Construct)(netstrm_t **ppThis);
|
|
rsRetVal (*ConstructFinalize)(netstrm_t *pThis);
|
|
rsRetVal (*Destruct)(netstrm_t **ppThis);
|
|
rsRetVal (*AbortDestruct)(netstrm_t **ppThis);
|
|
rsRetVal (*AcceptConnReq)(netstrm_t *pThis, netstrm_t **ppNew);
|
|
rsRetVal (*Rcv)(netstrm_t *pThis, uchar *pRcvBuf, ssize_t *pLenBuf, int *oserr);
|
|
rsRetVal (*Send)(netstrm_t *pThis, uchar *pBuf, ssize_t *pLenBuf);
|
|
rsRetVal (*Connect)(netstrm_t *pThis, int family, unsigned char *port, unsigned char *host, char *device);
|
|
rsRetVal (*GetRemoteHName)(netstrm_t *pThis, uchar **pszName);
|
|
rsRetVal (*GetRemoteIP)(netstrm_t *pThis, prop_t **ip);
|
|
rsRetVal (*SetDrvrMode)(netstrm_t *pThis, int iMode);
|
|
rsRetVal (*SetDrvrAuthMode)(netstrm_t *pThis, uchar*);
|
|
rsRetVal (*SetDrvrPermitExpiredCerts)(netstrm_t *pThis, uchar*);
|
|
rsRetVal (*SetDrvrPermPeers)(netstrm_t *pThis, permittedPeers_t*);
|
|
rsRetVal (*CheckConnection)(netstrm_t *pThis); /* This is a trick mostly for plain tcp syslog */
|
|
/* the GetSock() below is a hack to make imgssapi work. In the long term,
|
|
* we should migrate imgssapi to a stream driver, which will relieve us of
|
|
* this problem. Please note that nobody else should use GetSock(). Using it
|
|
* will also tie the caller to nsd_ptcp, because other drivers may not support
|
|
* it at all. Once the imgssapi problem is solved, GetSock should be removed from
|
|
* this interface. -- rgerhards, 2008-05-05
|
|
*/
|
|
rsRetVal (*GetSock)(netstrm_t *pThis, int *pSock);
|
|
rsRetVal (*GetRemAddr)(netstrm_t *pThis, struct sockaddr_storage **ppAddr);
|
|
/* getRemAddr() is an aid needed by the legacy ACL system. It exposes the remote
|
|
* peer's socket addr structure, so that the legacy matching functions can work on
|
|
* it. Note that this ties netstream drivers to things that can be implemented over
|
|
* sockets - not really desirable, but not the end of the world... TODO: should be
|
|
* reconsidered when a new ACL system is build. -- rgerhards, 2008-12-01
|
|
*/
|
|
/* v4 */
|
|
rsRetVal (*EnableKeepAlive)(netstrm_t *pThis);
|
|
/* v7 */
|
|
rsRetVal (*SetKeepAliveProbes)(netstrm_t *pThis, int keepAliveProbes);
|
|
rsRetVal (*SetKeepAliveTime)(netstrm_t *pThis, int keepAliveTime);
|
|
rsRetVal (*SetKeepAliveIntvl)(netstrm_t *pThis, int keepAliveIntvl);
|
|
rsRetVal (*SetGnutlsPriorityString)(netstrm_t *pThis, uchar *priorityString);
|
|
/* v11 -- Parameter pszLstnFileName added to LstnInit*/
|
|
rsRetVal (ATTR_NONNULL(1,3,5) *LstnInit)(netstrms_t *pNS, void *pUsr, rsRetVal(*)(void*,netstrm_t*),
|
|
const int iSessMax, const tcpLstnParams_t *const cnf_params);
|
|
/* v12 -- two new binary flags added to gtls driver enabling stricter operation */
|
|
rsRetVal (*SetDrvrCheckExtendedKeyUsage)(netstrm_t *pThis, int ChkExtendedKeyUsage);
|
|
rsRetVal (*SetDrvrPrioritizeSAN)(netstrm_t *pThis, int prioritizeSan);
|
|
|
|
/* v14 -- Tls functions */
|
|
rsRetVal (*SetDrvrTlsVerifyDepth)(netstrm_t *pThis, int verifyDepth);
|
|
|
|
/* v15 -- Tls cert functions */
|
|
rsRetVal (*SetDrvrTlsCAFile)(netstrm_t *pThis, const uchar* file);
|
|
rsRetVal (*SetDrvrTlsKeyFile)(netstrm_t *pThis, const uchar* file);
|
|
rsRetVal (*SetDrvrTlsCertFile)(netstrm_t *pThis, const uchar* file);
|
|
ENDinterface(netstrm)
|
|
#define netstrmCURR_IF_VERSION 15 /* increment whenever you change the interface structure! */
|
|
/* interface version 3 added GetRemAddr()
|
|
* interface version 4 added EnableKeepAlive() -- rgerhards, 2009-06-02
|
|
* interface version 5 changed return of CheckConnection from void to rsRetVal -- alorbach, 2012-09-06
|
|
* interface version 6 changed signature of GetRemoteIP() -- rgerhards, 2013-01-21
|
|
* interface version 7 added KeepAlive parameter set functions
|
|
* interface version 8 changed signature of Connect() -- dsa, 2016-11-14
|
|
* interface version 9 added SetGnutlsPriorityString -- PascalWithopf, 2017-08-08
|
|
* interface version 10 added oserr parameter to Rcv() -- rgerhards, 2017-09-04
|
|
* */
|
|
|
|
/* prototypes */
|
|
PROTOTYPEObj(netstrm);
|
|
|
|
/* the name of our library binary */
|
|
#define LM_NETSTRM_FILENAME LM_NETSTRMS_FILENAME
|
|
|
|
#endif /* #ifndef INCLUDED_NETSTRM_H */
|