mirror of
https://github.com/rsyslog/rsyslog.git
synced 2025-12-17 11:40:42 +01:00
Andre lorbach
fcffb063e3
Support added in omfwd as instance parameter: streamdriver.TlsVerifyDepth Support added in imtcp as module parameter: streamdriver.TlsVerifyDepth Can be 2 or higher. Support added into ossl driver Support added into gtls driver Added testcases for both drivers. Parameter streamdriver.TlsVerifyDepth closes: https://github.com/rsyslog/rsyslog/issues/4035
81 lines
3.7 KiB
C
81 lines
3.7 KiB
C
/* Definitions for the stream-based netstrmsworking class.
|
|
*
|
|
* Copyright 2007, 2008 Rainer Gerhards and Adiscon GmbH.
|
|
*
|
|
* This file is part of the rsyslog runtime library.
|
|
*
|
|
* The rsyslog runtime library is free software: you can redistribute it and/or modify
|
|
* it under the terms of the GNU Lesser General Public License as published by
|
|
* the Free Software Foundation, either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* The rsyslog runtime library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General Public License
|
|
* along with the rsyslog runtime library. If not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* A copy of the GPL can be found in the file "COPYING" in this distribution.
|
|
* A copy of the LGPL can be found in the file "COPYING.LESSER" in this distribution.
|
|
*/
|
|
|
|
#ifndef INCLUDED_NETSTRMS_H
|
|
#define INCLUDED_NETSTRMS_H
|
|
|
|
#include "nsd.h" /* we need our driver interface to be defined */
|
|
|
|
/* the netstrms object */
|
|
struct netstrms_s {
|
|
BEGINobjInstance; /* Data to implement generic object - MUST be the first data element! */
|
|
uchar *pBaseDrvrName; /**< nsd base driver name to use, or NULL if system default */
|
|
uchar *pDrvrName; /**< full base driver name (set when driver is loaded) */
|
|
int iDrvrMode; /**< current default driver mode */
|
|
uchar *pszDrvrAuthMode; /**< current driver authentication mode */
|
|
int DrvrChkExtendedKeyUsage; /**< if true, verify extended key usage in certs */
|
|
int DrvrPrioritizeSan; /**< if true, perform stricter checking of names in certs */
|
|
int DrvrVerifyDepth; /**< Verify Depth for certificate chains */
|
|
uchar *pszDrvrPermitExpiredCerts;/**< current driver setting for handlign expired certs */
|
|
uchar *gnutlsPriorityString; /**< priorityString for connection */
|
|
permittedPeers_t *pPermPeers;/**< current driver's permitted peers */
|
|
|
|
nsd_if_t Drvr; /**< our stream driver */
|
|
};
|
|
|
|
|
|
/* interface */
|
|
BEGINinterface(netstrms) /* name must also be changed in ENDinterface macro! */
|
|
rsRetVal (*Construct)(netstrms_t **ppThis);
|
|
rsRetVal (*ConstructFinalize)(netstrms_t *pThis);
|
|
rsRetVal (*Destruct)(netstrms_t **ppThis);
|
|
rsRetVal (*CreateStrm)(netstrms_t *pThis, netstrm_t **ppStrm);
|
|
rsRetVal (*SetDrvrName)(netstrms_t *pThis, uchar *pszName);
|
|
rsRetVal (*SetDrvrMode)(netstrms_t *pThis, int iMode);
|
|
rsRetVal (*SetDrvrAuthMode)(netstrms_t *pThis, uchar*);
|
|
rsRetVal (*SetDrvrPermitExpiredCerts)(netstrms_t *pThis, uchar*);
|
|
rsRetVal (*SetDrvrPermPeers)(netstrms_t *pThis, permittedPeers_t*);
|
|
int (*GetDrvrMode)(netstrms_t *pThis);
|
|
uchar* (*GetDrvrAuthMode)(netstrms_t *pThis);
|
|
uchar* (*GetDrvrPermitExpiredCerts)(netstrms_t *pThis);
|
|
permittedPeers_t* (*GetDrvrPermPeers)(netstrms_t *pThis);
|
|
rsRetVal (*SetDrvrGnutlsPriorityString)(netstrms_t *pThis, uchar*);
|
|
uchar* (*GetDrvrGnutlsPriorityString)(netstrms_t *pThis);
|
|
rsRetVal (*SetDrvrCheckExtendedKeyUsage)(netstrms_t *pThis, int ChkExtendedKeyUsage);
|
|
int (*GetDrvrCheckExtendedKeyUsage)(netstrms_t *pThis);
|
|
rsRetVal (*SetDrvrPrioritizeSAN)(netstrms_t *pThis, int prioritizeSan);
|
|
int (*GetDrvrPrioritizeSAN)(netstrms_t *pThis);
|
|
rsRetVal (*SetDrvrTlsVerifyDepth)(netstrms_t *pThis, int verifyDepth);
|
|
int (*GetDrvrTlsVerifyDepth)(netstrms_t *pThis);
|
|
|
|
ENDinterface(netstrms)
|
|
#define netstrmsCURR_IF_VERSION 1 /* increment whenever you change the interface structure! */
|
|
|
|
/* prototypes */
|
|
PROTOTYPEObj(netstrms);
|
|
|
|
/* the name of our library binary */
|
|
#define LM_NETSTRMS_FILENAME "lmnetstrms"
|
|
|
|
#endif /* #ifndef INCLUDED_NETSTRMS_H */
|