#include <cstdio>
#include <cstdlib>
#include <cstring>
#include <sys/types.h>
#include <sys/stat.h>
#include <sys/time.h>
#include <unistd.h>
#include <pwd.h>
#include <ctime>
#include "XrdOuc/XrdOucString.hh"
#include "XrdSys/XrdSysLogger.hh"
#include "XrdSys/XrdSysError.hh"
#include "XrdSys/XrdSysPwd.hh"
#include "XrdSut/XrdSutAux.hh"
#include "XrdCrypto/XrdCryptoAux.hh"
#include "XrdCrypto/XrdCryptoFactory.hh"
#include "XrdCrypto/XrdCryptoX509.hh"
#include "XrdCrypto/XrdCryptoX509Req.hh"
#include "XrdCrypto/XrdCryptoX509Chain.hh"
#include "XrdCrypto/XrdCryptoX509Crl.hh"
#include "XrdCrypto/XrdCryptogsiX509Chain.hh"
#include "XrdSecgsi/XrdSecgsiTrace.hh"

Include dependency graph for XrdSecgsiProxy.cc:

Macros
#define	PRT(x)

Enumerations
enum	kModes { kM_undef = 0 , kM_init = 1 , kM_info , kM_destroy , kM_help }

Functions
bool	CheckOption (XrdOucString opt, const char *ref, int &ival)
void	Display (XrdCryptoX509 *xp)
int	main (int argc, char **argv)
void	Menu ()
int	ParseArguments (int argc, char **argv)

Variables
int	Bits = 2048
XrdOucString	CAdir = "/etc/grid-security/certificates/"
int	ClockSkew = 30
XrdCryptoX509CreateProxy_t	CreateProxy = 0
XrdOucString	CRLdir = "/etc/grid-security/certificates/"
XrdOucString	CryptoMod = "ssl"
bool	Debug = 0
XrdOucString	DefEEcert = "/.globus/usercert.pem"
XrdOucString	DefEEkey = "/.globus/userkey.pem"
XrdOucString	DefPXcert = "/tmp/x509up_u"
bool	DumpExtensions = 0
static XrdSysError	eDest (0,"proxy_")
XrdOucString	EEcert = ""
XrdOucString	EEkey = ""
bool	Exists = 0
XrdCryptoFactory *	gCryptoFactory = 0
XrdCryptoX509GetVOMSAttr_t	GetVOMSAttr = 0
const char *	gModesStr []
XrdOucTrace *	gsiTrace = 0
static XrdSysLogger	Logger
int	Mode = kM_undef
XrdCryptoX509ParseFile_t	ParseFile = 0
int	PathLength = 0
XrdCryptoProxyCertInfo_t	ProxyCertInfo = 0
XrdOucString	PXcert = ""
XrdOucString	Valid = "12:00"

Macro Definition Documentation

◆ PRT

#define PRT ( x )

Value:

{std::cerr <<x <<std::endl;}

Definition at line 64 of file XrdSecgsiProxy.cc.

Referenced by Display(), main(), Menu(), and ParseArguments().

Enumeration Type Documentation

◆ kModes

enum kModes

Enumerator
kM_undef
kM_init
kM_info
kM_destroy
kM_help

Definition at line 68 of file XrdSecgsiProxy.cc.

            {
   kM_undef = 0,
   kM_init = 1,
   kM_info,
   kM_destroy,
   kM_help
};

Function Documentation

◆ CheckOption()

bool CheckOption	(	XrdOucString	opt,
		const char *	ref,
		int &	ival )

Definition at line 677 of file XrdSecgsiProxy.cc.

{
   // Check opt against ref
   // Return 1 if ok, 0 if not
   // Fills ival = 1 if match is exact
   //       ival = 0 if match is exact with no<ref>
   //       ival = -1 in the other cases
   bool rc = 0;
 
   int lref = (ref) ? strlen(ref) : 0;
   if (!lref)
      return rc;
   XrdOucString noref = ref;
   noref.insert("no",0);
 
   ival = -1;
   if (opt == ref) {
      ival = 1;
      rc = 1;
   } else if (opt == noref) {
      ival = 0;
      rc = 1;
   }
 
   return rc;
}

References XrdOucString::insert().

Referenced by ParseArguments().

Here is the call graph for this function:

Here is the caller graph for this function:

◆ Display()

void Display ( XrdCryptoX509 * xp )

Definition at line 704 of file XrdSecgsiProxy.cc.

{
   // display content of proxy certificate
 
   PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
   if (!xp) {
      PRT(" Empty certificate! ");
      return;
   }
 
   // File
   PRT("file        : "<<PXcert);
   // Type
   if (xp->type != XrdCryptoX509::kProxy) {
      PRT("type        : "<<xp->Type());
   } else {
      PRT("type        : "<<xp->Type()<<" ("<<xp->ProxyType()<<")");
   }
 
   // Issuer
   PRT("issuer      : "<<xp->Issuer());
   // Subject
   PRT("subject     : "<<xp->Subject());
   // Path length field
   int pathlen = 0; bool b;
   if(xp->GetExtension(gsiProxyCertInfo_OID))
      (*ProxyCertInfo)(xp->GetExtension(gsiProxyCertInfo_OID), pathlen, &b);
   else
      (*ProxyCertInfo)(xp->GetExtension(gsiProxyCertInfo_OLD_OID), pathlen, &b);
   PRT("path length : "<<pathlen);
   // Key strength
   PRT("bits        : "<<xp->BitStrength());
   // Time left
   int now = int(time(0)) - XrdCryptoTZCorr();
   int tl = xp->NotAfter() - now;
   int hh = (tl >= 3600) ? (tl/3600) : 0; tl -= (hh*3600);
   int mm = (tl >= 60)   ? (tl/60)   : 0; tl -= (mm*60);
   int ss = (tl >= 0)    ?  tl       : 0;
   PRT("time left   : "<<hh<<"h:"<<mm<<"m:"<<ss<<"s");
   PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
   // Show VOMS attributes, if any
   XrdOucString vatts, vat;
   if ((*GetVOMSAttr)(xp, vatts) == 0) {
      int from = 0;
      while ((from = vatts.tokenize(vat, from, ',')) != -1) {
         if (vat.length() > 0) PRT("VOMS attributes: "<<vat);
      }
      PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
   }
   // Dump extensions if requested
   if (DumpExtensions) {
      gCryptoFactory->SetTrace(cryptoTRACE_Debug);
      xp->DumpExtensions(0);
      PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
   }
}

References XrdCryptoX509::BitStrength(), cryptoTRACE_Debug, DumpExtensions, XrdCryptoX509::DumpExtensions(), gCryptoFactory, XrdCryptoX509::GetExtension(), GetVOMSAttr, gsiProxyCertInfo_OID, gsiProxyCertInfo_OLD_OID, XrdCryptoX509::Issuer(), XrdCryptoX509::kProxy, XrdOucString::length(), XrdCryptoX509::NotAfter(), ProxyCertInfo, XrdCryptoX509::ProxyType(), PRT, PXcert, XrdCryptoX509::Subject(), XrdOucString::tokenize(), XrdCryptoX509::Type(), XrdCryptoX509::type, and XrdCryptoTZCorr().

Here is the call graph for this function:

◆ main()

int main	(	int	argc,
		char **	argv )

Definition at line 121 of file XrdSecgsiProxy.cc.

{
   // Test implemented functionality
   int secValid = 0;
   XrdProxyOpt_t pxopt;
   XrdCryptogsiX509Chain *cPXp = 0;
   XrdCryptoX509 *xPXp = 0, *xPXPp = 0;
   XrdCryptoRSA *kPXp = 0;
   int prc = 0;
   int nci = 0;
   int exitrc = 0;
 
   // Parse arguments
   if (ParseArguments(argc,argv)) {
      exit(1);
   }
 
   //
   // Initiate error logging and tracing
   eDest.logger(&Logger);
   if (!gsiTrace)
      gsiTrace = new XrdOucTrace(&eDest);
   if (gsiTrace) {
      if (Debug)
        // Medium level
        gsiTrace->What |= (TRACE_Authen | TRACE_Debug);
   }
   //
   // Set debug flags in other modules
   if (Debug) {
      XrdSutSetTrace(sutTRACE_Debug);
      XrdCryptoSetTrace(cryptoTRACE_Debug);
   }
 
   //
   // Load the crypto factory
   if (!(gCryptoFactory = XrdCryptoFactory::GetCryptoFactory(CryptoMod.c_str()))) {
      PRT(": cannot instantiate factory "<<CryptoMod);
      exit(1);
   }
   if (Debug)
      gCryptoFactory->SetTrace(cryptoTRACE_Debug);
 
   // Hooks for specific functionality
   if (!(ParseFile = gCryptoFactory->X509ParseFile())) {
      PRT("cannot attach to X509ParseFile function!");
      exit(1);
   }
   if (!(CreateProxy = gCryptoFactory->X509CreateProxy())) {
      PRT("cannot attach to X509CreateProxy function!");
      exit(1);
   }
   if (!(ProxyCertInfo = gCryptoFactory->ProxyCertInfo())) {
      PRT("cannot attach to ProxyCertInfo function!");
      exit(1);
   }
   if (!(GetVOMSAttr = gCryptoFactory->X509GetVOMSAttr())) {
      PRT("cannot attach to X509GetVOMSAttr function!");
      exit(1);
   }
 
   //
   // Depending on the mode
   switch (Mode) {
   case kM_help:
      //
      // We should not get here ... print the menu and go
      Menu();
      break;
   case kM_init:
      //
      // Init proxies
      secValid = XrdSutParseTime(Valid.c_str(), 1);
      pxopt.bits = Bits;
      pxopt.valid = secValid;
      pxopt.depthlen = PathLength;
      cPXp = new XrdCryptogsiX509Chain();
      //
      // Display info about existing proxies
      prc = (*CreateProxy)(EEcert.c_str(), EEkey.c_str(), &pxopt,
                           cPXp, &kPXp, PXcert.c_str());
      if (prc == 0) {
         // The proxy is the first certificate
         xPXp = cPXp->Begin();
         if (xPXp) {
            Display(xPXp);
         } else {
            PRT( ": proxy certificate not found");
         }
      } else {
         PRT( ": problems creating proxy");
      }
      break;
   case kM_destroy:
      //
      // Destroy existing proxies
      if (unlink(PXcert.c_str()) == -1) {
         perror("xrdgsiproxy");
      }
 
      break;
   case kM_info:
      //
      // Display info about existing proxies
      // Parse the proxy file
      cPXp = new XrdCryptogsiX509Chain();
      nci = (*ParseFile)(PXcert.c_str(), cPXp, 0);
      if (nci < 2) {
         if (Exists) {
            exitrc = 1;
         } else {
            PRT("proxy files must have at least two certificates"
                " (found only: "<<nci<<")");
         }
         break;
      }
      // The proxy is the first certificate
      xPXp = cPXp->Begin();
      if (xPXp) {
         if (!Exists) {
            Display(xPXp);
            if (strstr(xPXp->Subject(), "CN=limited proxy")) {
               xPXPp = cPXp->SearchBySubject(xPXp->Issuer());
               if (xPXPp) {
                  Display(xPXPp);
               } else {
                  PRT("WARNING: found 'limited proxy' but not the associated proxy!");
               }
            }
         } else {
            // Check time validity
            secValid = XrdSutParseTime(Valid.c_str(), 1);
            int tl = xPXp->NotAfter() -(int)time(0);
            if (Debug)
               PRT("secValid: " << secValid<< ", tl: "<<tl<<", ClockSkew:"<<ClockSkew);
            if (secValid > tl + ClockSkew) {
               exitrc = 1;
               break;
            }
            // Check bit strenght
            if (Debug)
               PRT("BitStrength: " << xPXp->BitStrength()<< ", Bits: "<<Bits);
            if (xPXp->BitStrength() < Bits) {
               exitrc = 1;
               break;
            }
         }
      } else {
         if (Exists) {
            exitrc = 1;
         } else {
            PRT( ": proxy certificate not found");
         }
      }
      break;
   default:
      //
      // Print menu
      Menu();
   }
 
   exit(exitrc);
}

References XrdCryptoX509Chain::Begin(), Bits, XrdProxyOpt_t::bits, XrdCryptoX509::BitStrength(), ClockSkew, CreateProxy, CryptoMod, cryptoTRACE_Debug, Debug, XrdProxyOpt_t::depthlen, Display(), eDest, EEcert, EEkey, Exists, gCryptoFactory, XrdCryptoFactory::GetCryptoFactory(), GetVOMSAttr, gsiTrace, XrdCryptoX509::Issuer(), kM_destroy, kM_help, kM_info, kM_init, Logger, Menu(), Mode, XrdCryptoX509::NotAfter(), ParseArguments(), ParseFile, PathLength, ProxyCertInfo, PRT, PXcert, XrdCryptoX509Chain::SearchBySubject(), XrdCryptoX509::Subject(), sutTRACE_Debug, TRACE_Authen, TRACE_Debug, unlink, Valid, XrdProxyOpt_t::valid, XrdCryptoSetTrace(), XrdSutParseTime(), and XrdSutSetTrace().

Here is the call graph for this function:

◆ Menu()

void Menu ( )

Definition at line 629 of file XrdSecgsiProxy.cc.

{
   // Print the menu
 
   PRT(" ");
   PRT(" xrdgsiproxy: application to manage GSI proxies ");
   PRT(" ");
   PRT(" Syntax:");
   PRT(" ");
   PRT(" xrdgsiproxy [-h] [<mode>] [options] ");
   PRT(" ");
   PRT(" ");
   PRT("  -h   display this menu");
   PRT(" ");
   PRT(" mode (info, init, destroy) [info]");
   PRT(" ");
   PRT("       info: display content of existing proxy file");
   PRT(" ");
   PRT("       init: create proxy certificate and related proxy file");
   PRT(" ");
   PRT("       destroy: delete existing proxy file");
   PRT(" ");
   PRT(" options:");
   PRT(" ");
   PRT("    -debug                 Print more information while running this"
                                   " query (use if something goes wrong) ");
   PRT(" ");
   PRT("    -f,-file,-out <file>   Non-standard location of proxy file");
   PRT(" ");
   PRT("    init mode only:");
   PRT(" ");
   PRT("    -certdir  <dir>        Non-standard location of directory"
                                   " with information about known CAs");
   PRT("    -cert     <file>       Non-standard location of certificate"
                                   " for which proxies are wanted");
   PRT("    -key      <file>       Non-standard location of the private"
                                   " key to be used to sign the proxy");
   PRT("    -bits     <bits>       strength in bits of the key [2048]");
   PRT("    -valid    <hh:mm>      Time validity of the proxy certificate [12:00]");
   PRT("    -path-length <len>     max number of descendent levels below"
                                   " this proxy [0] ");
   PRT("    -e,-exists [options]   returns 0 if valid proxy exists, 1 otherwise;");
   PRT("                           valid options: '-valid <hh:mm>', -bits <bits>");
   PRT("    -clockskew <secs>      max clock-skewness allowed when checking time validity [30 secs]");
   PRT("    -extensions            low-level dump of certificate extensions");
   PRT(" ");
}

References PRT.

Referenced by main(), and ParseArguments().

Here is the caller graph for this function:

◆ ParseArguments()

int ParseArguments	(	int	argc,
		char **	argv )

Definition at line 285 of file XrdSecgsiProxy.cc.

{
   // Parse application arguments filling relevant global variables
 
   // Number of arguments
   if (argc < 0 || !argv[0]) {
      PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
      PRT("+ Insufficient number or arguments!                        +");
      PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
      // Print main menu
      Menu();
      return 1;
   }
   --argc;
   ++argv;
 
   //
   // Loop over arguments
   while ((argc >= 0) && (*argv)) {
 
      XrdOucString opt = "";
      int ival = -1;
      if(*(argv)[0] == '-') {
 
         opt = *argv;
         opt.erase(0,1);
         if (CheckOption(opt,"h",ival) || CheckOption(opt,"help",ival) ||
             CheckOption(opt,"menu",ival)) {
            Mode = kM_help;
         } else if (CheckOption(opt,"debug",ival)) {
            Debug = ival;
         } else if (CheckOption(opt,"e",ival)) {
            Exists = 1;
         } else if (CheckOption(opt,"exists",ival)) {
            Exists = 1;
         } else if (CheckOption(opt,"f",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               PXcert = *argv;
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-f' requires a proxy file name: ignoring         +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"file",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               PXcert = *argv;
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-file' requires a proxy file name: ignoring      +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"out",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               PXcert = *argv;
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-out' requires a proxy file name: ignoring        +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"cert",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               EEcert = *argv;
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-cert' requires a cert file name: ignoring       +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"key",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               EEkey = *argv;
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-key' requires a key file name: ignoring         +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"certdir",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               CAdir = *argv;
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-certdir' requires a dir path: ignoring          +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"valid",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               Valid = *argv;
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-valid' requires a time string: ignoring         +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"path-length",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               PathLength = strtol(*argv,0,10);
               if (PathLength < -1 || errno == ERANGE) {
                  PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
                  PRT("+ Option '-path-length' requires a number >= -1: ignoring  +");
                  PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
                  argc++;
                  argv--;
               }
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-path-length' requires a number >= -1: ignoring  +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"bits",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               Bits = strtol(*argv, 0, 10);
               Bits = (Bits > 2048) ? Bits : 2048;
               if (errno == ERANGE) {
                  PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
                  PRT("+ Option '-bits' requires a number: ignoring               +");
                  PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
                  argc++;
                  argv--;
               }
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-bits' requires a number: ignoring               +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"clockskew",ival)) {
            --argc;
            ++argv;
            if (argc >= 0 && (*argv && *(argv)[0] != '-')) {
               ClockSkew = strtol(*argv, 0, 10);
               if (ClockSkew < -1 || errno == ERANGE) {
                  PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
                  PRT("+ Option '-clockskew' requires a number >= -1: ignoring    +");
                  PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
                  argc++;
                  argv--;
               }
            } else {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ Option '-clockskew' requires a number >= -1: ignoring    +");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               argc++;
               argv--;
            }
         } else if (CheckOption(opt,"extensions",ival)) {
            DumpExtensions = 1;
         } else {
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Ignoring unrecognized option: "<<*argv);
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
         }
 
      } else {
         //
         // Mode keyword
         opt = *argv;
         if (CheckOption(opt,"init",ival)) {
            Mode = kM_init;
         } else if (CheckOption(opt,"info",ival)) {
            Mode = kM_info;
         } else if (CheckOption(opt,"destroy",ival)) {
            Mode = kM_destroy;
         } else if (CheckOption(opt,"help",ival)) {
            Mode = kM_help;
         } else {
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Ignoring unrecognized keyword mode: "<<opt.c_str());
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
         }
      }
      --argc;
      ++argv;
   }
 
   //
   // Default mode 'info'
   Mode = (Mode == 0) ? kM_info : Mode;
 
   //
   // If help mode, print menu and exit
   if (Mode == kM_help) {
      // Print main menu
      Menu();
      return 1;
   }
 
   //
   // we may need later
   struct passwd *pw = 0;
   XrdSysPwd thePwd;
 
   //
   // Check proxy file
   if (PXcert.length() <= 0) {
      // Use defaults
      if (!pw && !(pw = thePwd.Get(getuid()))) {
         // Cannot get info about current user
         PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
         PRT("+ Cannot get info about current user - exit ");
         PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
         return 1;
      }
      // Build proxy file name
      PXcert = DefPXcert + (int)(pw->pw_uid);
   }
   //
   // Expand Path
   XrdSutExpand(PXcert);
   // Get info
   struct stat st;
   if (stat(PXcert.c_str(),&st) != 0) {
      if (errno != ENOENT) {
         // Path exists but we cannot access it - exit
         PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
         PRT("+ Cannot access requested proxy file: "<<PXcert.c_str());
         PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
         return 1;
      } else {
         if (Mode != kM_init) {
            // Path exists but we cannot access it - exit
            if (!Exists) {
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
               PRT("+ proxy file: "<<PXcert.c_str()<<" not found");
               PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            }
            return 1;
         }
      }
   }
 
   //
   // The following applies in 'init' mode only
   if (Mode == kM_init) {
      //
      // Check certificate file
      if (EEcert.length()) {
         //
         // Expand Path
         XrdSutExpand(EEcert);
         // Get info
         if (stat(EEcert.c_str(),&st) != 0) {
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Cannot access certificate file: "<<EEcert.c_str());
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            return 1;
         }
      } else {
         // Use defaults
         if (!pw && !(pw = thePwd.Get(getuid()))) {
            // Cannot get info about current user
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Cannot get info about current user - exit ");
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            return 1;
         }
         EEcert = DefEEcert;
         EEcert.insert(XrdSutHome(), 0);
         if (stat(EEcert.c_str(),&st) != 0) {
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Cannot access certificate file: "<<EEcert.c_str());
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            return 1;
         }
      }
      //
      // Check key file
      if (EEkey.length()) {
         //
         // Expand Path
         XrdSutExpand(EEkey);
         // Get info
         if (stat(EEkey.c_str(),&st) != 0) {
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Cannot access private key file: "<<EEkey.c_str());
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            return 1;
         }
      } else {
         // Use defaults
         if (!pw && !(pw = thePwd.Get(getuid()))) {
            // Cannot get info about current user
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Cannot get info about current user - exit ");
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            return 1;
         }
         EEkey = DefEEkey;
         EEkey.insert(XrdSutHome(), 0);
         if (stat(EEkey.c_str(),&st) != 0) {
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            PRT("+ Cannot access private key file: "<<EEkey.c_str());
            PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
            return 1;
         }
      }
      // Check permissions
      if (!S_ISREG(st.st_mode) || S_ISDIR(st.st_mode) ||
          (st.st_mode & (S_IWGRP | S_IWOTH)) != 0 ||
          (st.st_mode & (S_IRGRP | S_IROTH)) != 0) {
          PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
          PRT("+ Wrong permissions for file: "<<EEkey.c_str()<< " (should be 0600)");
          PRT("++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++");
          return 1;
      }
   }
 
   return 0;
}

References Bits, XrdOucString::c_str(), CAdir, CheckOption(), ClockSkew, Debug, DefEEcert, DefEEkey, DefPXcert, DumpExtensions, EEcert, EEkey, XrdOucString::erase(), Exists, XrdSysPwd::Get(), kM_destroy, kM_help, kM_info, kM_init, Menu(), Mode, PathLength, PRT, PXcert, stat, Valid, XrdSutExpand(), and XrdSutHome().

Referenced by main().

Here is the call graph for this function:

Here is the caller graph for this function:

Variable Documentation

◆ Bits

int Bits = 2048

Definition at line 113 of file XrdSecgsiProxy.cc.

Referenced by main(), and ParseArguments().

◆ CAdir

XrdOucString CAdir = "/etc/grid-security/certificates/"

Definition at line 104 of file XrdSecgsiProxy.cc.

Referenced by main(), and ParseArguments().

◆ ClockSkew

int ClockSkew = 30

Definition at line 115 of file XrdSecgsiProxy.cc.

Referenced by main(), and ParseArguments().

◆ CreateProxy

XrdCryptoX509CreateProxy_t CreateProxy = 0

Definition at line 101 of file XrdSecgsiProxy.cc.

Referenced by main().

◆ CRLdir

XrdOucString CRLdir = "/etc/grid-security/certificates/"

Definition at line 105 of file XrdSecgsiProxy.cc.

◆ CryptoMod

XrdOucString CryptoMod = "ssl"

Definition at line 99 of file XrdSecgsiProxy.cc.

Referenced by XrdSecProtocolgsi::getCredentials(), and main().

◆ Debug

bool Debug = 0

Definition at line 95 of file XrdSecgsiProxy.cc.

Referenced by XrdFrcProxy::XrdFrcProxy(), XrdPfc::IOFile::~IOFile(), XrdPfc::IOFileBlock::~IOFileBlock(), XrdCmsCluster::Add(), XrdPfc::File::AddIO(), XrdPfc::Cache::Attach(), XrdSsiFileSess::AttnInfo(), XrdPssSys::ConfigMapID(), XrdCmsConfig::Configure2(), XrdPfc::Cache::ConsiderCached(), XrdPfc::IOFile::DetachFinalize(), XrdPfc::Cache::DetermineFullFileSize(), XrdPfc::Cache::ExecuteCommandUrl(), XrdPfc::File::FinalizeSyncBeforeExit(), XrdXmlRdrTiny::GetElement(), XrdXmlRdrXml2::GetElement(), XrdPfc::Cache::GetFile(), XrdSecServer::getParms(), XrdPfc::ResourceMonitor::heart_beat(), XrdPfc::File::ioActive(), XrdPfc::Cache::LocalFilePath(), main(), main(), XrdPfc::OldStylePurgeDriver(), ParseArguments(), XrdPfc::File::Prefetch(), XrdOssFile::Read(), XrdOssFile::ReadV(), XrdPfc::Cache::ReleaseFile(), XrdPfc::File::RemoveIO(), XrdPfc::Cache::Stat(), XrdPfc::Cache::UnlinkFile(), XrdPfc::UnlinkPurgeStateFilesInMap(), XrdOssFile::Write(), XrdPfc::Cache::WriteFileSizeXAttr(), and XrdVERSIONINFO().

◆ DefEEcert

XrdOucString DefEEcert = "/.globus/usercert.pem"

Definition at line 106 of file XrdSecgsiProxy.cc.

Referenced by ParseArguments().

◆ DefEEkey

XrdOucString DefEEkey = "/.globus/userkey.pem"

Definition at line 107 of file XrdSecgsiProxy.cc.

Referenced by ParseArguments().

◆ DefPXcert

XrdOucString DefPXcert = "/tmp/x509up_u"

Definition at line 108 of file XrdSecgsiProxy.cc.

Referenced by ParseArguments().

◆ DumpExtensions

bool DumpExtensions = 0

Definition at line 96 of file XrdSecgsiProxy.cc.

Referenced by Display(), and ParseArguments().

◆ eDest

XrdSysError eDest(0,"proxy_")	(	0	,
		"proxy_"	)

static

◆ EEcert

XrdOucString EEcert = ""

Definition at line 109 of file XrdSecgsiProxy.cc.

Referenced by main(), and ParseArguments().

◆ EEkey

XrdOucString EEkey = ""

Definition at line 110 of file XrdSecgsiProxy.cc.

Referenced by main(), and ParseArguments().

◆ Exists

bool Exists = 0

Definition at line 97 of file XrdSecgsiProxy.cc.

Referenced by XrdCmsBaseFS::Exists(), main(), ParseArguments(), and XrdCl::ServerSpaceInfo::SelectLocations().

◆ gCryptoFactory

XrdCryptoFactory* gCryptoFactory = 0

Definition at line 98 of file XrdSecgsiProxy.cc.

◆ GetVOMSAttr

XrdCryptoX509GetVOMSAttr_t GetVOMSAttr = 0

Definition at line 102 of file XrdSecgsiProxy.cc.

Referenced by Display(), and main().

◆ gModesStr

const char* gModesStr[]

Initial value:

= {
   "kM_undef",
   "kM_init",
   "kM_info",
   "kM_destroy",
   "kM_help"
}

Definition at line 75 of file XrdSecgsiProxy.cc.

                          {
   "kM_undef",
   "kM_init",
   "kM_info",
   "kM_destroy",
   "kM_help"
};

Referenced by main().

◆ gsiTrace

XrdOucTrace* gsiTrace = 0

Definition at line 119 of file XrdSecgsiProxy.cc.

◆ Logger

XrdSysLogger Logger

static

Definition at line 117 of file XrdSecgsiProxy.cc.

◆ Mode

int Mode = kM_undef

Definition at line 94 of file XrdSecgsiProxy.cc.

Referenced by XrdCl::OpenImpl< HasHndl >::OpenImpl(), XrdCl::OpenImpl< HasHndl >::OpenImpl(), XrdFrmCns::Add(), XrdBwm::chmod(), XrdDigFS::chmod(), XrdOfs::chmod(), XrdSfsNative::chmod(), XrdSsiSfs::chmod(), XrdThrottle::FileSystem::chmod(), XrdPssSys::Create(), XrdOssDFHandler::Fchmod(), XrdOssFile::Fchmod(), XrdFrcReqFile::Init(), XrdOfsPoscq::Init(), main(), XrdFrcUtils::makePath(), XrdFrcUtils::makeQDir(), XrdBwm::mkdir(), XrdDigFS::mkdir(), XrdOfs::mkdir(), XrdSfsNative::mkdir(), XrdSsiSfs::mkdir(), XrdThrottle::FileSystem::mkdir(), XrdOssCsiFile::Open(), XrdOssDF::Open(), XrdOssDFHandler::Open(), XrdOssFile::Open(), XrdOssStats::File::Open(), XrdOssWrapDF::Open(), XrdPssFile::Open(), XrdBwmFile::open(), XrdDigFile::open(), XrdOfsFile::open(), XrdSfsNativeFile::open(), XrdSsiFile::open(), ParseArguments(), XrdOfsHandle::PoscGet(), XrdOssSys::Stage(), XrdOssSys::Stage_QT(), and XrdFrcUtils::Unique().

◆ ParseFile

XrdCryptoX509ParseFile_t ParseFile = 0

Definition at line 100 of file XrdSecgsiProxy.cc.

Referenced by main().

◆ PathLength

int PathLength = 0

Definition at line 114 of file XrdSecgsiProxy.cc.

Referenced by main(), and ParseArguments().

◆ ProxyCertInfo

XrdCryptoProxyCertInfo_t ProxyCertInfo = 0

Definition at line 103 of file XrdSecgsiProxy.cc.

Referenced by Display(), and main().

◆ PXcert

XrdOucString PXcert = ""

Definition at line 111 of file XrdSecgsiProxy.cc.

Referenced by Display(), main(), and ParseArguments().

◆ Valid

XrdOucString Valid = "12:00"

Definition at line 112 of file XrdSecgsiProxy.cc.

Referenced by main(), and ParseArguments().

	XRootD

Macros

Enumerations

Functions

Variables

Macro Definition Documentation

◆ PRT

Enumeration Type Documentation

◆ kModes

Function Documentation

◆ CheckOption()

◆ Display()

◆ main()

◆ Menu()

◆ ParseArguments()

Variable Documentation

◆ Bits

◆ CAdir

◆ ClockSkew

◆ CreateProxy

◆ CRLdir

◆ CryptoMod

◆ Debug

◆ DefEEcert

◆ DefEEkey

◆ DefPXcert

◆ DumpExtensions

◆ eDest

◆ EEcert

◆ EEkey

◆ Exists

◆ gCryptoFactory

◆ GetVOMSAttr

◆ gModesStr

◆ gsiTrace

◆ Logger

◆ Mode

◆ ParseFile

◆ PathLength

◆ ProxyCertInfo

◆ PXcert

◆ Valid