Grid Community Toolkit  6.2.1607800521 (tag: v6.2.20201212)
Typedefs | Functions
Handle Management

Create/Destroy/Modify a GSI Proxy Handle. More...

Typedefs

typedef struct globus_l_gsi_proxy_handle_s * globus_gsi_proxy_handle_t
 GSI Proxy Handle. More...
 

Functions

globus_result_t globus_gsi_proxy_handle_init (globus_gsi_proxy_handle_t *handle, globus_gsi_proxy_handle_attrs_t handle_attrs)
 Initialize a GSI Proxy handle. More...
 
globus_result_t globus_gsi_proxy_handle_get_req (globus_gsi_proxy_handle_t handle, X509_REQ **req)
 Get the certificate request from a GSI Proxy handle. More...
 
globus_result_t globus_gsi_proxy_handle_get_private_key (globus_gsi_proxy_handle_t handle, EVP_PKEY **proxy_key)
 Get the private key from a GSI Proxy handle. More...
 
globus_result_t globus_gsi_proxy_handle_get_type (globus_gsi_proxy_handle_t handle, globus_gsi_cert_utils_cert_type_t *type)
 Get Proxy Type. More...
 
globus_result_t globus_gsi_proxy_handle_set_type (globus_gsi_proxy_handle_t handle, globus_gsi_cert_utils_cert_type_t type)
 Get Proxy Type. More...
 
globus_result_t globus_gsi_proxy_handle_set_policy (globus_gsi_proxy_handle_t handle, const unsigned char *policy_data, int policy_length, int policy_language_NID)
 Set Policy. More...
 
globus_result_t globus_gsi_proxy_handle_get_policy (globus_gsi_proxy_handle_t handle, unsigned char **policy_data, int *policy_length, int *policy_NID)
 Get Policy. More...
 
globus_result_t globus_gsi_proxy_handle_add_extension (globus_gsi_proxy_handle_t handle, X509_EXTENSION *ext)
 Add X.509 Extensions. More...
 
globus_result_t globus_gsi_proxy_handle_set_extensions (globus_gsi_proxy_handle_t handle, STACK_OF(X509_EXTENSION) *exts)
 Set X.509 Extensions. More...
 
globus_result_t globus_gsi_proxy_handle_get_extensions (globus_gsi_proxy_handle_t handle, STACK_OF(X509_EXTENSION) **exts)
 Get X.509 Extensions. More...
 
globus_result_t globus_gsi_proxy_handle_set_pathlen (globus_gsi_proxy_handle_t handle, long pathlen)
 Set Path Length. More...
 
globus_result_t globus_gsi_proxy_handle_get_pathlen (globus_gsi_proxy_handle_t handle, int *pathlen)
 Get Path Length. More...
 
globus_result_t globus_gsi_proxy_handle_get_time_valid (globus_gsi_proxy_handle_t handle, int *time_valid)
 Get Time Valid. More...
 
globus_result_t globus_gsi_proxy_handle_set_time_valid (globus_gsi_proxy_handle_t handle, int time_valid)
 Set Time Valid. More...
 
globus_result_t globus_gsi_proxy_handle_clear_cert_info (globus_gsi_proxy_handle_t handle)
 Clear Cert Info. More...
 
globus_result_t globus_gsi_proxy_handle_get_proxy_cert_info_openssl (globus_gsi_proxy_handle_t handle, PROXY_CERT_INFO_EXTENSION **pci)
 Get Cert Info. More...
 
globus_result_t globus_gsi_proxy_handle_set_proxy_cert_info_openssl (globus_gsi_proxy_handle_t handle, PROXY_CERT_INFO_EXTENSION *pci)
 Set Cert Info. More...
 
globus_result_t globus_gsi_proxy_handle_get_signing_algorithm (globus_gsi_proxy_handle_t handle, const EVP_MD **signing_algorithm)
 Get Signing Algorithm. More...
 
globus_result_t globus_gsi_proxy_handle_get_keybits (globus_gsi_proxy_handle_t handle, int *key_bits)
 Get Key Bits. More...
 
globus_result_t globus_gsi_proxy_handle_get_init_prime (globus_gsi_proxy_handle_t handle, int *init_prime)
 Get Init Prime. More...
 
globus_result_t globus_gsi_proxy_handle_get_clock_skew_allowable (globus_gsi_proxy_handle_t handle, int *skew)
 Get Clock Skew. More...
 
globus_result_t globus_gsi_proxy_handle_get_key_gen_callback (globus_gsi_proxy_handle_t handle, void(**callback)(int, int, void *))
 Get Callback for Creating Keys. More...
 
globus_result_t globus_gsi_proxy_handle_get_common_name (globus_gsi_proxy_handle_t handle, char **common_name)
 Get/Set Proxy Common Name. More...
 
globus_result_t globus_gsi_proxy_handle_set_is_limited (globus_gsi_proxy_handle_t handle, globus_bool_t is_limited)
 Set/Check Proxy Is Limited. More...
 

Detailed Description

Create/Destroy/Modify a GSI Proxy Handle.

Within the Globus GSI Proxy Library, all proxy operations require a handle parameter. Currently, only one proxy operation may be in progress at once per proxy handle.

This section defines operations to create, modify and destroy GSI Proxy handles.

Typedef Documentation

◆ globus_gsi_proxy_handle_t

typedef struct globus_l_gsi_proxy_handle_s* globus_gsi_proxy_handle_t

GSI Proxy Handle.

An GSI Proxy handle is used to associate state with a group of operations. Handles can have immutable attributes associated with them. All proxy operations take a handle pointer as a parameter.

See also
globus_gsi_proxy_handle_init(), globus_gsi_proxy_handle_destroy(), Handle Attributes

Function Documentation

◆ globus_gsi_proxy_handle_add_extension()

globus_result_t globus_gsi_proxy_handle_add_extension ( globus_gsi_proxy_handle_t  handle,
X509_EXTENSION *  ext 
)

Add X.509 Extensions.

Add an X.509 extension to the GSI Proxy handle to be added to certificate

This function adds a X.509 extension to the proxy certificate.

Parameters
handleThe handle for the proxy to which the extension should be added.
extThe extension to be added.
Returns
GLOBUS_SUCCESS if the addition was successful, otherwise an error is returned.
See also
globus_gsi_proxy_handle_get_extensions()
globus_gsi_proxy_handle_set_extensions()

◆ globus_gsi_proxy_handle_clear_cert_info()

globus_result_t globus_gsi_proxy_handle_clear_cert_info ( globus_gsi_proxy_handle_t  handle)

Clear Cert Info.

Clear the proxy cert info extension stored in the GSI Proxy handle.

This function clears proxy cert info extension related setting in the GSI Proxy handle.

Parameters
handleThe handle for which to clear the proxy cert info extension.
Returns
GLOBUS_SUCCESS if the handle is valid, otherwise an error is returned

◆ globus_gsi_proxy_handle_get_clock_skew_allowable()

globus_result_t globus_gsi_proxy_handle_get_clock_skew_allowable ( globus_gsi_proxy_handle_t  handle,
int *  skew 
)

Get Clock Skew.

Get the clock skew of the proxy handle

Parameters
handleThe handle to get the clock skew of
skewThe resulting clock skew
Returns
GLOBUS_SUCCESS unless an error occurred, in which case an error object identifier (in the form of a globus_result_t) is returned

◆ globus_gsi_proxy_handle_get_common_name()

globus_result_t globus_gsi_proxy_handle_get_common_name ( globus_gsi_proxy_handle_t  handle,
char **  common_name 
)

Get/Set Proxy Common Name.

Get the proxy common name stored in the GSI Proxy handle.

This function retrieves the proxy common name from the GSI Proxy handle. The common name only impacts draft compliant proxies.

Parameters
handleThe handle from which to get the proxy common name.
common_nameContains the proxy common name upon successful return. If the handle does not contain a common name, this parameter will be NULL upon return.
Returns
GLOBUS_SUCCESS upon success GLOBUS_GSI_PROXY_ERROR_WITH_HANDLE if handle is invalid

◆ globus_gsi_proxy_handle_get_extensions()

globus_result_t globus_gsi_proxy_handle_get_extensions ( globus_gsi_proxy_handle_t  handle,
STACK_OF(X509_EXTENSION) **  exts 
)

Get X.509 Extensions.

Get the X.509 extensions from a GSI Proxy handle

This function returns the X.509 extensions from the proxy certificate.

Parameters
handleThe handle for the proxy from which the extensions should be retrieved.
extsThe variable to hold the extensions. The caller is responsible for freeing the extensions with sk_X509_EXTENSION_free() when they are done with them.
Returns
GLOBUS_SUCCESS if the retrieval was successful, otherwise an error is returned.
See also
globus_gsi_proxy_handle_add_extension()
globus_gsi_proxy_handle_set_extensions()

◆ globus_gsi_proxy_handle_get_init_prime()

globus_result_t globus_gsi_proxy_handle_get_init_prime ( globus_gsi_proxy_handle_t  handle,
int *  init_prime 
)

Get Init Prime.

Get the init prime of the proxy handle

Parameters
handleThe handle to get the init prime used in generating the key pair
init_primeThe resulting init prime
Returns
GLOBUS_SUCCESS unless an error occurred, in which case an error object identifier (in the form of a globus_result_t) is returned

◆ globus_gsi_proxy_handle_get_key_gen_callback()

globus_result_t globus_gsi_proxy_handle_get_key_gen_callback ( globus_gsi_proxy_handle_t  handle,
void(**)(int, int, void *)  callback 
)

Get Callback for Creating Keys.

Get the callback for creating the public/private key pair

Parameters
handleThe proxy handle to get the callback from
callbackParameter used for returning the callback
Returns
GLOBUS_SUCCESS or an error object identifier

◆ globus_gsi_proxy_handle_get_keybits()

globus_result_t globus_gsi_proxy_handle_get_keybits ( globus_gsi_proxy_handle_t  handle,
int *  key_bits 
)

Get Key Bits.

Get the key bits used for the pub/private key pair of the proxy

Parameters
handleThe proxy handle to get the key bits of
key_bitskey bits of the proxy handle
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned GLOBUS_SUCCESS

◆ globus_gsi_proxy_handle_get_pathlen()

globus_result_t globus_gsi_proxy_handle_get_pathlen ( globus_gsi_proxy_handle_t  handle,
int *  pathlen 
)

Get Path Length.

Get the path length from the GSI Proxy handle.

This function gets the path length that is being used in the proxy cert info extension.

Parameters
handleThe handle to be interrogated.
pathlenThe maximum allowable path length
Returns
GLOBUS_SUCCESS if the handle is valid, otherwise an error is returned
See also
globus_gsi_proxy_handle_set_pathlen()

◆ globus_gsi_proxy_handle_get_policy()

globus_result_t globus_gsi_proxy_handle_get_policy ( globus_gsi_proxy_handle_t  handle,
unsigned char **  policy_data,
int *  policy_length,
int *  policy_NID 
)

Get Policy.

Get the policy from the GSI Proxy handle.

This function gets the policy that is being used in the proxy cert info extension.

Parameters
handleThe handle to be interrogated.
policy_dataThe policy data.
policy_lengthThe length of the returned policy
policy_NIDThe NID of the policy language.
Returns
GLOBUS_SUCCESS if the handle is valid, otherwise an error is returned
See also
globus_gsi_proxy_handle_set_policy()

◆ globus_gsi_proxy_handle_get_private_key()

globus_result_t globus_gsi_proxy_handle_get_private_key ( globus_gsi_proxy_handle_t  handle,
EVP_PKEY **  proxy_key 
)

Get the private key from a GSI Proxy handle.

Copies the private key associated with the proxy handle to the value pointed to by the proxy_key parameter.

Parameters
[in]handleThe handle from which to get the private key
[in]proxy_keyParameter used to return the key. It is the users responsibility to free the returned key by calling EVP_PKEY_free().
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned
See also
globus_gsi_proxy_handle_set_private_key()

◆ globus_gsi_proxy_handle_get_proxy_cert_info_openssl()

globus_result_t globus_gsi_proxy_handle_get_proxy_cert_info_openssl ( globus_gsi_proxy_handle_t  handle,
PROXY_CERT_INFO_EXTENSION **  pci 
)

Get Cert Info.

Get the proxy cert info extension stored in the GSI Proxy handle.

This function retrieves the proxy cert info extension from the GSI Proxy handle.

Parameters
handleThe handle from which to get the proxy cert info extension.
pciContains the proxy cert info extension upon successful return. If the handle does not contain a pci extension, this parameter will be NULL upon return.
Returns
GLOBUS_SUCCESS upon success GLOBUS_GSI_PROXY_ERROR_WITH_HANDLE if handle is invalid GLOBUS_GSI_PROXY_ERROR_WITH_PROXYCERTINFO if the pci pointer is invalid or if the get failed.

◆ globus_gsi_proxy_handle_get_req()

globus_result_t globus_gsi_proxy_handle_get_req ( globus_gsi_proxy_handle_t  handle,
X509_REQ **  req 
)

Get the certificate request from a GSI Proxy handle.

Copies the certificate request associated with the proxy handle to the req parameter.

Parameters
[in]handleThe handle from which to get the certificate request
[out]reqParameter used to return the request. It is the users responsibility to free the returned request.
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned
See also
globus_gsi_proxy_handle_set_req()

◆ globus_gsi_proxy_handle_get_signing_algorithm()

globus_result_t globus_gsi_proxy_handle_get_signing_algorithm ( globus_gsi_proxy_handle_t  handle,
const EVP_MD **  signing_algorithm 
)

Get Signing Algorithm.

Get the signing algorithm used to sign the proxy cert request

Parameters
handleThe proxy handle containing the type of signing algorithm used
signing_algorithmsigning algorithm of the proxy handle
Return values
GLOBUS_SUCCESSunless an error occurred, in which case, a globus error object ID is returned

◆ globus_gsi_proxy_handle_get_time_valid()

globus_result_t globus_gsi_proxy_handle_get_time_valid ( globus_gsi_proxy_handle_t  handle,
int *  time_valid 
)

Get Time Valid.

Get the validity time of the proxy

Parameters
handleThe proxy handle to get the expiration date of
time_validexpiration date of the proxy handle
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned

◆ globus_gsi_proxy_handle_get_type()

globus_result_t globus_gsi_proxy_handle_get_type ( globus_gsi_proxy_handle_t  handle,
globus_gsi_cert_utils_cert_type_t type 
)

Get Proxy Type.

Determine the type of proxy that will be generated when using this handle.

Parameters
[in]handleThe handle from which to get the type
[out]typeParameter used to return the type.
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned
See also
globus_gsi_proxy_handle_set_type()

◆ globus_gsi_proxy_handle_init()

globus_result_t globus_gsi_proxy_handle_init ( globus_gsi_proxy_handle_t handle,
globus_gsi_proxy_handle_attrs_t  handle_attrs 
)

Initialize a GSI Proxy handle.

Initialize a proxy handle which can be used in subsequent operations. The handle may only be used in one sequence of operations at a time.

Parameters
[out]handleA pointer to the handle to be initialized. If the handle is originally NULL, space is allocated for it. Otherwise, the current values of the handle are overwritten.
[in]handle_attrsInitial attributes to be used to create this handle.
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned
See also
globus_gsi_proxy_handle_destroy()

◆ globus_gsi_proxy_handle_set_extensions()

globus_result_t globus_gsi_proxy_handle_set_extensions ( globus_gsi_proxy_handle_t  handle,
STACK_OF(X509_EXTENSION) *  exts 
)

Set X.509 Extensions.

Set the X.509 extensions from a GSI Proxy handle

This function sets the X.509 extensions for a proxy certificate.

Parameters
handleThe handle for the proxy from which the extension should be set.
extsThe extensions to be set. Can be NULL to clear extensions.
Returns
GLOBUS_SUCCESS if the addition was successful, otherwise an error is returned.
See also
globus_gsi_proxy_handle_add_extension()
globus_gsi_proxy_handle_get_extensions()

◆ globus_gsi_proxy_handle_set_is_limited()

globus_result_t globus_gsi_proxy_handle_set_is_limited ( globus_gsi_proxy_handle_t  handle,
globus_bool_t  is_limited 
)

Set/Check Proxy Is Limited.

Set the limited proxy flag on the proxy handle

Parameters
handlethe proxy handle
is_limitedboolean value to set on the proxy handle
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned

◆ globus_gsi_proxy_handle_set_pathlen()

globus_result_t globus_gsi_proxy_handle_set_pathlen ( globus_gsi_proxy_handle_t  handle,
long  pathlen 
)

Set Path Length.

Set the path length to be used in the GSI Proxy handle.

This function sets the path length to be used in the proxy cert info extension.

Parameters
handleThe handle to be modified.
pathlenThe maximum allowable path length
Returns
GLOBUS_SUCCESS if the handle is valid, otherwise an error is returned
See also
globus_gsi_proxy_handle_get_pathlen()

◆ globus_gsi_proxy_handle_set_policy()

globus_result_t globus_gsi_proxy_handle_set_policy ( globus_gsi_proxy_handle_t  handle,
const unsigned char *  policy_data,
int  policy_length,
int  policy_language_NID 
)

Set Policy.

Set the policy to be used in the GSI Proxy handle.

This function sets the policy to be used in the proxy cert info extension.

Parameters
handleThe handle to be modified.
policy_dataThe policy data.
policy_lengthThe length of the policy data
policy_language_NIDThe NID of the policy language.
Returns
GLOBUS_SUCCESS if the handle and its associated fields are valid otherwise an error is returned
See also
globus_gsi_proxy_handle_get_policy()

◆ globus_gsi_proxy_handle_set_proxy_cert_info_openssl()

globus_result_t globus_gsi_proxy_handle_set_proxy_cert_info_openssl ( globus_gsi_proxy_handle_t  handle,
PROXY_CERT_INFO_EXTENSION *  pci 
)

Set Cert Info.

Set the proxy cert info extension stored in the GSI Proxy handle.

This function sets the proxy cert info extension in the GSI Proxy handle.

Parameters
handleThe handle for which to set the proxy cert info extension.
pciThe proxy cert info extension to set.
Return values
GLOBUS_SUCCESSSuccess
GLOBUS_GSI_PROXY_ERROR_WITH_HANDLEHandle is invalid
GLOBUS_GSI_PROXY_ERROR_WITH_PROXYCERTINFOpci pointer is invalid or if the set failed.

◆ globus_gsi_proxy_handle_set_time_valid()

globus_result_t globus_gsi_proxy_handle_set_time_valid ( globus_gsi_proxy_handle_t  handle,
int  time_valid 
)

Set Time Valid.

Set the validity time of the proxy

Parameters
handleThe proxy handle to set the expiration date for
time_validdesired expiration date of the proxy
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned GLOBUS_SUCCESS

◆ globus_gsi_proxy_handle_set_type()

globus_result_t globus_gsi_proxy_handle_set_type ( globus_gsi_proxy_handle_t  handle,
globus_gsi_cert_utils_cert_type_t  type 
)

Get Proxy Type.

Set the type of proxy that will be generated when using this handle. Note that this will have no effect when generating a proxy from a proxy. In that case the generated proxy will inherit the type of the parent.

Parameters
handleThe handle for which to set the type
typeParameter used to pass the type.
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned
See also
globus_gsi_proxy_handle_set_type()