1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
|
/*
** Copyright 2002-2008, Double Precision Inc.
**
** See COPYING for distribution information.
*/
#ifndef libmail_fdtls_h
#define libmail_fdtls_h
#include "libmail_config.h"
#include "libcouriertls.h"
#if HAVE_LIBCOURIERTLS
#include "../tcpd/libcouriertls.h"
#endif
#include <string>
#include <vector>
#include "namespace.H"
LIBMAIL_START
class callback;
////////////////////////////////////////////////////////////////////////////
//
// Additional SSL metadata for SSL-enabled server connections.
class fdTLS {
public:
#if HAVE_LIBCOURIERTLS
// Our read/write buffers
char readBuffer[BUFSIZ];
std::string writebuffer;
// Metadata tls_transfer() needs.
struct tls_transfer_info tls_transfer;
// Original login or STARTTLS callback.
//mail::callback *callback;
// Callback data for libcouriertls.a
struct tls_info tls_info;
// Whether we're supposed to use STARTTLS
bool tlsflag;
// OpenSSL stuff:
ssl_context ctx;
ssl_handle ssl;
int fd;
bool tlsShutdownSent;
std::vector<std::string> &certs;
std::string domain; // Server's known hostname (for cert checking)
std::string errmsg; // Most recent error message.
fdTLS(bool tlsflagArg,
std::vector<std::string> &certsArg)
: tls_info( *tls_get_default_info() ),
tlsflag(tlsflagArg),
ctx(NULL),
ssl(NULL),
fd(-1), tlsShutdownSent(false), certs(certsArg)
{
errmsg="";
}
~fdTLS()
{
close();
}
void close()
{
if (ssl)
{
tls_disconnect(ssl, fd);
ssl=NULL;
}
if (ctx)
{
tls_destroy(ctx);
ctx=NULL;
}
}
static const char *get_tls_config_var(const char *, void *);
static void get_tls_err_msg(const char *, void *);
static int get_tls_client_certs(size_t i,
const char **cert_array_ret,
size_t *cert_array_size_ret,
void *dummy_arg);
static void free_tls_client_certs(void *dummy_arg);
private:
const char *get_tls_config_var(const char *);
void get_tls_err_msg(const char *);
int get_tls_client_certs(size_t i,
const char **cert_array_ret,
size_t *cert_array_size_ret);
void free_tls_client_certs();
#else
public:
fdTLS();
~fdTLS();
int dummy;
#endif
};
LIBMAIL_END
#endif
|
