githubmirror/sudo

include/hostcheck.h

37 строк1 KB

Todd C. Miller

No need to export the validate_hostname() symbol.

21 янв 2020, 00:58

21 янв 2020, 00:58a755c65

/*
 * Copyright (c) 2020 Laszlo Orban <laszlo.orban@oneidentity.com>
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
 */

#ifndef SUDO_HOSTCHECK_H
#define SUDO_HOSTCHECK_H

#if defined(HAVE_OPENSSL)

# include <openssl/x509v3.h>

typedef enum {
    MatchFound,
    MatchNotFound,
    NoSANPresent,
    MalformedCertificate,
    Error
} HostnameValidationResult;

HostnameValidationResult validate_hostname(const X509 *cert,
	const char *hostname, const char *ipaddr, int resolve);

#endif /* HAVE_OPENSSL */

#endif /* SUDO_HOSTCHECK_H */