XrdTlsTempCA Class Reference

#include <XrdTlsTempCA.hh>

Collaboration diagram for XrdTlsTempCA:

Classes
class	TempCAGuard

Public Member Functions
	XrdTlsTempCA (XrdSysError *log, std::string ca_dir)
	~XrdTlsTempCA ()
bool	atLeastOneValidCRLFound () const
std::string	CAFilename () const
std::string	CRLFilename () const
bool	IsValid () const

Detailed Description

This class provides manages a "CA file" that is a concatenation of all the CAs in a given CA directory. This is useful in TLS contexts where, instead of loading all CAs for each connection, we only want to load a single file.

This will hand out the CA file directly, allowing external libraries (such as libcurl) do the loading of CAs directly.

Definition at line 43 of file XrdTlsTempCA.hh.

Constructor & Destructor Documentation

XrdTlsTempCA()

XrdTlsTempCA::XrdTlsTempCA	(	XrdSysError *	log,
		std::string	ca_dir
	)

Definition at line 336 of file XrdTlsTempCA.cc.

    : m_log(*err),
      m_ca_dir(ca_dir)
{
    // Setup communication pipes; we write one byte to the child to tell it to shutdown;
    // it'll write one byte back to acknowledge before our destructor exits.
    int pipes[2];
    if (-1 == XrdSysFD_Pipe(pipes)) {
        m_log.Emsg("XrdTlsTempCA", "Failed to create communication pipes", strerror(errno));
        return;
    }
    m_maintenance_pipe_r = pipes[0];
    m_maintenance_pipe_w = pipes[1];
    if (-1 == XrdSysFD_Pipe(pipes)) {
        m_log.Emsg("XrdTlsTempCA", "Failed to create communication pipes", strerror(errno));
        return;
    }
    m_maintenance_thread_pipe_r = pipes[0];
    m_maintenance_thread_pipe_w = pipes[1];
    if (!Maintenance()) {return;}
 
    pthread_t tid;
    auto rc = XrdSysThread::Run(&tid, XrdTlsTempCA::MaintenanceThread,
                                static_cast<void*>(this), 0, "CA/CRL refresh");
    if (rc) {
        m_log.Emsg("XrdTlsTempCA", "Failed to launch CA monitoring thread");
        m_ca_file.reset();
        m_crl_file.reset();
    }
}

References XrdSysError::Emsg(), and XrdSysThread::Run().

Here is the call graph for this function:

~XrdTlsTempCA()

XrdTlsTempCA::~XrdTlsTempCA

(

)

Definition at line 368 of file XrdTlsTempCA.cc.

{
    char indicator[1];
    if (m_maintenance_pipe_w >= 0) {
        indicator[0] = '1';
        int rval;
        do {rval = write(m_maintenance_pipe_w, indicator, 1);} while (rval != -1 || errno == EINTR);
        if (m_maintenance_thread_pipe_r >= 0) {
            do {rval = read(m_maintenance_thread_pipe_r, indicator, 1);} while (rval != -1 || errno == EINTR);
            close(m_maintenance_thread_pipe_r);
            close(m_maintenance_thread_pipe_w);
        }
        close(m_maintenance_pipe_r);
        close(m_maintenance_pipe_w);
    }
}

References close, read, and write.

Member Function Documentation

atLeastOneValidCRLFound()

bool XrdTlsTempCA::atLeastOneValidCRLFound ( ) const

inline

Returns true if a valid CRL file has been found during the Maintenance thread execution false otherwise

Definition at line 69 of file XrdTlsTempCA.hh.

{ return m_atLeastOneCRLFound; }

CAFilename()

std::string XrdTlsTempCA::CAFilename ( ) const

inline

Returns the current location of the CA temp file.

Definition at line 58 of file XrdTlsTempCA.hh.

{auto file_ref = m_ca_file; return file_ref ? *file_ref : "";}

CRLFilename()

std::string XrdTlsTempCA::CRLFilename ( ) const

inline

Returns the current location of the CA temp file.

Definition at line 63 of file XrdTlsTempCA.hh.

{auto file_ref = m_crl_file; return file_ref ? *file_ref : "";}

IsValid()

bool XrdTlsTempCA::IsValid ( ) const

inline

Returns true if object is valid.

Definition at line 53 of file XrdTlsTempCA.hh.

{return m_ca_file.get() && m_crl_file.get();}

---

The documentation for this class was generated from the following files:

• XrdTlsTempCA.hh
• XrdTlsTempCA.cc