mirror/openldap
2
0
Fork 0
mirror of https://git.openldap.org/openldap/openldap.git synced 2025-01-06 10:46:21 +08:00
Code Issues Packages Projects Releases Wiki Activity

Add register_certificate_map_function() native plugin API for registering

Browse Source 
alternate X.509 peer normalization function
This commit is contained in:
Luke Howard 2004-09-20 03:52:39 +00:00
parent 2647a615ce
commit eb9720c802
2 changed files with 27 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
servers/slapd/dn.c
View File

@ -1357,6 +1357,20 @@ dnIsOneLevelRDN( struct berval *rdn )
return 1;
}
static SLAP_CERT_MAP_FN *DNX509PeerNormalizeCertMap = NULL;
int register_certificate_map_function(SLAP_CERT_MAP_FN *fn)
{
#ifdef HAVE_TLS
if ( DNX509PeerNormalizeCertMap == NULL ) {
DNX509PeerNormalizeCertMap = fn;
return 0;
}
#endif
return -1;
}
#ifdef HAVE_TLS
/*
* Convert an X.509 DN into a normalized LDAP DN
@ -1379,7 +1393,16 @@ dnX509normalize( void *x509_name, struct berval *out )
int
dnX509peerNormalize( void *ssl, struct berval *dn )
{
return ldap_pvt_tls_get_peer_dn( ssl, dn,
(LDAPDN_rewrite_dummy *)LDAPDN_rewrite, 0 );
int rc = LDAP_INVALID_CREDENTIALS;
if ( DNX509PeerNormalizeCertMap != NULL )
rc = (*DNX509PeerNormalizeCertMap)( ssl, dn );
if ( rc != LDAP_SUCCESS ) {
rc = ldap_pvt_tls_get_peer_dn( ssl, dn,
(LDAPDN_rewrite_dummy *)LDAPDN_rewrite, 0 );
}
return rc;
}
#endif

2
servers/slapd/proto-slap.h
View File

@ -558,6 +558,8 @@ LDAP_SLAPD_F (int) dnPrettyNormalDN LDAP_P(( Syntax *syntax, struct berval *val,
#define dnNormalDN(syntax, val, dn, ctx) \
dnPrettyNormalDN((syntax),(val),(dn), 0, ctx)
typedef int (SLAP_CERT_MAP_FN) LDAP_P(( void *ssl, struct berval *dn ));
LDAP_SLAPD_F (int) register_certificate_map_function LDAP_P(( SLAP_CERT_MAP_FN *fn ));
/*
* entry.c