mirror of
https://github.com/ibm-s390-linux/s390-tools.git
synced 2026-08-05 02:14:52 +00:00
56fecf1832
libkmipclient is a shared library that provides an KMIP client to communicate with an KMIP server. KMIP stands for Key Management Interoperability Protocol, and is an extensible communication protocol that defines message formats for the manipulation of cryptographic keys on a key management server. Signed-off-by: Ingo Franzki <ifranzki@linux.ibm.com> Signed-off-by: Jan Höppner <hoeppner@linux.ibm.com>
112 lines
3.1 KiB
C
112 lines
3.1 KiB
C
/*
|
|
* libkmipclient - KMIP client library
|
|
*
|
|
* Copyright IBM Corp. 2021
|
|
*
|
|
* s390-tools is free software; you can redistribute it and/or modify
|
|
* it under the terms of the MIT license. See LICENSE for details.
|
|
*/
|
|
#ifndef KMIP_H
|
|
#define KMIP_H
|
|
|
|
#include <stdint.h>
|
|
#include <stdbool.h>
|
|
|
|
#include <openssl/bio.h>
|
|
#include <openssl/ssl.h>
|
|
|
|
#include <json-c/json.h>
|
|
#include <libxml/tree.h>
|
|
#include <curl/curl.h>
|
|
|
|
#include "kmipclient/kmipclient.h"
|
|
|
|
/* KMIP Connection related structures */
|
|
#define KMIP_DEFAULT_PROTOCOL_VERSION_MAJOR 1
|
|
#define KMIP_DEFAULT_PROTOCOL_VERSION_MINOR 0
|
|
|
|
struct kmip_connection {
|
|
struct kmip_conn_config config;
|
|
union {
|
|
struct {
|
|
SSL_CTX *ssl_ctx;
|
|
SSL *ssl;
|
|
BIO *bio;
|
|
} plain_tls;
|
|
struct {
|
|
CURL **curl;
|
|
struct curl_slist *headers;
|
|
} https;
|
|
};
|
|
};
|
|
|
|
/* KMIP node related structures */
|
|
struct kmip_node {
|
|
enum kmip_tag tag;
|
|
enum kmip_type type;
|
|
unsigned int length;
|
|
char *name; /* optional, only used for JSON and XML encoding */
|
|
union {
|
|
struct kmip_node *structure_value;
|
|
int32_t integer_value;
|
|
int64_t long_value;
|
|
BIGNUM *big_integer_value;
|
|
uint32_t enumeration_value;
|
|
bool boolean_value;
|
|
char *text_value;
|
|
unsigned char *bytes_value;
|
|
int64_t date_time_value;
|
|
uint32_t interval_value;
|
|
int64_t date_time_ext_value;
|
|
};
|
|
struct kmip_node *parent;
|
|
struct kmip_node *next;
|
|
volatile unsigned long ref_count;
|
|
};
|
|
|
|
/* Attribute related internal functions */
|
|
int kmip_v2_attr_from_v1_attr(struct kmip_node *v1_attr,
|
|
struct kmip_node **v2_attr);
|
|
int kmip_v1_attr_from_v2_attr(struct kmip_node *v2_attr,
|
|
struct kmip_node **v1_attr);
|
|
|
|
char *kmip_build_v1_custom_attr_name(const char *vendor_id,
|
|
const char *attr_name);
|
|
|
|
struct kmip_node *kmip_new_attribute_name_v1(
|
|
const struct kmip_node *v2_attr_ref);
|
|
int kmip_get_attribute_name_v1(const struct kmip_node *node,
|
|
struct kmip_node **v2_attr_ref);
|
|
|
|
/* Connection related internal functions */
|
|
int kmip_connection_tls_init(struct kmip_connection *connection, bool debug);
|
|
int kmip_connection_tls_perform(struct kmip_connection *connection,
|
|
struct kmip_node *request,
|
|
struct kmip_node **response,
|
|
bool debug);
|
|
void kmip_connection_tls_term(struct kmip_connection *connection);
|
|
|
|
int kmip_connection_https_init(struct kmip_connection *connection, bool debug);
|
|
int kmip_connection_https_perform(struct kmip_connection *connection,
|
|
struct kmip_node *request,
|
|
struct kmip_node **response,
|
|
bool debug);
|
|
void kmip_connection_https_term(struct kmip_connection *connection);
|
|
|
|
/* KIMP decoding and encoding internal functions */
|
|
int kmip_decode_ttlv(BIO *bio, size_t *size, struct kmip_node **node,
|
|
bool debug);
|
|
int kmip_encode_ttlv(struct kmip_node *node, BIO *bio, size_t *size,
|
|
bool debug);
|
|
|
|
int kmip_decode_json(const json_object *obj, struct kmip_node *parent,
|
|
struct kmip_node **node, bool debug);
|
|
int kmip_encode_json(const struct kmip_node *node, json_object **obj,
|
|
bool debug);
|
|
|
|
int kmip_decode_xml(const xmlNode *xml, struct kmip_node *parent,
|
|
struct kmip_node **node, bool debug);
|
|
int kmip_encode_xml(const struct kmip_node *node, xmlNode **xml, bool debug);
|
|
|
|
#endif
|