intglobus_gsi_callback_check_issued(X509_STORE_CTX*context,X509*cert,X509*issuer)
OpenSSL X509_check_issued() wrapper. This function wraps the OpenSSL X509_check_issued() call and catches
the error caused by the fact that a proxy certificate issuer may not have to have the correct KeyUsage
fields set.
Parameterscontext The validation state object.
cert The certificate to check
issuer The issuer certificate to check
Returns
1 on success 0 on failure
intglobus_gsi_callback_create_proxy_callback(intpreverify_ok,X509_STORE_CTX*x509_context)
Independent path validation callback. This function provides a path validation callback for validation
outside of a SSL session. It should be used in X509_STORE_set_verify_cb_func().
Parameterspreverify_ok Communicates the result of default validation steps performed by OpenSSL
x509_context The validation state object
Returns
1 on success 0 on failure
globus_result_tglobus_gsi_callback_get_SSL_callback_data_index(int*index)
Get callback data index from SSL structure. Retrieve or create the index for our callback data structure
in the SSL structure.
Parametersindex Will contain the index upon return
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned
globus_result_tglobus_gsi_callback_get_X509_STORE_callback_data_index(int*index)
Get callback data index from X509_STORE. Retrieve or create the index for our callback data structure in
the X509_STORE.
Parametersindex Will contain the index upon return
Returns
GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned
intglobus_gsi_callback_handshake_callback(intpreverify_ok,X509_STORE_CTX*x509_context)
SSL path validation callback. This function provides a path validation callback for the validation part
of establishing a SSL session. It handles proxy certificates, X509 Extensions and CRL checking. It should
be used in SSL_CTX_set_verify().
Parameterspreverify_ok Communicates the result of default validation steps performed by OpenSSL
x509_context The validation state object.
Returns
1 on success 0 on failure
intglobus_gsi_callback_X509_verify_cert(X509_STORE_CTX*context,void*arg)
Certificate verify wrapper. This function wraps the OpenSSL certificate verification callback for the
purpose of a replacing the standard issuer check with one that deals with proxy certificates. Should be
used with SSL_CTX_set_cert_verify_callback()
Parameterscontext The X509_STORE_CTX for which to register the callback.
arg Arguments to the callback. Currently ignored.
Returns
1 on success 0 on failure