Return to systime_fix_validator.c CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / strongswan / src / libcharon / plugins / systime_fix

Annotation of embedaddon/strongswan/src/libcharon/plugins/systime_fix/systime_fix_validator.c, revision 1.1

1.1     ! misho       1: /*
        !             2:  * Copyright (C) 2013 Martin Willi
        !             3:  * Copyright (C) 2013 revosec AG
        !             4:  *
        !             5:  * This program is free software; you can redistribute it and/or modify it
        !             6:  * under the terms of the GNU General Public License as published by the
        !             7:  * Free Software Foundation; either version 2 of the License, or (at your
        !             8:  * option) any later version.  See <http://www.fsf.org/copyleft/gpl.txt>.
        !             9:  *
        !            10:  * This program is distributed in the hope that it will be useful, but
        !            11:  * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY
        !            12:  * or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License
        !            13:  * for more details.
        !            14:  */
        !            15: 
        !            16: #include "systime_fix_validator.h"
        !            17: 
        !            18: #include <errno.h>
        !            19: #include <time.h>
        !            20: 
        !            21: #include <daemon.h>
        !            22: 
        !            23: typedef struct private_systime_fix_validator_t private_systime_fix_validator_t;
        !            24: 
        !            25: /**
        !            26:  * Private data of an systime_fix_validator_t object.
        !            27:  */
        !            28: struct private_systime_fix_validator_t {
        !            29: 
        !            30:        /**
        !            31:         * Public systime_fix_validator_t interface.
        !            32:         */
        !            33:        systime_fix_validator_t public;
        !            34: 
        !            35:        /**
        !            36:         * Timestamp where we start to consider system time valid
        !            37:         */
        !            38:        time_t threshold;
        !            39: };
        !            40: 
        !            41: METHOD(cert_validator_t, check_lifetime, status_t,
        !            42:        private_systime_fix_validator_t *this, certificate_t *cert,
        !            43:        int pathlen, bool anchor, auth_cfg_t *auth)
        !            44: {
        !            45:        if (time(NULL) < this->threshold)
        !            46:        {
        !            47:                /* our system time seems to be invalid, accept certificate */
        !            48:                if (pathlen)
        !            49:                {       /* report only once per validated chain */
        !            50:                        DBG1(DBG_CFG, "system time out of sync, skipping certificate "
        !            51:                                 "lifetime check");
        !            52:                }
        !            53:                return SUCCESS;
        !            54:        }
        !            55:        /* validate this certificate normally */
        !            56:        return NEED_MORE;
        !            57: }
        !            58: 
        !            59: METHOD(systime_fix_validator_t, destroy, void,
        !            60:        private_systime_fix_validator_t *this)
        !            61: {
        !            62:        free(this);
        !            63: }
        !            64: 
        !            65: /**
        !            66:  * See header
        !            67:  */
        !            68: systime_fix_validator_t *systime_fix_validator_create(time_t threshold)
        !            69: {
        !            70:        private_systime_fix_validator_t *this;
        !            71: 
        !            72:        INIT(this,
        !            73:                .public = {
        !            74:                        .validator = {
        !            75:                                .check_lifetime = _check_lifetime,
        !            76:                        },
        !            77:                        .destroy = _destroy,
        !            78:                },
        !            79:                .threshold = threshold,
        !            80:        );
        !            81: 
        !            82:        return &this->public;
        !            83: }