Attachment 580148 Details for Bug 816174 – a test program

a test program

ldap_tls.c (text/x-csrc), 3.62 KB, created by Jakub Hrozek on 2012-04-25 12:31:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jakub Hrozek

Created: 2012-04-25 12:31:23 UTC

Size: 3.62 KB

patch

obsolete

>#include <ldap.h>
>#include <stdio.h>
>#include <popt.h>
>#include <errno.h>
>
>int main(int argc, const char *argv[])
>{
>    char *tls_opt = NULL;
>    char *cacert = NULL;
>    char *cacertdir = NULL;
>    char *certfile = NULL;
>    char *keyfile = NULL;
>    int ret;
>    int ldap_opt_x_tls_require_cert;
>    int is_listener = 0;
>    struct poptOption long_options[] = {
>        POPT_AUTOHELP
>        { "tls-req",  0, POPT_ARG_STRING, &tls_opt, 0, "Sets LDAP_OPT_X_TLS_REQUIRE_CERT", NULL },
>        { "cacert",  0, POPT_ARG_STRING, &cacert, 0, "Sets LDAP_OPT_X_TLS_CACERTFILE", NULL },
>        { "cacertdir",  0, POPT_ARG_STRING, &cacertdir, 0, "Sets LDAP_OPT_X_TLS_CACERTDIR", NULL },
>        { "certfile",  0, POPT_ARG_STRING, &certfile, 0, "Sets LDAP_OPT_X_TLS_CERTFILE", NULL },
>        { "keyfile",  0, POPT_ARG_STRING, &keyfile, 0, "Sets LDAP_OPT_X_TLS_KEYFILE", NULL },
>        POPT_TABLEEND
>    };
>    poptContext pc = NULL;
>
>    pc = poptGetContext(NULL, argc, argv, long_options, 0);
>
>    while ((ret = poptGetNextOpt(pc)) > 0)
>        ;
>
>    if (tls_opt) {
>        if (strcasecmp(tls_opt, "never") == 0) {
>            ldap_opt_x_tls_require_cert = LDAP_OPT_X_TLS_NEVER;
>        }
>        else if (strcasecmp(tls_opt, "allow") == 0) {
>            ldap_opt_x_tls_require_cert = LDAP_OPT_X_TLS_ALLOW;
>        }
>        else if (strcasecmp(tls_opt, "try") == 0) {
>            ldap_opt_x_tls_require_cert = LDAP_OPT_X_TLS_TRY;
>        }
>        else if (strcasecmp(tls_opt, "demand") == 0) {
>            ldap_opt_x_tls_require_cert = LDAP_OPT_X_TLS_DEMAND;
>        }
>        else if (strcasecmp(tls_opt, "hard") == 0) {
>            ldap_opt_x_tls_require_cert = LDAP_OPT_X_TLS_HARD;
>        }
>        else {
>            fprintf(stderr, "Unknown value for TLS reqcert\n");
>            return EINVAL;
>        }
>
>        ret = ldap_set_option(NULL, LDAP_OPT_X_TLS_REQUIRE_CERT,
>                              &ldap_opt_x_tls_require_cert);
>        if (ret != LDAP_OPT_SUCCESS) {
>            fprintf(stderr, "Failed to set LDAP_OPT_X_TLS_REQUIRE_CERT\n");
>            return EIO;
>        }
>        printf("tls_reqcert set to '%s'\n", tls_opt);
>    }
>
>    if (cacert) {
>        ret = ldap_set_option(NULL, LDAP_OPT_X_TLS_CACERTFILE, cacert);
>        if (ret != LDAP_OPT_SUCCESS) {
>            fprintf(stderr, "Failed to set LDAP_OPT_X_TLS_CACERTFILE\n");
>            return EIO;
>        }
>        printf("LDAP_OPT_X_TLS_CACERTFILE set to '%s'\n", cacert);
>    }
>
>    if (cacertdir) {
>        ret = ldap_set_option(NULL, LDAP_OPT_X_TLS_CACERTDIR, cacertdir);
>        if (ret != LDAP_OPT_SUCCESS) {
>            fprintf(stderr, "Failed to set LDAP_OPT_X_TLS_CACERTDIR\n");
>            return EIO;
>        }
>        printf("LDAP_OPT_X_TLS_CACERTDIR set to '%s'\n", cacertdir);
>    }
>
>    if (certfile) {
>        ret = ldap_set_option(NULL, LDAP_OPT_X_TLS_CERTFILE, certfile);
>        if (ret != LDAP_OPT_SUCCESS) {
>            fprintf(stderr, "Failed to set LDAP_OPT_X_TLS_CERTFILE\n");
>            return EIO;
>        }
>        printf("LDAP_OPT_X_TLS_CERTFILE set to '%s'\n", certfile);
>    }
>
>    if (keyfile) {
>        ret = ldap_set_option(NULL, LDAP_OPT_X_TLS_KEYFILE, keyfile);
>        if (ret != LDAP_OPT_SUCCESS) {
>            fprintf(stderr, "Failed to set LDAP_OPT_X_TLS_KEYFILE\n");
>            return EIO;
>        }
>        printf("LDAP_OPT_X_TLS_KEYFILE set to '%s'\n", keyfile);
>    }
>
>    ret = ldap_set_option(NULL, LDAP_OPT_X_TLS_CERTFILE, tls_opt);
>    ldap_set_option(NULL, LDAP_OPT_X_TLS_NEWCTX, &is_listener);
>    if (ret != LDAP_OPT_SUCCESS) {
>        fprintf(stderr, "Failed to initialize new context\n");
>        return EIO;
>    }
>    printf("New context initialized\n");
>
>    return 0;
>}

Actions: View

Attachments on bug 816174: 580148