X-Git-Url: http://ftp.carnet.hr/carnet-debian/scm?p=ossec-hids.git;a=blobdiff_plain;f=src%2Fos_auth%2Fauth.h;fp=src%2Fos_auth%2Fauth.h;h=eeacb60f7e16860ec7a2224d97363ebe7f4a748e;hp=08f76c7fc1d38bd012a28a6937fb8014bac9f392;hb=3f728675941dc69d4e544d3a880a56240a6e394a;hpb=927951d1c1ad45ba9e7325f07d996154a91c911b diff --git a/src/os_auth/auth.h b/src/os_auth/auth.h old mode 100755 new mode 100644 index 08f76c7..eeacb60 --- a/src/os_auth/auth.h +++ b/src/os_auth/auth.h @@ -1,6 +1,3 @@ -/* @(#) $Id: ./src/os_auth/auth.h, 2011/09/08 dcid Exp $ - */ - /* Copyright (C) 2009 Trend Micro Inc. * All rights reserved. * @@ -25,33 +22,38 @@ * */ - #ifndef _AUTHD_H #define _AUTHD_H #ifndef ARGV0 - #define ARGV0 "ossec-authd" +#define ARGV0 "ossec-authd" #endif #include #include #include -#include - -#ifdef USE_OPENSSL -void *os_ssl_keys(int isclient, char *dir); +#ifdef LIBOPENSSL_ENABLED #include #include #include + #include "os_net/os_net.h" #include "addagent/manage_agents.h" -BIO *bio_err; +extern BIO *bio_err; #define KEYFILE "/etc/sslmanager.key" -#define CERTFILE "/etc/sslmanager.cert" +#define CERTFILE "/etc/sslmanager.cert" +#define DEFAULT_CIPHERS "HIGH:!ADH:!EXP:!MD5:!RC4:!3DES:!CAMELLIA:@STRENGTH" +#define DEFAULT_PORT "1515" -#endif +SSL_CTX *os_ssl_keys(int is_server, const char *os_dir, const char *ciphers, const char *cert, const char *key, const char *ca_cert); +SSL_CTX *get_ssl_context(const char *ciphers); +int load_cert_and_key(SSL_CTX *ctx, const char *cert, const char *key); +int load_ca_cert(SSL_CTX *ctx, const char *ca_cert); +int verify_callback(int ok, X509_STORE_CTX *store); + +#endif /* LIBOPENSSL_ENABLED */ +#endif /* _AUTHD_H */ -#endif