diff options
Diffstat (limited to 'src/cli.c')
| -rw-r--r-- | src/cli.c | 106 |
1 files changed, 0 insertions, 106 deletions
@@ -99,19 +99,6 @@ static int comp_priority[PRI_MAX]; static int mac_priority[PRI_MAX]; static int cert_type_priority[PRI_MAX]; -#ifdef ENABLE_AUTHZ - -static int authz_client_formats[PRI_MAX]; -static int authz_server_formats[PRI_MAX] = { - GNUTLS_AUTHZ_X509_ATTR_CERT, - GNUTLS_AUTHZ_X509_ATTR_CERT_URL, - GNUTLS_AUTHZ_SAML_ASSERTION, - GNUTLS_AUTHZ_SAML_ASSERTION_URL, - 0 -}; - -#endif - /* end of global stuff */ /* prototypes */ @@ -382,94 +369,6 @@ cert_callback (gnutls_session_t session, } -#ifdef ENABLE_AUTHZ - -int -authz_send_callback (gnutls_session_t session, - const int *client_formats, - const int *server_formats) -{ - size_t i; - int ret; - - printf ("- Server authorization formats: "); - for (i = 0; server_formats[i]; i++) - printf ("%d ", server_formats[i]); - printf ("\n"); - - for (i = 0; client_formats[i]; i++) - { - if (client_formats[i] == GNUTLS_AUTHZ_X509_ATTR_CERT - && info.authz_x509_attr_cert) - { - size_t x509ac_len; - const char *x509ac = read_binary_file (info.authz_x509_attr_cert, - &x509ac_len); - if (!x509ac) - error (EXIT_FAILURE, errno, "%s", info.authz_x509_attr_cert); - - printf (" Sending X.509 Attribute Certificate\n"); - - ret = gnutls_authz_send_x509_attr_cert (session, - x509ac, x509ac_len); - if (ret < 0) - return ret; - } - - if (client_formats[i] == GNUTLS_AUTHZ_SAML_ASSERTION - && info.authz_saml_assertion) - { - size_t samlass_len; - const char *samlass = read_binary_file (info.authz_saml_assertion, - &samlass_len); - if (!samlass) - error (EXIT_FAILURE, errno, "%s", info.authz_saml_assertion); - - printf (" Sending SAML assertion\n"); - - ret = gnutls_authz_send_saml_assertion (session, - samlass, samlass_len); - if (ret < 0) - return ret; - } - } - - return 0; -} - -int -authz_recv_callback (gnutls_session_t session, - const int *authz_formats, - gnutls_datum_t *infos, - const int *hashtypes, - gnutls_datum_t *hash) -{ - size_t i, j; - - for (i = 0; authz_formats[i]; i++) - { - printf ("- Received authorization data, format %02x of %d bytes\n", - authz_formats[i], infos[i].size); - - printf (" data: "); - for (j = 0; j < infos[i].size; j++) - printf ("%02x", infos[i].data[j]); - printf ("\n"); - - if (hash[i].size > 0) - { - printf (" hash: "); - for (j = 0; j < hash[i].size; j++) - printf ("%02x", hash[i].data[j]); - printf (" type %02x\n", hashtypes[i]); - } - } - - return 0; -} - -#endif - /* initializes a gnutls_session_t with some defaults. */ static gnutls_session_t @@ -531,11 +430,6 @@ init_tls_session (const char *hostname) } } -#ifdef ENABLE_AUTHZ - gnutls_authz_enable (session, authz_client_formats, authz_server_formats, - authz_recv_callback, authz_send_callback); -#endif - return session; } |