Branch data     Line data    Source code

       1                 :            : /* GIO - GLib Input, Output and Streaming Library
       2                 :            :  *
       3                 :            :  * Copyright © 2010 Collabora, Ltd
       4                 :            :  *
       5                 :            :  * SPDX-License-Identifier: LGPL-2.1-or-later
       6                 :            :  *
       7                 :            :  * This library is free software; you can redistribute it and/or
       8                 :            :  * modify it under the terms of the GNU Lesser General Public
       9                 :            :  * License as published by the Free Software Foundation; either
      10                 :            :  * version 2.1 of the License, or (at your option) any later version.
      11                 :            :  *
      12                 :            :  * This library is distributed in the hope that it will be useful,
      13                 :            :  * but WITHOUT ANY WARRANTY; without even the implied warranty of
      14                 :            :  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
      15                 :            :  * Lesser General Public License for more details.
      16                 :            :  *
      17                 :            :  * You should have received a copy of the GNU Lesser General
      18                 :            :  * Public License along with this library; if not, see <http://www.gnu.org/licenses/>.
      19                 :            :  *
      20                 :            :  * Author: Stef Walter <stefw@collabora.co.uk>
      21                 :            :  */
      22                 :            : 
      23                 :            : #include "config.h"
      24                 :            : 
      25                 :            : #include "gtlsfiledatabase.h"
      26                 :            : 
      27                 :            : #include "ginitable.h"
      28                 :            : #include "gtlsbackend.h"
      29                 :            : #include "gtlsdatabase.h"
      30                 :            : #include "glibintl.h"
      31                 :            : 
      32                 :            : /**
      33                 :            :  * GTlsFileDatabase:
      34                 :            :  *
      35                 :            :  * `GTlsFileDatabase` is implemented by [class@Gio.TlsDatabase] objects which
      36                 :            :  * load their certificate information from a file. It is an interface which
      37                 :            :  * TLS library specific subtypes implement.
      38                 :            :  *
      39                 :            :  * Since: 2.30
      40                 :            :  */
      41                 :            : 
      42   [ +  -  +  -  :          3 : G_DEFINE_INTERFACE (GTlsFileDatabase, g_tls_file_database, G_TYPE_TLS_DATABASE)
             +  -  +  - ]
      43                 :            : 
      44                 :            : static void
      45                 :          2 : g_tls_file_database_default_init (GTlsFileDatabaseInterface *iface)
      46                 :            : {
      47                 :            :   /**
      48                 :            :    * GTlsFileDatabase:anchors:
      49                 :            :    *
      50                 :            :    * The path to a file containing PEM encoded certificate authority
      51                 :            :    * root anchors. The certificates in this file will be treated as
      52                 :            :    * root authorities for the purpose of verifying other certificates
      53                 :            :    * via the g_tls_database_verify_chain() operation.
      54                 :            :    *
      55                 :            :    * Since: 2.30
      56                 :            :    */
      57                 :          2 :   g_object_interface_install_property (iface,
      58                 :            :                                        g_param_spec_string ("anchors", NULL, NULL,
      59                 :            :                                                            NULL,
      60                 :            :                                                            G_PARAM_READWRITE |
      61                 :            :                                                            G_PARAM_CONSTRUCT |
      62                 :            :                                                            G_PARAM_STATIC_STRINGS));
      63                 :          2 : }
      64                 :            : 
      65                 :            : /**
      66                 :            :  * g_tls_file_database_new:
      67                 :            :  * @anchors: (type filename): filename of anchor certificate authorities.
      68                 :            :  * @error: #GError for error reporting, or %NULL to ignore.
      69                 :            :  *
      70                 :            :  * Creates a new #GTlsFileDatabase which uses anchor certificate authorities
      71                 :            :  * in @anchors to verify certificate chains.
      72                 :            :  *
      73                 :            :  * The certificates in @anchors must be PEM encoded.
      74                 :            :  *
      75                 :            :  * Returns: (transfer full) (type GTlsFileDatabase): the new
      76                 :            :  * #GTlsFileDatabase, or %NULL on error
      77                 :            :  *
      78                 :            :  * Since: 2.30
      79                 :            :  */
      80                 :            : GTlsDatabase*
      81                 :          1 : g_tls_file_database_new (const gchar     *anchors,
      82                 :            :                          GError         **error)
      83                 :            : {
      84                 :            :   GObject *database;
      85                 :            :   GTlsBackend *backend;
      86                 :            : 
      87                 :          1 :   backend = g_tls_backend_get_default ();
      88                 :          1 :   database = g_initable_new (g_tls_backend_get_file_database_type (backend),
      89                 :            :                              NULL, error,
      90                 :            :                              "anchors", anchors,
      91                 :            :                              NULL);
      92                 :          1 :   return G_TLS_DATABASE (database);
      93                 :            : }