projects/linux·blob master · refs

54 lines · 1013 B

1/* SPDX-License-Identifier: GPL-2.0 */
2#ifndef _FS_CEPH_AUTH_X_H
3#define _FS_CEPH_AUTH_X_H
4
5#include <linux/rbtree.h>
6
7#include <linux/ceph/auth.h>
8
9#include "crypto.h"
10#include "auth_x_protocol.h"
11
12/*
13 * Handle ticket for a single service.
14 */
15struct ceph_x_ticket_handler {
16 struct rb_node node;
17 unsigned int service;
18
19 struct ceph_crypto_key session_key;
20 bool have_key;
21
22 u64 secret_id;
23 struct ceph_buffer *ticket_blob;
24
25 time64_t renew_after, expires;
26};
27
28#define CEPHX_AU_ENC_BUF_LEN 128 /* big enough for encrypted blob */
29
30struct ceph_x_authorizer {
31 struct ceph_authorizer base;
32 struct ceph_crypto_key session_key;
33 struct ceph_buffer *buf;
34 unsigned int service;
35 u64 nonce;
36 u64 secret_id;
37 char enc_buf[CEPHX_AU_ENC_BUF_LEN] __aligned(8);
38};
39
40struct ceph_x_info {
41 struct ceph_crypto_key secret;
42
43 bool starting;
44 u64 server_challenge;
45
46 unsigned int have_keys;
47 struct rb_root ticket_handlers;
48
49 struct ceph_x_authorizer auth_authorizer;
50};
51
52int ceph_x_init(struct ceph_auth_client *ac);
53
54#endif