aboutsummaryrefslogtreecommitdiffstats
path: root/src/qmail-remote/qmailr_tls.c
blob: 351401e0aa050c93f4636a46abf7c8a0478d34c9 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
/* ISC license. */

#include <stddef.h>

#include <smtpd-starttls-proxy/config.h>
#include "qmailr.h"

int qmailr_tls_init (qmailr_tls *qt, stralloc *sa)
{
  static char const *tafile = SMTPD_STARTTLS_PROXY_QMAIL_HOME "/control/trustanchors" ;
  static char const *certfile = SMTPD_STARTTLS_PROXY_QMAIL_HOME "/control/clientcert" ;
  static char const *keyfile = SMTPD_STARTTLS_PROXY_QMAIL_HOME "/control/clientkey" ;
  static char const *strictfile = SMTPD_STARTTLS_PROXY_QMAIL_HOME "/control/tlsstrictness" ;

  qmailr_tls tmp = QMAILR_TLS_ZERO ;
  size_t sabase = sa->len ;
  int r = qmailr_control_read(tafile, sa, &tmp.tapos) ;
  if (r == -1) return 0 ;
  if (r)
  {
    unsigned int strictness = 0 ;
    tmp.flagwanttls = 1 ;
    if (sa->s[sa->len - 2] == '/')
    {
      sa->s[--sa->len - 1] = 0 ;
      tmp.flagtadir = 1 ;
    }
    r = qmailr_control_read(certfile, sa, &tmp.certpos) ;
    if (r == -1) goto err ;
    if (r)
    {
      r = qmailr_control_read(keyfile, sa, &tmp.keypos) ;
      if (r == -1) goto err ;
      if (r) tmp.flagclientcert = 1 ;
    }
    r = qmailr_control_readint(strictfile, &strictness, sa) ;
    if (r == -1) goto err ;
    tmp.strictness = strictness & 3 ;
  }

  *qt = tmp ;
  return 1 ;

 err:
  sa->len = sabase ;
  return 0 ;
}