summaryrefslogtreecommitdiff
path: root/cpp/src/Ice/Security.h
blob: b5a04542abfab6291536381515085925daabf20a (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
// **********************************************************************
//
// Copyright (c) 2001
// MutableRealms, Inc.
// Huntsville, AL, USA
//
// All Rights Reserved
//
// **********************************************************************
#ifndef ICE_SECURITY_H
#define ICE_SECURITY_H

// NOTE: Define USE_SOCKETS in order to turn on use of sockets in OpenSSL
#ifndef USE_SOCKETS
#define USE_SOCKETS
#endif

#include <openssl/ssl.h>

namespace IceSecurity
{

typedef enum
{
    NO_SECURITY_TRACE = 0,
    SECURITY_WARNINGS,
    SECURITY_PARSE_WARNINGS,
    SECURITY_METHODS,
    SECURITY_EXCEPTIONS,
    SECURITY_PROTOCOL,
    SECURITY_PROTOCOL_DEBUG
} SecurityTraceLevel;

}

#define ICE_SECURITY_LOGGER(s) _logger->trace(_traceLevels->securityCat, s);

#ifdef ICE_SECURITY_DEBUG

#define ICE_SECURITY_LEVEL_METHODS (_traceLevels->security >= IceSecurity::SECURITY_METHODS)
#define ICE_SECURITY_LEVEL_PARSEWARNINGS (_traceLevels->security >= IceSecurity::SECURITY_PARSE_WARNINGS)
#define ICE_SECURITY_LEVEL_WARNINGS (_traceLevels->security >= IceSecurity::SECURITY_WARNINGS)
#define ICE_SECURITY_LEVEL_EXCEPTIONS (_traceLevels->security >= IceSecurity::SECURITY_EXCEPTIONS)
#define ICE_SECURITY_LEVEL_PROTOCOL (_traceLevels->security >= IceSecurity::SECURITY_PROTOCOL)
#define ICE_SECURITY_LEVEL_PROTOCOL_DEBUG (_traceLevels->security >= IceSecurity::SECURITY_PROTOCOL_DEBUG)

#define ICE_SECURITY_LEVEL_PROTOCOL_GLOBAL \
    (IceSecurity::Ssl::OpenSSL::System::_globalTraceLevels->security >= IceSecurity::SECURITY_PROTOCOL)

#define ICE_METHOD_INV(s) \
    if (ICE_SECURITY_LEVEL_METHODS) \
    { \
	ICE_SECURITY_LOGGER("INV " + string(s)); \
    }

#define ICE_METHOD_INS(s) \
    if (ICE_SECURITY_LEVEL_METHODS) \
    { \
	ICE_SECURITY_LOGGER("INS " + string(s)); \
    }

#define ICE_METHOD_RET(s) \
    if (ICE_SECURITY_LEVEL_METHODS) \
    { \
	ICE_SECURITY_LOGGER("RET " + string(s)); \
    }

#define ICE_PARSE_WARNING(s) \
    if (ICE_SECURITY_LEVEL_PARSEWARNINGS) \
    { \
	ICE_SECURITY_LOGGER("PWN " + string(s)); \
    }

#define ICE_WARNING(s) \
    if (ICE_SECURITY_LEVEL_WARNINGS) \
    { \
	ICE_SECURITY_LOGGER("WRN " + string(s)); \
    }

#define ICE_EXCEPTION(s) \
    if (ICE_SECURITY_LEVEL_EXCEPTIONS) \
    { \
	ICE_SECURITY_LOGGER("EXC " + string(s)); \
    }

#define ICE_PROTOCOL(s) \
    if (ICE_SECURITY_LEVEL_PROTOCOL) \
    { \
	ICE_SECURITY_LOGGER("PTL " + string(s)); \
    }

#define ICE_PROTOCOL_DEBUG(s) \
    if (ICE_SECURITY_LEVEL_PROTOCOL_DEBUG) \
    { \
	ICE_SECURITY_LOGGER("DBG " + string(s)); \
    }

#else

#define ICE_SECURITY_LEVEL_METHODS false
#define ICE_SECURITY_LEVEL_PARSEWARNINGS (_traceLevels->security >= IceSecurity::SECURITY_PARSE_WARNINGS)
#define ICE_SECURITY_LEVEL_WARNINGS (_traceLevels->security >= IceSecurity::SECURITY_WARNINGS)
#define ICE_SECURITY_LEVEL_EXCEPTIONS false
#define ICE_SECURITY_LEVEL_PROTOCOL false
#define ICE_SECURITY_LEVEL_PROTOCOL_DEBUG false
#define ICE_SECURITY_LEVEL_PROTOCOL_GLOBAL false

#define ICE_METHOD_INV(s)
#define ICE_METHOD_INS(s)
#define ICE_METHOD_RET(s)

#define ICE_PARSE_WARNING(s) \
    if (ICE_SECURITY_LEVEL_PARSEWARNINGS) \
    { \
	ICE_SECURITY_LOGGER("PWN " + string(s)); \
    }

#define ICE_WARNING(s) \
    if (ICE_SECURITY_LEVEL_WARNINGS) \
    { \
	ICE_SECURITY_LOGGER("WRN " + string(s)); \
    }

#define ICE_EXCEPTION(s)
#define ICE_PROTOCOL(s)
#define ICE_PROTOCOL_DEBUG(s)

#endif

#define ICE_SSLERRORS(s) \
    if (!s.empty()) \
    { \
        s += "\n"; \
        s += sslGetErrors(); \
    } \
    else \
    { \
        s = sslGetErrors(); \
    }

#endif