vasilito
cee25393d8
- Fix P15-8-init-cycle-detection.patch: replace visiting+error with seen+silent-skip to eliminate 11 false-positive 'dependency cycle detected' errors on shared deps - Fix P0-daemon-fix-init-notify-unwrap.patch: remove eprintln! for missing INIT_NOTIFY (expected for oneshot_async services, ~7 daemons affected) - Fix driver-manager hotplug loop: add PERMANENTLY_SKIPPED static set shared between hotplug handler and DriverConfig::probe() to stop infinite re-probing of Fatal/NotSupported/deferred-exhausted device+driver pairs (e.g. ided) - Fix driver-manager log_timeline: suppress repeated EPIPE/ENOENT errors with AtomicI32 dedup and AtomicBool one-shot guards for boot timeline JSON - Add driver-manager SIGTERM handler, ACPI bus registration, --status mode, driver reap loop, graceful shutdown, and reduced deferred retries (30→3)
94 lines
3.0 KiB
C
94 lines
3.0 KiB
C
/* GIO - GLib Input, Output and Streaming Library
|
|
*
|
|
* Copyright © 2010 Collabora, Ltd
|
|
*
|
|
* SPDX-License-Identifier: LGPL-2.1-or-later
|
|
*
|
|
* This library is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU Lesser General Public
|
|
* License as published by the Free Software Foundation; either
|
|
* version 2.1 of the License, or (at your option) any later version.
|
|
*
|
|
* This library is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
|
* Lesser General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU Lesser General
|
|
* Public License along with this library; if not, see <http://www.gnu.org/licenses/>.
|
|
*
|
|
* Author: Stef Walter <stefw@collabora.co.uk>
|
|
*/
|
|
|
|
#include "config.h"
|
|
|
|
#include "gtlsfiledatabase.h"
|
|
|
|
#include "ginitable.h"
|
|
#include "gtlsbackend.h"
|
|
#include "gtlsdatabase.h"
|
|
#include "glibintl.h"
|
|
|
|
/**
|
|
* GTlsFileDatabase:
|
|
*
|
|
* `GTlsFileDatabase` is implemented by [class@Gio.TlsDatabase] objects which
|
|
* load their certificate information from a file. It is an interface which
|
|
* TLS library specific subtypes implement.
|
|
*
|
|
* Since: 2.30
|
|
*/
|
|
|
|
G_DEFINE_INTERFACE (GTlsFileDatabase, g_tls_file_database, G_TYPE_TLS_DATABASE)
|
|
|
|
static void
|
|
g_tls_file_database_default_init (GTlsFileDatabaseInterface *iface)
|
|
{
|
|
/**
|
|
* GTlsFileDatabase:anchors:
|
|
*
|
|
* The path to a file containing PEM encoded certificate authority
|
|
* root anchors. The certificates in this file will be treated as
|
|
* root authorities for the purpose of verifying other certificates
|
|
* via the g_tls_database_verify_chain() operation.
|
|
*
|
|
* Since: 2.30
|
|
*/
|
|
g_object_interface_install_property (iface,
|
|
g_param_spec_string ("anchors", NULL, NULL,
|
|
NULL,
|
|
G_PARAM_READWRITE |
|
|
G_PARAM_CONSTRUCT |
|
|
G_PARAM_STATIC_STRINGS));
|
|
}
|
|
|
|
/**
|
|
* g_tls_file_database_new:
|
|
* @anchors: (type filename): filename of anchor certificate authorities.
|
|
* @error: #GError for error reporting, or %NULL to ignore.
|
|
*
|
|
* Creates a new #GTlsFileDatabase which uses anchor certificate authorities
|
|
* in @anchors to verify certificate chains.
|
|
*
|
|
* The certificates in @anchors must be PEM encoded.
|
|
*
|
|
* Returns: (transfer full) (type GTlsFileDatabase): the new
|
|
* #GTlsFileDatabase, or %NULL on error
|
|
*
|
|
* Since: 2.30
|
|
*/
|
|
GTlsDatabase*
|
|
g_tls_file_database_new (const gchar *anchors,
|
|
GError **error)
|
|
{
|
|
GObject *database;
|
|
GTlsBackend *backend;
|
|
|
|
backend = g_tls_backend_get_default ();
|
|
database = g_initable_new (g_tls_backend_get_file_database_type (backend),
|
|
NULL, error,
|
|
"anchors", anchors,
|
|
NULL);
|
|
return G_TLS_DATABASE (database);
|
|
}
|