XrdTlsCrl Namespace Reference

Functions
void *	Refresh (void *parg)

Function Documentation

Refresh()

void* XrdTlsCrl::Refresh

(

void *

parg

)

Definition at line 198 of file XrdTlsContext.cc.

{
   EPNAME("Refresh");
   int sleepTime;
   bool doreplace;
 
// Get the implementation details
//
   XrdTlsContextImpl *ctxImpl = static_cast<XrdTlsContextImpl*>(parg);
 
// Indicate we have started in the trace record
//
   DBG_CTX("CRL refresh started.")
 
// Do this forever but first get the sleep time
//
do{ctxImpl->crlMutex.ReadLock();
   sleepTime = ctxImpl->Parm.crlRT;
   ctxImpl->crlMutex.UnLock();
 
// We may have been cancelled, in which case we just exit
//
   if (!sleepTime)
      {ctxImpl->crlMutex.WriteLock();
       ctxImpl->crlRunning = false;
       ctxImpl->crlMutex.UnLock();
       DBG_CTX("CRL refresh ending by request!");
       return (void *)0;
      }
 
// Indicate we how long before a refresh
//
   DBG_CTX("CRL refresh will happen in " <<sleepTime <<" seconds.");
 
// Now sleep the request amount of time
//
   XrdSysTimer::Snooze(sleepTime);
 
   if (ctxImpl->owner->x509Verify() || ctxImpl->owner->newHostCertificateDetected()) {
       // Check if this context is still alive. Generally, it never gets deleted.
       //
       ctxImpl->crlMutex.WriteLock();
       if (!ctxImpl->owner) break;
 
       // We clone the original, this will give us the latest crls (i.e. refreshed).
       // We drop the lock while doing so as this may take a long time. This is
       // completely safe to do because we implicitly own the implementation.
       //
       ctxImpl->crlMutex.UnLock();
       XrdTlsContext *newctx = ctxImpl->owner->Clone();
 
       // Verify that the context was properly built
       //
       if (!newctx || !newctx->isOK())
       {XrdTls::Emsg("CrlRefresh:","Refresh of context failed!!!",false);
           continue;
       }
 
       // OK, set the new context to be used next time Session() is called.
       //
       ctxImpl->crlMutex.WriteLock();
       doreplace = (ctxImpl->ctxnew != 0);
       if (doreplace) delete ctxImpl->ctxnew;
       ctxImpl->ctxnew = newctx;
       ctxImpl->crlMutex.UnLock();
 
       // Do some debugging
       //
       if (doreplace) {DBG_CTX("CRL refresh created replacement x509 store.");}
       else {DBG_CTX("CRL refresh created new x509 store.");}
   }
  } while(true);
 
// If we are here the context that started us has gone away and we are done
//
   bool keepctx = ctxImpl->flsRunning;
   ctxImpl->crlRunning = false;
   ctxImpl->crlMutex.UnLock();
   if (!keepctx) delete ctxImpl;
   return (void *)0;
}

References XrdTlsContext::Clone(), XrdTlsContextImpl::crlMutex, XrdTlsContext::CTX_Params::crlRT, XrdTlsContextImpl::crlRunning, XrdTlsContextImpl::ctxnew, DBG_CTX, XrdTls::Emsg(), EPNAME, XrdTlsContextImpl::flsRunning, XrdTlsContext::isOK(), XrdTlsContext::newHostCertificateDetected(), XrdTlsContextImpl::owner, XrdTlsContextImpl::Parm, XrdSysRWLock::ReadLock(), XrdSysTimer::Snooze(), XrdSysRWLock::UnLock(), XrdSysRWLock::WriteLock(), and XrdTlsContext::x509Verify().

Referenced by XrdDigAuth::Authorize(), and XrdTlsContext::SetCrlRefresh().

Here is the call graph for this function:

Here is the caller graph for this function: