1 /* SPDX-License-Identifier: GPL-2.0 */ 2 #ifndef _FS_CEPH_AUTH_X_H 3 #define _FS_CEPH_AUTH_X_H 4 5 #include <linux/rbtree.h> 6 7 #include <linux/ceph/auth.h> 8 9 #include "crypto.h" 10 #include "auth_x_protocol.h" 11 12 /* 13 * Handle ticket for a single service. 14 */ 15 struct ceph_x_ticket_handler { 16 struct rb_node node; 17 unsigned int service; 18 19 struct ceph_crypto_key session_key; 20 bool have_key; 21 22 u64 secret_id; 23 struct ceph_buffer *ticket_blob; 24 25 time64_t renew_after, expires; 26 }; 27 28 #define CEPHX_AU_ENC_BUF_LEN 128 /* big enough for encrypted blob */ 29 30 struct ceph_x_authorizer { 31 struct ceph_authorizer base; 32 struct ceph_crypto_key session_key; 33 struct ceph_buffer *buf; 34 unsigned int service; 35 u64 nonce; 36 u64 secret_id; 37 char enc_buf[CEPHX_AU_ENC_BUF_LEN] __aligned(8); 38 }; 39 40 struct ceph_x_info { 41 struct ceph_crypto_key secret; 42 43 bool starting; 44 u64 server_challenge; 45 46 unsigned int have_keys; 47 struct rb_root ticket_handlers; 48 49 struct ceph_x_authorizer auth_authorizer; 50 }; 51 52 int ceph_x_init(struct ceph_auth_client *ac); 53 54 #endif 55