diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-27 11:11:40 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-27 11:11:40 +0000 |
commit | 7731832751ab9f3c6ddeb66f186d3d7fa1934a6d (patch) | |
tree | e91015872543a59be2aad26c2fea02e41b57005d /contrib/ldapc++/examples/startTls.cpp | |
parent | Initial commit. (diff) | |
download | openldap-upstream/2.4.57+dfsg.tar.xz openldap-upstream/2.4.57+dfsg.zip |
Adding upstream version 2.4.57+dfsg.upstream/2.4.57+dfsgupstream
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to '')
-rw-r--r-- | contrib/ldapc++/examples/startTls.cpp | 79 |
1 files changed, 79 insertions, 0 deletions
diff --git a/contrib/ldapc++/examples/startTls.cpp b/contrib/ldapc++/examples/startTls.cpp new file mode 100644 index 0000000..cba59dd --- /dev/null +++ b/contrib/ldapc++/examples/startTls.cpp @@ -0,0 +1,79 @@ +// $OpenLDAP$ +/* + * Copyright 2010-2021 The OpenLDAP Foundation, All Rights Reserved. + * COPYING RESTRICTIONS APPLY, see COPYRIGHT file + */ + +#include <iostream> +#include <string> +#include "LDAPAsynConnection.h" +#include "TlsOptions.h" + +int main( int argc, char* argv[]){ + if ( argc != 4 ){ + std::cerr << "usage: " << argv[0] << " <ldap-uri> <cacertfile> <cacertdir>" << std::endl; + return(-1); + } + std::string uri(argv[1]); + std::string cacert(argv[2]); + std::string cadir(argv[3]); + TlsOptions tls; + std::cout << "Current global settings:" << std::endl; + std::cout << " CaCertfile: " << tls.getStringOption( TlsOptions::CACERTFILE) << std::endl; + std::cout << " CaCertDir: " << tls.getStringOption( TlsOptions::CACERTDIR ) << std::endl; + std::cout << " Require Cert: " << tls.getIntOption( TlsOptions::REQUIRE_CERT ) << std::endl; + std::cout << "Applying new settings:" << std::endl; + tls.setOption( TlsOptions::CACERTFILE, cacert ); + tls.setOption( TlsOptions::REQUIRE_CERT, TlsOptions::DEMAND ); + std::cout << " CaCertfile: " << tls.getStringOption( TlsOptions::CACERTFILE ) << std::endl; + std::cout << " Require Cert: " << tls.getIntOption( TlsOptions::REQUIRE_CERT ) << std::endl; + + try { + // 1. connect using global options + LDAPAsynConnection l(uri); + try { + l.start_tls(); + std::cout << "StartTLS successful." << std::endl; + l.unbind(); + } catch ( LDAPException e ) { + std::cerr << e << std::endl; + } + + // 2. connect using connection specific option + LDAPAsynConnection l1(uri); + tls=l1.getTlsOptions(); + std::cout << "Current connection specific settings:" << std::endl; + std::cout << " CaCertfile: " << tls.getStringOption( TlsOptions::CACERTFILE) << std::endl; + std::cout << " CaCertDir: " << tls.getStringOption( TlsOptions::CACERTDIR ) << std::endl; + std::cout << " Require Cert: " << tls.getIntOption( TlsOptions::REQUIRE_CERT ) << std::endl; + std::cout << "Applying new settings:" << std::endl; + tls.setOption( TlsOptions::CACERTDIR, cadir ); + tls.setOption( TlsOptions::REQUIRE_CERT, TlsOptions::DEMAND ); + std::cout << " CaCertDir: " << tls.getStringOption( TlsOptions::CACERTDIR ) << std::endl; + std::cout << " Require Cert: " << tls.getIntOption( TlsOptions::REQUIRE_CERT ) << std::endl; + try { + l1.start_tls(); + std::cout << "StartTLS successful." << std::endl; + l1.unbind(); + } catch ( LDAPException e ) { + std::cerr << e << std::endl; + } + + // 3. and once again using the globals + try { + LDAPAsynConnection l2(uri); + TlsOptions tls2; + std::cout << "Current global settings:" << std::endl; + std::cout << " CaCertfile: " << tls2.getStringOption( TlsOptions::CACERTFILE) << std::endl; + std::cout << " CaCertDir: " << tls2.getStringOption( TlsOptions::CACERTDIR ) << std::endl; + std::cout << " Require Cert: " << tls2.getIntOption( TlsOptions::REQUIRE_CERT ) << std::endl; + l2.start_tls(); + std::cout << "StartTLS successful." << std::endl; + l2.unbind(); + } catch ( LDAPException e ) { + std::cerr << e << std::endl; + } + } catch ( LDAPException e ) { + std::cerr << e << std::endl; + } +} |