X-Git-Url: https://gerrit.opnfv.org/gerrit/gitweb?a=blobdiff_plain;f=src%2Fceph%2Fsrc%2Fauth%2FRotatingKeyRing.h;fp=src%2Fceph%2Fsrc%2Fauth%2FRotatingKeyRing.h;h=729f5c52021277cb34d3a676fa50d35e2a5c888a;hb=812ff6ca9fcd3e629e49d4328905f33eee8ca3f5;hp=0000000000000000000000000000000000000000;hpb=15280273faafb77777eab341909a3f495cf248d9;p=stor4nfv.git

diff --git a/src/ceph/src/auth/RotatingKeyRing.h b/src/ceph/src/auth/RotatingKeyRing.h
new file mode 100644
index 0000000..729f5c5
--- /dev/null
+++ b/src/ceph/src/auth/RotatingKeyRing.h
@@ -0,0 +1,52 @@
+// -*- mode:C++; tab-width:8; c-basic-offset:2; indent-tabs-mode:t -*- 
+// vim: ts=8 sw=2 smarttab
+/*
+ * Ceph - scalable distributed file system
+ *
+ * Copyright (C) 2004-2009 Sage Weil <sage@newdream.net>
+ *
+ * This is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU Lesser General Public
+ * License version 2.1, as published by the Free Software 
+ * Foundation.  See file COPYING.
+ * 
+ */
+
+#ifndef CEPH_ROTATINGKEYRING_H
+#define CEPH_ROTATINGKEYRING_H
+
+#include "common/Mutex.h"
+#include "auth/Auth.h"
+
+/*
+ * mediate access to a service's keyring and rotating secrets
+ */
+
+class KeyRing;
+class CephContext;
+
+class RotatingKeyRing : public KeyStore {
+  CephContext *cct;
+  uint32_t service_id;
+  RotatingSecrets secrets;
+  KeyRing *keyring;
+  mutable Mutex lock;
+
+public:
+  RotatingKeyRing(CephContext *cct_, uint32_t s, KeyRing *kr) :
+    cct(cct_),
+    service_id(s),
+    keyring(kr),
+    lock("RotatingKeyRing::lock") {}
+
+  bool need_new_secrets() const;
+  bool need_new_secrets(utime_t now) const;
+  void set_secrets(RotatingSecrets&& s);
+  void dump_rotating() const;
+  bool get_secret(const EntityName& name, CryptoKey& secret) const override;
+  bool get_service_secret(uint32_t service_id, uint64_t secret_id,
+			  CryptoKey& secret) const override;
+  KeyRing *get_keyring();
+};
+
+#endif