+++ /dev/null
-#include <map>
-
-#include "common/debug.h"
-#include "auth/RotatingKeyRing.h"
-#include "auth/KeyRing.h"
-
-#define dout_subsys ceph_subsys_auth
-#undef dout_prefix
-#define dout_prefix *_dout << "auth: "
-
-
-bool RotatingKeyRing::need_new_secrets() const
-{
- Mutex::Locker l(lock);
- return secrets.need_new_secrets();
-}
-
-bool RotatingKeyRing::need_new_secrets(utime_t now) const
-{
- Mutex::Locker l(lock);
- return secrets.need_new_secrets(now);
-}
-
-void RotatingKeyRing::set_secrets(RotatingSecrets&& s)
-{
- Mutex::Locker l(lock);
- secrets = std::move(s);
- dump_rotating();
-}
-
-void RotatingKeyRing::dump_rotating() const
-{
- ldout(cct, 10) << "dump_rotating:" << dendl;
- for (map<uint64_t, ExpiringCryptoKey>::const_iterator iter = secrets.secrets.begin();
- iter != secrets.secrets.end();
- ++iter)
- ldout(cct, 10) << " id " << iter->first << " " << iter->second << dendl;
-}
-
-bool RotatingKeyRing::get_secret(const EntityName& name, CryptoKey& secret) const
-{
- Mutex::Locker l(lock);
- return keyring->get_secret(name, secret);
-}
-
-bool RotatingKeyRing::get_service_secret(uint32_t service_id_, uint64_t secret_id,
- CryptoKey& secret) const
-{
- Mutex::Locker l(lock);
-
- if (service_id_ != this->service_id) {
- ldout(cct, 0) << "do not have service " << ceph_entity_type_name(service_id_)
- << ", i am " << ceph_entity_type_name(this->service_id) << dendl;
- return false;
- }
-
- map<uint64_t, ExpiringCryptoKey>::const_iterator iter =
- secrets.secrets.find(secret_id);
- if (iter == secrets.secrets.end()) {
- ldout(cct, 0) << "could not find secret_id=" << secret_id << dendl;
- dump_rotating();
- return false;
- }
-
- secret = iter->second.key;
- return true;
-}
-
-KeyRing *RotatingKeyRing::
-get_keyring()
-{
- return keyring;
-}