Results 1 to 2 of 2

Thread: a problem of using SSLPermissionsVerifier

  1. #1
    penzo is offline Registered User
    Name: Peng Zhao
    Organization: Beijing University of Posts and Telecommunications
    Project: using Glacier2 as a router or a firewall
    Join Date
    Apr 2008
    Posts
    2

    a problem of using SSLPermissionsVerifier

    Hello.
    I am studying Glacier2->Access Control. My program tool is Microsoft VS 2005. I modify the code in demo chat.
    When I try SSLPermissionsVerifier,Firstly,in client I create a session with the router like this:
    Code:
    session = ChatSessionPrx::uncheckedCast(_router->createSessionFromSecureConnection());
    Secondly I config the Glacier2 like this:
    Code:
    Glacier2.SSLPermissionsVerifier=verifier:tcp -h 127.0.0.1 -p 10002
    Thirdly,the verifer uses SSLPermissionsVerifierI::authorize function to decide the router whether to accept the connection of client.
    My problem is how the authorize function decide which client to accept. I try to write simple code as follows:
    Code:
    bool 
    SSLPermissionsVerifierI::authorize(const Glacier2::SSLInfo& info , std::string& reason, const Ice::Current&) const
    {
    	if (info.localHost == "192.168.102.65")
    	{
    		cout << "you are permitted!" << endl;
    		return true;
    	} 
    	else
    	{
    		reason = "you are not authorized!";
    		return false;
    	}	
    }
    Is that right? Does the client needs to install a Certificate? If so ,then how to install?
    Your answers will do me a good favor,thanks!

  2. #2
    matthew's Avatar
    matthew is offline ZeroC Staff
    Name: Matthew Newhook
    Organization: ZeroC, Inc.
    Project: Internet Communications Engine
    Join Date
    Feb 2003
    Location
    NL, Canada
    Posts
    1,458
    I'm afraid explaining all the intricacies of SSL is beyond the scope of the free support that we provide on this form.

    You only want to install an SSL permissions verified if you want to look at the clients credentials to determine authorization. Looking at the clients ip address isn't very useful!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •