GLOBUS_GSI_CALLBACK_FUNCTIONS(3)

💖 globus_gsi_callback_functions — Callback Functions 💖

okay bestie, so this is a page from the Library Functions Manual, section 3 — that's the one for library calls, iykyk. The whole thing is globus_gsi_callback_functions(3), and it's basically the group chat where OpenSSL's path validation meets Globus's GSI ✨ stuff. Sit down, hydrate, let's go 🫶

---

🌸 NAME 🌸

globus_gsi_callback_functions — Callback Functions

• Callback Functions.

---

✨ SYNOPSIS ✨

🎀 Functions

• globus_result_t globus_gsi_callback_get_X509_STORE_callback_data_index (int *index) — Get callback data index from X509_STORE.
• globus_result_t globus_gsi_callback_get_SSL_callback_data_index (int *index) — Get callback data index from SSL structure.
• int globus_gsi_callback_X509_verify_cert (X509_STORE_CTX *context, void *arg) — Certificate verify wrapper.
• int globus_gsi_callback_create_proxy_callback (int preverify_ok, X509_STORE_CTX *x509_context) — Independent path validation callback.
• int globus_gsi_callback_handshake_callback (int preverify_ok, X509_STORE_CTX *x509_context) — SSL path validation callback.
• int globus_gsi_callback_check_issued (X509_STORE_CTX *context, X509 *cert, X509 *issuer) — OpenSSL X509_check_issued() wrapper.

---

🌈 Detailed Description 🌈

Callback Functions.

These are the little functions that plug into all the various plug points 🧚 in the OpenSSL path validation mechanism. Like, they slide in and add CRL checking, X509 Extension handling, and proxy validation. That's the whole vibe. no cap. 💅

---

👑 Function Documentation 👑

💜 int globus_gsi_callback_check_issued (X509_STORE_CTX * context, X509 * cert, X509 * issuer)

OpenSSL X509_check_issued() wrapper. So this one wraps the OpenSSL X509_check_issued() call and catches the error that happens because a proxy certificate issuer might not have to have the correct KeyUsage fields set. it's giving "rules were made to be bent" but for certs 💀

Parameters

• context — The validation state object.
• cert — The certificate to check
• issuer — The issuer certificate to check

Returns

1 on success, 0 on failure

---

🦋 int globus_gsi_callback_create_proxy_callback (int preverify_ok, X509_STORE_CTX * x509_context)

Independent path validation callback. This function provides a path validation callback for validation outside of a SSL session. It should be used in X509_STORE_set_verify_cb_func().

Parameters

• preverify_ok — Communicates the result of default validation steps performed by OpenSSL
• x509_context — The validation state object

Returns

1 on success, 0 on failure

---

🍓 globus_result_t globus_gsi_callback_get_SSL_callback_data_index (int * index)

Get callback data index from SSL structure. Retrieve or create the index for our callback data structure in the SSL structure. iconic behavior honestly ✨

Parameters

• index — Will contain the index upon return

Returns

GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned

---

🌸 globus_result_t globus_gsi_callback_get_X509_STORE_callback_data_index (int * index)

Get callback data index from X509_STORE. Retrieve or create the index for our callback data structure in the X509_STORE.

Parameters

• index — Will contain the index upon return

Returns

GLOBUS_SUCCESS unless an error occurred, in which case, a globus error object ID is returned

---

⭐ int globus_gsi_callback_handshake_callback (int preverify_ok, X509_STORE_CTX * x509_context)

SSL path validation callback. This function provides a path validation callback for the validation part of establishing a SSL session. It handles proxy certificates, X509 Extensions and CRL checking. It should be used in SSL_CTX_set_verify(). main character callback fr fr 💅

Parameters

• preverify_ok — Communicates the result of default validation steps performed by OpenSSL
• x509_context — The validation state object.

Returns

1 on success, 0 on failure

---

🎀 int globus_gsi_callback_X509_verify_cert (X509_STORE_CTX * context, void * arg)

Certificate verify wrapper. This function wraps the OpenSSL certificate verification callback for the purpose of replacing the standard issuer check with one that deals with proxy certificates. Should be used with SSL_CTX_set_cert_verify_callback().

Parameters

• context — The X509_STORE_CTX for which to register the callback.
• arg — Arguments to the callback. Currently ignored. 🙈

Returns

1 on success, 0 on failure

---

🫶 Author 🫶

Generated automatically by Doxygen for globus_gsi_callback from the source code. (not a human, just a robot doing its lil thing 🤖✨)

---

lowkey the whole point: these callbacks are how you make OpenSSL's path validation understand proxy certs and CRLs. plug them in at the right spots and you're golden 💖

okay that's the page!! ty for reading, mwah 💋 this was globus_gsi_callback, Version 6.2, straight from the globus_gsi_callback source — slay, periodt. 🎀✨🦋