RepoMirrors/ceph
1
0
Fork 0
mirror of https://github.com/ceph/ceph synced 2025-01-10 21:20:46 +00:00
Code Issues Packages Projects Releases Wiki Activity

crimson/net: sign message and check it if authorizer is available

Browse Source 
Signed-off-by: Kefu Chai <kchai@redhat.com>
This commit is contained in:
Kefu Chai 2019-04-25 20:23:03 +08:00
parent 1d30bb4e79
commit 04786235c2
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
src/crimson/net/ProtocolV1.cc
View File

@ -657,6 +657,9 @@ seastar::future<> ProtocolV1::write_message(MessageRef msg)
auto& header = msg->get_header();
header.src = messenger.get_myname();
msg->encode(conn.features, messenger.get_crc_flags());
if (session_security) {
session_security->sign_message(msg.get());
}
bufferlist bl;
bl.append(CEPH_MSGR_TAG_MSG);
bl.append((const char*)&header, sizeof(header));
@ -774,6 +777,16 @@ seastar::future<> ProtocolV1::read_message()
::decode(m.footer, p);
auto msg = ::decode_message(nullptr, 0, m.header, m.footer,
m.front, m.middle, m.data, nullptr);
if (!msg) {
logger().debug("decode message failed");
return;
}
if (session_security) {
if (session_security->check_message_signature(msg)) {
logger().debug("signature check failed");
return;
}
}
// TODO: set time stamps
msg->set_byte_throttler(conn.policy.throttler_bytes);