This file is indexed.

/usr/include/libinfinity-0.7/libinfinity/common/inf-certificate-verify.h is in libinfinity-0.7-dev 0.7.1-1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
/* libinfinity - a GObject-based infinote implementation
 * Copyright (C) 2007-2015 Armin Burgmeier <armin@arbur.net>
 *
 * This library is free software; you can redistribute it and/or
 * modify it under the terms of the GNU Lesser General Public
 * License as published by the Free Software Foundation; either
 * version 2 of the License, or (at your option) any later version.
 *
 * This library is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
 * Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public
 * License along with this library; if not, write to the Free
 * Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */

#ifndef __INF_CERTIFICATE_VERIFY_H__
#define __INF_CERTIFICATE_VERIFY_H__

#include <libinfinity/common/inf-xmpp-connection.h>
#include <libinfinity/common/inf-xmpp-manager.h>

#include <glib-object.h>

G_BEGIN_DECLS

#define INF_TYPE_CERTIFICATE_VERIFY                 (inf_certificate_verify_get_type())
#define INF_CERTIFICATE_VERIFY(obj)                 (G_TYPE_CHECK_INSTANCE_CAST((obj), INF_TYPE_CERTIFICATE_VERIFY, InfCertificateVerify))
#define INF_CERTIFICATE_VERIFY_CLASS(klass)         (G_TYPE_CHECK_CLASS_CAST((klass), INF_TYPE_CERTIFICATE_VERIFY, InfCertificateVerifyClass))
#define INF_IS_CERTIFICATE_VERIFY(obj)              (G_TYPE_CHECK_INSTANCE_TYPE((obj), INF_TYPE_CERTIFICATE_VERIFY))
#define INF_IS_CERTIFICATE_VERIFY_CLASS(klass)      (G_TYPE_CHECK_CLASS_TYPE((klass), INF_TYPE_CERTIFICATE_VERIFY))
#define INF_CERTIFICATE_VERIFY_GET_CLASS(obj)       (G_TYPE_INSTANCE_GET_CLASS((obj), INF_TYPE_CERTIFICATE_VERIFY, InfCertificateVerifyClass))

#define INF_TYPE_CERTIFICATE_VERIFY_FLAGS           (inf_certificate_verify_flags_get_type())

typedef struct _InfCertificateVerify InfCertificateVerify;
typedef struct _InfCertificateVerifyClass InfCertificateVerifyClass;

/**
 * InfCertificateVerifyFlags:
 * @INF_CERTIFICATE_VERIFY_HOSTNAME_MISMATCH: The hostname of the
 * machine connected to does not match the one from the certificate.
 * @INF_CERTIFICATE_VERIFY_ISSUER_NOT_KNOWN: The issuer of the
 * certificate is not trusted, i.e. is not in the list of trusted CAs.
 * @INF_CERTIFICATE_VERIFY_NOT_PINNED: We have pinned a certificate for this
 * host, but the certificate presented is a different one.
 *
 * Various flags for why a certificate is not trusted.
 */
typedef enum _InfCertificateVerifyFlags {
  INF_CERTIFICATE_VERIFY_HOSTNAME_MISMATCH  = 1 << 0,
  INF_CERTIFICATE_VERIFY_ISSUER_NOT_KNOWN   = 1 << 1,
  INF_CERTIFICATE_VERIFY_NOT_PINNED         = 1 << 2
} InfCertificateVerifyFlags;

/**
 * InfCertificateVerifyClass:
 * @check_certificate: Default signal handler for the
 * #InfCertificateVerify::check-certificate signal.
 *
 * This structure contains default signal handlers for #InfCertificateVerify.
 */
struct _InfCertificateVerifyClass {
  /*< private >*/
  GObjectClass parent_class;

  /*< public >*/
  void (*check_certificate)(InfCertificateVerify* verify,
                            InfXmppConnection* connection,
                            InfCertificateChain* certificate_chain,
                            gnutls_x509_crt_t pinned_certificate,
                            InfCertificateVerifyFlags flags);

  void (*check_cancelled)(InfCertificateVerify* verify,
                          InfXmppConnection* connection);
};

/**
 * InfCertificateVerify:
 *
 * #InfCertificateVerify is an opaque data type. You should only access it
 * via the public API functions.
 */
struct _InfCertificateVerify {
  /*< private >*/
  GObject parent;
};

GType
inf_certificate_verify_flags_get_type(void) G_GNUC_CONST;

GType
inf_certificate_verify_get_type(void) G_GNUC_CONST;

InfCertificateVerify*
inf_certificate_verify_new(InfXmppManager* xmpp_manager,
                           const gchar* known_hosts_file);

void
inf_certificate_verify_checked(InfCertificateVerify* verify,
                               InfXmppConnection* connection,
                               gboolean result);

G_END_DECLS

#endif /* __INF_CERTIFICATE_VERIFY_H__ */

/* vim:set et sw=2 ts=2: */