Zabbix

/*

** Copyright (C) 2001-2025 Zabbix SIA

**

** This program is free software: you can redistribute it and/or modify it under the terms of

** the GNU Affero General Public License as published by the Free Software Foundation, version 3.

**

** This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY;

** without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

** See the GNU Affero General Public License for more details.

**

** You should have received a copy of the GNU Affero General Public License along with this program.

** If not, see <https://www.gnu.org/licenses/>.

**/

​

#include "hashicorp.h"

#include "zbxcommon.h"

​

#include "zbxkvs.h"

#include "zbxjson.h"

#include "zbxtime.h"

#include "zbxhttp.h"

#include "zbxstr.h"

#include "zbxnum.h"

​

int zbx_hashicorp_kvs_get(const char *vault_url, const char *prefix, const char *token, const char *ssl_cert_file,

        const char *ssl_key_file, const char *config_source_ip, const char *config_ssl_ca_location,

        const char *config_ssl_cert_location, const char *config_ssl_key_location, const char *path,

        long timeout, zbx_kvs_t *kvs, char **error)

{

#ifndef HAVE_LIBCURL

    ZBX_UNUSED(vault_url);

    ZBX_UNUSED(prefix);

    ZBX_UNUSED(token);

    ZBX_UNUSED(ssl_cert_file);

    ZBX_UNUSED(ssl_key_file);

    ZBX_UNUSED(path);

    ZBX_UNUSED(timeout);

    ZBX_UNUSED(config_source_ip);

    ZBX_UNUSED(config_ssl_ca_location);

    ZBX_UNUSED(config_ssl_cert_location);

    ZBX_UNUSED(config_ssl_key_location);

    ZBX_UNUSED(kvs);

    *error = zbx_dsprintf(*error, "missing cURL library");

    return FAIL;

#else

    char            *out = NULL, *url, header[MAX_STRING_LEN], *left, *right;

    struct zbx_json_parse   jp, jp_data, jp_data_data;

    int         ret = FAIL;

    long            response_code;

​

    if (NULL == token)

    {

        *error = zbx_dsprintf(*error, "\"VaultToken\" configuration parameter or \"VAULT_TOKEN\" environment"

                " variable should be defined");

        return FAIL;

    }

​

    if (NULL == prefix || '\0' == *prefix)

    {

        zbx_strsplit_first(path, '/', &left, &right);

​

        if (NULL == right)

        {

            *error = zbx_dsprintf(*error, "cannot find separator \"\\\" in path");

            free(left);

            return FAIL;

        }

        url = zbx_dsprintf(NULL, "%s/v1/%s/data/%s", vault_url, left, right);

​

        zbx_free(right);

        zbx_free(left);

    }

    else

        url = zbx_dsprintf(NULL, "%s%s%s", vault_url, prefix, path);

​

    zbx_snprintf(header, sizeof(header), "X-Vault-Token: %s", token);

​

    if (SUCCEED != zbx_http_req(url, header, timeout, ssl_cert_file, ssl_key_file, config_source_ip,

            config_ssl_ca_location, config_ssl_cert_location, config_ssl_key_location, &out, NULL,

            &response_code, error))

    {

        goto fail;

    }

​

    if (200 != response_code && 204 != response_code)

    {

        *error = zbx_dsprintf(*error, "unsuccessful response code \"%ld\"", response_code);

        goto fail;

    }

​

    if (SUCCEED != zbx_json_open(out, &jp))