cX509Crt.h

Go to the documentation of this file.

//
//
#ifndef _INC_cX509Crt_H
#define _INC_cX509Crt_H
#ifndef NO_PRAGMA_ONCE
#pragma once
#endif
 
#include "cX509CrtExt.h"
#include "cX509Crl.h"
#include "cX509Reader.h"
#include "../File/cASNSequence.h"
#include "../File/cASNSets.h"
 
namespace GrayLib
{
        class GRAYLIB_LINK cX509Crt : public cX509Common
        {
 
                typedef cX509Common SUPER_t;
 
        public:
                static const char* k_pszPEM;    
 
                cASNBufAlloc m_SerialNumber;    
 
                cASNSets m_issuer;                              
 
                cTimeUnits m_tValidFrom;                
                cTimeUnits m_tValidTo;                  
 
                cASNBuf m_subject_raw;                  
                cASNSets m_subject;                             
 
                cKeyWrap m_SubjectPublicKey;    
 
                cASNBuf m_issuer_id;                    
                cASNBuf m_subject_id;                   
 
                cX509CrtExt m_Ext;                              
 
                cRefPtr<cX509Crt> m_pNextCrt;     
 
        private:
                virtual HRESULT ReadFromDer1(const BYTE* pBuffer, size_t buflen) override;
        
                void SetEmptyX1();
 
                static bool VertifyCN_Wildcard(const char* cn, const cASNBuf& name);
                bool VerifyCN(const char* cn) const;
 
                bool IsMyParent(const cX509Crt* pCrtParent) const;
                bool VerifyCrtIsMyParent(const cX509Crt* parent, bool top, bool bottom) const;
 
                HRESULT VerifyCrtTop(const cX509Crt* pCrtCA, const cX509Crl* pCrl, int path_cnt, OUT X509_Verify_t& rFlags, IX509VerifyCert* pVerifyCert) const;
                HRESULT VerifyCrtChild(const cX509Crt* parent, const cX509Crt* pCrtCA, const cX509Crl* pCrl, int path_cnt, OUT X509_Verify_t&  rFlags, IX509VerifyCert* pVerifyCert) const;
 
        public:
                cX509Crt() noexcept
                        : m_pNextCrt(nullptr)
                {
                }
 
                ~cX509Crt()
                {
                        SetEmptyX();
                }
 
                void put_SerialNumber(const cBigUnsigned& serial)
                {
                        this->m_SerialNumber.SetAlloc(ASN_INTEGER, serial.get_BinarySize(), serial.get_BlockPtrC());
                }
 
                virtual HRESULT GetDescription(StrBuilder& s, const char* prefix) const override;
 
                X509_Verify_t VerifyKeyUsage(X509_KeyUsage_TYPE usage, bool bEndpointIsServer) const;
 
                virtual HRESULT ReadFromDER(const BYTE* pBuffer, size_t buflen) override;
                virtual HRESULT ReadFromUnk(const BYTE* pBuffer, size_t buflen) override;
 
                //
                HRESULT ReadCrtsFromDir(const FILECHAR_t* pszCertDir);
 
                //
                static HRESULT GetVerifyStatusText(StrBuilder& s, const char* prefix, X509_Verify_t flags);
 
                X509_Verify_t VerifyCrl(const cX509Crt* pCrtCA, const cX509Crl* pCrl) const;
 
                HRESULT VerifyCrt(const cX509Crt* pCrtCA, const cX509Crl* pCrl, const char* cn, OUT X509_Verify_t& rFlags, IX509VerifyCert* pVerifyCert) const;
 
                virtual void SetEmptyX() override;
 
                HRESULT WriteToDER(BYTE* pBuffer, size_t size, const cASNSets& extensions2, const cKeyWrap& rIssuerKey, IRandomNoise* pRandom);
 
                HRESULT WriteToPEM(char* pOut, StrLen_t size, const cASNSets& extensions2, const cKeyWrap& rIssuerKey, IRandomNoise* pRandom);
 
                UNITTEST_FRIEND(cX509Crt);
        };
}
 
#endif // _INC_cX509Crt_H