cX509CrtExt.h

Go to the documentation of this file.

//
//
#ifndef _INC_cX509CrtExt_H
#define _INC_cX509CrtExt_H
#ifndef NO_PRAGMA_ONCE
#pragma once
#endif
 
#include "cX509Common.h"
#include "cX509Reader.h"
#include "../File/cASNSequence.h"
#include "../File/cASNSets.h"
 
namespace GrayLib
{
        enum X509_CRT_VERSION_TYPE
        {
                X509_CRT_VERSION_1 = 1,
                X509_CRT_VERSION_2 = 2,
                X509_CRT_VERSION_3 = 3,
        };
 
        class GRAYLIB_LINK cX509CrtExt
        {
        public:
                UINT32 m_uExtTypes;             
 
                bool m_bCAIsTrue;                               
                // maximum length of certificate chains below this certificate (only for CA certificates, -1 is unlimited)
                int m_nMaxPathLen;                              
 
                BYTE m_nKeyUsage;                               
 
                // (e.g. X509_NSCERT_SSL_CLIENT | X509_NSCERT_EMAIL)
                BYTE m_nNSCertType;                             
 
                cASNSequence m_SubjectAltNames; 
 
                cASNSequence m_ExtKeyUsage;             
 
        protected:
                static HRESULT GetStr_NSCertType(StrBuilder& s, BYTE nNSCertType);
                static HRESULT GetStr_KeyUsage(StrBuilder& s, BYTE nKeyUsage);
                static HRESULT GetStr_ExtKeyUsage(StrBuilder& s, const cASNSequence& rExtKeyUsage);
 
                HRESULT Read_BasicConstraints(cASNReader& r);
                HRESULT Read_KeyUsage(cASNReader& r);
                HRESULT Read_NSCertType(cASNReader& r);
                HRESULT Read_ExtKeyUsage(cASNReader& r);
                HRESULT Read_SubjectAltNames(cASNReader& r);
 
                HRESULT ReadExtensionList1(cASNReader& r);
 
                HRESULT Write_BasicConstraints(OUT cASNSets& sets) const;
                HRESULT Write_KeyUsage(OUT cASNSets& sets) const;
                HRESULT Write_NSCertType(OUT cASNSets& sets) const;
                HRESULT Write_ExtKeyUsage(OUT cASNSets& r) const;
                HRESULT Write_SubjectAltNames(OUT cASNSets& r) const;
 
        public:
                cX509CrtExt() noexcept
                        : m_uExtTypes(X509_EXT_Null)
                        , m_bCAIsTrue(false)
                        , m_nMaxPathLen(0)
                        , m_nKeyUsage(X509_KeyUsage_NONE)
                        , m_nNSCertType(X509_NSCERT_0)
                {
                }
                 
                bool HasExtType(X509_EXT_t e) const noexcept
                {
                        return m_uExtTypes & e;
                }
 
                void SetEmpty()
                {
                        m_uExtTypes = X509_EXT_Null;
                        m_ExtKeyUsage.SetEmptySeq();
                        m_SubjectAltNames.SetEmptySeq();
                }
 
                bool IsKeyUsageValid(X509_KeyUsage_TYPE usage) const
                {
                        //
                        if (this->HasExtType(X509_EXT_KeyUsage) &&
                                (this->m_nKeyUsage & usage) != usage)
                                return false;
                        return true;
                }
 
                bool IsExtKeyUsage(const char* usage_oid, size_t usage_len) const;
 
                HRESULT GetDescription(StrBuilder& s, const char* prefix) const;
 
                HRESULT ReadExtensionList(cX509Reader& r);
 
                void WriteExtensionList(OUT cASNSets& sets) const;
 
                static HRESULT GRAYCALL Write_SubjectKeyIdentifier(OUT cASNSets& sets, const cKeyWrap& rSubjectKey);
                static HRESULT GRAYCALL Write_AuthorityKeyIdentifier(OUT cASNSets& sets, const cKeyWrap& rIssuerKey);
        };
}
 
#endif // _INC_cX509CrtExt_H