BasicChecksUtils.h

Go to the documentation of this file.

#ifndef __BASICCHECKSUTILS_H__
#define __BASICCHECKSUTILS_H__

#include "PKIFdll.h"

#include <bitset>
#include <vector>

FD_LIST_PTR(CPKIFGeneralSubtree);
FD_SMART_PTR(CPKIFPolicyInformationSet);
FD_SMART_PTR(CPKIFPolicyMappings);
FD_SMART_PTR(CPKIFCertificate);
FD_SMART_PTR(CPKIFCertificateNodeListWithSourceInfo);
FD_LIST_PTR(CPKIFNameAndKeyWithScore);
FD_LIST_PTR(CPKIFPolicyInformation);
FD_LIST_PTR(CPKIFCertificateSource);

class CPKIFCertificatePath;
class CPKIFPathValidationResults;
class IPKIFCryptoRawOperations;
class IPKIFCryptoMisc;


void CAC_API FindErrorAndSetOnResults(const CPKIFCertificatePath& path, CPKIFPathValidationResults& results);

//utility functions related to NameConstraints
void CAC_API IntersectSubtrees(CPKIFGeneralSubtreeListPtr& authSetCondensed, CPKIFGeneralSubtreeListPtr& initSet, CPKIFGeneralSubtreeListPtr& userSet);
bool CheckNameConstraints(CPKIFCertificatePtr& curCert, CPKIFGeneralSubtreeListPtr& permSubtrees, CPKIFGeneralSubtreeListPtr& exclSubtrees, bool permSubtreesHasBeenSet);

//functions that operate on (complete) paths
bool CAC_API PathSigChecker(const CPKIFCertificatePath& path, IPKIFCryptoRawOperations* crypto, IPKIFCryptoMisc* cryptoMisc, CPKIFPathValidationResults& results);

//predicate function to facilitate use of smart pointer node
//removed export declarations 8/18/2004
bool IsEmpty(CPKIFCertificateNodeListWithSourceInfoPtr& node);
bool IsEmptyNameAndKey(CPKIFNameAndKeyWithScoreListPtr& node);
bool IsNullCertificateSourceList(CPKIFCertificateSourceListPtr& node);

//unary function to use with find_if when determining if rows in the authSet contain any policy
bool RowContainsAnyPolicy(const CPKIFPolicyInformationListPtr& test);

//function to produce the intersection of two sets
void CAC_API IntersectSets(CPKIFPolicyInformationListPtr& authSetCondensed, CPKIFPolicyInformationListPtr& initSet, CPKIFPolicyInformationListPtr& userSet);

//function to perform essentially all authSet-related policy processing
void AddPoliciesToAuthSet(const CPKIFPolicyInformationSetPtr& certPols, const std::bitset<3>& indicators,
                          std::vector<CPKIFPolicyInformationListPtr>& authSet, bool isSelfIssued, bool isIntermediate);

//function that processes policy mapping extensions
void ProcessPolicyMapping(const CPKIFPolicyMappingsPtr& policyMappings, const std::bitset<3>& indicators, 
                          std::vector<CPKIFPolicyInformationListPtr>& authSet);

//structure used when processing policy mapping
struct IssuerDomainMappingList
{
    IssuerDomainMappingList() {m_next = NULL; m_bProcessed = false;}
    CPKIFPolicyInformationPtr m_issuerDomain;
    CPKIFPolicyInformationList m_subjectDomains;
    bool m_bProcessed;
    struct IssuerDomainMappingList* m_next;
};
//class used to collect mappings
#include "CIssuerDomainMappingList.h"

//class used with find_if to determine if a row contains a particular policy set
#include "RowDoesContainPolicyInSet.h"




//class used with find_if to determine if a row does not contain a particular policy set
#include "RowDoesNotContainPolicyInSet.h"



//class used with find_if to determine if an entry in a row matches a given policy
//used when producing an intersection
#include "MatchesPolicy.h"



#endif