BasicConstraintsViolation.cpp

Go to the documentation of this file.

#include "BasicConstraintsViolation.h"

#include "ToolkitUtils.h"               // for LOG_STRING_DEBUG
#include "components.h"

#include "BasicConstraints.h"
#include "PolicyMappings.h"
#include "PolicyInformationSet.h"
#include "AuthorityKeyIdentifier.h"
#include "Certificate.h"
#include "KeyUsage.h"
#include "ExtendedKeyUsage.h"
#include "PKIFCertificateNodeEntry.h"

BasicConstraintsViolation::BasicConstraintsViolation()
{
    m_numOfCAsBelowCurInPath = -1;
}
void BasicConstraintsViolation::SetCACount(
    int caCount)
{
    m_numOfCAsBelowCurInPath = caCount;
}
bool BasicConstraintsViolation::operator()(
    const CPKIFCertificateNodeEntryPtr& entry)
{
    LOG_STRING_DEBUG("BasicConstraintsViolation::operator()", TOOLKIT_PATH_MISC, 0, this);

    if(entry == (CPKIFCertificateNodeEntry*)NULL)
        return true;

    CPKIFCertificatePtr cert = entry->GetCert();
    if(cert == (CPKIFCertificate*)NULL)
        return true;

    CPKIFBasicConstraintsPtr basicConstraints = cert->GetExtension<CPKIFBasicConstraints>();
    if(basicConstraints != (CPKIFBasicConstraints*)NULL)
    {
        if(basicConstraints->pathLengthPresent())
        {
            if(m_numOfCAsBelowCurInPath >= 0 && basicConstraints->pathLength() < m_numOfCAsBelowCurInPath)
                return true;
        }
    }
    return false;
}