CAPICRLUpdate2.cpp

Go to the documentation of this file.

#include "CAPICRLUpdate2.h"
#include "CAPIUtils.h"
#include "ToolkitUtils.h"
#include "PKIFCacheErrors.h"
#include "PKIFMediators.h"
#include "PKIFCacheException.h"
#include "IPKIFTrustCache.h"

#include "Buffer.h"
#include "CRL.h"

#include <atlbase.h>
#include <sstream>


struct CPKIFCAPICRLUpdate2Impl
{
    HCERTSTORE m_hSto;
    bool m_bSuppressUpdateErrors;
    int m_nSysStoRegLoc;
    char* m_szStore;
};

CPKIFCAPICRLUpdate2::CPKIFCAPICRLUpdate2(
    int sysStoRegLoc,
    const char* store)
    :m_impl (new CPKIFCAPICRLUpdate2Impl), IPKIFCAPISource(sysStoRegLoc, store)
{
    LOG_STRING_DEBUG("CPKIFCAPICRLUpdate2::CPKIFCAPICRLUpdate2(void)", TOOLKIT_SR_CAPICRLUPDATE, 0, this);

    m_impl->m_hSto = NULL;
    m_impl->m_bSuppressUpdateErrors = true;

    m_impl->m_nSysStoRegLoc = sysStoRegLoc;

    m_impl->m_szStore = NULL;
    size_t len = 0;
    if(store)
    {
        len = strlen(store);
        m_impl->m_szStore = new char[len + 1];

        //reviewed 4/24
        strcpy(m_impl->m_szStore, store);
    }
}
CPKIFCAPICRLUpdate2::~CPKIFCAPICRLUpdate2(void)
{
    LOG_STRING_DEBUG("CPKIFCAPICRLUpdate2::~CPKIFCAPICRLUpdate2(void)", TOOLKIT_SR_CAPICRLUPDATE, 0, this);

    if(m_impl->m_szStore)
        delete[] m_impl->m_szStore;

    if(NULL != m_impl->m_hSto)
    {
        CertCloseStore(m_impl->m_hSto, 0); m_impl->m_hSto = NULL;
    }

    delete m_impl;
    m_impl = NULL;
}
void CPKIFCAPICRLUpdate2::Initialize(void)
{
    LOG_STRING_DEBUG("CPKIFCAPICRLUpdate2::Initialize(void)", TOOLKIT_SR_CAPICRLUPDATE, 0, this);

    if(NULL != m_impl->m_hSto)
    {
        LOG_STRING_WARN("Skipping initialization - CPKIFCAPICRLUpdate2 instance already initialized", TOOLKIT_SR_CAPIREPOSITORY, COMMON_ALREADY_INITIALIZED, this);
        return; //already initialized - just log it, return and don't bother with exception
    }

    USES_CONVERSION;
    m_impl->m_hSto =  CertOpenStore(CERT_STORE_PROV_SYSTEM, X509_ASN_ENCODING, NULL, 
                                CERT_STORE_OPEN_EXISTING_FLAG | m_impl->m_nSysStoRegLoc , T2OLE(m_impl->m_szStore));
    if(NULL == m_impl->m_hSto)
    {
        std::ostringstream os;
        os << "CertOpenStore failed: " << GetLastError();
        RAISE_CACHE_EXCEPTION(os.str().c_str(), thisComponent, CACHE_CERT_STORE_OPEN_FAILED, this)
    }
}

void CPKIFCAPICRLUpdate2::AddCRL(
    const CPKIFCRLPtr& crl,
    const CPKIFGeneralNamePtr& dp)
{
    LOG_STRING_DEBUG("CPKIFCAPICRLUpdate2::AddCRL(const CPKIFCRLPtr& crl, const CPKIFGeneralNamePtr& dp)", TOOLKIT_SR_CAPICRLUPDATE, 0, this);

    if(NULL == m_impl->m_hSto)
    {
        RAISE_CACHE_EXCEPTION("CPKIFCAPICRLUpdate2 instance not initialized.", thisComponent, COMMON_NOT_INITIALIZED, this)
    }

    //make sure a cert for this CRL issuer is present in the current store (this will permit one
    //instance to serve trust roots and one to serve intermediate CAs)
    //PCCRL_CONTEXT crlCtx = NULL;
    //PCCERT_CONTEXT certCtx = NULL;
    //PCCERT_CONTEXT issuerCtx = NULL;

    if(crl == (CPKIFCRL*)NULL)
    {
        if(!m_impl->m_bSuppressUpdateErrors)
        {
            RAISE_CACHE_EXCEPTION("NULL CRL passed to AddCRL.", thisComponent, COMMON_INVALID_INPUT, this)
        }
        else
        {
            LOG_STRING_WARN("NULL CRL passed to AddCRL.", thisComponent, COMMON_INVALID_INPUT, this);
            return;
        }
    }

    //reviewed 4/24
    if(strlen("Root") == strlen(m_impl->m_szStore) && 0 == stricmp("Root", m_impl->m_szStore))
    {
        IPKIFTrustCache* iTrust = GetMediatorFromParent<IPKIFTrustCache>();
        if(iTrust)
        {
            IPKIFTrustAnchorList trustRootList;
            if(!iTrust->GetTrustRoots(crl->Issuer(), trustRootList))
            {
                LOG_STRING_INFO("Skipping AddCRL on root store for non-trust-anchor CRL issuer.", thisComponent, COMMON_INVALID_INPUT, this);
                return;
            }
        }
    }

    //crlCtx = CertCreateCRLContext(X509_ASN_ENCODING | PKCS_7_ASN_ENCODING, crl->Encoded()->GetBuffer(), crl->Encoded()->GetLength());
    //if(NULL == crlCtx)
    //{
    //  std::ostringstream os;
    //  os << "Failed to parse CRL passed to AddCRL.  CertCreateCRLContext failed: " << GetLastError();
    //  if(!m_bSuppressUpdateErrors)
    //  {
    //      RAISE_CACHE_EXCEPTION(os.str().c_str(), thisComponent, COMMON_INVALID_INPUT, this)
    //  }
    //  else
    //  {
    //      LOG_STRING_WARN(os.str().c_str(), thisComponent, COMMON_INVALID_INPUT, this);
    //      return;
    //  }
    //}

    CPKIFBufferPtr crlBuf = crl->Encoded();
    if(!CertAddEncodedCRLToStore(m_impl->m_hSto, X509_ASN_ENCODING, crlBuf->GetBuffer(), crlBuf->GetLength(),CERT_STORE_ADD_NEWER_INHERIT_PROPERTIES, NULL))
    {
        //this is for debugging only -  we don't really care if we failed to add it to the cache
        int err = GetLastError();
    }
}

void CPKIFCAPICRLUpdate2::SetSuppressUpdateErrors(
    bool b)
{
    m_impl->m_bSuppressUpdateErrors = b; 
}
bool CPKIFCAPICRLUpdate2::GetSuppressUpdateErrors() const 
{
    return m_impl->m_bSuppressUpdateErrors; 
}