ESSCertId.cpp

Go to the documentation of this file.

#include "ESSCertId.h"

#include "Buffer.h"
#include "Certificate.h"

#include "ASN1Helper.h"
#include "ToolkitUtils.h"
#include "PKIFMessageException.h"

#include "PKIFCryptUtils.h"
#include "IPKIFCryptoMisc.h"
#include "IPKIFHashContext.h"
#include "PKIFAlgorithm.h"

#include "ExtendedSecurityServices.h"

struct CPKIFESSCertIdImpl
{
    CPKIFBufferPtr m_certHash;
    char * m_issuerSerialNumber;
    CPKIFGeneralNameListPtr m_issuerName;
};



CPKIFESSCertId::CPKIFESSCertId()
    :m_impl (new CPKIFESSCertIdImpl)
{
    LOG_STRING_DEBUG("CPKIFESSCertId::CPKIFESSCertId()", TOOLKIT_MESSAGE_ASN, 0, this);
    
    m_impl->m_issuerSerialNumber = NULL;
}

CPKIFESSCertId::CPKIFESSCertId( 
                               const CPKIFCertificatePtr & cert
                               )
    :m_impl (new CPKIFESSCertIdImpl)
{
    LOG_STRING_DEBUG("CPKIFESSCertId::CPKIFESSCertId( const CPKIFCertificatePtr & cert )", TOOLKIT_MESSAGE_ASN, 0, this);
    m_impl->m_issuerSerialNumber = 0;
    SetCertificate(cert);
}

CPKIFESSCertId::CPKIFESSCertId(
    const CPKIFBufferPtr& buf)
    :m_impl (new CPKIFESSCertIdImpl)
{
    LOG_STRING_DEBUG("CPKIFESSCertId::CPKIFESSCertId(const CACCMSAttribute& ext)", TOOLKIT_MESSAGE_ASN, 0, this);
    m_impl->m_issuerSerialNumber = 0;
    if(buf == (CPKIFBuffer*)NULL || 0 == buf->GetLength())
    {
        throw CPKIFMessageException(TOOLKIT_MESSAGE_ASN, COMMON_INVALID_INPUT, "NULL parameter passed to CPKIFESSCertId::CPKIFESSCertId");
    }

    CACASNWRAPPER_CREATE(CACCMSESSCertID, objPDU);
    objPDU.Decode(buf->GetBuffer(), buf->GetLength());


    CPKIFBufferPtr tmpCertHash(new CPKIFBuffer(objPDU->certHash.data, objPDU->certHash.numocts));
    m_impl->m_certHash = tmpCertHash;


    if(objPDU->m.issuerSerialPresent) {
        CPKIFGeneralNameListPtr tmpNameList(new CPKIFGeneralNameList());
        DListNode* cur = objPDU->issuerSerial.issuer.head;
        while(NULL != cur)
        {
            CACX509V3GeneralName* tmp = (CACX509V3GeneralName*)cur->data;
            CACASNWRAPPER_CREATE(CACX509V3GeneralName, objPDU);
            ASN1OpenType* data1 = objPDU.Encode(tmp);
            CPKIFBufferPtr tmpBuf(new CPKIFBuffer(data1->data, data1->numocts));
            CPKIFGeneralNamePtr tmpName(new CPKIFGeneralName(tmpBuf));

            if(NULL != data1)
                delete data1;

            tmpNameList->push_back(tmpName);
            
            cur = cur->next;
        }
        m_impl->m_issuerName = tmpNameList;

        m_impl->m_issuerSerialNumber = strdup(objPDU->issuerSerial.serialNumber);
    }
}

CPKIFESSCertId::~CPKIFESSCertId()
{
    LOG_STRING_DEBUG("CPKIFESSCertId::~CPKIFESSCertId()", TOOLKIT_MESSAGE_ASN, 0, this);

    // since it's always coppied in using strdup, it should be freed with free() instead of delete
    if(0 != m_impl->m_issuerSerialNumber)
        free(m_impl->m_issuerSerialNumber);

    delete m_impl;
    m_impl = NULL;
}

void CPKIFESSCertId::GetIssuerName(
    CPKIFGeneralNameListPtr& issuerName) const
{
    issuerName = m_impl->m_issuerName;
}

const char * CPKIFESSCertId::GetSerialNumber() const
{
    return m_impl->m_issuerSerialNumber;
}

const CPKIFBufferPtr CPKIFESSCertId::GetCertHash() const
{
    return m_impl->m_certHash;
}

void CPKIFESSCertId::SetCertificate(
    const CPKIFCertificatePtr & cert)
{

    // extract issuer
    CPKIFGeneralNameListPtr ignList(new CPKIFGeneralNameList());
    CPKIFGeneralNamePtr ign(new CPKIFGeneralName(cert->GetIssuerName()));
    ignList->push_back(ign);
    m_impl->m_issuerName = ignList;

    const char * sn = cert->SerialNumber();
    if(m_impl->m_issuerSerialNumber) {
        free(m_impl->m_issuerSerialNumber);
        m_impl->m_issuerSerialNumber = 0;
    }
    if(sn) m_impl->m_issuerSerialNumber = strdup(sn);

    IPKIFCryptoMisc * cm = GetPlatformCryptoMisc();
    // SHA1 is the only choice here because the structure does not accomodate a choice
    // of digests until ESSCertIdv2, which is incompatible
    CPKIFAlgorithm * alg = CPKIFAlgorithm::GetAlg(PKIFCRYPTO::SHA1);
    int hbOutLen = alg->DigestSize();
    IPKIFHashContext * hctx = cm->HashInit(alg->HashAlg());
    CPKIFBufferPtr certBuf = cert->Encoded();
    unsigned char * hbOut = new unsigned char[hbOutLen];
    cm->HashUpdate(hctx,const_cast<unsigned char *>(certBuf->GetBuffer()),certBuf->GetLength());
    cm->HashFinal(hctx,hbOut,&hbOutLen);
    CPKIFBufferPtr hbp(new CPKIFBuffer(true,hbOut,hbOutLen));
    m_impl->m_certHash = hbp;
}