NameConstraints.cpp

Go to the documentation of this file.

#include "NameConstraints.h"
#include "OID.h"
#include "Buffer.h"
#include "GeneralSubtree.h"
#include "ToolkitUtils.h"
#include "PKIFNameMemoryHelper.h"
#include "Name.h"

#include "ASN1Helper.h"
#include "PKIX1Implicit88.h"
#include "PKIX1Explicit88.h"

#include "boost/cstdint.hpp"
#include "boost/numeric/conversion/cast.hpp"
#include "boost/asio/ip/address_v4.hpp"
#include "boost/asio/ip/address_v6.hpp"

using boost::asio::ip::address_v4;
using boost::asio::ip::address_v6;

using namespace boost;
using namespace boost::asio;

using boost::numeric_cast;
using boost::bad_numeric_cast;
using namespace std;

string DecIP(CPKIFBufferPtr& encodedIP);
void FreeList(DList* asn1rtdlist);

struct CPKIFNameConstraintsImpl
{
    CPKIFGeneralSubtreeListPtr m_perm;
    CPKIFGeneralSubtreeListPtr m_excl;
    CPKIFBufferPtr m_value;
    bool m_extModified;
};


char CPKIFNameConstraints::extOID[] =           "2.5.29.30";

CPKIFNameConstraints::CPKIFNameConstraints()
  :m_impl (new CPKIFNameConstraintsImpl)
{
}
CPKIFGeneralSubtreeListPtr CPKIFNameConstraints::GetPermitted() const 
{
    return m_impl->m_perm;
}
void CPKIFNameConstraints::SetPermitted(CPKIFGeneralSubtreeListPtr& perm)  
{
    m_impl->m_perm = perm;
    m_impl->m_extModified = true;
}
CPKIFGeneralSubtreeListPtr CPKIFNameConstraints::GetExcluded() const 
{
    return m_impl->m_excl;
}
void CPKIFNameConstraints::SetExcluded(CPKIFGeneralSubtreeListPtr &excl)  
{
    m_impl->m_excl = excl;
    m_impl->m_extModified = true;
}
//CPKIFNameConstraints::CPKIFNameConstraints(
//  //![in] Reference to an internal structure representation of the extension containing information used to construct the object
//  const CACX509V3Extension& ext) 
//  : CPKIFX509Extension(ext), m_impl (new CPKIFNameConstraintsImpl)
//{
//  CACASNWRAPPER_CREATE(CACX509V3NameConstraints, objPDU);
//  objPDU.Decode(ext.extnValue.data, ext.extnValue.numocts);
//
//  if(objPDU->m.permittedSubtreesPresent)
//  {
//      CPKIFGeneralSubtreeListPtr tmpGSList(new CPKIFGeneralSubtreeList);
//      DListNode* cur = objPDU->permittedSubtrees.head;
//      for(unsigned int ii = 0; ii < objPDU->permittedSubtrees.count; ++ii)
//      {
//          CPKIFGeneralSubtreePtr tmpGS(new CPKIFGeneralSubtree(*(CACX509V3GeneralSubtree*)cur->data));
//          tmpGSList->push_back(tmpGS);
//
//          cur = cur->next;
//      }
//      m_impl->m_perm = tmpGSList;
//  }
//
//  if(objPDU->m.excludedSubtreesPresent)
//  {
//      CPKIFGeneralSubtreeListPtr tmpGSList(new CPKIFGeneralSubtreeList);
//      DListNode* cur = objPDU->excludedSubtrees.head;
//      for(unsigned int ii = 0; ii < objPDU->excludedSubtrees.count; ++ii)
//      {
//          CPKIFGeneralSubtreePtr tmpGS(new CPKIFGeneralSubtree(*(CACX509V3GeneralSubtree*)cur->data));
//          tmpGSList->push_back(tmpGS);
//
//          cur = cur->next;
//      }
//      m_impl->m_excl = tmpGSList;
//  }
//}

CPKIFNameConstraints::CPKIFNameConstraints(
    const bool& criticality,
    const CPKIFBufferPtr& ext) 
  : CPKIFX509Extension (criticality, ext), m_impl (new CPKIFNameConstraintsImpl)
{
    CACASNWRAPPER_CREATE(CACX509V3NameConstraints, objPDU);
    objPDU.Decode(ext->GetBuffer(), ext->GetLength());

    if(objPDU->m.permittedSubtreesPresent)
    {
        CPKIFGeneralSubtreeListPtr tmpGSList(new CPKIFGeneralSubtreeList);
        DListNode* cur = objPDU->permittedSubtrees.head;
        for(unsigned int ii = 0; ii < objPDU->permittedSubtrees.count; ++ii)
        {
            ASN1OpenType* openType = (ASN1OpenType*)cur->data;

            CPKIFBufferPtr tmpBuffer(new CPKIFBuffer(openType->data, openType->numocts));

            //CPKIFGeneralSubtreePtr tmpGS(new CPKIFGeneralSubtree(*(CACX509V3GeneralSubtree*)cur->data));
            CPKIFGeneralSubtreePtr tmpGS(new CPKIFGeneralSubtree(tmpBuffer));
            tmpGSList->push_back(tmpGS);

            cur = cur->next;
        }
        m_impl->m_perm = tmpGSList;
    }

    if(objPDU->m.excludedSubtreesPresent)
    {
        CPKIFGeneralSubtreeListPtr tmpGSList(new CPKIFGeneralSubtreeList);
        DListNode* cur = objPDU->excludedSubtrees.head;
        for(unsigned int ii = 0; ii < objPDU->excludedSubtrees.count; ++ii)
        {
            ASN1OpenType* openType = (ASN1OpenType*)cur->data;
            CPKIFBufferPtr tmpBuffer(new CPKIFBuffer(openType->data, openType->numocts));
            //CPKIFGeneralSubtreePtr tmpGS(new CPKIFGeneralSubtree(*(CACX509V3GeneralSubtree*)cur->data));
            CPKIFGeneralSubtreePtr tmpGS(new CPKIFGeneralSubtree(tmpBuffer));
            tmpGSList->push_back(tmpGS);

            cur = cur->next;
        }
        m_impl->m_excl = tmpGSList;
    }

    m_impl->m_value = ext;
    m_impl->m_extModified = false;
}

CPKIFNameConstraints::~CPKIFNameConstraints()
{
    if(m_impl)
    {
        delete m_impl;
        m_impl = 0;
    }
}
const CPKIFOIDPtr CPKIFNameConstraints::oid() const
{
    //added static variable for copying instead of string creation each call
    static CPKIFOID staticOID(extOID);
    //CPKIFOIDPtr tmp(new CPKIFOID(new std::string(extOID)));
    static CPKIFOIDPtr tmp(new CPKIFOID(staticOID));
    return tmp;
}

CPKIFBufferPtr CPKIFNameConstraints::value() const 
{
    if(m_impl->m_value == (CPKIFBuffer*)NULL || m_impl->m_extModified)
    {
        CACASNWRAPPER_CREATE(CACX509V3NameConstraints, objPDU);
        CACX509V3NameConstraints nameConst; 
        memset(&nameConst, 0, sizeof(CACX509V3NameConstraints));

        if(m_impl->m_perm != (CPKIFGeneralSubtreeList*)NULL && !m_impl->m_perm->empty())
        {
            nameConst.m.permittedSubtreesPresent = 1;

            DListNode* cur = NULL;
            CPKIFGeneralSubtreeList::iterator pos;
            CPKIFGeneralSubtreeList::iterator end = m_impl->m_perm->end();
            for(pos = m_impl->m_perm->begin(); pos != end; ++pos)
            {
                
                if(NULL == cur)
                {
                    NEW_NODE(cur)
                }
                else
                {
                    NEW_NEXT_AND_ADVANCE(cur)
                }

                CACASNWRAPPER_CREATE(CACX509V3GeneralSubtree, objGenSubtree);
                CACX509V3GeneralSubtree permSubtree;

                permSubtree.minimum = (*pos)->GetMin();
                if((*pos)->GetMax() == -1)
                    permSubtree.m.maximumPresent = 0;
                else
                {
                    permSubtree.maximum = (*pos)->GetMax();
                    permSubtree.m.maximumPresent = 1;
                }
                CPKIFGeneralNamePtr base = (*pos)->GetBase();

                CACASNWRAPPER_CREATE(CACX509V3GeneralName, objGenName);
                CPKIFBufferPtr tmp;
                switch(base->GetType())
                {
                    case CPKIFGeneralName::RFC822:
                    {
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->rfc822Name()), CPKIFGeneralName::RFC822);
                            
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        permSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::DNSNAME:
                    {
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->dnsName()), CPKIFGeneralName::DNSNAME);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        permSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::DIRECTORYNAME:
                    {       
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->directoryName()->ToString()), CPKIFGeneralName::DIRECTORYNAME);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        permSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::URI:
                    {
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->uri()), CPKIFGeneralName::URI);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        permSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::IPADDRESS:
                    {
                        CPKIFBufferPtr ip = base->ipAddress();
                        string ipStr = DecIP(ip);
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(ipStr.c_str()), CPKIFGeneralName::IPADDRESS);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        permSubtree.base = *(objGenName.data());
                    }
                    break;
                }

                ASN1OpenType* data2 = objGenSubtree.Encode(&permSubtree);

                cur->data = new ASN1OpenType;
                ((ASN1OpenType*)cur->data)->data = new unsigned char[data2->numocts];
                memcpy((void*)((ASN1OpenType*)cur->data)->data, data2->data, data2->numocts);
                ((ASN1OpenType*)cur->data)->numocts = data2->numocts;

                SET_HEAD_TAIL_INCREMENT(nameConst.permittedSubtrees, cur)

                delete data2;
            }
        }
        if(m_impl->m_excl != (CPKIFGeneralSubtreeList*)NULL && !m_impl->m_excl->empty())
        {
            nameConst.m.excludedSubtreesPresent = 1;

            DListNode* cur = NULL;
            CPKIFGeneralSubtreeList::iterator pos;
            CPKIFGeneralSubtreeList::iterator end = m_impl->m_excl->end();
            for(pos = m_impl->m_excl->begin(); pos != end; ++pos)
            {
                
                if(NULL == cur)
                {
                    NEW_NODE(cur)
                }
                else
                {
                    NEW_NEXT_AND_ADVANCE(cur)
                }

                CACASNWRAPPER_CREATE(CACX509V3GeneralSubtree, objGenSubtree);
                CACX509V3GeneralSubtree exclSubtree;

                exclSubtree.minimum = (*pos)->GetMin();
                if((*pos)->GetMax() == -1)
                    exclSubtree.m.maximumPresent = 0;
                else
                {
                    exclSubtree.maximum = (*pos)->GetMax();
                    exclSubtree.m.maximumPresent = 1;
                }

                CPKIFGeneralNamePtr base = (*pos)->GetBase();

                CACASNWRAPPER_CREATE(CACX509V3GeneralName, objGenName);
                CPKIFBufferPtr tmp(new CPKIFBuffer());
                switch(base->GetType())
                {
                    case CPKIFGeneralName::RFC822:
                    {
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->rfc822Name()), CPKIFGeneralName::RFC822);
                            
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        exclSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::DNSNAME:
                    {
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->dnsName()), CPKIFGeneralName::DNSNAME);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        exclSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::DIRECTORYNAME:
                    {       
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->directoryName()->ToString()), CPKIFGeneralName::DIRECTORYNAME);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        exclSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::URI:
                    {
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(base->uri()), CPKIFGeneralName::URI);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        exclSubtree.base = *(objGenName.data());
                    }
                    break;
                    case CPKIFGeneralName::IPADDRESS:
                    {
                        CPKIFBufferPtr ip = base->ipAddress();
                        string ipStr = DecIP(ip);
                        tmp = base->Encoded(); //GetEncGenNameFromStr((unsigned char *)(ipStr.c_str()), CPKIFGeneralName::IPADDRESS);
                        objGenName.Decode(tmp->GetBuffer(), tmp->GetLength());
                        exclSubtree.base = *(objGenName.data());
                    }
                    break;
                }

                ASN1OpenType* data2 = objGenSubtree.Encode(&exclSubtree);

                cur->data = new ASN1OpenType;
                ((ASN1OpenType*)cur->data)->data = new unsigned char[data2->numocts];
                memcpy((void*)((ASN1OpenType*)cur->data)->data, data2->data, data2->numocts);
                ((ASN1OpenType*)cur->data)->numocts = data2->numocts;

                SET_HEAD_TAIL_INCREMENT(nameConst.excludedSubtrees, cur)

                delete data2;
            }
        }
        ASN1OpenType* extEncoded = objPDU.Encode(&nameConst);
        CPKIFBufferPtr tmp(new CPKIFBuffer(extEncoded->data, extEncoded->numocts));

        m_impl->m_value = tmp;

        FreeList(&nameConst.excludedSubtrees);
        FreeList(&nameConst.permittedSubtrees);
        delete extEncoded;
        m_impl->m_extModified = false;
    }

    return m_impl->m_value;
}

string DecIP(
    CPKIFBufferPtr& encodedIP)
{
    string rv = "";
    if(encodedIP->GetLength() == 32)
    {   
        try {
            ip::address_v6::bytes_type bytesAddr;
            memcpy(bytesAddr.c_array(), encodedIP->GetBuffer(),encodedIP->GetLength()/2);
            ip::address_v6 addr(bytesAddr);
            rv = addr.to_string();

            rv+="/";

            ip::address_v6::bytes_type bytesMask;
            memcpy(bytesMask.c_array(), encodedIP->GetBuffer()+encodedIP->GetLength()/2,encodedIP->GetLength()/2);
            ip::address_v6 mask(bytesMask);
            string sMask = mask.to_string();

            rv +=sMask;
        } catch(std::exception &) {
            throw;
        }

    }
    else if(encodedIP->GetLength() == 8)
    {
        ip::address_v4::bytes_type bytesAddr;
        memcpy(bytesAddr.c_array(), encodedIP->GetBuffer(),encodedIP->GetLength()/2);
        ip::address_v4 addr(bytesAddr);
        rv = addr.to_string();

        rv+="/";

        ip::address_v4::bytes_type bytesMask;
        memcpy(bytesMask.c_array(), encodedIP->GetBuffer()+encodedIP->GetLength()/2,encodedIP->GetLength()/2);
        ip::address_v4 mask(bytesMask);
        string sMask = mask.to_string();

        rv +=sMask;
    }
    return rv;

}

CAC_API std::ostream& operator<<(std::ostream & os, const CPKIFNameConstraintsPtr & extension)
{
    return operator<<(os,*extension);
}

CAC_API std::ostream& operator<<(std::ostream & os, const CPKIFNameConstraints & extension)
{
    CPKIFGeneralSubtreesPtr perm = extension.GetPermitted();
    bool output = false;
    if(perm)
    {
        output = true;
        os << "Permitted Subtrees: " << endl;
        CPKIFGeneralSubtrees::iterator pos;
        CPKIFGeneralSubtrees::iterator end = perm->end();
        int count = 1;
        for(pos = perm->begin(); pos != end; ++pos)
        {
            os << endl;
            int max = (*pos)->GetMax();
            int min = (*pos)->GetMin();
            if(max == -1)
                os << "\t[" << count <<"] (" << min << "..Max): " << endl;
            else
                os << "\t[" << count <<"] (" << min << ".." << max << "):" << endl;
            CPKIFGeneralNamePtr gn = (*pos)->GetBase();
            if(gn) os << gn;
            count++;
        }
    }
    CPKIFGeneralSubtreesPtr excl = extension.GetExcluded();
    if(excl)
    {
        if(output) os << endl;
        os << "Excluded Subtrees";
        CPKIFGeneralSubtrees::iterator pos;
        CPKIFGeneralSubtrees::iterator end = excl->end();
        int count = 1;
        for(pos = excl->begin(); pos != end; ++pos)
        {
            os << endl;
            int max = (*pos)->GetMax();
            int min = (*pos)->GetMin();
            if(max == -1)
                os << "\t[" << count <<"] (" << min << "..Max): " << endl;
            else
                os << "\t[" << count <<"] (" << min << ".." << max << "):" << endl;
            CPKIFGeneralNamePtr gn = (*pos)->GetBase();
            if(gn) os << "\t\t" << gn;
            count++;
        }
    }
    return os;
}