NodeNotInNodeListAndNotIgnoredAndIssuedBy.cpp

Go to the documentation of this file.

#include "NodeNotInNodeListAndNotIgnoredAndIssuedBy.h"
#include "Certificate.h"
#include "PKIFCertificateNodeEntry.h"
#include "PKIFPathSettings.h"
#include "Name.h"
#include "IPKIFNameAndKey.h"
#include "PKIFNameAndKeyWithScore.h"

//implemented in BuilderUtils.cpp
bool CheckPolicies(CPKIFCertificatePtr& subjectCert, CPKIFCertificatePtr& issuerCert, CPKIFPathSettingsPtr& settings);
bool CheckKIDsAndSignatures(CPKIFCertificatePtr& subjectCert, CPKIFCertificatePtr& issuerCert);

bool NodeNotInNodeListAndNotIgnoredAndIssuedBy::operator ()(
    const CPKIFCertificateNodeEntryPtr& test)
{
    //if the test node is ignored - return false now
    if(test->GetIgnore() || test->GetHardIgnore())
        return false;

    CPKIFCertificatePtr testCert = test->GetCert();
    IPKIFNameAndKey* testNameAndKey = dynamic_cast<IPKIFNameAndKey*>(&(*testCert));

    //else walk the node list and see if the test node is in the list
    if(m_nodeList)
    {
        CPKIFCertificateNodeList::iterator currentNode;
        CPKIFCertificateNodeList::iterator end = m_nodeList->end();
        for(currentNode = m_nodeList->begin(); currentNode != end; ++currentNode)
        {
            CPKIFCertificatePtr curCert = (*currentNode)->GetCert();
            IPKIFNameAndKey* curNodeNameAndKey = dynamic_cast<IPKIFNameAndKey*>(&(*curCert));

            //if it is in the list - return false
            if(*curNodeNameAndKey == *testNameAndKey)
            {
                test->SetIgnore();
                return false;
            }

            if(testNameAndKey->SameDNSameKey(*curNodeNameAndKey))
            {
                test->SetIgnore();
                return false;
            }
        }
    }

    //if the test node is not in the list see if it is issued by m_issuer
    if(*m_issuerName == *testNameAndKey->GetIssuerName())
    {
        //XXX***TEMPORARILY COMMENTED OUT PENDING FURTHER WORK ON FILTERING
        //if(m_settings->GetUseValidatorFilterWhenBuilding())
        //{
        //  if(!CheckPolicies(testCert, m_issuer, m_settings)) return false;    //Avoid proceeding if policy checks are doomed
        //  if(!CheckKIDsAndSignatures(testCert, m_issuer)) return false;    //Avoid proceeding if signature checks are doomed
        //}
        return true;
    }
    else
        return false;
}

bool NodeNotInNodeListAndNotIgnoredAndIssuedBy::operator()(const CPKIFNameAndKeyWithScorePtr& test)
{
    //if the test node is ignored - return false now
    if(test->GetIgnore())
        return false;

    IPKIFNameAndKeyPtr testNameAndKey = test->GetNameAndKey();

    //else walk the node list and see if the test node is in the list
    if(m_nkNodeList)
    {
        CPKIFNameAndKeyWithScoreList::iterator currentNode;
        CPKIFNameAndKeyWithScoreList::iterator end = m_nkNodeList->end();
        for(currentNode = m_nkNodeList->begin(); currentNode != end; ++currentNode)
        {
            //if it is in the list - return false
            if(*(*currentNode) == *testNameAndKey)
                return false;

            if(testNameAndKey->SameDNSameKey(*(*currentNode)->GetNameAndKey()))
                return false;
        }
    }

    //if the test node is not in the list see if it is issued by m_issuer
    if(*m_issuerName == *testNameAndKey->GetIssuerName())
    {
        //XXX***TEMPORARILY COMMENTED OUT PENDING FURTHER WORK ON FILTERING
        //if(m_settings->GetUseValidatorFilterWhenBuilding())
        //{
        //  if(!CheckPolicies(testCert, m_issuer, m_settings)) return false;    //Avoid proceeding if policy checks are doomed
        //  if(!CheckKIDsAndSignatures(testCert, m_issuer)) return false;    //Avoid proceeding if signature checks are doomed
        //}
        return true;
    }
    else
        return false;
}

void NodeNotInNodeListAndNotIgnoredAndIssuedBy::SetNodeList(
    CPKIFCertificateNodeList* nodeList) 
{
    m_nodeList = nodeList;
}
void NodeNotInNodeListAndNotIgnoredAndIssuedBy::SetNodeList(
    CPKIFNameAndKeyWithScoreList* nodeList) 
{
    m_nkNodeList = nodeList;
}
//void NodeNotInNodeListAndNotIgnoredAndIssuedBy::SetIssuer(CPKIFNamePtr& issuer){m_issuer = issuer;}
void NodeNotInNodeListAndNotIgnoredAndIssuedBy::SetIssuer(
    IPKIFNameAndKey* issuer)
{
        m_issuer = issuer;
        m_issuerName = m_issuer->GetSubjectName();
}
void NodeNotInNodeListAndNotIgnoredAndIssuedBy::SetPathSettings(
    CPKIFPathSettingsPtr& settings)
{
    m_settings = settings;
}