PKIFAiaOrSiaRetrieval.cpp

Go to the documentation of this file.

#include "PKIFdll.h"

#include "AccessDescription.h"
#include "AuthorityInfoAccess.h"
#include "Buffer.h"
#include "Certificate.h"
#include "components.h"
#include "DistributionPointName.h"
#include "GeneralName.h"
#include "GottaMatch.h"
#include "IPKIFColleague.h"
#include "IssuerAltName.h"
#include "LDAP_URL_Header.h"
#include "PKIFAiaOrSiaRetrieval.h"
#include "PKIFHttpCertNode.h"
#include "PKIFLdapCertNode.h"
#include "SubjectInfoAccess.h"
#include "ToolkitUtils.h"


struct CPKIFAiaOrSiaRetrievalImpl
{
};

CPKIFAiaOrSiaRetrieval::CPKIFAiaOrSiaRetrieval(void)
    :m_impl (new CPKIFAiaOrSiaRetrievalImpl)
{
    LOG_STRING_DEBUG("CPKIFAiaOrSiaRetrieval::CPKIFAiaOrSiaRetrieval(void)", TOOLKIT_SR_MISC, 0, this);
}
CPKIFAiaOrSiaRetrieval::~CPKIFAiaOrSiaRetrieval(void)
{
    LOG_STRING_DEBUG("CPKIFAiaOrSiaRetrieval::~CPKIFAiaOrSiaRetrieval(void)", TOOLKIT_SR_MISC, 0, this);

    delete m_impl;
    m_impl = NULL;
}

void CPKIFAiaOrSiaRetrieval::Initialize(void) 
{
}

void CPKIFAiaOrSiaRetrieval::GetCertificates(
    const CPKIFCertificatePtr& cert,
    CPKIFCertificateNodeList& certNodeList,
    PKIInfoSource source,
    PathBuildingDirection pbd)
{
    LOG_STRING_DEBUG("CPKIFAiaOrSiaRetrieval::GetCertificates", TOOLKIT_SR_MISC, 0, this);

    if(LOCAL == source)
        return;

    GetCertsFromIssuerAltName(*cert, certNodeList, source, pbd);
}

void CPKIFAiaOrSiaRetrieval::GetCertificates(const CPKIFCertificatePtr& cert, CPKIFCertificateList& certList, PKIInfoSource source, PathBuildingDirection pbd)
{
    LOG_STRING_DEBUG("CPKIFAiaOrSiaRetrieval::GetCertificates", TOOLKIT_SR_MISC, 0, this);

    if(LOCAL == source)
        return;

    CPKIFCertificateNodeList certNodeList;
    GetCertsFromIssuerAltName(*cert, certNodeList, source, pbd);

    CPKIFCertificateNodeList::iterator pos;
    CPKIFCertificateNodeList::iterator end = certNodeList.end();
    for(pos = certNodeList.begin(); pos != end; ++pos)
    {
        certList.push_back((*pos)->GetCert());
    }
}

void CPKIFAiaOrSiaRetrieval::GetCertificateSources(
    const CPKIFCertificatePtr& cert,
    CPKIFCertificateSourceList& certNodeList,
    PathBuildingDirection pbd)
{
    LOG_STRING_DEBUG("CPKIFAiaOrSiaRetrieval::GetCertificateSources", TOOLKIT_SR_MISC, 0, this);

    //see if the cert has an issuer alt name - if it does not the return
    CPKIFIssuerAltNamePtr ian;
    try
    {
        ian = cert->GetExtension<CPKIFIssuerAltName>();
    }
    catch(...)
    {
    }
    CPKIFAuthorityInfoAccessPtr aia;
    try
    {
        aia = cert->GetExtension<CPKIFAuthorityInfoAccess>();
    }
    catch(...)
    {
    }
    CPKIFSubjectInfoAccessPtr sia;
    try
    {
        sia = cert->GetExtension<CPKIFSubjectInfoAccess>();
    }
    catch(...)
    {
    }
    if(ian == (CPKIFIssuerAltNamePtr*)NULL && aia == (CPKIFAuthorityInfoAccess*)NULL && sia == (CPKIFSubjectInfoAccess*)NULL)
        return;

    CPKIFCertificateList certsFromIAN;
    CPKIFGeneralNameList genNames;

    if(PBD_FORWARD == pbd)
    {
        if(ian != (CPKIFIssuerAltNamePtr*)NULL)
        {
            ian->GeneralNames(genNames);
        }

        if(aia != (CPKIFAuthorityInfoAccess*)NULL)
        {
            CPKIFAccessDescriptionListPtr adl = aia->GetAccessDescriptions();
            CPKIFAccessDescriptionList::iterator aPos;
            CPKIFAccessDescriptionList::iterator aEnd = adl->end();
            for(aPos = adl->begin(); aPos != aEnd; ++aPos)
            {
                CPKIFOIDPtr aOID = (*aPos)->AccessMethod();
                if(aOID != (CPKIFOID*)NULL && *aOID == *g_aiaCAIssuer)
                {
                    CPKIFGeneralNamePtr aGN = (*aPos)->AccessLocation();
                    genNames.push_back(aGN);
                }
            }
        }
    }
    else
    {
        if(sia != (CPKIFSubjectInfoAccess*)NULL)
        {
            CPKIFAccessDescriptionListPtr adl = sia->GetAccessDescriptions();
            CPKIFAccessDescriptionList::iterator aPos;
            CPKIFAccessDescriptionList::iterator aEnd = adl->end();
            for(aPos = adl->begin(); aPos != aEnd; ++aPos)
            {
                CPKIFOIDPtr aOID = (*aPos)->AccessMethod();
                if(aOID != (CPKIFOID*)NULL && *aOID == *g_aiaCARepository)
                {
                    CPKIFGeneralNamePtr aGN = (*aPos)->AccessLocation();
                    genNames.push_back(aGN);
                }
            }
        }
    }

    CPKIFGeneralNameList::iterator gnPos;
    CPKIFGeneralNameList::iterator gnEnd = genNames.end();
    for(gnPos = genNames.begin(); gnPos != gnEnd; ++gnPos)
    {
        //in search of any URI entries.
        const char* url = (*gnPos)->uri();
        if(url != NULL)
        {
            std::string urlStr = url;
            if(0 == urlStr.find("ldap"))
            {
                if(!UriAlreadyInList(certNodeList, urlStr))
                {
                    CPKIFLdapCertNodePtr newNode(new CPKIFLdapCertNode);
                    newNode->AddSource(urlStr);
                    certNodeList.push_back(newNode);
                }
            }
            else if(0 == urlStr.find("http"))
            {
                if(!UriAlreadyInList(certNodeList, urlStr))
                {
                    CPKIFHttpCertNodePtr newNode(new CPKIFHttpCertNode);
                    newNode->AddSource(urlStr);
                    certNodeList.push_back(newNode);
                }
            }
        }
    }
}

void CPKIFAiaOrSiaRetrieval::GetCertificates(
    const CPKIFNamePtr& subDN,
    CPKIFCertificateList& certList,
    PKIInfoSource source)
{
    //no-op.  this function takes a name, not a cert so there's nothing to do.
}