PKIFNSSCRLUpdate.cpp

Go to the documentation of this file.

#include "PKIFNSSCRLUpdate.h"

#include "PKIFNSSDatabase.h"
#include "ToolkitUtils.h"
#include "components.h"
#include "PKIFCacheErrors.h"
#include "Buffer.h"
#include "Certificate.h"
#include "CRL.h"
#include "Name.h"
#include "GeneralName.h"
#include "PKIFCacheException.h"
#include "GottaMatch.h"

#include "PKIFNSSConfig.h"
#include <sstream>
using namespace std;

struct PKIFNSSCRLUpdateImpl
{
    CERTCertDBHandle * m_certDbHandle; //WEAK
    CPKIFNSSDatabase * m_db; //WEAK
};

// throws if this is a different database than the one that's open
CPKIFNSSCRLUpdate::CPKIFNSSCRLUpdate(
    const std::string & dbdir)
:m_impl(new PKIFNSSCRLUpdateImpl)
{
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_SR_NSSCRLUPDATE,0,this);
    m_impl->m_certDbHandle = 0;
    m_impl->m_db = 0;
    // since it doesn't make since in SR to use NSS without a DB,
    // if no dbdir is specified, we'll use whatever is open already
    if(dbdir == "") {
        m_impl->m_db = CPKIFNSSDatabase::GetInstance();
    } else {
        // this will throw if the database has already been opened
        // with a diferent directory, as we can only have one open
        // at a time
        m_impl->m_db = CPKIFNSSDatabase::GetInstance(dbdir);
    }
}
CPKIFNSSCRLUpdate::~CPKIFNSSCRLUpdate(void)
{
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_SR_NSSCRLUPDATE,0,this);
    PKIFDelete(m_impl);
    m_impl = 0;
}
void CPKIFNSSCRLUpdate::AddCRL(
    const CPKIFCRLPtr& crl, 
    const CPKIFGeneralNamePtr& dp)
{   
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_SR_NSSCRLUPDATE,0,this);
    if(0 == m_impl->m_certDbHandle)
    {
        RAISE_CACHE_EXCEPTION("CPKIFNSSRepository instance not initialized.", thisComponent, COMMON_NOT_INITIALIZED, this)
    }
    SECItem siCRL;
    siCRL.type = siBuffer;
    CPKIFBufferPtr encoded = crl->Encoded();
    siCRL.data = (unsigned char *)encoded->GetBuffer();
    siCRL.len = encoded->GetLength();

    // by the time the CRL gets here, there's no need for NSS to check it again
    CERTSignedCrl * imported = 0;
    char * uri = 0;
    if(dp) {
        uri = const_cast<char *>(dp->uri());
    }
    imported = SEC_NewCrl(m_impl->m_certDbHandle,(char *)uri,&siCRL,SEC_CRL_TYPE);

    if(!imported) {
        LOG_STRING_ERROR("Unable to import CRL into NSS",TOOLKIT_SR_NSSCRLUPDATE,
            CACHE_UPDATE_FAILED,this);
    } else {
        LOG_STRING_INFO("Added CRL to NSS store",TOOLKIT_SR_NSSCRLUPDATE,0,this);
        SEC_DestroyCrl(imported);
    }
}
void CPKIFNSSCRLUpdate::Initialize(void)
{
    LOG_STRING_DEBUG(__FUNCTION__,TOOLKIT_SR_NSSCRLUPDATE,0,this);
    m_impl->m_certDbHandle = CERT_GetDefaultCertDB();
}