PKIFOCSPChecker.h

Go to the documentation of this file.

#ifndef __PKIFOCSPCHECKER_H__
#define __PKIFOCSPCHECKER_H__

#include "PKIFdll.h"
#include "IPKIFColleague.h"
#include "PKIFRevocationStatusInterfaces.h"
#include "components.h"

struct CPKIFOCSPCheckerImpl;
FD_SMART_PTR(CPKIFCertificate);
FD_SMART_PTR(CPKIFCertStatus);
FD_SMART_PTR(CPKIFPathSettings);
FD_SMART_PTR(CPKIFCredential);
FD_SMART_PTR(CPKIFBuffer);
FD_SMART_PTR(CPKIFGeneralSubtree);
FD_LIST_PTR(CPKIFGeneralSubtree);


class CAC_API CPKIFOCSPChecker : public IPKIFColleague, public IPKIFRevocationStatus
{
    friend struct CPKIFOCSPCheckerImpl;
public:
    CPKIFOCSPChecker(void);
    virtual ~CPKIFOCSPChecker(void);
    CPKIFOCSPChecker(const CPKIFOCSPChecker& copy);

    void SetHost(const char* host);
    void Set_Port(int port);
    void SetURL(const char * url);
    CPKIFStringPtr GetHost() const;
    CPKIFStringPtr GetURL() const;
    int GetPort() const;

    void SetMultiCertRequest(bool bDoMultiCertRequests);
    bool GetMultiCertRequest();

    //IPKIFColleague functions
    void Initialize();

    bool CheckStatus(const CPKIFCertificatePtr& targetCert, const CPKIFCertificatePtr& issuersCert, RevocationStatus& status, CPKIFCertStatusPtr& certStatus);
    bool CheckStatusPath(CPKIFCertificatePath& path, RevocationStatus& status);

    //Sets the path settings that are used when either an offline
    //response is being directly verified using an instance of this class
    //or when the status of a single certificate is being determined (instead
    //of a path) - the settings obtained from the path object are used in other 
    //cases
    void SetPathSettings(CPKIFPathSettingsPtr& settings);

    //added 7/31/2005 to enable support for signed OCSP requests
    void SetSigningCredential(CPKIFCredentialPtr& cred);
    CPKIFCredentialPtr GetSigningCredential() const;

    void SetResponderPublicKey(CPKIFCertificatePtr& cert, bool bRequireThisCert = false);
    CPKIFCertificatePtr GetResponderPublicKey() const;
    bool GetRequireSpecificCert() const;

    void AddNamespace(CPKIFGeneralSubtreePtr& name);
    CPKIFGeneralSubtreeList GetNamespaces();

    void AddIssuerNamespace(CPKIFGeneralSubtreePtr& name);
    CPKIFGeneralSubtreeList GetIssuerNamespaces();

//moved to path settings class 7/18/2004 - crw
//  void SetRequireSufficientlyRecent(bool requireSufficientlyRecent);
//  void SetSufficientlyRecent(int seconds);

    //added two nonce flags and supporting code 6/9/2004
    void SetGenerateNonce(bool bGenerateNonce);
    bool GetGenerateNonce();

    void SetRequireNonceMatch(bool bRequireNonceMatch);
    bool GetRequireNonceMatch();

    //added 12/11/2003
    bool ProcessOfflineResponse(CPKIFCertificatePtr& targetCert, CPKIFCertificatePtr& targetIssuer, bool responderIsTrusted,
                                              CPKIFBufferPtr& ocspResponse, CPKIFCertStatusPtr& targetCertStatus);

    void SetCacheValidatedResponders(bool b);
    bool GetCacheValidatedResponders();

private:
    CPKIFOCSPChecker& operator=(const CPKIFOCSPChecker& rhs); //added 4/6/2004

    enum {thisComponent=TOOLKIT_OCSP_CHECKER};

    struct CPKIFOCSPCheckerImpl *m_impl;


};
DECLARE_SMART_POINTERS(CPKIFOCSPChecker);

CAC_API CPKIFOCSPChecker* MakeOCSPChecker();
CAC_API void FreeOCSPChecker(CPKIFOCSPChecker* ldap);


#endif