PKIFPathBuildAndValidate.cpp

Go to the documentation of this file.

#include "PKIFPathBuildAndValidate.h"
#include "PathConstants.h"
#include "PKIFPathValidator2.h"
#include "PKIFPathBuilder2.h"
#include "Certificate.h"
#include "KeyUsage.h"
#include "Validity.h"
#include "PKIFCertificateNodeEntry.h"
#include "PKIFFuncStorage.h"
#include "PathResults.h"
#include "PKIFMediators.h"
#include "PKIFPathSettings.h"
#include "PKIFCertificatePath.h"

#include "PKIFException.h"

CPKIFPathBuildAndValidate::CPKIFPathBuildAndValidate(void)
{
}
CPKIFPathBuildAndValidate::~CPKIFPathBuildAndValidate(void)
{
}
void CPKIFPathBuildAndValidate::Initialize()
{
}
void CAC_API keyUsageChecker_Any(
    const CPKIFCertificateNodeEntryPtr& certNode, 
    CPKIFPathValidationResults& results,
    CertificateType type)
{
    if(EE == type)
    {
        CPKIFCertificatePtr curCert = certNode->GetCert();
        CPKIFKeyUsagePtr keyUsage = curCert->GetExtension<CPKIFKeyUsage>();
        if(keyUsage != (CPKIFKeyUsage*)NULL /*&& (keyUsage->DigitalSignature() || keyUsage->NonRepudiation())*/)
        {
            CPKIFX509ExtensionPtr keyUsage2 = keyUsage;
            certNode->MarkExtensionAsProcessed(keyUsage2);
        }
    }
}

//Functor<void, TYPELIST_3(const CPKIFCertificateNodeEntryPtr&, CPKIFPathValidationResults&, CertificateType)> keyUsageAny(keyUsageChecker_Any);
bool CPKIFPathBuildAndValidate::BuildAndValidatePath(
    CPKIFCertificatePath& path, 
    CPKIFPathValidationResults& results)
{
    CPKIFFuncStoragePtr keyUsageAny(new CPKIFFuncStorage(keyUsageChecker_Any));

    //create a builder object
    IPKIFPathBuild* pb = GetMediatorFromParent<IPKIFPathBuild>();

    //create a builder object
    IPKIFPathValidate* pv = GetMediatorFromParent<IPKIFPathValidate>();

    if(!pb || !pv)
        return false;

    try
    {
        //This do/while will iteratively call Build and Validate until all paths have been tried
        //or a good path has been found.  
        do
        {
            if(!pb->BuildPath(path))
            {
                break;
            }
            if(pv->ValidatePath(path, results, keyUsageAny))
            {
                CPKIFPathSettingsPtr effectiveSettings;
                path.GetPathSettings(effectiveSettings);
                bool bCheckRevStatus = effectiveSettings->GetCheckRevocationStatus();
                if((bCheckRevStatus && NOT_REVOKED == results.GetRevocationStatusMostSevere())||
                    (!bCheckRevStatus && results.GetCertSignaturesVerified()))
                {
                    return true;
                }
            }
        }while(1);

        return false;
    }
    catch(CPKIFException& e)
    {
        throw e;
    }

}