PKIFTSP_helpers.cpp

Go to the documentation of this file.

//This file contains trivial wrappers to contain data to be encoded 
//using objective der encoding library (see PKIFTSP.cpp for the rest
//of the TSP code).

//#include "PKIFCAPIRaw.h"  //for auto-hash feature in MessageImprint
//#include "PKIFX509Extensions2.h"
//#include "SignedData.h"
//#include "PKIFOCSPChecker.h"
//#include "PKIFTSP.h"
//#include "PKIFCommonErrors.h"
//#include "PKIFFuncStorage.h"

#include "PKIFPathInterfaces.h"
#include "components.h"
#include "PKIFCertificateNodeEntry.h"
#include "ExtendedKeyUsage.h"
#include "ToolkitUtils.h"
#include "Certificate.h"
#include "OID.h"
#include "GottaMatch.h"
#include <vector>

//*****************************************************************
//  Time stamp token info
//*****************************************************************

//*****************************************************************
//  PKI status info
//*****************************************************************



//*****************************************************************
//  CPKIFTimestampVerifier
//*****************************************************************

void EKUChecker_TimestampTSP(
    const CPKIFCertificateNodeEntryPtr& certNode, 
    CPKIFPathValidationResults& results, 
    CertificateType type)
{
    LOG_STRING_DEBUG("EKUChecker_TimestampTSP", TOOLKIT_TSP_TIMESTAMP_VERIFIER, 0, NULL);

    if(EE == type)
    {
        CPKIFCertificatePtr curCert = certNode->GetCert();

        //TO BE RFC 3161 COMPLIANT WE SHOULD NOT PERMIT ANY EKU AND WE SHOULD
        //REQUIRE A SINGLE KEY PURPOSE IF AND SHOULD REQUIRE CRITICALITY.  WE
        //ARE NOT COMPLIANT.

        CPKIFExtendedKeyUsagePtr eku = curCert->GetExtension<CPKIFExtendedKeyUsage>();
        if(eku != (CPKIFExtendedKeyUsage*)NULL)
        {
            std::vector<CPKIFOIDPtr> keyPurposeIDs;
            eku->KeyPurposeIDs(keyPurposeIDs);

            GottaMatch<CPKIFOIDPtr> gm;
            gm.SetRHS(g_timestampingEKU);

            std::vector<CPKIFOIDPtr>::iterator end = keyPurposeIDs.end();
            if(end != find_if(keyPurposeIDs.begin(), keyPurposeIDs.end(), gm))
            {
                CPKIFX509ExtensionPtr eku2 = eku;
                certNode->MarkExtensionAsProcessed(eku2);
            }
            else
            {
                gm.SetRHS(g_anyEKU);
                if(end != find_if(keyPurposeIDs.begin(), keyPurposeIDs.end(), gm))
                {
                    CPKIFX509ExtensionPtr eku2 = eku;
                    certNode->MarkExtensionAsProcessed(eku2);
                }
            }
        }
    }
}