certificate-storage.hpp

/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil -*- */
#ifndef NDN_CERTIFICATE_STORAGE_HPP
#define NDN_CERTIFICATE_STORAGE_HPP

#include "certificate-cache-v2.hpp"
#include "trust-anchor-container.hpp"

namespace ndn {

class CertificateStorage {
public:
  CertificateStorage()
  : verifiedCertificateCache_(3600 * 1000.0),
    unverifiedCertificateCache_(300 * 1000.0)
  {
  }

  ptr_lib::shared_ptr<CertificateV2>
  findTrustedCertificate(const Interest& interestForCertificate);

  bool
  isCertificateKnown(const Name& certificatePrefix);

  void
  cacheUnverifiedCertificate(const CertificateV2& certificate)
  {
    unverifiedCertificateCache_.insert(certificate);
  }

  const TrustAnchorContainer&
  getTrustAnchors() const { return trustAnchors_; }

  const CertificateCacheV2&
  getVerifiedCertificateCache() const { return verifiedCertificateCache_; }

  const CertificateCacheV2&
  getUnverifiedCertificateCache() const { return unverifiedCertificateCache_; }

  void
  loadAnchor(const std::string& groupId, const CertificateV2& certificate)
  {
    trustAnchors_.insert(groupId, certificate);
  }

  void
  loadAnchor
    (const std::string& groupId, const std::string& path,
     Milliseconds refreshPeriod, bool isDirectory = false)
  {
    trustAnchors_.insert(groupId, path, refreshPeriod, isDirectory);
  }

  void
  resetAnchors() { trustAnchors_.clear(); }

  void
  cacheVerifiedCertificate(const CertificateV2& certificate)
  {
    verifiedCertificateCache_.insert(certificate);
  }

  void
  resetVerifiedCertificates() { verifiedCertificateCache_.clear(); }

  void
  setCacheNowOffsetMilliseconds_(Milliseconds nowOffsetMilliseconds)
  {
    verifiedCertificateCache_.setNowOffsetMilliseconds_(nowOffsetMilliseconds);
    unverifiedCertificateCache_.setNowOffsetMilliseconds_(nowOffsetMilliseconds);
  }

private:
  // Disable the copy constructor and assignment operator.
  CertificateStorage(const CertificateStorage& other);
  CertificateStorage& operator=(const CertificateStorage& other);

protected:
  TrustAnchorContainer trustAnchors_;
  CertificateCacheV2 verifiedCertificateCache_;
  CertificateCacheV2 unverifiedCertificateCache_;
};

}

#endif