sec-public-info.hpp

Go to the documentation of this file.

/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil -*- */
#ifndef NDN_SECURITY_SEC_PUBLIC_INFO_HPP
#define NDN_SECURITY_SEC_PUBLIC_INFO_HPP

#include "../name.hpp"
#include "security-common.hpp"
#include "public-key.hpp"
#include "identity-certificate.hpp"


namespace ndn {

class SecPublicInfo
{
public:
  class Error : public std::runtime_error
  {
  public:
    explicit
    Error(const std::string& what)
      : std::runtime_error(what)
    {
    }
  };

  virtual
  ~SecPublicInfo() {}

  virtual bool
  doesIdentityExist(const Name& identityName) = 0;

  virtual void
  addIdentity(const Name& identityName) = 0;

  virtual bool
  revokeIdentity() = 0;

  virtual bool
  doesPublicKeyExist(const Name& keyName) = 0;

  virtual void
  addPublicKey(const Name& keyName, KeyType keyType, const PublicKey& publicKeyDer) = 0;

  virtual shared_ptr<PublicKey>
  getPublicKey(const Name& keyName) = 0;

  virtual bool
  doesCertificateExist(const Name& certificateName) = 0;

  virtual void
  addCertificate(const IdentityCertificate& certificate) = 0;

  virtual shared_ptr<IdentityCertificate>
  getCertificate(const Name& certificateName) = 0;


  /*****************************************
   *            Default Getter             *
   *****************************************/

  virtual Name
  getDefaultIdentity() = 0;

  virtual Name
  getDefaultKeyNameForIdentity(const Name& identityName) = 0;

  virtual Name
  getDefaultCertificateNameForKey(const Name& keyName) = 0;

  virtual void
  getAllIdentities(std::vector<Name>& nameList, bool isDefault) = 0;

  virtual void
  getAllKeyNames(std::vector<Name>& nameList, bool isDefault) = 0;

  virtual void
  getAllKeyNamesOfIdentity(const Name& identity, std::vector<Name>& nameList, bool isDefault) = 0;

  virtual void
  getAllCertificateNames(std::vector<Name>& nameList, bool isDefault) = 0;

  virtual void
  getAllCertificateNamesOfKey(const Name& keyName, std::vector<Name>& nameList, bool isDefault) = 0;

protected:

  /*****************************************
   *            Default Setter             *
   *****************************************/

  virtual void
  setDefaultIdentityInternal(const Name& identityName) = 0;

  virtual void
  setDefaultKeyNameForIdentityInternal(const Name& keyName) = 0;

  virtual void
  setDefaultCertificateNameForKeyInternal(const Name& certificateName) = 0;

  /*****************************************
   *            Delete Methods             *
   *****************************************/

  virtual void
  deleteCertificateInfo(const Name& certificateName) = 0;

  virtual void
  deletePublicKeyInfo(const Name& keyName) = 0;

  virtual void
  deleteIdentityInfo(const Name& identity) = 0;

public:

  /*****************************************
   *            Helper Methods             *
   *****************************************/

  inline void
  setDefaultIdentity(const Name& identityName);

  inline void
  setDefaultKeyNameForIdentity(const Name& keyName);

  inline void
  setDefaultCertificateNameForKey(const Name& certificateName);

  inline Name
  getNewKeyName(const Name& identityName, bool useKsk);

  inline Name
  getDefaultCertificateNameForIdentity(const Name& identityName);

  inline Name
  getDefaultCertificateName();

  inline void
  addCertificateAsKeyDefault(const IdentityCertificate& certificate);

  inline void
  addCertificateAsIdentityDefault(const IdentityCertificate& certificate);

  inline void
  addCertificateAsSystemDefault(const IdentityCertificate& certificate);

  inline shared_ptr<IdentityCertificate>
  defaultCertificate();

  inline void
  refreshDefaultCertificate();

protected:
  shared_ptr<IdentityCertificate> m_defaultCertificate;
};

inline void
SecPublicInfo::setDefaultIdentity(const Name& identityName)
{
  setDefaultIdentityInternal(identityName);
  refreshDefaultCertificate();
}

inline void
SecPublicInfo::setDefaultKeyNameForIdentity(const Name& keyName)
{
  setDefaultKeyNameForIdentityInternal(keyName);
  refreshDefaultCertificate();
}

inline void
SecPublicInfo::setDefaultCertificateNameForKey(const Name& certificateName)
{
  setDefaultCertificateNameForKeyInternal(certificateName);
  refreshDefaultCertificate();
}

inline Name
SecPublicInfo::getDefaultCertificateNameForIdentity(const Name& identityName)
{
  return getDefaultCertificateNameForKey(getDefaultKeyNameForIdentity(identityName));
}

inline Name
SecPublicInfo::getNewKeyName (const Name& identityName, bool useKsk)
{
  std::ostringstream oss;

  if (useKsk)
    oss << "ksk-";
  else
    oss << "dsk-";

  oss << time::toUnixTimestamp(time::system_clock::now()).count();

  Name keyName = Name(identityName).append(oss.str());

  if (doesPublicKeyExist(keyName))
    throw Error("Key name already exists: " + keyName.toUri());

  return keyName;
}

inline Name
SecPublicInfo::getDefaultCertificateName()
{
  if (!static_cast<bool>(m_defaultCertificate))
    refreshDefaultCertificate();

  if (!static_cast<bool>(m_defaultCertificate))
    throw Error("No default certificate is set");

  return m_defaultCertificate->getName();
}

inline void
SecPublicInfo::addCertificateAsKeyDefault(const IdentityCertificate& certificate)
{
  addCertificate(certificate);
  setDefaultCertificateNameForKeyInternal(certificate.getName());
  refreshDefaultCertificate();
}

inline void
SecPublicInfo::addCertificateAsIdentityDefault(const IdentityCertificate& certificate)
{
  addCertificate(certificate);
  Name certName = certificate.getName();
  Name keyName = IdentityCertificate::certificateNameToPublicKeyName(certName);
  setDefaultKeyNameForIdentityInternal(keyName);
  setDefaultCertificateNameForKeyInternal(certName);
  refreshDefaultCertificate();
}

inline void
SecPublicInfo::addCertificateAsSystemDefault(const IdentityCertificate& certificate)
{
  addCertificate(certificate);
  Name certName = certificate.getName();
  Name keyName = IdentityCertificate::certificateNameToPublicKeyName(certName);
  setDefaultIdentityInternal(keyName.getPrefix(-1));
  setDefaultKeyNameForIdentityInternal(keyName);
  setDefaultCertificateNameForKeyInternal(certName);
  refreshDefaultCertificate();
}

inline shared_ptr<IdentityCertificate>
SecPublicInfo::defaultCertificate()
{
  return m_defaultCertificate;
}

inline void
SecPublicInfo::refreshDefaultCertificate()
{
  try
    {
      Name certName = getDefaultCertificateNameForIdentity(getDefaultIdentity());
      m_defaultCertificate = getCertificate(certName);
    }
  catch (SecPublicInfo::Error& e)
    {
      m_defaultCertificate.reset();
    }

}

} // namespace ndn

#endif //NDN_SECURITY_SEC_PUBLIC_INFO_HPP