provides the interfaces for packet validation. More...
#include <validator.hpp>
Classes | |
class | Error |
Public Member Functions | |
Validator (Face *face=nullptr) | |
Validator constructor. More... | |
Validator (Face &face) | |
virtual | ~Validator () |
void | setDirectCertFetchEnabled (bool isEnabled) |
Enable or disable the direct certificate fetch feature. More... | |
void | validate (const Data &data, const OnDataValidated &onValidated, const OnDataValidationFailed &onValidationFailed) |
Validate Data and call either onValidated or onValidationFailed. More... | |
void | validate (const Interest &interest, const OnInterestValidated &onValidated, const OnInterestValidationFailed &onValidationFailed) |
Validate Interest and call either onValidated or onValidationFailed. More... | |
Static Public Member Functions | |
static bool | verifySignature (const Data &data, const v1::PublicKey &publicKey) |
Verify the data using the publicKey. More... | |
static bool | verifySignature (const Interest &interest, const v1::PublicKey &publicKey) |
Verify the signed Interest using the publicKey. More... | |
static bool | verifySignature (const Buffer &blob, const Signature &sig, const v1::PublicKey &publicKey) |
Verify the blob using the publicKey against the signature. More... | |
static bool | verifySignature (const Data &data, const Signature &sig, const v1::PublicKey &publicKey) |
Verify the data using the publicKey against the SHA256-RSA signature. More... | |
static bool | verifySignature (const Interest &interest, const Signature &sig, const v1::PublicKey &publicKey) |
Verify the interest using the publicKey against the SHA256-RSA signature. More... | |
static bool | verifySignature (const uint8_t *buf, const size_t size, const Signature &sig, const v1::PublicKey &publicKey) |
Verify the blob using the publicKey against the SHA256-RSA signature. More... | |
static bool | verifySignature (const Data &data, const DigestSha256 &sig) |
Verify the data against the SHA256 signature. More... | |
static bool | verifySignature (const Interest &interest, const DigestSha256 &sig) |
Verify the interest against the SHA256 signature. More... | |
static bool | verifySignature (const Buffer &blob, const DigestSha256 &sig) |
Verify the blob against the SHA256 signature. More... | |
static bool | verifySignature (const uint8_t *buf, const size_t size, const DigestSha256 &sig) |
Verify the blob against the SHA256 signature. More... | |
Protected Types | |
typedef function< void(const std::string &)> | OnFailure |
Protected Member Functions | |
virtual void | afterCheckPolicy (const std::vector< shared_ptr< ValidationRequest >> &nextSteps, const OnFailure &onFailure) |
trigger after checkPolicy is done. More... | |
virtual void | checkPolicy (const Data &data, int nSteps, const OnDataValidated &onValidated, const OnDataValidationFailed &onValidationFailed, std::vector< shared_ptr< ValidationRequest >> &nextSteps)=0 |
Check the Data against policy and return the next validation step if necessary. More... | |
virtual void | checkPolicy (const Interest &interest, int nSteps, const OnInterestValidated &onValidated, const OnInterestValidationFailed &onValidationFailed, std::vector< shared_ptr< ValidationRequest >> &nextSteps)=0 |
Check the Interest against validation policy and return the next validation step if necessary. More... | |
void | onData (const Interest &interest, const Data &data, const shared_ptr< ValidationRequest > &nextStep) |
Process the received certificate. More... | |
virtual void | onNack (const Interest &interest, const lp::Nack &nack, int nRemainingRetries, const OnFailure &onFailure, const shared_ptr< ValidationRequest > &validationRequest) |
trigger when interest retrieves a Nack. More... | |
virtual void | onTimeout (const Interest &interest, int nRemainingRetries, const OnFailure &onFailure, const shared_ptr< ValidationRequest > &validationRequest) |
trigger when interest for certificate times out. More... | |
virtual shared_ptr< const Data > | preCertificateValidation (const Data &data) |
Hooks. More... | |
void | validate (const Data &data, const OnDataValidated &onValidated, const OnDataValidationFailed &onValidationFailed, int nSteps) |
void | validate (const Interest &interest, const OnInterestValidated &onValidated, const OnInterestValidationFailed &onValidationFailed, int nSteps) |
Protected Attributes | |
Face * | m_face |
bool | m_wantDirectCertFetch |
provides the interfaces for packet validation.
Definition at line 39 of file validator.hpp.
|
protected |
Definition at line 260 of file validator.hpp.
|
explicit |
Validator constructor.
face | Pointer to face through which validator may retrieve certificates. Passing a null pointer implies the validator is in offline mode. |
Definition at line 34 of file validator.cpp.
|
explicit |
Definition at line 40 of file validator.cpp.
|
virtualdefault |
|
protectedvirtual |
trigger after checkPolicy is done.
Validator can decide how to handle the set of validation requests according to the trust model.
nextSteps | A set of validation request made by checkPolicy. |
onFailure | Failure callback when errors happen in processing nextSteps. |
Definition at line 303 of file validator.cpp.
|
protectedpure virtual |
Check the Data against policy and return the next validation step if necessary.
If there is no next validation step, that validation MUST have been done. i.e., either onValidated or onValidationFailed callback is invoked.
data | The Data to check. |
nSteps | The number of validation steps that have been done. |
onValidated | If the Data is validated, this calls onValidated(data) |
onValidationFailed | If validation fails, this calls onValidationFailed(data) |
nextSteps | On return, contains the next validation step |
Implemented in ndn::security::CommandInterestValidator, and ndn::security::ValidatorConfig.
|
protectedpure virtual |
Check the Interest against validation policy and return the next validation step if necessary.
If there is no next validation step, that validation MUST have been done. i.e., either onValidated or onValidationFailed callback is invoked.
interest | The Interest to check. |
nSteps | The number of validation steps that have been done. |
onValidated | If the Interest is validated, this calls onValidated(data) |
onValidationFailed | If validation fails, this calls onValidationFailed(data) |
nextSteps | On return, contains the next validation step |
Implemented in ndn::security::CommandInterestValidator, and ndn::security::ValidatorConfig.
|
protected |
Process the received certificate.
Definition at line 88 of file validator.cpp.
|
protectedvirtual |
trigger when interest retrieves a Nack.
Validator can decide how to handle a Nack, either call onFailure, or retry.
interest | The interest that retrieves a Nack. |
nack | The Nack that is retrieved. |
nRemainingRetries | The number of retries left. |
onFailure | Failure callback when there is no more retries remaining. |
validationRequest | The validationRequest containing the context of the interest. |
Definition at line 256 of file validator.cpp.
|
protectedvirtual |
trigger when interest for certificate times out.
Validator can decide how to handle the timeout, either call onFailure, or retry.
interest | The interest that times out. |
nRemainingRetries | The number of retries left. |
onFailure | Failure callback when there is no more retries remaining. |
validationRequest | The validationRequest containing the context of the interest. |
Definition at line 280 of file validator.cpp.
|
inlineprotectedvirtual |
Hooks.
trigger before validating requested certificate.
The Data:
This method returns a data (actually certificate) that is will be passed as Data into: Validator::validate(const Data& data, const OnDataValidated& onValidated, const OnDataValidationFailed& onValidationFailed, int nSteps);
Definition at line 296 of file validator.hpp.
void ndn::security::Validator::setDirectCertFetchEnabled | ( | bool | isEnabled | ) |
Enable or disable the direct certificate fetch feature.
When enabled, the validator will attempt to fetch the certificate that signs an Interest from the sender of that Interest, as identified by IncomingFaceId field, in addition to fetching from the infrastructure.
Prior to enabling this feature, the application must enable NextHopFaceId privilege on the face used by this validator.
isEnabled | Set true to enable the feature or false to disable. |
Definition at line 330 of file validator.cpp.
|
inline |
Validate Data and call either onValidated or onValidationFailed.
data | The Data with the signature to check. |
onValidated | If the Data is validated, this calls onValidated(data). |
onValidationFailed | If validation fails, this calls onValidationFailed(data). |
Definition at line 78 of file validator.hpp.
|
inline |
Validate Interest and call either onValidated or onValidationFailed.
interest | The Interest with the signature to check. |
onValidated | If the Interest is validated, this calls onValidated(interest). |
onValidationFailed | If validation fails, this calls onValidationFailed(interest). |
Definition at line 93 of file validator.hpp.
|
protected |
Definition at line 68 of file validator.cpp.
|
protected |
Definition at line 48 of file validator.cpp.
|
static |
Verify the data using the publicKey.
Definition at line 104 of file validator.cpp.
|
static |
Verify the signed Interest using the publicKey.
(Note the signature covers the first n-2 name components).
Definition at line 116 of file validator.cpp.
|
inlinestatic |
Verify the blob using the publicKey against the signature.
Definition at line 139 of file validator.hpp.
|
inlinestatic |
Verify the data using the publicKey against the SHA256-RSA signature.
Definition at line 146 of file validator.hpp.
|
inlinestatic |
Verify the interest using the publicKey against the SHA256-RSA signature.
(Note the signature covers the first n-2 name components).
Definition at line 160 of file validator.hpp.
|
static |
Verify the blob using the publicKey against the SHA256-RSA signature.
Definition at line 142 of file validator.cpp.
|
inlinestatic |
Verify the data against the SHA256 signature.
Definition at line 184 of file validator.hpp.
|
inlinestatic |
Verify the interest against the SHA256 signature.
(Note the signature covers the first n-2 name components).
Definition at line 197 of file validator.hpp.
|
inlinestatic |
Verify the blob against the SHA256 signature.
Definition at line 211 of file validator.hpp.
|
static |
Verify the blob against the SHA256 signature.
Definition at line 234 of file validator.cpp.
|
protected |
Definition at line 349 of file validator.hpp.
|
protected |
Definition at line 350 of file validator.hpp.