diff options
Diffstat (limited to 'src/libs/3rdparty/botan/src/lib/x509/certstor.h')
| -rw-r--r-- | src/libs/3rdparty/botan/src/lib/x509/certstor.h | 163 |
1 files changed, 0 insertions, 163 deletions
diff --git a/src/libs/3rdparty/botan/src/lib/x509/certstor.h b/src/libs/3rdparty/botan/src/lib/x509/certstor.h deleted file mode 100644 index 36d2e4abdd..0000000000 --- a/src/libs/3rdparty/botan/src/lib/x509/certstor.h +++ /dev/null @@ -1,163 +0,0 @@ -/* -* Certificate Store -* (C) 1999-2010,2013 Jack Lloyd -* -* Botan is released under the Simplified BSD License (see license.txt) -*/ - -#ifndef BOTAN_CERT_STORE_H_ -#define BOTAN_CERT_STORE_H_ - -#include <botan/x509cert.h> -#include <botan/x509_crl.h> - -namespace Botan { - -/** -* Certificate Store Interface -*/ -class BOTAN_PUBLIC_API(2,0) Certificate_Store - { - public: - virtual ~Certificate_Store() = default; - - /** - * Find a certificate by Subject DN and (optionally) key identifier - * @param subject_dn the subject's distinguished name - * @param key_id an optional key id - * @return a matching certificate or nullptr otherwise - */ - virtual std::shared_ptr<const X509_Certificate> - find_cert(const X509_DN& subject_dn, const std::vector<uint8_t>& key_id) const = 0; - - /** - * Find all certificates with a given Subject DN. - * Subject DN and even the key identifier might not be unique. - */ - virtual std::vector<std::shared_ptr<const X509_Certificate>> find_all_certs( - const X509_DN& subject_dn, const std::vector<uint8_t>& key_id) const = 0; - - - /** - * Find a certificate by searching for one with a matching SHA-1 hash of - * public key. Used for OCSP. - * @param key_hash SHA-1 hash of the subject's public key - * @return a matching certificate or nullptr otherwise - */ - virtual std::shared_ptr<const X509_Certificate> - find_cert_by_pubkey_sha1(const std::vector<uint8_t>& key_hash) const = 0; - - /** - * Find a certificate by searching for one with a matching SHA-256 hash of - * raw subject name. Used for OCSP. - * @param subject_hash SHA-256 hash of the subject's raw name - * @return a matching certificate or nullptr otherwise - */ - virtual std::shared_ptr<const X509_Certificate> - find_cert_by_raw_subject_dn_sha256(const std::vector<uint8_t>& subject_hash) const = 0; - - /** - * Finds a CRL for the given certificate - * @param subject the subject certificate - * @return the CRL for subject or nullptr otherwise - */ - virtual std::shared_ptr<const X509_CRL> find_crl_for(const X509_Certificate& subject) const; - - /** - * @return whether the certificate is known - * @param cert certififcate to be searched - */ - bool certificate_known(const X509_Certificate& cert) const - { - return find_cert(cert.subject_dn(), cert.subject_key_id()) != nullptr; - } - - // remove this (used by TLS::Server) - virtual std::vector<X509_DN> all_subjects() const = 0; - }; - -/** -* In Memory Certificate Store -*/ -class BOTAN_PUBLIC_API(2,0) Certificate_Store_In_Memory final : public Certificate_Store - { - public: - /** - * Attempt to parse all files in dir (including subdirectories) - * as certificates. Ignores errors. - */ - explicit Certificate_Store_In_Memory(const std::string& dir); - - /** - * Adds given certificate to the store. - */ - explicit Certificate_Store_In_Memory(const X509_Certificate& cert); - - /** - * Create an empty store. - */ - Certificate_Store_In_Memory() = default; - - /** - * Add a certificate to the store. - * @param cert certificate to be added - */ - void add_certificate(const X509_Certificate& cert); - - /** - * Add a certificate already in a shared_ptr to the store. - * @param cert certificate to be added - */ - void add_certificate(std::shared_ptr<const X509_Certificate> cert); - - /** - * Add a certificate revocation list (CRL) to the store. - * @param crl CRL to be added - */ - void add_crl(const X509_CRL& crl); - - /** - * Add a certificate revocation list (CRL) to the store as a shared_ptr - * @param crl CRL to be added - */ - void add_crl(std::shared_ptr<const X509_CRL> crl); - - /** - * @return DNs for all certificates managed by the store - */ - std::vector<X509_DN> all_subjects() const override; - - /* - * Find a certificate by Subject DN and (optionally) key identifier - * @return the first certificate that matches - */ - std::shared_ptr<const X509_Certificate> find_cert( - const X509_DN& subject_dn, - const std::vector<uint8_t>& key_id) const override; - - /* - * Find all certificates with a given Subject DN. - * Subject DN and even the key identifier might not be unique. - */ - std::vector<std::shared_ptr<const X509_Certificate>> find_all_certs( - const X509_DN& subject_dn, const std::vector<uint8_t>& key_id) const override; - - std::shared_ptr<const X509_Certificate> - find_cert_by_pubkey_sha1(const std::vector<uint8_t>& key_hash) const override; - - std::shared_ptr<const X509_Certificate> - find_cert_by_raw_subject_dn_sha256(const std::vector<uint8_t>& subject_hash) const override; - - /** - * Finds a CRL for the given certificate - */ - std::shared_ptr<const X509_CRL> find_crl_for(const X509_Certificate& subject) const override; - private: - // TODO: Add indexing on the DN and key id to avoid linear search - std::vector<std::shared_ptr<const X509_Certificate>> m_certs; - std::vector<std::shared_ptr<const X509_CRL>> m_crls; - }; - -} - -#endif |