XrdCryptosslX509Req Class Reference

#include <XrdCryptosslX509Req.hh>

Inheritance diagram for XrdCryptosslX509Req:

Collaboration diagram for XrdCryptosslX509Req:

Public Member Functions
	XrdCryptosslX509Req (X509_REQ *creq)
	XrdCryptosslX509Req (XrdSutBucket *bck)
virtual	~XrdCryptosslX509Req ()
XrdSutBucket *	Export ()
XrdCryptoX509Reqdata	GetExtension (const char *oid)
XrdCryptoX509Reqdata	Opaque ()
XrdCryptoRSA *	PKI ()
const char *	Subject ()
const char *	SubjectHash (int)
bool	Verify ()
Public Member Functions inherited from XrdCryptoX509Req
	XrdCryptoX509Req (int v=-1)
virtual	~XrdCryptoX509Req ()
virtual void	Dump ()
virtual bool	IsValid ()
void	SetVersion (int v)
const char *	SubjectHash ()
int	Version () const

Detailed Description

Definition at line 47 of file XrdCryptosslX509Req.hh.

Constructor & Destructor Documentation

XrdCryptosslX509Req() [1/2]

XrdCryptosslX509Req::XrdCryptosslX509Req

(

XrdSutBucket *

bck

)

Definition at line 47 of file XrdCryptosslX509Req.cc.

                                                           : XrdCryptoX509Req()
{
   // Constructor certificate from BIO 'bcer'
   EPNAME("X509Req::XrdCryptosslX509Req_bio");
 
   // Init private members
   creq = 0;        // The certificate object
   subject = "";    // subject;
   subjecthash = ""; // hash of subject;
   subjectoldhash = ""; // hash of subject (md5 algorithm);
   bucket = 0;      // bucket for serialization
   pki = 0;         // PKI of the certificate
 
   // Make sure we got something;
   if (!buck) {
      DEBUG("got undefined opaque buffer");
      return;
   }
 
   //
   // Create a bio_mem to store the certificates
   BIO *bmem = BIO_new(BIO_s_mem());
   if (!bmem) {
      DEBUG("unable to create BIO for memory operations");
      return; 
   }
 
   // Write data to BIO
   int nw = BIO_write(bmem,(const void *)(buck->buffer),buck->size);
   if (nw != buck->size) {
      DEBUG("problems writing data to memory BIO (nw: "<<nw<<")");
      return; 
   }
 
   // Get certificate request from BIO
   if (!PEM_read_bio_X509_REQ(bmem,&creq,0,0)) {
      DEBUG("unable to read certificate request to memory BIO");
      return;
   }
   //
   // Free BIO
   BIO_free(bmem);
   //
   // Init some of the private members (the others upon need)
   Subject();
   //
   // Get the public key
   EVP_PKEY *evpp = X509_REQ_get_pubkey(creq);
   //
   if (evpp) {
      // init pki with the partial key
      if (!pki)
         pki = new XrdCryptosslRSA(evpp, 0);
   } else {
      DEBUG("could not access the public key");
   }
}

References XrdSutBucket::buffer, DEBUG, EPNAME, XrdSutBucket::size, and Subject().

Here is the call graph for this function:

XrdCryptosslX509Req() [2/2]

XrdCryptosslX509Req::XrdCryptosslX509Req

(

X509_REQ *

creq

)

Definition at line 106 of file XrdCryptosslX509Req.cc.

                                                     : XrdCryptoX509Req()
{
   // Constructor: import X509_REQ object
   EPNAME("X509Req::XrdCryptosslX509Req_x509");
 
   // Init private members
   creq = 0;        // The certificate object
   subject = "";    // subject;
   subjecthash = ""; // hash of subject;
   subjectoldhash = ""; // hash of subject (md5 algorithm);
   bucket = 0;      // bucket for serialization
   pki = 0;         // PKI of the certificate
 
   // Make sure we got something;
   if (!xc) {
      DEBUG("got undefined X509 object");
      return;
   }
 
   // Set certificate
   creq = xc;
   //
   // Init some of the private members (the others upon need)
   Subject();
   //
   // Get the public key
   EVP_PKEY *evpp = X509_REQ_get_pubkey(creq);
   //
   if (evpp) {
      // init pki with the partial key
      if (!pki)
         pki = new XrdCryptosslRSA(evpp, 0);
   } else {
      DEBUG("could not access the public key");
   }
}

References DEBUG, EPNAME, and Subject().

Here is the call graph for this function:

~XrdCryptosslX509Req()

XrdCryptosslX509Req::~XrdCryptosslX509Req ( )

virtual

Definition at line 144 of file XrdCryptosslX509Req.cc.

{
   // Destructor
 
   // Cleanup certificate
   if (creq) X509_REQ_free(creq);
   // Cleanup key
   if (pki) delete pki;
}

Member Function Documentation

Export()

XrdSutBucket * XrdCryptosslX509Req::Export ( )

virtual

Reimplemented from XrdCryptoX509Req.

Definition at line 284 of file XrdCryptosslX509Req.cc.

{
   // Export in form of bucket
   EPNAME("X509Req::Export");
 
   // If we have already done it, return the previous result
   if (bucket) {
      DEBUG("serialization already performed:"
            " return previous result ("<<bucket->size<<" bytes)");
      return bucket;
   }
 
   // Make sure we got something to export
   if (!creq) {
      DEBUG("certificate is not initialized");
      return 0;
   }
 
   //
   // Now we create a bio_mem to serialize the certificate
   BIO *bmem = BIO_new(BIO_s_mem());
   if (!bmem) {
      DEBUG("unable to create BIO for memory operations");
      return 0;
   }
   
   // Write certificate to BIO
   if (!PEM_write_bio_X509_REQ(bmem, creq)) {
      DEBUG("unable to write certificate request to memory BIO");
      return 0;
   }
 
   // Extract pointer to BIO data and length of segment
   char *bdata = 0;  
   int blen = BIO_get_mem_data(bmem, &bdata);
   DEBUG("BIO data: "<<blen<<" bytes at 0x"<<(int *)bdata);
 
   // create the bucket now
   bucket = new XrdSutBucket(0,0,kXRS_x509_req);
   if (bucket) {
      // Fill bucket
      bucket->SetBuf(bdata, blen);
      DEBUG("result of serialization: "<<bucket->size<<" bytes");
   } else {
      DEBUG("unable to create bucket for serialized format");
      BIO_free(bmem);
      return 0;
   }
   //
   // Free BIO
   BIO_free(bmem);
   //
   // We are done
   return bucket;
}

References DEBUG, EPNAME, kXRS_x509_req, XrdSutBucket::SetBuf(), and XrdSutBucket::size.

Here is the call graph for this function:

GetExtension()

XrdCryptoX509Reqdata XrdCryptosslX509Req::GetExtension ( const char *  oid )

virtual

Reimplemented from XrdCryptoX509Req.

Definition at line 221 of file XrdCryptosslX509Req.cc.

{
   // Return issuer name
   EPNAME("X509Req::GetExtension");
   XrdCryptoX509Reqdata ext = 0;
 
   // Make sure we got something to look for
   if (!oid) {
      DEBUG("OID string not defined");
      return ext;
   }
 
   // Make sure we got something to look for
   if (!creq) {
      DEBUG("certificate is not initialized");
      return ext;
   }
 
   // Are there any extension?
   STACK_OF(X509_EXTENSION) *esk = X509_REQ_get_extensions(creq);
   //
   int numext = sk_X509_EXTENSION_num(esk);
   if (numext <= 0) {
      DEBUG("certificate has got no extensions");
      return ext;
   }
   DEBUG("certificate request has "<<numext<<" extensions");
 
   // If the string is the Standard Name of a known extension check
   // searche the corresponding NID
   int nid = OBJ_sn2nid(oid);
   bool usenid = (nid > 0);
 
   // Loop to identify the one we would like
   int i = 0;
   X509_EXTENSION *wext = 0;
   for (i = 0; i< numext; i++) {
      wext = sk_X509_EXTENSION_value(esk, i);
      if (usenid) {
         int enid = OBJ_obj2nid(X509_EXTENSION_get_object(wext));
         if (enid == nid)
            break;
      } else {
         // Try matching of the text
         char s[256];
         OBJ_obj2txt(s, sizeof(s), X509_EXTENSION_get_object(wext), 1);
         if (!strcmp(s, oid)) 
            break;
      }
      wext = 0;
   }
 
   // We are done if nothing was found
   if (!wext) {
      DEBUG("Extension "<<oid<<" not found"); 
      return ext;
   }
 
   // We are done
   return (XrdCryptoX509Reqdata)wext;
}

References DEBUG, and EPNAME.

Opaque()

XrdCryptoX509Reqdata XrdCryptosslX509Req::Opaque ( )

inlinevirtual

Reimplemented from XrdCryptoX509Req.

Definition at line 56 of file XrdCryptosslX509Req.hh.

{ return (XrdCryptoX509Reqdata)creq; }

PKI()

XrdCryptoRSA* XrdCryptosslX509Req::PKI ( )

inlinevirtual

Reimplemented from XrdCryptoX509Req.

Definition at line 59 of file XrdCryptosslX509Req.hh.

{ return pki; }

Subject()

const char * XrdCryptosslX509Req::Subject ( )

virtual

Reimplemented from XrdCryptoX509Req.

Definition at line 155 of file XrdCryptosslX509Req.cc.

{
   // Return subject name
   EPNAME("X509Req::Subject");
 
   // If we do not have it already, try extraction
   if (subject.length() <= 0) {
 
      // Make sure we have a certificate
      if (!creq) {
         DEBUG("WARNING: no certificate available - cannot extract subject name");
         return (const char *)0;
      }
      
      // Extract subject name
      XrdCryptosslNameOneLine(X509_REQ_get_subject_name(creq), subject);
   }
 
   // return what we have
   return (subject.length() > 0) ? subject.c_str() : (const char *)0;
}

References XrdOucString::c_str(), DEBUG, EPNAME, XrdOucString::length(), and XrdCryptosslNameOneLine().

Referenced by XrdCryptosslX509Req().

Here is the call graph for this function:

Here is the caller graph for this function:

SubjectHash()

const char * XrdCryptosslX509Req::SubjectHash ( int  alg )

virtual

Reimplemented from XrdCryptoX509Req.

Definition at line 178 of file XrdCryptosslX509Req.cc.

{
   // Return hash of subject name
   // Use default algorithm (X509_NAME_hash) for alg = 0, old algorithm
   // (for v>=1.0.0) when alg = 1
   EPNAME("X509::SubjectHash");
 
   if (alg == 1) {
      // md5 based
      if (subjectoldhash.length() <= 0) {
         // Make sure we have a certificate
         if (creq) {
            char chash[30] = {0};
            snprintf(chash, sizeof(chash),
                     "%08lx.0",X509_NAME_hash_old(X509_REQ_get_subject_name(creq)));
            subjectoldhash = chash;
         } else {
            DEBUG("WARNING: no certificate available - cannot extract subject hash (md5)");
         }
      }
      // return what we have
      return (subjectoldhash.length() > 0) ? subjectoldhash.c_str() : (const char *)0;
   }
 
   // If we do not have it already, try extraction
   if (subjecthash.length() <= 0) {
 
      // Make sure we have a certificate
      if (creq) {
         char chash[30] = {0};
         snprintf(chash, sizeof(chash),
                  "%08lx.0",X509_NAME_hash(X509_REQ_get_subject_name(creq)));
         subjecthash = chash;
      } else {
         DEBUG("WARNING: no certificate available - cannot extract subject hash (default)");
      }
   }
 
   // return what we have
   return (subjecthash.length() > 0) ? subjecthash.c_str() : (const char *)0;
}

References XrdOucString::c_str(), DEBUG, EPNAME, and XrdOucString::length().

Here is the call graph for this function:

Verify()

bool XrdCryptosslX509Req::Verify ( )

virtual

Reimplemented from XrdCryptoX509Req.

Definition at line 341 of file XrdCryptosslX509Req.cc.

{
   // Verify signature of the request 
   EPNAME("X509Req::Verify");
 
   // We must have been initialized
   if (!creq)
      return 0;
 
   // Ok: we can verify
   int rc = X509_REQ_verify(creq,X509_REQ_get_pubkey(creq));
   if (rc <= 0) {
     // Failure
     if (rc == 0) {
       // Signatures are not OK
       DEBUG("signature not OK");
     } else {
       // General failure
       DEBUG("could not verify signature");
     }
     return 0;
   }
   // OK
   return 1;
}

References DEBUG, and EPNAME.

---

The documentation for this class was generated from the following files:

• XrdCryptosslX509Req.hh
• XrdCryptosslX509Req.cc