Alexander Afanasyev | b54aa57 | 2017-03-21 19:40:49 -0500 | [diff] [blame] | 1 | /* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */ |
| 2 | /** |
| 3 | * Copyright (c) 2013-2017 Regents of the University of California. |
| 4 | * |
| 5 | * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions). |
| 6 | * |
| 7 | * ndn-cxx library is free software: you can redistribute it and/or modify it under the |
| 8 | * terms of the GNU Lesser General Public License as published by the Free Software |
| 9 | * Foundation, either version 3 of the License, or (at your option) any later version. |
| 10 | * |
| 11 | * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY |
| 12 | * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A |
| 13 | * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details. |
| 14 | * |
| 15 | * You should have received copies of the GNU General Public License and GNU Lesser |
| 16 | * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see |
| 17 | * <http://www.gnu.org/licenses/>. |
| 18 | * |
| 19 | * See AUTHORS.md for complete list of ndn-cxx authors and contributors. |
| 20 | */ |
| 21 | |
| 22 | #include "validation-policy.hpp" |
| 23 | |
| 24 | namespace ndn { |
| 25 | namespace security { |
| 26 | namespace v2 { |
| 27 | |
| 28 | void |
| 29 | ValidationPolicy::setInnerPolicy(unique_ptr<ValidationPolicy> innerPolicy) |
| 30 | { |
| 31 | if (innerPolicy == nullptr) { |
| 32 | BOOST_THROW_EXCEPTION(std::invalid_argument("Inner policy argument cannot be nullptr")); |
| 33 | } |
| 34 | |
| 35 | if (m_validator != nullptr) { |
| 36 | innerPolicy->setValidator(*m_validator); |
| 37 | } |
| 38 | |
| 39 | if (m_innerPolicy == nullptr) { |
| 40 | m_innerPolicy = std::move(innerPolicy); |
| 41 | } |
| 42 | else { |
| 43 | m_innerPolicy->setInnerPolicy(std::move(innerPolicy)); |
| 44 | } |
| 45 | } |
| 46 | |
| 47 | ValidationPolicy& |
| 48 | ValidationPolicy::getInnerPolicy() |
| 49 | { |
| 50 | return *m_innerPolicy; |
| 51 | } |
| 52 | |
| 53 | void |
| 54 | ValidationPolicy::setValidator(Validator& validator) |
| 55 | { |
| 56 | m_validator = &validator; |
| 57 | if (m_innerPolicy != nullptr) { |
| 58 | m_innerPolicy->setValidator(validator); |
| 59 | } |
| 60 | } |
| 61 | |
Junxiao Shi | 830ba97 | 2017-06-23 22:44:41 +0000 | [diff] [blame] | 62 | static Name |
| 63 | getKeyLocatorName(const SignatureInfo& si, ValidationState& state) |
| 64 | { |
| 65 | if (!si.hasKeyLocator()) { |
| 66 | state.fail({ValidationError::Code::INVALID_KEY_LOCATOR, "KeyLocator is missing"}); |
| 67 | return Name(); |
| 68 | } |
| 69 | |
| 70 | const KeyLocator& kl = si.getKeyLocator(); |
| 71 | if (kl.getType() != KeyLocator::KeyLocator_Name) { |
| 72 | state.fail({ValidationError::Code::INVALID_KEY_LOCATOR, "KeyLocator type is not Name"}); |
| 73 | return Name(); |
| 74 | } |
| 75 | |
| 76 | return kl.getName(); |
| 77 | } |
| 78 | |
| 79 | Name |
| 80 | getKeyLocatorName(const Data& data, ValidationState& state) |
| 81 | { |
| 82 | return getKeyLocatorName(data.getSignature().getSignatureInfo(), state); |
| 83 | } |
| 84 | |
| 85 | Name |
| 86 | getKeyLocatorName(const Interest& interest, ValidationState& state) |
| 87 | { |
| 88 | const Name& name = interest.getName(); |
| 89 | if (name.size() < signed_interest::MIN_SIZE) { |
| 90 | state.fail({ValidationError::INVALID_KEY_LOCATOR, |
| 91 | "Invalid signed Interest: name too short"}); |
| 92 | return Name(); |
| 93 | } |
| 94 | |
| 95 | SignatureInfo si; |
| 96 | try { |
| 97 | si.wireDecode(name.at(signed_interest::POS_SIG_INFO).blockFromValue()); |
| 98 | } |
| 99 | catch (const tlv::Error& e) { |
| 100 | state.fail({ValidationError::Code::INVALID_KEY_LOCATOR, |
| 101 | "Invalid signed Interest: " + std::string(e.what())}); |
| 102 | return Name(); |
| 103 | } |
| 104 | |
| 105 | return getKeyLocatorName(si, state); |
| 106 | } |
| 107 | |
Alexander Afanasyev | b54aa57 | 2017-03-21 19:40:49 -0500 | [diff] [blame] | 108 | } // namespace v2 |
| 109 | } // namespace security |
| 110 | } // namespace ndn |