blob: af89e91db7d6eb3c28a82990f37c6836cdc56728 [file] [log] [blame]
Alexander Afanasyevc169a812014-05-20 20:37:29 -04001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Yingdi Yu3715f8d2014-01-30 00:32:20 -08002/**
Alexander Afanasyevc169a812014-05-20 20:37:29 -04003 * Copyright (c) 2013-2014 Regents of the University of California.
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07006 *
Alexander Afanasyevc169a812014-05-20 20:37:29 -04007 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -070020 *
21 * @author Yingdi Yu <http://irl.cs.ucla.edu/~yingdi/>
Yingdi Yu3715f8d2014-01-30 00:32:20 -080022 */
23
Alexander Afanasyeve2dcdfd2014-02-07 15:53:28 -080024#include "common.hpp"
25
Yingdi Yu3715f8d2014-01-30 00:32:20 -080026#include "sec-rule-specific.hpp"
27#include "signature-sha256-with-rsa.hpp"
28
Yingdi Yufc40d872014-02-18 12:56:04 -080029namespace ndn {
Yingdi Yu3715f8d2014-01-30 00:32:20 -080030
31SecRuleSpecific::SecRuleSpecific(shared_ptr<Regex> dataRegex,
32 shared_ptr<Regex> signerRegex)
33 : SecRule(true)
34 , m_dataRegex(dataRegex)
35 , m_signerRegex(signerRegex)
Yingdi Yu0fc447c2014-04-29 19:38:32 -070036 , m_isExempted(false)
37{
38}
39
40SecRuleSpecific::SecRuleSpecific(shared_ptr<Regex> dataRegex)
41 : SecRule(true)
42 , m_dataRegex(dataRegex)
43 , m_isExempted(true)
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070044{
45}
Yingdi Yu3715f8d2014-01-30 00:32:20 -080046
47SecRuleSpecific::SecRuleSpecific(const SecRuleSpecific& rule)
48 : SecRule(true)
49 , m_dataRegex(rule.m_dataRegex)
50 , m_signerRegex(rule.m_signerRegex)
Yingdi Yu0fc447c2014-04-29 19:38:32 -070051 , m_isExempted(rule.m_isExempted)
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070052{
53}
Yingdi Yu3715f8d2014-01-30 00:32:20 -080054
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070055bool
Yingdi Yu3715f8d2014-01-30 00:32:20 -080056SecRuleSpecific::matchDataName(const Data& data)
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070057{
58 return m_dataRegex->match(data.getName());
59}
Yingdi Yu3715f8d2014-01-30 00:32:20 -080060
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070061bool
Yingdi Yu3715f8d2014-01-30 00:32:20 -080062SecRuleSpecific::matchSignerName(const Data& data)
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070063{
Yingdi Yu0fc447c2014-04-29 19:38:32 -070064 if (m_isExempted)
65 return true;
66
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070067 try
68 {
Yingdi Yu4a557052014-07-09 16:40:37 -070069 if (!data.getSignature().hasKeyLocator())
70 return false;
71
72 const KeyLocator& keyLocator = data.getSignature().getKeyLocator();
73 if (keyLocator.getType() != KeyLocator::KeyLocator_Name)
74 return false;
75
76 const Name& signerName = keyLocator.getName();
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070077 return m_signerRegex->match(signerName);
78 }
Yingdi Yu5ec0ee32014-06-24 16:26:09 -070079 catch (Tlv::Error& e)
80 {
81 return false;
82 }
83 catch (KeyLocator::Error& e)
84 {
85 return false;
86 }
87 catch (RegexMatcher::Error& e)
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070088 {
89 return false;
90 }
Yingdi Yu3715f8d2014-01-30 00:32:20 -080091}
92
93bool
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070094SecRuleSpecific::satisfy(const Data& data)
95{
96 return (matchDataName(data) && matchSignerName(data)) ? true : false;
Yingdi Yufc40d872014-02-18 12:56:04 -080097}
Yingdi Yu3715f8d2014-01-30 00:32:20 -080098
99bool
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -0700100SecRuleSpecific::satisfy(const Name& dataName, const Name& signerName)
101{
Yingdi Yu0fc447c2014-04-29 19:38:32 -0700102 bool isSignerMatched = m_isExempted || m_signerRegex->match(signerName);
Yingdi Yu5ec0ee32014-06-24 16:26:09 -0700103 return m_dataRegex->match(dataName) && isSignerMatched;
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800104}
Yingdi Yufc40d872014-02-18 12:56:04 -0800105
106} // namespace ndn