blob: 42272bc1898a9d7cae98aeb03f98e46d8f80f916 [file] [log] [blame]
Alexander Afanasyevc169a812014-05-20 20:37:29 -04001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Yingdi Yu3715f8d2014-01-30 00:32:20 -08002/**
Alexander Afanasyevc169a812014-05-20 20:37:29 -04003 * Copyright (c) 2013-2014 Regents of the University of California.
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07006 *
Alexander Afanasyevc169a812014-05-20 20:37:29 -04007 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -070020 *
21 * @author Yingdi Yu <http://irl.cs.ucla.edu/~yingdi/>
Yingdi Yu3715f8d2014-01-30 00:32:20 -080022 */
23
Alexander Afanasyeve2dcdfd2014-02-07 15:53:28 -080024#include "common.hpp"
25
Yingdi Yu3715f8d2014-01-30 00:32:20 -080026#include "sec-rule-relative.hpp"
27
28#include "signature-sha256-with-rsa.hpp"
29#include "security-common.hpp"
30
Yingdi Yufc40d872014-02-18 12:56:04 -080031namespace ndn {
Yingdi Yu3715f8d2014-01-30 00:32:20 -080032
Yingdi Yu5ec0ee32014-06-24 16:26:09 -070033using std::string;
34
35SecRuleRelative::SecRuleRelative(const string& dataRegex, const string& signerRegex,
36 const string& op,
37 const string& dataExpand, const string& signerExpand,
38 bool isPositive)
Yingdi Yu3715f8d2014-01-30 00:32:20 -080039 : SecRule(isPositive),
40 m_dataRegex(dataRegex),
41 m_signerRegex(signerRegex),
42 m_op(op),
43 m_dataExpand(dataExpand),
44 m_signerExpand(signerExpand),
45 m_dataNameRegex(dataRegex, dataExpand),
46 m_signerNameRegex(signerRegex, signerExpand)
47{
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070048 if (op != ">" && op != ">=" && op != "==")
Yingdi Yu3715f8d2014-01-30 00:32:20 -080049 throw Error("op is wrong!");
50}
51
52SecRuleRelative::~SecRuleRelative()
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070053{
54}
Yingdi Yu3715f8d2014-01-30 00:32:20 -080055
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070056bool
Yingdi Yu5ec0ee32014-06-24 16:26:09 -070057SecRuleRelative::satisfy(const Data& data)
Yingdi Yu3715f8d2014-01-30 00:32:20 -080058{
59 Name dataName = data.getName();
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070060 try
61 {
Yingdi Yu4a557052014-07-09 16:40:37 -070062 if (!data.getSignature().hasKeyLocator())
63 return false;
64
65 const KeyLocator& keyLocator = data.getSignature().getKeyLocator();
66 if (keyLocator.getType() != KeyLocator::KeyLocator_Name)
67 return false;
68
69 const Name& signerName = keyLocator.getName();
Yingdi Yu5ec0ee32014-06-24 16:26:09 -070070 return satisfy(dataName, signerName);
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070071 }
Yingdi Yu5ec0ee32014-06-24 16:26:09 -070072 catch (Tlv::Error& e)
73 {
74 return false;
75 }
76 catch (KeyLocator::Error& e)
77 {
78 return false;
79 }
80 catch (RegexMatcher::Error& e)
Yingdi Yu4b8c6a22014-04-15 23:00:54 -070081 {
82 return false;
83 }
Yingdi Yu3715f8d2014-01-30 00:32:20 -080084}
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070085
86bool
Yingdi Yu5ec0ee32014-06-24 16:26:09 -070087SecRuleRelative::satisfy(const Name& dataName, const Name& signerName)
Yingdi Yu3715f8d2014-01-30 00:32:20 -080088{
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070089 if (!m_dataNameRegex.match(dataName))
Yingdi Yu3715f8d2014-01-30 00:32:20 -080090 return false;
91 Name expandDataName = m_dataNameRegex.expand();
92
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070093 if (!m_signerNameRegex.match(signerName))
Yingdi Yu3715f8d2014-01-30 00:32:20 -080094 return false;
95 Name expandSignerName = m_signerNameRegex.expand();
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070096
Yingdi Yu3715f8d2014-01-30 00:32:20 -080097 bool matched = compare(expandDataName, expandSignerName);
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -070098
Yingdi Yu3715f8d2014-01-30 00:32:20 -080099 return matched;
100}
101
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -0700102bool
Yingdi Yu5ec0ee32014-06-24 16:26:09 -0700103SecRuleRelative::matchDataName(const Data& data)
Yingdi Yu4b8c6a22014-04-15 23:00:54 -0700104{
105 return m_dataNameRegex.match(data.getName());
106}
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800107
108bool
Yingdi Yu5ec0ee32014-06-24 16:26:09 -0700109SecRuleRelative::matchSignerName(const Data& data)
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -0700110{
Yingdi Yu4b8c6a22014-04-15 23:00:54 -0700111 try
112 {
Yingdi Yu4a557052014-07-09 16:40:37 -0700113 if (!data.getSignature().hasKeyLocator())
114 return false;
115
116 const KeyLocator& keyLocator = data.getSignature().getKeyLocator();
117 if (keyLocator.getType() != KeyLocator::KeyLocator_Name)
118 return false;
119
120 const Name& signerName = keyLocator.getName();
Yingdi Yu4b8c6a22014-04-15 23:00:54 -0700121 return m_signerNameRegex.match(signerName);
122 }
Yingdi Yu5ec0ee32014-06-24 16:26:09 -0700123 catch (Tlv::Error& e)
124 {
125 return false;
126 }
127 catch (KeyLocator::Error& e)
128 {
129 return false;
130 }
131 catch (RegexMatcher::Error& e)
Yingdi Yu4b8c6a22014-04-15 23:00:54 -0700132 {
133 return false;
134 }
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800135}
136
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -0700137bool
138SecRuleRelative::compare(const Name& dataName, const Name& signerName)
139{
140 if ((dataName == signerName) && ("==" == m_op || ">=" == m_op))
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800141 return true;
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -0700142
Yingdi Yu5ec0ee32014-06-24 16:26:09 -0700143 Name::const_iterator i = dataName.begin();
144 Name::const_iterator j = signerName.begin();
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800145
Yingdi Yu5ec0ee32014-06-24 16:26:09 -0700146 for (; i != dataName.end() && j != signerName.end(); i++, j++)
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800147 {
Yingdi Yu5ec0ee32014-06-24 16:26:09 -0700148 if (i->compare(*j) == 0)
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800149 continue;
150 else
151 return false;
152 }
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -0700153
154 if (i == dataName.end())
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800155 return false;
Alexander Afanasyevfdbfc6d2014-04-14 15:12:11 -0700156 else
Yingdi Yu3715f8d2014-01-30 00:32:20 -0800157 return true;
158}
159
Yingdi Yufc40d872014-02-18 12:56:04 -0800160} // namespace ndn