blob: a03a5958e452e21a30c26724080884e2f96e9200 [file] [log] [blame]
Alexander Afanasyevc169a812014-05-20 20:37:29 -04001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Davide Pesavento5d0b0102017-10-07 13:43:16 -04002/*
Alexander Afanasyev4c9a3d52017-01-03 17:45:19 -08003 * Copyright (c) 2013-2017 Regents of the University of California.
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07006 *
Alexander Afanasyevc169a812014-05-20 20:37:29 -04007 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
Yingdi Yu8d7468f2014-02-21 14:49:45 -080020 */
21
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080022#include "ndnsec.hpp"
Alexander Afanasyevd7db8bf2015-01-04 15:31:02 -080023#include "util.hpp"
Yingdi Yu8d7468f2014-02-21 14:49:45 -080024
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080025namespace ndn {
26namespace ndnsec {
27
Yingdi Yub61f5402014-02-26 17:46:11 -080028int
29ndnsec_sign_req(int argc, char** argv)
Yingdi Yu8d7468f2014-02-21 14:49:45 -080030{
Yingdi Yu8d7468f2014-02-21 14:49:45 -080031 namespace po = boost::program_options;
32
Alexander Afanasyev35109a12017-01-04 15:39:06 -080033 Name name;
Yingdi Yu8d7468f2014-02-21 14:49:45 -080034 bool isKeyName = false;
35
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080036 po::options_description description(
37 "General Usage\n ndnsec sign-req [-h] [-k] name\nGeneral options");
Alexander Afanasyev35109a12017-01-04 15:39:06 -080038 description
39 .add_options()
Yingdi Yu8d7468f2014-02-21 14:49:45 -080040 ("help,h", "produce help message")
Alexander Afanasyev35109a12017-01-04 15:39:06 -080041 ("key,k", "optional, if specified, name is keyName (e.g., /ndn/edu/ucla/alice/KEY/ksk-123456789), "
42 "otherwise identity name")
43 ("name,n", po::value<Name>(&name), "name, for example, /ndn/edu/ucla/alice");
Yingdi Yu8d7468f2014-02-21 14:49:45 -080044
45 po::positional_options_description p;
46 p.add("name", 1);
47
48 po::variables_map vm;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080049 try {
50 po::store(po::command_line_parser(argc, argv).options(description).positional(p).run(), vm);
51 po::notify(vm);
52 }
53 catch (const std::exception& e) {
54 std::cerr << "ERROR: " << e.what() << std::endl;
55 std::cerr << description << std::endl;
56 return 1;
57 }
Yingdi Yub61f5402014-02-26 17:46:11 -080058
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080059 if (vm.count("help") != 0) {
60 std::cerr << description << std::endl;
61 return 0;
62 }
Yingdi Yu8d7468f2014-02-21 14:49:45 -080063
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080064 if (vm.count("name") == 0) {
65 std::cerr << "ERROR: name must be specified" << std::endl;
66 std::cerr << description << std::endl;
67 return 1;
68 }
Yingdi Yub61f5402014-02-26 17:46:11 -080069
Alexander Afanasyev35109a12017-01-04 15:39:06 -080070 if (vm.count("key") != 0) {
Yingdi Yu8d7468f2014-02-21 14:49:45 -080071 isKeyName = true;
Yingdi Yu37339fd2014-11-26 22:26:43 -080072 }
Yingdi Yu8d7468f2014-02-21 14:49:45 -080073
Alexander Afanasyev35109a12017-01-04 15:39:06 -080074 security::v2::KeyChain keyChain;
75
76 security::Identity identity;
77 security::Key key;
78 if (!isKeyName) {
79 identity = keyChain.getPib().getIdentity(name);
80 key = identity.getDefaultKey();
Yingdi Yu37339fd2014-11-26 22:26:43 -080081 }
82 else {
Alexander Afanasyev35109a12017-01-04 15:39:06 -080083 identity = keyChain.getPib().getIdentity(security::v2::extractIdentityFromKeyName(name));
84 key = identity.getKey(name);
Yingdi Yu37339fd2014-11-26 22:26:43 -080085 }
Alexander Afanasyev35109a12017-01-04 15:39:06 -080086
87 // Create signing request (similar to self-signed certificate)
88 security::v2::Certificate certificate;
89
90 // set name
91 Name certificateName = key.getName();
92 certificateName
93 .append("cert-request")
94 .appendVersion();
95 certificate.setName(certificateName);
96
97 // set metainfo
98 certificate.setContentType(tlv::ContentType_Key);
99 certificate.setFreshnessPeriod(time::hours(1));
100
101 // set content
Davide Pesavento5d0b0102017-10-07 13:43:16 -0400102 certificate.setContent(key.getPublicKey().data(), key.getPublicKey().size());
Alexander Afanasyev35109a12017-01-04 15:39:06 -0800103
104 // set signature-info
105 SignatureInfo signatureInfo;
106 signatureInfo.setValidityPeriod(security::ValidityPeriod(time::system_clock::now(),
107 time::system_clock::now() + time::days(10)));
108
109 keyChain.sign(certificate, security::SigningInfo(key).setSignatureInfo(signatureInfo));
110
111 io::save(certificate, std::cout);
112 return 0;
Yingdi Yu8d7468f2014-02-21 14:49:45 -0800113}
114
Alexander Afanasyev82c359c2017-01-04 14:48:07 -0800115} // namespace ndnsec
116} // namespace ndn