blob: f3f714fb354215447e3d93c6f740c54d6caff05a [file] [log] [blame]
Alexander Afanasyevc169a812014-05-20 20:37:29 -04001/* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
Davide Pesavento5d0b0102017-10-07 13:43:16 -04002/*
Davide Pesavento8e047e12024-02-12 16:50:23 -05003 * Copyright (c) 2013-2024 Regents of the University of California.
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07004 *
5 * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
Alexander Afanasyevdfa52c42014-04-24 21:10:11 -07006 *
Alexander Afanasyevc169a812014-05-20 20:37:29 -04007 * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8 * terms of the GNU Lesser General Public License as published by the Free Software
9 * Foundation, either version 3 of the License, or (at your option) any later version.
10 *
11 * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12 * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13 * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14 *
15 * You should have received copies of the GNU General Public License and GNU Lesser
16 * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17 * <http://www.gnu.org/licenses/>.
18 *
19 * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
Yingdi Yu8d7468f2014-02-21 14:49:45 -080020 */
21
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080022#include "ndnsec.hpp"
Alexander Afanasyevd7db8bf2015-01-04 15:31:02 -080023#include "util.hpp"
Yingdi Yu8d7468f2014-02-21 14:49:45 -080024
Junxiao Shi9ee770b2022-04-25 23:33:33 +000025#include "ndn-cxx/security/signing-helpers.hpp"
26
Davide Pesavento47ce2ee2023-05-09 01:33:33 -040027namespace ndn::ndnsec {
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080028
Yingdi Yub61f5402014-02-26 17:46:11 -080029int
30ndnsec_sign_req(int argc, char** argv)
Yingdi Yu8d7468f2014-02-21 14:49:45 -080031{
Yingdi Yu8d7468f2014-02-21 14:49:45 -080032 namespace po = boost::program_options;
33
Alexander Afanasyev35109a12017-01-04 15:39:06 -080034 Name name;
Yingdi Yu8d7468f2014-02-21 14:49:45 -080035 bool isKeyName = false;
36
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080037 po::options_description description(
Davide Pesaventob310efb2019-04-11 22:10:24 -040038 "Usage: ndnsec sign-req [-h] [-k] [-n] NAME\n"
39 "\n"
Davide Pesavento25d9c9f2024-06-23 15:10:05 -040040 "Generate a certificate signing request.\n"
41 "\n"
Davide Pesaventob310efb2019-04-11 22:10:24 -040042 "Options");
43 description.add_options()
Yingdi Yu8d7468f2014-02-21 14:49:45 -080044 ("help,h", "produce help message")
Davide Pesaventob310efb2019-04-11 22:10:24 -040045 ("name,n", po::value<Name>(&name), "identity or key name, e.g., /ndn/edu/ucla/alice")
46 ("key,k", po::bool_switch(&isKeyName), "the specified name is a key name rather than an identity")
47 ;
Yingdi Yu8d7468f2014-02-21 14:49:45 -080048
49 po::positional_options_description p;
50 p.add("name", 1);
51
52 po::variables_map vm;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080053 try {
54 po::store(po::command_line_parser(argc, argv).options(description).positional(p).run(), vm);
55 po::notify(vm);
56 }
57 catch (const std::exception& e) {
Davide Pesaventob310efb2019-04-11 22:10:24 -040058 std::cerr << "ERROR: " << e.what() << "\n\n"
59 << description << std::endl;
60 return 2;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080061 }
Yingdi Yub61f5402014-02-26 17:46:11 -080062
Davide Pesaventob310efb2019-04-11 22:10:24 -040063 if (vm.count("help") > 0) {
64 std::cout << description << std::endl;
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080065 return 0;
66 }
Yingdi Yu8d7468f2014-02-21 14:49:45 -080067
Alexander Afanasyev82c359c2017-01-04 14:48:07 -080068 if (vm.count("name") == 0) {
Davide Pesaventob310efb2019-04-11 22:10:24 -040069 std::cerr << "ERROR: you must specify a name" << std::endl;
70 return 2;
Yingdi Yu37339fd2014-11-26 22:26:43 -080071 }
Yingdi Yu8d7468f2014-02-21 14:49:45 -080072
Davide Pesaventof2cae612021-03-24 18:47:05 -040073 KeyChain keyChain;
Alexander Afanasyev35109a12017-01-04 15:39:06 -080074
75 security::Identity identity;
76 security::Key key;
77 if (!isKeyName) {
78 identity = keyChain.getPib().getIdentity(name);
79 key = identity.getDefaultKey();
Yingdi Yu37339fd2014-11-26 22:26:43 -080080 }
81 else {
Davide Pesaventof2cae612021-03-24 18:47:05 -040082 identity = keyChain.getPib().getIdentity(security::extractIdentityFromKeyName(name));
Alexander Afanasyev35109a12017-01-04 15:39:06 -080083 key = identity.getKey(name);
Yingdi Yu37339fd2014-11-26 22:26:43 -080084 }
Alexander Afanasyev35109a12017-01-04 15:39:06 -080085
86 // Create signing request (similar to self-signed certificate)
Junxiao Shi9ee770b2022-04-25 23:33:33 +000087 security::MakeCertificateOptions opts;
Davide Pesavento8e047e12024-02-12 16:50:23 -050088 opts.issuerId = name::Component::fromUri("cert-request");
Junxiao Shi9ee770b2022-04-25 23:33:33 +000089 opts.validity = security::ValidityPeriod::makeRelative(-1_s, 10_days);
90 auto certificate = keyChain.makeCertificate(key, security::signingByKey(key), opts);
Alexander Afanasyev35109a12017-01-04 15:39:06 -080091
92 io::save(certificate, std::cout);
Davide Pesaventob310efb2019-04-11 22:10:24 -040093
Alexander Afanasyev35109a12017-01-04 15:39:06 -080094 return 0;
Yingdi Yu8d7468f2014-02-21 14:49:45 -080095}
96
Davide Pesavento47ce2ee2023-05-09 01:33:33 -040097} // namespace ndn::ndnsec