summaryrefslogtreecommitdiff
path: root/src/certificates.h
blob: 2bf8d0db2ff4f5eb0233caeeb79b0a22a3ddebdf (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
/*
    Copyright (C) 2012 Carl Hetherington <cth@carlh.net>

    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.

    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.

    You should have received a copy of the GNU General Public License
    along with this program; if not, write to the Free Software
    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.

*/

#ifndef LIBDCP_CERTIFICATES_H
#define LIBDCP_CERTIFICATES_H

#include <string>
#include <list>
#include <boost/noncopyable.hpp>
#include <boost/shared_ptr.hpp>
#include <boost/filesystem.hpp>
#undef X509_NAME
#include <openssl/x509.h>

class certificates;

namespace xmlpp {
	class Element;
}

namespace libdcp {

class Certificate
{
public:
	Certificate ()
		: _certificate (0)
	{}

	Certificate (boost::filesystem::path);
	Certificate (std::string);
	Certificate (X509 *);
	Certificate (Certificate const &);
	~Certificate ();

	Certificate& operator= (Certificate const &);

	/** @param with_begin_end true to include BEGIN CERTIFICATE / END CERTIFICATE markers
	 *  @return the whole certificate as a string.
	 */
	std::string certificate (bool with_begin_end = false) const;
	std::string issuer () const;
	std::string serial () const;
	std::string subject () const;
	std::string common_name () const;

	/** @return RSA public key from this Certificate.  Caller must not free the returned value. */
	RSA* public_key () const;

	std::string thumbprint () const;

private:
	void read_string (std::string);
	
	static std::string name_for_xml (X509_NAME *);
	static std::string asn_to_utf8 (ASN1_STRING *);
	static std::string get_name_part (X509_NAME *, int);

	X509* _certificate;
	mutable RSA* _public_key;
};

class CertificateChain
{
public:
	CertificateChain () {}

	void add (boost::shared_ptr<Certificate>);

	boost::shared_ptr<Certificate> root () const;
	boost::shared_ptr<Certificate> leaf () const;

	std::list<boost::shared_ptr<Certificate> > leaf_to_root () const;

private:
	friend class ::certificates;
	std::list<boost::shared_ptr<Certificate> > _certificates;
};

}

#endif