2 Copyright (C) 2013-2014 Carl Hetherington <cth@carlh.net>
4 This program is free software; you can redistribute it and/or modify
5 it under the terms of the GNU General Public License as published by
6 the Free Software Foundation; either version 2 of the License, or
7 (at your option) any later version.
9 This program is distributed in the hope that it will be useful,
10 but WITHOUT ANY WARRANTY; without even the implied warranty of
11 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 GNU General Public License for more details.
14 You should have received a copy of the GNU General Public License
15 along with this program; if not, write to the Free Software
16 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
20 /** @file src/signer_chain.h
21 * @brief Functions to make signer chains.
24 #ifndef LIBDCP_CERTIFICATE_CHAIN_H
25 #define LIBDCP_CERTIFICATE_CHAIN_H
27 #include "certificates.h"
28 #include <boost/filesystem.hpp>
32 /** @class CertificateChain
33 * @brief A chain of any number of certificates, from root to leaf.
35 class CertificateChain
38 CertificateChain () {}
40 void add (Certificate c);
41 void remove (Certificate c);
44 Certificate root () const;
45 Certificate leaf () const;
47 typedef std::list<Certificate> List;
49 List leaf_to_root () const;
50 List root_to_leaf () const;
53 bool attempt_reorder ();
56 friend class ::certificates;
61 /** Create a chain of certificates for signing things.
62 * @param openssl Name of openssl binary (if it is on the path) or full path.
63 * @return Directory (which should be deleted by the caller) containing:
64 * - ca.self-signed.pem self-signed root certificate
65 * - intermediate.signed.pem intermediate certificate
66 * - leaf.key leaf certificate private key
67 * - leaf.signed.pem leaf certificate
69 boost::filesystem::path make_certificate_chain (
70 boost::filesystem::path openssl,
71 std::string organisation = "example.org",
72 std::string organisational_unit = "example.org",
73 std::string root_common_name = ".smpte-430-2.ROOT.NOT_FOR_PRODUCTION",
74 std::string intermediate_common_name = ".smpte-430-2.INTERMEDIATE.NOT_FOR_PRODUCTION",
75 std::string leaf_common_name = "CS.smpte-430-2.LEAF.NOT_FOR_PRODUCTION"