We should not carry on if files don't open in tests.

[libdcp.git] / src / certificate_chain.h

diff --git a/src/certificate_chain.h b/src/certificate_chain.h
index 4e13d6ee1590e460cf0d78746a84e116b1967f23..63ef89015eee80e7cc6dd8822759d82865fc6e66 100644 (file)
--- a/src/certificate_chain.h
+++ b/src/certificate_chain.h
@@ -1,20 +1,34 @@
 /*
-    Copyright (C) 2013-2015 Carl Hetherington <cth@carlh.net>
+    Copyright (C) 2013-2016 Carl Hetherington <cth@carlh.net>
 
-    This program is free software; you can redistribute it and/or modify
+    This file is part of libdcp.
+
+    libdcp is free software; you can redistribute it and/or modify
     it under the terms of the GNU General Public License as published by
     the Free Software Foundation; either version 2 of the License, or
     (at your option) any later version.
 
-    This program is distributed in the hope that it will be useful,
+    libdcp is distributed in the hope that it will be useful,
     but WITHOUT ANY WARRANTY; without even the implied warranty of
     MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
     GNU General Public License for more details.
 
     You should have received a copy of the GNU General Public License
-    along with this program; if not, write to the Free Software
-    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
-
+    along with libdcp.  If not, see <http://www.gnu.org/licenses/>.
+
+    In addition, as a special exception, the copyright holders give
+    permission to link the code of portions of this program with the
+    OpenSSL library under certain conditions as described in each
+    individual source file, and distribute linked combinations
+    including the two.
+
+    You must obey the GNU General Public License in all respects
+    for all of the code used other than OpenSSL.  If you modify
+    file(s) with this exception, you may extend this exception to your
+    version of the file(s), but you are not obligated to do so.  If you
+    do not wish to do so, delete this exception statement from your
+    version.  If you delete this exception statement from all source
+    files in the program, then also delete it here.
 */
 
 /** @file  src/signer_chain.h
@@ -33,6 +47,15 @@ namespace xmlpp {
        class Node;
 }
 
+struct certificates_validation1;
+struct certificates_validation2;
+struct certificates_validation3;
+struct certificates_validation4;
+struct certificates_validation5;
+struct certificates_validation6;
+struct certificates_validation7;
+struct certificates_validation8;
+
 namespace dcp {
 
 /** @class CertificateChain
@@ -60,6 +83,8 @@ public:
                std::string leaf_common_name = "CS.smpte-430-2.LEAF.NOT_FOR_PRODUCTION"
                );
 
+       explicit CertificateChain (std::string);
+
        void add (Certificate c);
        void remove (Certificate c);
        void remove (int);
@@ -71,12 +96,14 @@ public:
 
        List leaf_to_root () const;
        List root_to_leaf () const;
+       List unordered () const;
 
-       bool valid () const;
-       bool attempt_reorder ();
+       bool valid (std::string* reason = 0) const;
+       bool chain_valid () const;
+       bool private_key_valid () const;
 
        void sign (xmlpp::Element* parent, Standard standard) const;
-       void add_signature_value (xmlpp::Node* parent, std::string ns) const;
+       void add_signature_value (xmlpp::Element* parent, std::string ns, bool add_indentation) const;
 
        boost::optional<std::string> key () const {
                return _key;
@@ -86,9 +113,21 @@ public:
                _key = k;
        }
 
-private:
-       friend class ::certificates;
+       std::string chain () const;
 
+private:
+       friend struct ::certificates_validation1;
+       friend struct ::certificates_validation2;
+       friend struct ::certificates_validation3;
+       friend struct ::certificates_validation4;
+       friend struct ::certificates_validation5;
+       friend struct ::certificates_validation6;
+       friend struct ::certificates_validation7;
+       friend struct ::certificates_validation8;
+
+       bool chain_valid (List const & chain) const;
+
+       /** Our certificates, not in any particular order */
        List _certificates;
        /** Leaf certificate's private key, if known */
        boost::optional<std::string> _key;