validation-policy.cpp
Go to the documentation of this file.
1 /* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
2 /*
3  * Copyright (c) 2013-2019 Regents of the University of California.
4  *
5  * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
6  *
7  * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8  * terms of the GNU Lesser General Public License as published by the Free Software
9  * Foundation, either version 3 of the License, or (at your option) any later version.
10  *
11  * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12  * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13  * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14  *
15  * You should have received copies of the GNU General Public License and GNU Lesser
16  * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17  * <http://www.gnu.org/licenses/>.
18  *
19  * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
20  */
21 
24 
25 namespace ndn {
26 namespace security {
27 namespace v2 {
28 
29 void
30 ValidationPolicy::setInnerPolicy(unique_ptr<ValidationPolicy> innerPolicy)
31 {
32  if (innerPolicy == nullptr) {
33  NDN_THROW(std::invalid_argument("Inner policy argument cannot be nullptr"));
34  }
35 
36  if (m_validator != nullptr) {
37  innerPolicy->setValidator(*m_validator);
38  }
39 
40  if (m_innerPolicy == nullptr) {
41  m_innerPolicy = std::move(innerPolicy);
42  }
43  else {
44  m_innerPolicy->setInnerPolicy(std::move(innerPolicy));
45  }
46 }
47 
50 {
51  return *m_innerPolicy;
52 }
53 
54 void
56 {
57  m_validator = &validator;
58  if (m_innerPolicy != nullptr) {
59  m_innerPolicy->setValidator(validator);
60  }
61 }
62 
63 static Name
65 {
66  if (si.getSignatureType() == tlv::DigestSha256) {
68  }
69 
70  if (!si.hasKeyLocator()) {
71  state.fail({ValidationError::Code::INVALID_KEY_LOCATOR, "KeyLocator is missing"});
72  return Name();
73  }
74 
75  const KeyLocator& kl = si.getKeyLocator();
77  state.fail({ValidationError::Code::INVALID_KEY_LOCATOR, "KeyLocator type is not Name"});
78  return Name();
79  }
80 
81  return kl.getName();
82 }
83 
84 Name
86 {
87  return getKeyLocatorName(data.getSignature().getSignatureInfo(), state);
88 }
89 
90 Name
91 getKeyLocatorName(const Interest& interest, ValidationState& state)
92 {
93  const Name& name = interest.getName();
94  if (name.size() < signed_interest::MIN_SIZE) {
96  "Invalid signed Interest: name too short"});
97  return Name();
98  }
99 
100  SignatureInfo si;
101  try {
103  }
104  catch (const tlv::Error& e) {
105  state.fail({ValidationError::Code::INVALID_KEY_LOCATOR,
106  "Invalid signed Interest: " + std::string(e.what())});
107  return Name();
108  }
109 
110  return getKeyLocatorName(si, state);
111 }
112 
113 } // namespace v2
114 } // namespace security
115 } // namespace ndn
void setInnerPolicy(unique_ptr< ValidationPolicy > innerPolicy)
Set inner policy.
const Name & getName() const
Definition: interest.hpp:134
Definition: data.cpp:26
Represents a SignatureInfo TLV element.
void setValidator(Validator &validator)
Set validator to which the policy is associated.
const Signature & getSignature() const
Get Signature.
Definition: data.hpp:185
const size_t MIN_SIZE
minimal number of components for Signed Interest
Represents an Interest packet.
Definition: interest.hpp:44
ValidationPolicy & getInnerPolicy()
Return the inner policy.
indicates KeyLocator contains a Name
Definition: key-locator.hpp:45
Abstraction that implements validation policy for Data and Interest packets.
const KeyLocator & getKeyLocator() const
Get KeyLocator.
unique_ptr< ValidationPolicy > m_innerPolicy
#define NDN_THROW(e)
Definition: exception.hpp:61
const SignatureInfo & getSignatureInfo() const
Get SignatureInfo.
Definition: signature.hpp:65
const Name & getName() const
get Name element
static Name getKeyLocatorName(const SignatureInfo &si, ValidationState &state)
Block blockFromValue() const
Definition: block.cpp:313
Type getType() const
Definition: key-locator.hpp:97
size_t size() const
Get number of components.
Definition: name.hpp:147
static const Name & getDigestSha256Identity()
A localhost identity to indicate that the signature is generated using SHA-256.
Represents an absolute name.
Definition: name.hpp:43
const Component & at(ssize_t i) const
Get the component at the given index.
Definition: name.cpp:179
void wireDecode(const Block &wire)
Decode from wire format.
const ssize_t POS_SIG_INFO
bool hasKeyLocator() const
Check if KeyLocator exists.
int32_t getSignatureType() const
Get SignatureType.
virtual void fail(const ValidationError &error)=0
Call the failure callback.
Represents a Data packet.
Definition: data.hpp:35
represents an error in TLV encoding or decoding
Definition: tlv.hpp:52
Interface for validating data and interest packets.
Definition: validator.hpp:61