certificate-storage.cpp
Go to the documentation of this file.
1 /* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
2 /*
3  * Copyright (c) 2013-2020 Regents of the University of California.
4  *
5  * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
6  *
7  * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8  * terms of the GNU Lesser General Public License as published by the Free Software
9  * Foundation, either version 3 of the License, or (at your option) any later version.
10  *
11  * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12  * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13  * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14  *
15  * You should have received copies of the GNU General Public License and GNU Lesser
16  * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17  * <http://www.gnu.org/licenses/>.
18  *
19  * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
20  */
21 
23 
24 namespace ndn {
25 namespace security {
26 inline namespace v2 {
27 
29  : m_verifiedCertCache(1_h)
30  , m_unverifiedCertCache(5_min)
31 {
32 }
33 
34 const Certificate*
35 CertificateStorage::findTrustedCert(const Interest& interestForCert) const
36 {
37  auto cert = m_trustAnchors.find(interestForCert);
38  if (cert != nullptr) {
39  return cert;
40  }
41 
42  cert = m_verifiedCertCache.find(interestForCert);
43  return cert;
44 }
45 
46 bool
47 CertificateStorage::isCertKnown(const Name& certName) const
48 {
49  return (m_trustAnchors.find(certName) != nullptr ||
50  m_verifiedCertCache.find(certName) != nullptr ||
51  m_unverifiedCertCache.find(certName) != nullptr);
52 }
53 
54 void
55 CertificateStorage::loadAnchor(const std::string& groupId, Certificate&& cert)
56 {
57  m_trustAnchors.insert(groupId, std::move(cert));
58 }
59 
60 void
61 CertificateStorage::loadAnchor(const std::string& groupId, const std::string& certfilePath,
62  time::nanoseconds refreshPeriod, bool isDir)
63 {
64  m_trustAnchors.insert(groupId, certfilePath, refreshPeriod, isDir);
65 }
66 
67 void
69 {
71 }
72 
73 void
75 {
76  m_verifiedCertCache.insert(std::move(cert));
77 }
78 
79 void
81 {
83 }
84 
85 void
87 {
88  m_unverifiedCertCache.insert(std::move(cert));
89 }
90 
93 {
94  return m_trustAnchors;
95 }
96 
97 const CertificateCache&
99 {
100  return m_verifiedCertCache;
101 }
102 
103 const CertificateCache&
105 {
106  return m_unverifiedCertCache;
107 }
108 
109 } // inline namespace v2
110 } // namespace security
111 } // namespace ndn
Represents an Interest packet.
Definition: interest.hpp:50
Represents an absolute name.
Definition: name.hpp:44
Represents a container for verified certificates.
void insert(const Certificate &cert)
Insert certificate into cache.
void clear()
Remove all certificates from cache.
const Certificate * find(const Name &certPrefix) const
Get certificate given key name.
const Certificate * findTrustedCert(const Interest &interestForCert) const
Find a trusted certificate in trust anchor container or in verified cache.
void loadAnchor(const std::string &groupId, Certificate &&cert)
Load static trust anchor.
const CertificateCache & getUnverifiedCertCache() const
void resetVerifiedCerts()
Remove any cached verified certificates.
const TrustAnchorContainer & getTrustAnchors() const
void resetAnchors()
Remove any previously loaded static or dynamic trust anchor.
const CertificateCache & getVerifiedCertCache() const
void cacheVerifiedCert(Certificate &&cert)
Cache verified certificate a period of time (1 hour).
void cacheUnverifiedCert(Certificate &&cert)
Cache unverified certificate for a period of time (5 minutes).
bool isCertKnown(const Name &certPrefix) const
Check if certificate exists in the verified/unverified cache or in the set of trust anchors.
Represents an NDN certificate.
Definition: certificate.hpp:60
void insert(const std::string &groupId, Certificate &&cert)
Insert a static trust anchor.
const Certificate * find(const Name &keyName) const
Search for certificate across all groups (longest prefix match).
void clear()
Remove all static or dynamic anchors.
boost::chrono::nanoseconds nanoseconds
Definition: time.hpp:50
Definition: data.cpp:25