trust-anchor-container.cpp
Go to the documentation of this file.
1 /* -*- Mode:C++; c-file-style:"gnu"; indent-tabs-mode:nil; -*- */
2 /*
3  * Copyright (c) 2013-2021 Regents of the University of California.
4  *
5  * This file is part of ndn-cxx library (NDN C++ library with eXperimental eXtensions).
6  *
7  * ndn-cxx library is free software: you can redistribute it and/or modify it under the
8  * terms of the GNU Lesser General Public License as published by the Free Software
9  * Foundation, either version 3 of the License, or (at your option) any later version.
10  *
11  * ndn-cxx library is distributed in the hope that it will be useful, but WITHOUT ANY
12  * WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A
13  * PARTICULAR PURPOSE. See the GNU Lesser General Public License for more details.
14  *
15  * You should have received copies of the GNU General Public License and GNU Lesser
16  * General Public License along with ndn-cxx, e.g., in COPYING.md file. If not, see
17  * <http://www.gnu.org/licenses/>.
18  *
19  * See AUTHORS.md for complete list of ndn-cxx authors and contributors.
20  */
21 
23 
24 namespace ndn {
25 namespace security {
26 inline namespace v2 {
27 
28 void
29 TrustAnchorContainer::AnchorContainer::add(Certificate&& cert)
30 {
31  AnchorContainerBase::insert(std::move(cert));
32 }
33 
34 void
35 TrustAnchorContainer::AnchorContainer::remove(const Name& certName)
36 {
37  AnchorContainerBase::erase(certName);
38 }
39 
40 void
41 TrustAnchorContainer::AnchorContainer::clear()
42 {
43  AnchorContainerBase::clear();
44 }
45 
46 void
47 TrustAnchorContainer::insert(const std::string& groupId, Certificate&& cert)
48 {
49  auto group = m_groups.find(groupId);
50  if (group == m_groups.end()) {
51  std::tie(group, std::ignore) = m_groups.insert(std::make_shared<StaticTrustAnchorGroup>(m_anchors,
52  groupId));
53  }
54  auto* staticGroup = dynamic_cast<StaticTrustAnchorGroup*>(&**group);
55  if (staticGroup == nullptr) {
56  NDN_THROW(Error("Cannot add static anchor to a non-static anchor group " + groupId));
57  }
58  staticGroup->add(std::move(cert));
59 }
60 
61 void
62 TrustAnchorContainer::insert(const std::string& groupId, const boost::filesystem::path& path,
63  time::nanoseconds refreshPeriod, bool isDir)
64 {
65  if (m_groups.count(groupId) != 0) {
66  NDN_THROW(Error("Cannot create dynamic group, because group " + groupId + " already exists"));
67  }
68 
69  m_groups.insert(std::make_shared<DynamicTrustAnchorGroup>(m_anchors, groupId, path,
70  refreshPeriod, isDir));
71 }
72 
73 void
75 {
76  m_groups.clear();
77  m_anchors.clear();
78 }
79 
80 const Certificate*
81 TrustAnchorContainer::find(const Name& keyName) const
82 {
83  const_cast<TrustAnchorContainer*>(this)->refresh();
84 
85  auto cert = m_anchors.lower_bound(keyName);
86  if (cert == m_anchors.end() || !keyName.isPrefixOf(cert->getName()))
87  return nullptr;
88 
89  return &*cert;
90 }
91 
92 const Certificate*
93 TrustAnchorContainer::find(const Interest& interest) const
94 {
95  const_cast<TrustAnchorContainer*>(this)->refresh();
96 
97  for (auto cert = m_anchors.lower_bound(interest.getName());
98  cert != m_anchors.end() && interest.getName().isPrefixOf(cert->getName());
99  ++cert) {
100  if (interest.matchesData(*cert)) {
101  return &*cert;
102  }
103  }
104  return nullptr;
105 }
106 
108 TrustAnchorContainer::getGroup(const std::string& groupId) const
109 {
110  auto group = m_groups.find(groupId);
111  if (group == m_groups.end()) {
112  NDN_THROW(Error("Trust anchor group " + groupId + " does not exist"));
113  }
114  return **group;
115 }
116 
117 size_t
119 {
120  return m_anchors.size();
121 }
122 
123 void
124 TrustAnchorContainer::refresh()
125 {
126  for (auto it = m_groups.begin(); it != m_groups.end(); ++it) {
127  m_groups.modify(it, [] (const auto& group) { group->refresh(); });
128  }
129 }
130 
131 } // inline namespace v2
132 } // namespace security
133 } // namespace ndn
Represents an Interest packet.
Definition: interest.hpp:50
const Name & getName() const noexcept
Definition: interest.hpp:173
bool matchesData(const Data &data) const
Check if Interest can be satisfied by data.
Definition: interest.cpp:327
Represents an absolute name.
Definition: name.hpp:44
bool isPrefixOf(const Name &other) const noexcept
Check if this name is a prefix of another name.
Definition: name.cpp:300
Represents an NDN certificate.
Definition: certificate.hpp:60
void insert(const std::string &groupId, Certificate &&cert)
Insert a static trust anchor.
const Certificate * find(const Name &keyName) const
Search for certificate across all groups (longest prefix match).
void clear()
Remove all static or dynamic anchors.
size_t size() const
Get number of trust anchors across all groups.
TrustAnchorGroup & getGroup(const std::string &groupId) const
Get trusted anchor group.
#define NDN_THROW(e)
Definition: exception.hpp:61
boost::chrono::nanoseconds nanoseconds
Definition: time.hpp:50
@ Name
Definition: tlv.hpp:71
Definition: data.cpp:25