XrdCryptoX509Chain Class Reference

#include <XrdCryptoX509Chain.hh>

Inheritance diagram for XrdCryptoX509Chain:

Collaboration diagram for XrdCryptoX509Chain:

Public Types
enum	ECAStatus { kUnknown = 0, kAbsent, kInvalid, kValid }
enum	EX509ChainErr {   kNone = 0, kInconsistent, kTooMany, kNoCA,   kNoCertificate, kInvalidType, kInvalidNames, kRevoked,   kExpired, kMissingExtension, kVerifyFail, kInvalidSign,   kCANotAutoSigned }

Public Member Functions
	XrdCryptoX509Chain (XrdCryptoX509 *c=0)
	XrdCryptoX509Chain (XrdCryptoX509Chain *ch)
virtual	~XrdCryptoX509Chain ()
const char *	X509ChainError (EX509ChainErr e)
const char *	LastError () const
void	Dump ()
int	Size () const
XrdCryptoX509 *	End () const
ECAStatus	StatusCA () const
const char *	CAname ()
const char *	EECname ()
const char *	CAhash ()
const char *	EEChash ()
void	InsertAfter (XrdCryptoX509 *c, XrdCryptoX509 *cp)
void	PutInFront (XrdCryptoX509 *c)
void	PushBack (XrdCryptoX509 *c)
void	Remove (XrdCryptoX509 *c)
bool	CheckCA (bool checkselfsigned=1)
void	Cleanup (bool keepCA=0)
void	SetStatusCA (ECAStatus st)
XrdCryptoX509 *	SearchByIssuer (const char *issuer, ESearchMode mode=kExact)
XrdCryptoX509 *	SearchBySubject (const char *subject, ESearchMode mode=kExact)
virtual int	CheckValidity (bool outatfirst=1, int when=0)
virtual int	Reorder ()
virtual bool	Verify (EX509ChainErr &e, x509ChainVerifyOpt_t *vopt=0)
XrdCryptoX509 *	Begin ()
XrdCryptoX509 *	Next ()

Private Types
enum	ESearchMode { kExact = 0, kBegin = 1, kEnd = 2 }

Private Member Functions
XrdCryptoX509ChainNode *	Find (XrdCryptoX509 *c)
XrdCryptoX509ChainNode *	FindIssuer (const char *issuer, ESearchMode mode=kExact, XrdCryptoX509ChainNode **p=0)
XrdCryptoX509ChainNode *	FindSubject (const char *subject, ESearchMode mode=kExact, XrdCryptoX509ChainNode **p=0)
bool	Verify (EX509ChainErr &e, const char *msg, XrdCryptoX509::EX509Type type, int when, XrdCryptoX509 *xcer, XrdCryptoX509 *xsig, XrdCryptoX509Crl *crl=0)

Private Attributes
XrdCryptoX509ChainNode *	begin
XrdCryptoX509ChainNode *	current
XrdCryptoX509ChainNode *	end
XrdCryptoX509ChainNode *	previous
int	size
XrdOucString	lastError
XrdOucString	caname
XrdOucString	eecname
XrdOucString	cahash
XrdOucString	eechash
ECAStatus	statusCA

Friends
class	XrdCryptosslgsiX509Chain

Member Enumeration Documentation

enum XrdCryptoX509Chain::ECAStatus

Enumerator
kUnknown
kAbsent
kInvalid
kValid

enum XrdCryptoX509Chain::ESearchMode

private

Enumerator
kExact
kBegin
kEnd

enum XrdCryptoX509Chain::EX509ChainErr

Enumerator
kNone
kInconsistent
kTooMany
kNoCA
kNoCertificate
kInvalidType
kInvalidNames
kRevoked
kExpired
kMissingExtension
kVerifyFail
kInvalidSign
kCANotAutoSigned

Constructor & Destructor Documentation

XrdCryptoX509Chain::XrdCryptoX509Chain

(

XrdCryptoX509 *

c = 0

)

References begin, cahash, caname, current, eechash, eecname, end, XrdCryptoX509::kCA, kInvalid, kNone, kUnknown, kValid, lastError, previous, size, statusCA, XrdCryptoX509::Subject(), XrdCryptoX509::SubjectHash(), XrdCryptoX509::type, and Verify().

XrdCryptoX509Chain::XrdCryptoX509Chain

(

XrdCryptoX509Chain *

ch

)

References Begin(), begin, CAhash(), cahash, CAname(), caname, current, EEChash(), eechash, EECname(), eecname, end, LastError(), lastError, Next(), previous, XrdCryptoX509ChainNode::SetNext(), size, StatusCA(), and statusCA.

XrdCryptoX509Chain::~XrdCryptoX509Chain ( )

virtual

References begin, and XrdCryptoX509ChainNode::Next().

Member Function Documentation

XrdCryptoX509 * XrdCryptoX509Chain::Begin

(

)

References begin, XrdCryptoX509ChainNode::Cert(), current, and previous.

Referenced by XrdSecProtocolgsi::GetCA(), XrdSecProtocolgsi::getCredentials(), main(), XrdSecProtocolgsi::VerifyCA(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseBucket(), XrdCryptosslX509ParseFile(), XrdCryptosslX509VerifyChain(), and XrdCryptoX509Chain().

const char * XrdCryptoX509Chain::CAhash

(

)

References XrdOucString::c_str(), cahash, CheckCA(), DEBUG, EPNAME, kUnknown, XrdOucString::length(), and statusCA.

Referenced by XrdCryptoX509Chain().

const char * XrdCryptoX509Chain::CAname

(

)

References XrdOucString::c_str(), caname, CheckCA(), DEBUG, EPNAME, kUnknown, XrdOucString::length(), and statusCA.

Referenced by Dump(), and XrdCryptoX509Chain().

bool XrdCryptoX509Chain::CheckCA

(

bool

checkselfsigned = 1

)

References begin, cahash, caname, XrdCryptoX509ChainNode::Cert(), end, XrdCryptoX509::kCA, kInvalid, kNone, kValid, kVerifyFail, lastError, XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::SetNext(), statusCA, XrdCryptoX509::Subject(), XrdCryptoX509::SubjectHash(), XrdCryptoX509::type, Verify(), and X509ChainError().

Referenced by CAhash(), CAname(), XrdSecProtocolgsi::QueryProxy(), Verify(), and XrdSecProtocolgsi::VerifyCA().

int XrdCryptoX509Chain::CheckValidity ( bool  outatfirst = 1, int  when = 0  )

virtual

References begin, XrdCryptoX509ChainNode::Cert(), DEBUG, EPNAME, XrdCryptoX509::IsValid(), XrdCryptoX509ChainNode::Next(), and size.

Referenced by XrdSecProtocolgsi::QueryProxy().

void XrdCryptoX509Chain::Cleanup

(

bool

keepCA = 0

)

References begin, cahash, caname, XrdCryptoX509ChainNode::Cert(), current, eechash, eecname, end, XrdCryptoX509::kCA, kUnknown, lastError, XrdCryptoX509ChainNode::Next(), previous, size, statusCA, and XrdCryptoX509::type.

Referenced by XrdSecProtocolgsi::QueryProxy(), and gsiHSVars::~gsiHSVars().

void XrdCryptoX509Chain::Dump

(

)

References begin, CAname(), XrdCryptoX509ChainNode::Cert(), EECname(), EPNAME, XrdCryptoX509::IssuerHash(), LOCDUMP, XrdCryptoX509ChainNode::Next(), Size(), XrdCryptoX509::SubjectHash(), and XrdCryptoX509::Type().

Referenced by main(), XrdSecProtocolgsi::ServerDoSigpxy(), and XrdCryptosslgsiX509Chain::Verify().

const char * XrdCryptoX509Chain::EEChash

(

)

References begin, XrdOucString::c_str(), XrdCryptoX509ChainNode::Cert(), DEBUG, eechash, EPNAME, XrdCryptoX509::kEEC, XrdOucString::length(), XrdCryptoX509ChainNode::Next(), XrdCryptoX509::SubjectHash(), and XrdCryptoX509::type.

Referenced by XrdSecProtocolgsi::Authenticate(), and XrdCryptoX509Chain().

const char * XrdCryptoX509Chain::EECname

(

)

References begin, XrdOucString::c_str(), XrdCryptoX509ChainNode::Cert(), DEBUG, eecname, EPNAME, XrdCryptoX509::kEEC, XrdOucString::length(), XrdCryptoX509ChainNode::Next(), XrdCryptoX509::Subject(), and XrdCryptoX509::type.

Referenced by XrdSecProtocolgsi::Authenticate(), Dump(), XrdSecProtocolgsi::QueryGMAP(), XrdSecProtocolgsi::ServerDoSigpxy(), and XrdCryptoX509Chain().

XrdCryptoX509* XrdCryptoX509Chain::End ( ) const

inline

References XrdCryptoX509ChainNode::Cert(), and end.

Referenced by XrdSecProtocolgsi::Authenticate(), XrdSecProtocolgsi::ClientDoCert(), XrdSecProtocolgsi::ClientDoPxyreq(), XrdSecProtocolgsi::ExtractVOMS(), XrdSecProtocolgsi::QueryProxy(), XrdSecProtocolgsi::ServerDoCert(), XrdSecProtocolgsi::ServerDoSigpxy(), XrdCryptosslX509ChainToFile(), XrdCryptosslX509ExportChain(), XrdSecgsiAuthzKey(), and XrdSecgsiVOMSFun().

XrdCryptoX509ChainNode * XrdCryptoX509Chain::Find ( XrdCryptoX509 *  c )

private

References begin, XrdCryptoX509ChainNode::Cert(), and XrdCryptoX509ChainNode::Next().

Referenced by InsertAfter(), PushBack(), and PutInFront().

XrdCryptoX509ChainNode * XrdCryptoX509Chain::FindIssuer ( const char *  issuer, ESearchMode  mode = kExact, XrdCryptoX509ChainNode **  p = 0  )

private

References begin, XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::Issuer(), kBegin, kEnd, kExact, and XrdCryptoX509ChainNode::Next().

Referenced by SearchByIssuer().

XrdCryptoX509ChainNode * XrdCryptoX509Chain::FindSubject ( const char *  subject, ESearchMode  mode = kExact, XrdCryptoX509ChainNode **  p = 0  )

private

References begin, XrdCryptoX509ChainNode::Cert(), kBegin, kEnd, kExact, XrdCryptoX509ChainNode::Next(), and XrdCryptoX509::Subject().

Referenced by Reorder(), and SearchBySubject().

void XrdCryptoX509Chain::InsertAfter	(	XrdCryptoX509 *	c,
		XrdCryptoX509 *	cp
	)

References end, Find(), XrdCryptoX509ChainNode::Next(), PushBack(), XrdCryptoX509ChainNode::SetNext(), and size.

const char* XrdCryptoX509Chain::LastError ( ) const

inline

References XrdOucString::c_str(), and lastError.

Referenced by XrdSecProtocolgsi::ClientDoCert(), XrdSecProtocolgsi::ServerDoCert(), and XrdCryptoX509Chain().

XrdCryptoX509 * XrdCryptoX509Chain::Next

(

)

References XrdCryptoX509ChainNode::Cert(), current, XrdCryptoX509ChainNode::Next(), and previous.

Referenced by XrdSecProtocolgsi::getCredentials(), XrdSecProtocolgsi::VerifyCA(), XrdCryptosslX509ParseBucket(), XrdCryptosslX509ParseFile(), XrdCryptosslX509VerifyChain(), and XrdCryptoX509Chain().

void XrdCryptoX509Chain::PushBack

(

XrdCryptoX509 *

c

)

References begin, end, Find(), XrdCryptoX509ChainNode::SetNext(), and size.

Referenced by InsertAfter(), main(), XrdSecProtocolgsi::ServerDoSigpxy(), XrdCryptosslX509ParseBucket(), XrdCryptosslX509ParseFile(), and XrdSslgsiX509CreateProxy().

void XrdCryptoX509Chain::PutInFront

(

XrdCryptoX509 *

c

)

References begin, end, Find(), and size.

Referenced by XrdSecProtocolgsi::VerifyCA().

void XrdCryptoX509Chain::Remove

(

XrdCryptoX509 *

c

)

References begin, cahash, caname, XrdCryptoX509ChainNode::Cert(), current, XrdCryptoX509::kCA, kUnknown, XrdCryptoX509ChainNode::Next(), previous, XrdCryptoX509ChainNode::SetNext(), size, statusCA, and XrdCryptoX509::type.

Referenced by XrdSecProtocolgsi::VerifyCA().

int XrdCryptoX509Chain::Reorder ( )

virtual

References begin, cahash, caname, XrdCryptoX509ChainNode::Cert(), DEBUG, eechash, eecname, end, EPNAME, FindSubject(), XrdCryptoX509::Issuer(), kAbsent, XrdCryptoX509::kCA, XrdCryptoX509::kEEC, kExact, kUnknown, XrdOucString::length(), XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::SetNext(), size, statusCA, and XrdCryptoX509::Subject().

Referenced by main(), XrdSecProtocolgsi::QueryProxy(), XrdSecProtocolgsi::ServerDoCert(), XrdCryptosslgsiX509Chain::Verify(), Verify(), XrdCryptosslX509ChainToFile(), XrdCryptosslX509ExportChain(), and XrdSecgsiAuthzKey().

XrdCryptoX509 * XrdCryptoX509Chain::SearchByIssuer	(	const char *	issuer,
		ESearchMode	mode = kExact
	)

References XrdCryptoX509ChainNode::Cert(), and FindIssuer().

XrdCryptoX509 * XrdCryptoX509Chain::SearchBySubject	(	const char *	subject,
		ESearchMode	mode = kExact
	)

References XrdCryptoX509ChainNode::Cert(), and FindSubject().

Referenced by XrdSecProtocolgsi::ExtractVOMS(), XrdSecProtocolgsi::ServerDoSigpxy(), XrdCryptosslX509ChainToFile(), XrdCryptosslX509ExportChain(), and XrdSecgsiVOMSFun().

void XrdCryptoX509Chain::SetStatusCA ( ECAStatus  st )

inline

References statusCA.

Referenced by XrdSecProtocolgsi::VerifyCA().

int XrdCryptoX509Chain::Size ( ) const

inline

References size.

Referenced by Dump(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseBucket(), XrdCryptosslX509ParseFile(), and XrdCryptosslX509VerifyChain().

ECAStatus XrdCryptoX509Chain::StatusCA ( ) const

inline

References statusCA.

Referenced by XrdCryptoX509Chain().

bool XrdCryptoX509Chain::Verify ( EX509ChainErr &  e, x509ChainVerifyOpt_t *  vopt = 0  )

virtual

Reimplemented in XrdCryptosslgsiX509Chain.

References begin, XrdCryptoX509ChainNode::Cert(), CheckCA(), DEBUG, EPNAME, kInconsistent, kNoCA, kNone, kOptsCheckSelfSigned, kTooMany, XrdCryptoX509::kUnknown, lastError, XrdCryptoX509ChainNode::Next(), x509ChainVerifyOpt_t::opt, x509ChainVerifyOpt_t::pathlen, Reorder(), size, x509ChainVerifyOpt_t::when, and X509ChainError().

Referenced by CheckCA(), main(), XrdCryptosslgsiX509Chain::Verify(), and XrdCryptoX509Chain().

bool XrdCryptoX509Chain::Verify ( EX509ChainErr &  e, const char *  msg, XrdCryptoX509::EX509Type  type, int  when, XrdCryptoX509 *  xcer, XrdCryptoX509 *  xsig, XrdCryptoX509Crl *  crl = 0  )

private

References XrdOucString::c_str(), XrdCryptoX509Crl::IsRevoked(), XrdCryptoX509::IsValid(), kExpired, kInvalidType, kNoCertificate, kRevoked, XrdCryptoX509::kUnknown, kVerifyFail, lastError, XrdCryptoX509::SerialNumberString(), XrdCryptoX509::type, XrdCryptoX509::Verify(), and X509ChainError().

const char * XrdCryptoX509Chain::X509ChainError

(

EX509ChainErr

e

)

References X509ChainErrStr.

Referenced by CheckCA(), XrdCryptosslgsiX509Chain::SubjectOK(), XrdCryptosslgsiX509Chain::Verify(), and Verify().

Friends And Related Function Documentation

friend class XrdCryptosslgsiX509Chain

friend

Member Data Documentation

XrdCryptoX509ChainNode* XrdCryptoX509Chain::begin

private

Referenced by Begin(), CheckCA(), CheckValidity(), Cleanup(), Dump(), EEChash(), EECname(), Find(), FindIssuer(), FindSubject(), PushBack(), PutInFront(), Remove(), Reorder(), XrdCryptosslgsiX509Chain::Verify(), Verify(), XrdCryptoX509Chain(), and ~XrdCryptoX509Chain().

XrdOucString XrdCryptoX509Chain::cahash

private

Referenced by CAhash(), CheckCA(), Cleanup(), Remove(), Reorder(), and XrdCryptoX509Chain().

XrdOucString XrdCryptoX509Chain::caname

private

Referenced by CAname(), CheckCA(), Cleanup(), Remove(), Reorder(), and XrdCryptoX509Chain().

XrdCryptoX509ChainNode* XrdCryptoX509Chain::current

private

Referenced by Begin(), Cleanup(), Next(), Remove(), and XrdCryptoX509Chain().

XrdOucString XrdCryptoX509Chain::eechash

private

Referenced by Cleanup(), EEChash(), Reorder(), and XrdCryptoX509Chain().

XrdOucString XrdCryptoX509Chain::eecname

private

Referenced by Cleanup(), EECname(), Reorder(), and XrdCryptoX509Chain().

XrdCryptoX509ChainNode* XrdCryptoX509Chain::end

private

Referenced by CheckCA(), Cleanup(), End(), InsertAfter(), PushBack(), PutInFront(), Reorder(), and XrdCryptoX509Chain().

XrdOucString XrdCryptoX509Chain::lastError

private

Referenced by CheckCA(), Cleanup(), LastError(), XrdCryptosslgsiX509Chain::SubjectOK(), XrdCryptosslgsiX509Chain::Verify(), Verify(), and XrdCryptoX509Chain().

XrdCryptoX509ChainNode* XrdCryptoX509Chain::previous

private

Referenced by Begin(), Cleanup(), Next(), Remove(), and XrdCryptoX509Chain().

int XrdCryptoX509Chain::size

private

Referenced by CheckValidity(), Cleanup(), InsertAfter(), PushBack(), PutInFront(), Remove(), Reorder(), Size(), XrdCryptosslgsiX509Chain::Verify(), Verify(), and XrdCryptoX509Chain().

ECAStatus XrdCryptoX509Chain::statusCA

private

Referenced by CAhash(), CAname(), CheckCA(), Cleanup(), Remove(), Reorder(), SetStatusCA(), StatusCA(), XrdCryptosslgsiX509Chain::Verify(), and XrdCryptoX509Chain().

---

The documentation for this class was generated from the following files:

• XrdCryptoX509Chain.hh
• XrdCryptoX509Chain.cc