xrootd
Public Types | Public Member Functions | Private Types | Private Member Functions | Private Attributes | Friends
XrdCryptoX509Chain Class Reference

#include <XrdCryptoX509Chain.hh>

Inheritance diagram for XrdCryptoX509Chain:
Inheritance graph
[legend]
Collaboration diagram for XrdCryptoX509Chain:
Collaboration graph
[legend]

List of all members.

Public Types

enum  ECAStatus { kUnknown = 0, kAbsent, kInvalid, kValid }
enum  EX509ChainErr {
  kNone = 0, kInconsistent, kTooMany, kNoCA,
  kNoCertificate, kInvalidType, kInvalidNames, kRevoked,
  kExpired, kMissingExtension, kVerifyFail, kInvalidSign,
  kCANotAutoSigned
}

Public Member Functions

 XrdCryptoX509Chain (XrdCryptoX509 *c=0)
 XrdCryptoX509Chain (XrdCryptoX509Chain *ch)
virtual ~XrdCryptoX509Chain ()
const char * X509ChainError (EX509ChainErr e)
const char * LastError () const
void Dump ()
int Size () const
XrdCryptoX509 * End () const
ECAStatus StatusCA () const
const char * CAname ()
const char * EECname ()
const char * CAhash ()
const char * EEChash ()
void InsertAfter (XrdCryptoX509 *c, XrdCryptoX509 *cp)
void PutInFront (XrdCryptoX509 *c)
void PushBack (XrdCryptoX509 *c)
void Remove (XrdCryptoX509 *c)
bool CheckCA (bool checkselfsigned=1)
void Cleanup (bool keepCA=0)
void SetStatusCA (ECAStatus st)
XrdCryptoX509 * SearchByIssuer (const char *issuer, ESearchMode mode=kExact)
XrdCryptoX509 * SearchBySubject (const char *subject, ESearchMode mode=kExact)
virtual int CheckValidity (bool outatfirst=1, int when=0)
virtual int Reorder ()
virtual bool Verify (EX509ChainErr &e, x509ChainVerifyOpt_t *vopt=0)
XrdCryptoX509 * Begin ()
XrdCryptoX509 * Next ()

Private Types

enum  ESearchMode { kExact = 0, kBegin = 1, kEnd = 2 }

Private Member Functions

XrdCryptoX509ChainNode * Find (XrdCryptoX509 *c)
XrdCryptoX509ChainNode * FindIssuer (const char *issuer, ESearchMode mode=kExact, XrdCryptoX509ChainNode **p=0)
XrdCryptoX509ChainNode * FindSubject (const char *subject, ESearchMode mode=kExact, XrdCryptoX509ChainNode **p=0)
bool Verify (EX509ChainErr &e, const char *msg, XrdCryptoX509::EX509Type type, int when, XrdCryptoX509 *xcer, XrdCryptoX509 *xsig, XrdCryptoX509Crl *crl=0)

Private Attributes

XrdCryptoX509ChainNode * begin
XrdCryptoX509ChainNode * current
XrdCryptoX509ChainNode * end
XrdCryptoX509ChainNode * previous
int size
XrdOucString lastError
XrdOucString caname
XrdOucString eecname
XrdOucString cahash
XrdOucString eechash
ECAStatus statusCA

Friends

class XrdCryptosslgsiX509Chain

Member Enumeration Documentation

enum XrdCryptoX509Chain::ECAStatus
Enumerator:
kUnknown 
kAbsent 
kInvalid 
kValid 
enum XrdCryptoX509Chain::ESearchMode [private]
Enumerator:
kExact 
kBegin 
kEnd 
enum XrdCryptoX509Chain::EX509ChainErr
Enumerator:
kNone 
kInconsistent 
kTooMany 
kNoCA 
kNoCertificate 
kInvalidType 
kInvalidNames 
kRevoked 
kExpired 
kMissingExtension 
kVerifyFail 
kInvalidSign 
kCANotAutoSigned 

Constructor & Destructor Documentation

XrdCryptoX509Chain::XrdCryptoX509Chain ( XrdCryptoX509 *  c = 0)

References previous, current, begin, end, size, lastError, caname, eecname, cahash, eechash, statusCA, kUnknown, XrdCryptoX509::type, XrdCryptoX509::kCA, XrdCryptoX509::Subject(), XrdCryptoX509::SubjectHash(), kNone, Verify(), kInvalid, and kValid.

XrdCryptoX509Chain::XrdCryptoX509Chain ( XrdCryptoX509Chain *  ch)

References previous, current, begin, end, size, lastError, LastError(), caname, CAname(), eecname, EECname(), cahash, CAhash(), eechash, EEChash(), statusCA, StatusCA(), Begin(), XrdCryptoX509ChainNode::SetNext(), and Next().

XrdCryptoX509Chain::~XrdCryptoX509Chain ( ) [virtual]

References begin, and XrdCryptoX509ChainNode::Next().

Member Function Documentation

XrdCryptoX509 * XrdCryptoX509Chain::Begin ( )

References previous, current, begin, and XrdCryptoX509ChainNode::Cert().

Referenced by XrdCryptosslX509VerifyChain(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseFile(), XrdCryptosslX509ParseBucket(), XrdCryptoX509Chain(), main(), XrdSecProtocolgsi::getCredentials(), XrdSecProtocolgsi::VerifyCA(), and XrdSecProtocolgsi::GetCA().

const char * XrdCryptoX509Chain::CAhash ( )

References EPNAME, cahash, XrdOucString::length(), statusCA, kUnknown, CheckCA(), DEBUG, and XrdOucString::c_str().

Referenced by XrdCryptoX509Chain().

const char * XrdCryptoX509Chain::CAname ( )

References EPNAME, caname, XrdOucString::length(), statusCA, kUnknown, CheckCA(), DEBUG, and XrdOucString::c_str().

Referenced by XrdCryptoX509Chain(), and Dump().

bool XrdCryptoX509Chain::CheckCA ( bool  checkselfsigned = 1)

References begin, lastError, XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::type, XrdCryptoX509::kCA, caname, XrdCryptoX509::Subject(), cahash, XrdCryptoX509::SubjectHash(), kNone, Verify(), kVerifyFail, statusCA, kInvalid, X509ChainError(), kValid, XrdCryptoX509ChainNode::SetNext(), and end.

Referenced by Verify(), CAname(), CAhash(), XrdSecProtocolgsi::VerifyCA(), and XrdSecProtocolgsi::QueryProxy().

int XrdCryptoX509Chain::CheckValidity ( bool  outatfirst = 1,
int  when = 0 
) [virtual]

References EPNAME, size, DEBUG, begin, XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::IsValid(), and XrdCryptoX509ChainNode::Next().

Referenced by XrdSecProtocolgsi::QueryProxy().

void XrdCryptoX509Chain::Cleanup ( bool  keepCA = 0)

References begin, XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::type, previous, current, end, size, lastError, caname, eecname, cahash, eechash, statusCA, and kUnknown.

Referenced by XrdSecProtocolgsi::QueryProxy(), and gsiHSVars::~gsiHSVars().

void XrdCryptoX509Chain::Dump ( )

References EPNAME, LOCDUMP, Size(), CAname(), EECname(), begin, XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::IssuerHash(), XrdCryptoX509::SubjectHash(), and XrdCryptoX509::Type().

Referenced by XrdCryptosslgsiX509Chain::Verify(), main(), and XrdSecProtocolgsi::ServerDoSigpxy().

const char * XrdCryptoX509Chain::EEChash ( )

References EPNAME, eechash, XrdOucString::length(), begin, XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::type, XrdCryptoX509::SubjectHash(), XrdCryptoX509ChainNode::Next(), DEBUG, and XrdOucString::c_str().

Referenced by XrdCryptoX509Chain(), and XrdSecProtocolgsi::Authenticate().

const char * XrdCryptoX509Chain::EECname ( )

References EPNAME, eecname, XrdOucString::length(), begin, XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::type, XrdCryptoX509::Subject(), XrdCryptoX509ChainNode::Next(), DEBUG, and XrdOucString::c_str().

Referenced by XrdCryptoX509Chain(), Dump(), XrdSecProtocolgsi::Authenticate(), XrdSecProtocolgsi::ServerDoSigpxy(), and XrdSecProtocolgsi::QueryGMAP().

XrdCryptoX509* XrdCryptoX509Chain::End ( ) const [inline]

References end, and XrdCryptoX509ChainNode::Cert().

Referenced by XrdCryptosslX509ExportChain(), XrdCryptosslX509ChainToFile(), XrdSecgsiAuthzKey(), XrdSecProtocolgsi::Authenticate(), XrdSecProtocolgsi::ClientDoCert(), XrdSecProtocolgsi::ClientDoPxyreq(), XrdSecProtocolgsi::ServerDoCert(), XrdSecProtocolgsi::ServerDoSigpxy(), and XrdSecProtocolgsi::QueryProxy().

XrdCryptoX509ChainNode * XrdCryptoX509Chain::Find ( XrdCryptoX509 *  c) [private]

References begin, XrdCryptoX509ChainNode::Next(), and XrdCryptoX509ChainNode::Cert().

Referenced by PutInFront(), InsertAfter(), and PushBack().

XrdCryptoX509ChainNode * XrdCryptoX509Chain::FindIssuer ( const char *  issuer,
ESearchMode  mode = kExact,
XrdCryptoX509ChainNode **  p = 0 
) [private]

References begin, XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::Issuer(), kExact, kBegin, and kEnd.

Referenced by SearchByIssuer().

XrdCryptoX509ChainNode * XrdCryptoX509Chain::FindSubject ( const char *  subject,
ESearchMode  mode = kExact,
XrdCryptoX509ChainNode **  p = 0 
) [private]

References begin, XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::Subject(), kExact, kBegin, and kEnd.

Referenced by SearchBySubject(), and Reorder().

void XrdCryptoX509Chain::InsertAfter ( XrdCryptoX509 *  c,
XrdCryptoX509 *  cp 
)

References Find(), XrdCryptoX509ChainNode::Next(), size, XrdCryptoX509ChainNode::SetNext(), end, and PushBack().

const char* XrdCryptoX509Chain::LastError ( ) const [inline]

References lastError, and XrdOucString::c_str().

Referenced by XrdCryptoX509Chain(), XrdSecProtocolgsi::ClientDoCert(), and XrdSecProtocolgsi::ServerDoCert().

XrdCryptoX509 * XrdCryptoX509Chain::Next ( )

References previous, current, XrdCryptoX509ChainNode::Next(), and XrdCryptoX509ChainNode::Cert().

Referenced by XrdCryptosslX509VerifyChain(), XrdCryptosslX509ParseFile(), XrdCryptosslX509ParseBucket(), XrdCryptoX509Chain(), XrdSecProtocolgsi::getCredentials(), and XrdSecProtocolgsi::VerifyCA().

void XrdCryptoX509Chain::PushBack ( XrdCryptoX509 *  c)

References Find(), begin, end, XrdCryptoX509ChainNode::SetNext(), and size.

Referenced by XrdCryptosslX509ParseFile(), XrdCryptosslX509ParseBucket(), XrdSslgsiX509CreateProxy(), InsertAfter(), main(), and XrdSecProtocolgsi::ServerDoSigpxy().

void XrdCryptoX509Chain::PutInFront ( XrdCryptoX509 *  c)

References Find(), begin, end, and size.

Referenced by XrdSecProtocolgsi::VerifyCA().

void XrdCryptoX509Chain::Remove ( XrdCryptoX509 *  c)

References current, previous, XrdCryptoX509ChainNode::Cert(), XrdCryptoX509ChainNode::Next(), begin, XrdCryptoX509::type, XrdCryptoX509::kCA, statusCA, kUnknown, caname, cahash, XrdCryptoX509ChainNode::SetNext(), and size.

Referenced by XrdSecProtocolgsi::VerifyCA().

int XrdCryptoX509Chain::Reorder ( ) [virtual]

References EPNAME, size, DEBUG, begin, FindSubject(), kExact, XrdCryptoX509ChainNode::Next(), XrdCryptoX509ChainNode::SetNext(), end, statusCA, kAbsent, caname, XrdOucString::length(), cahash, kUnknown, XrdCryptoX509ChainNode::Cert(), XrdCryptoX509::Subject(), eecname, eechash, and XrdCryptoX509::Issuer().

Referenced by XrdCryptosslX509ExportChain(), XrdCryptosslX509ChainToFile(), XrdCryptosslgsiX509Chain::Verify(), Verify(), XrdSecgsiAuthzKey(), main(), XrdSecProtocolgsi::ServerDoCert(), and XrdSecProtocolgsi::QueryProxy().

XrdCryptoX509 * XrdCryptoX509Chain::SearchByIssuer ( const char *  issuer,
ESearchMode  mode = kExact 
)

References FindIssuer(), and XrdCryptoX509ChainNode::Cert().

XrdCryptoX509 * XrdCryptoX509Chain::SearchBySubject ( const char *  subject,
ESearchMode  mode = kExact 
)

References FindSubject(), and XrdCryptoX509ChainNode::Cert().

Referenced by XrdCryptosslX509ExportChain(), XrdCryptosslX509ChainToFile(), and XrdSecProtocolgsi::ServerDoSigpxy().

void XrdCryptoX509Chain::SetStatusCA ( ECAStatus  st) [inline]

References statusCA.

Referenced by XrdSecProtocolgsi::VerifyCA().

int XrdCryptoX509Chain::Size ( ) const [inline]

References size.

Referenced by XrdCryptosslX509VerifyChain(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseFile(), XrdCryptosslX509ParseBucket(), and Dump().

ECAStatus XrdCryptoX509Chain::StatusCA ( ) const [inline]

References statusCA.

Referenced by XrdCryptoX509Chain().

bool XrdCryptoX509Chain::Verify ( EX509ChainErr &  e,
x509ChainVerifyOpt_t *  vopt = 0 
) [virtual]

Reimplemented in XrdCryptosslgsiX509Chain.

References EPNAME, kNone, size, DEBUG, Reorder(), kInconsistent, lastError, X509ChainError(), x509ChainVerifyOpt_t::when, x509ChainVerifyOpt_t::pathlen, x509ChainVerifyOpt_t::opt, kOptsCheckSelfSigned, kTooMany, CheckCA(), kNoCA, begin, XrdCryptoX509ChainNode::Cert(), XrdCryptoX509ChainNode::Next(), and XrdCryptoX509::kUnknown.

Referenced by XrdCryptosslgsiX509Chain::Verify(), XrdCryptoX509Chain(), CheckCA(), and main().

bool XrdCryptoX509Chain::Verify ( EX509ChainErr &  e,
const char *  msg,
XrdCryptoX509::EX509Type  type,
int  when,
XrdCryptoX509 *  xcer,
XrdCryptoX509 *  xsig,
XrdCryptoX509Crl *  crl = 0 
) [private]

References kNoCertificate, lastError, X509ChainError(), XrdCryptoX509::kUnknown, XrdCryptoX509::type, kInvalidType, XrdCryptoX509::SerialNumberString(), XrdCryptoX509Crl::IsRevoked(), XrdOucString::c_str(), kRevoked, XrdCryptoX509::IsValid(), kExpired, XrdCryptoX509::Verify(), and kVerifyFail.

const char * XrdCryptoX509Chain::X509ChainError ( EX509ChainErr  e)

References X509ChainErrStr.

Referenced by XrdCryptosslgsiX509Chain::Verify(), XrdCryptosslgsiX509Chain::SubjectOK(), CheckCA(), and Verify().

Friends And Related Function Documentation

friend class XrdCryptosslgsiX509Chain [friend]

Member Data Documentation

XrdCryptoX509ChainNode* XrdCryptoX509Chain::begin [private]

Referenced by XrdCryptosslgsiX509Chain::Verify(), XrdCryptoX509Chain(), ~XrdCryptoX509Chain(), Cleanup(), CheckCA(), Find(), PutInFront(), PushBack(), Remove(), Begin(), FindIssuer(), FindSubject(), Dump(), Reorder(), Verify(), CheckValidity(), EECname(), and EEChash().

XrdOucString XrdCryptoX509Chain::cahash [private]

Referenced by XrdCryptoX509Chain(), Cleanup(), CheckCA(), Remove(), Reorder(), and CAhash().

XrdOucString XrdCryptoX509Chain::caname [private]

Referenced by XrdCryptoX509Chain(), Cleanup(), CheckCA(), Remove(), Reorder(), and CAname().

XrdCryptoX509ChainNode* XrdCryptoX509Chain::current [private]

Referenced by XrdCryptoX509Chain(), Cleanup(), Remove(), Begin(), and Next().

XrdOucString XrdCryptoX509Chain::eechash [private]

Referenced by XrdCryptoX509Chain(), Cleanup(), Reorder(), and EEChash().

XrdOucString XrdCryptoX509Chain::eecname [private]

Referenced by XrdCryptoX509Chain(), Cleanup(), Reorder(), and EECname().

XrdCryptoX509ChainNode* XrdCryptoX509Chain::end [private]

Referenced by XrdCryptoX509Chain(), Cleanup(), CheckCA(), PutInFront(), InsertAfter(), PushBack(), Reorder(), and End().

XrdOucString XrdCryptoX509Chain::lastError [private]

Referenced by XrdCryptosslgsiX509Chain::Verify(), XrdCryptosslgsiX509Chain::SubjectOK(), XrdCryptoX509Chain(), Cleanup(), CheckCA(), Verify(), and LastError().

XrdCryptoX509ChainNode* XrdCryptoX509Chain::previous [private]

Referenced by XrdCryptoX509Chain(), Cleanup(), Remove(), Begin(), and Next().

int XrdCryptoX509Chain::size [private]

Referenced by XrdCryptosslgsiX509Chain::Verify(), XrdCryptoX509Chain(), Cleanup(), PutInFront(), InsertAfter(), PushBack(), Remove(), Reorder(), Verify(), CheckValidity(), and Size().

ECAStatus XrdCryptoX509Chain::statusCA [private]

Referenced by XrdCryptosslgsiX509Chain::Verify(), XrdCryptoX509Chain(), Cleanup(), CheckCA(), Remove(), Reorder(), CAname(), CAhash(), StatusCA(), and SetStatusCA().

The documentation for this class was generated from the following files:
Generated on Sat Mar 17 2012 17:26:51 for xrootd by   doxygen 1.7.5