mirror of
https://github.com/VCMP-SqMod/SqMod.git
synced 2025-02-23 13:17:14 +01:00
4a6bfc086c
Switched to POCO library for unified platform/library interface. Deprecated the external module API. It was creating more problems than solving. Removed most built-in libraries in favor of system libraries for easier maintenance. Cleaned and secured code with help from static analyzers.
152 lines
3.3 KiB
C++
152 lines
3.3 KiB
C++
//
|
|
// PKCS12Container.h
|
|
//
|
|
// Library: Crypto
|
|
// Package: Certificate
|
|
// Module: PKCS12Container
|
|
//
|
|
// Definition of the PKCS12Container class.
|
|
//
|
|
// Copyright (c) 2006-2009, Applied Informatics Software Engineering GmbH.
|
|
// and Contributors.
|
|
//
|
|
// SPDX-License-Identifier: BSL-1.0
|
|
//
|
|
|
|
|
|
#ifndef Crypto_PKCS12Container_INCLUDED
|
|
#define Crypto_PKCS12Container_INCLUDED
|
|
|
|
|
|
#include "Poco/Crypto/Crypto.h"
|
|
#include "Poco/Crypto/OpenSSLInitializer.h"
|
|
#include "Poco/Crypto/X509Certificate.h"
|
|
#include "Poco/Crypto/EVPPKey.h"
|
|
#include "Poco/Path.h"
|
|
#include <memory>
|
|
#include <istream>
|
|
#include <openssl/pkcs12.h>
|
|
|
|
|
|
namespace Poco {
|
|
namespace Crypto {
|
|
|
|
|
|
class Crypto_API PKCS12Container
|
|
/// This class implements PKCS#12 container functionality.
|
|
{
|
|
public:
|
|
using CAList = X509Certificate::List;
|
|
using CANameList = std::vector<std::string>;
|
|
|
|
explicit PKCS12Container(std::istream& istr, const std::string& password = "");
|
|
/// Creates the PKCS12Container object from a stream.
|
|
|
|
explicit PKCS12Container(const std::string& path, const std::string& password = "");
|
|
/// Creates the PKCS12Container object from a file.
|
|
|
|
PKCS12Container(const PKCS12Container& cont);
|
|
/// Copy constructor.
|
|
|
|
PKCS12Container(PKCS12Container&& cont) noexcept;
|
|
/// Move constructor.
|
|
|
|
PKCS12Container& operator = (const PKCS12Container& cont);
|
|
/// Assignment operator.
|
|
|
|
PKCS12Container& operator = (PKCS12Container&& cont) noexcept;
|
|
/// Move assignment operator.
|
|
|
|
~PKCS12Container();
|
|
/// Destroys the PKCS12Container.
|
|
|
|
bool hasKey() const;
|
|
/// Returns true if container contains the key.
|
|
|
|
EVPPKey getKey() const;
|
|
/// Return key as openssl EVP_PKEY wrapper object.
|
|
|
|
bool hasX509Certificate() const;
|
|
/// Returns true if container has X509 certificate.
|
|
|
|
const X509Certificate& getX509Certificate() const;
|
|
/// Returns the X509 certificate.
|
|
/// Throws NotFoundException if there is no certificate.
|
|
|
|
const CAList& getCACerts() const;
|
|
/// Returns the list of CA certificates in this container.
|
|
|
|
const std::string& getFriendlyName() const;
|
|
/// Returns the friendly name of the certificate bag.
|
|
|
|
const CANameList& getFriendlyNamesCA() const;
|
|
/// Returns a list of CA certificates friendly names.
|
|
|
|
private:
|
|
void load(PKCS12* pPKCS12, const std::string& password = "");
|
|
std::string extractFriendlyName(X509* pCert);
|
|
|
|
using CertPtr = std::unique_ptr<X509Certificate>;
|
|
|
|
OpenSSLInitializer _openSSLInitializer;
|
|
EVP_PKEY* _pKey;
|
|
CertPtr _pX509Cert;
|
|
CAList _caCertList;
|
|
CANameList _caCertNames;
|
|
std::string _pkcsFriendlyName;
|
|
};
|
|
|
|
|
|
//
|
|
// inlines
|
|
//
|
|
|
|
inline bool PKCS12Container::hasX509Certificate() const
|
|
{
|
|
return _pX509Cert.get() != 0;
|
|
}
|
|
|
|
|
|
inline const X509Certificate& PKCS12Container::getX509Certificate() const
|
|
{
|
|
if (!hasX509Certificate())
|
|
throw NotFoundException("PKCS12Container X509 certificate");
|
|
return *_pX509Cert;
|
|
}
|
|
|
|
|
|
inline const std::string& PKCS12Container::getFriendlyName() const
|
|
{
|
|
return _pkcsFriendlyName;
|
|
}
|
|
|
|
|
|
inline const PKCS12Container::CAList& PKCS12Container::getCACerts() const
|
|
{
|
|
return _caCertList;
|
|
}
|
|
|
|
|
|
inline const PKCS12Container::CANameList& PKCS12Container::getFriendlyNamesCA() const
|
|
{
|
|
return _caCertNames;
|
|
}
|
|
|
|
|
|
inline bool PKCS12Container::hasKey() const
|
|
{
|
|
return _pKey != 0;
|
|
}
|
|
|
|
|
|
inline EVPPKey PKCS12Container::getKey() const
|
|
{
|
|
return EVPPKey(_pKey);
|
|
}
|
|
|
|
|
|
} } // namespace Poco::Crypto
|
|
|
|
|
|
#endif // Crypto_PKCS12Container_INCLUDED
|