XrdCryptoX509 Class Reference

#include <XrdCryptoX509.hh>

Inheritance diagram for XrdCryptoX509:

Collaboration diagram for XrdCryptoX509:

Public Types
enum	EX509Type {   kUnknown = -1 ,   kCA = 0 ,   kEEC = 1 ,   kProxy = 2 }

Public Member Functions
	XrdCryptoX509 ()
virtual	~XrdCryptoX509 ()
virtual int	BitStrength ()
virtual void	Dump ()
virtual int	DumpExtensions (bool=0)
virtual XrdSutBucket *	Export ()
virtual XrdCryptoX509data	GetExtension (const char *oid)
virtual bool	IsExpired (int when=0)
virtual const char *	Issuer ()
const char *	IssuerHash ()
virtual const char *	IssuerHash (int)
virtual bool	IsValid (int when=0)
virtual bool	MatchesSAN (const char *fqdn, bool &hasSAN)=0
virtual time_t	NotAfter ()
virtual time_t	NotBefore ()
virtual XrdCryptoX509data	Opaque ()
virtual const char *	ParentFile ()
virtual XrdCryptoRSA *	PKI ()
virtual const char *	ProxyType () const
virtual kXR_int64	SerialNumber ()
virtual XrdOucString	SerialNumberString ()
virtual void	SetPKI (XrdCryptoX509data pki)
virtual const char *	Subject ()
const char *	SubjectHash ()
virtual const char *	SubjectHash (int)
const char *	Type (EX509Type t=kUnknown) const
virtual bool	Verify (XrdCryptoX509 *ref)

Static Public Member Functions
static bool	MatchHostnames (const char *match_pattern, const char *fqdn)

Public Attributes
EX509Type	type

Detailed Description

Definition at line 51 of file XrdCryptoX509.hh.

Member Enumeration Documentation

EX509Type

enum XrdCryptoX509::EX509Type

Enumerator
kUnknown
kCA
kEEC
kProxy

Definition at line 55 of file XrdCryptoX509.hh.

{ kUnknown = -1, kCA = 0, kEEC = 1, kProxy = 2 };

Constructor & Destructor Documentation

XrdCryptoX509()

XrdCryptoX509::XrdCryptoX509 ( )

inline

Definition at line 59 of file XrdCryptoX509.hh.

{ type = kUnknown; }

References kUnknown, and type.

Referenced by XrdCryptosslX509::XrdCryptosslX509(), XrdCryptosslX509::XrdCryptosslX509(), XrdCryptosslX509::XrdCryptosslX509(), MatchesSAN(), XrdCryptosslX509::Verify(), and Verify().

Here is the caller graph for this function:

~XrdCryptoX509()

virtual XrdCryptoX509::~XrdCryptoX509 ( )

inlinevirtual

Definition at line 60 of file XrdCryptoX509.hh.

{ }

Member Function Documentation

BitStrength()

int XrdCryptoX509::BitStrength ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 97 of file XrdCryptoX509.cc.

{
   // Return number of bits in key
   ABSTRACTMETHOD("XrdCryptoX509::BitStrength");
   return -1;
}

References ABSTRACTMETHOD.

Referenced by Display(), and main().

Here is the caller graph for this function:

Dump()

void XrdCryptoX509::Dump ( )

virtual

Definition at line 49 of file XrdCryptoX509.cc.

{
   // Dump content
   EPNAME("X509::Dump");
 
   // Time strings
   struct tm tst;
   char stbeg[256] = {0};
   time_t tbeg = NotBefore();
   localtime_r(&tbeg,&tst);
   asctime_r(&tst,stbeg);
   stbeg[strlen(stbeg)-1] = 0;
   char stend[256] = {0};
   time_t tend = NotAfter();
   localtime_r(&tend,&tst);
   asctime_r(&tst,stend);
   stend[strlen(stend)-1] = 0;
 
   PRINT("+++++++++++++++ X509 dump +++++++++++++++++++++++");
   PRINT("+");
   PRINT("+ File:    "<<ParentFile());
   PRINT("+");
   PRINT("+ Type: "<<Type());
   PRINT("+ Serial Number: "<<SerialNumber());
   PRINT("+ Subject: "<<Subject());
   PRINT("+ Subject hash: "<<SubjectHash(0));
   PRINT("+ Issuer:  "<<Issuer());
   PRINT("+ Issuer hash:  "<<IssuerHash(0));
   PRINT("+");
   if (IsExpired()) {
      PRINT("+ Validity: (expired!)");
   } else {
      PRINT("+ Validity:");
   }
   PRINT("+ NotBefore:  "<<tbeg<<" UTC - "<<stbeg);
   PRINT("+ NotAfter:   "<<tend<<" UTC - "<<stend);
   PRINT("+");
   if (PKI()) {
      PRINT("+ PKI: "<<PKI()->Status());
   } else {
      PRINT("+ PKI: missing");
   }
   PRINT("+");
   PRINT("+++++++++++++++++++++++++++++++++++++++++++++++++");
}

References EPNAME, IsExpired(), Issuer(), IssuerHash(), NotAfter(), NotBefore(), ParentFile(), PKI(), PRINT, SerialNumber(), Subject(), SubjectHash(), and Type().

Referenced by main().

Here is the call graph for this function:

Here is the caller graph for this function:

DumpExtensions()

int XrdCryptoX509::DumpExtensions ( bool = 0 )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 245 of file XrdCryptoX509.cc.

{
   // Dump extensions, if any
   ABSTRACTMETHOD("XrdCryptoX509::DumpExtensions");
   return -1;
}

References ABSTRACTMETHOD.

Referenced by Display().

Here is the caller graph for this function:

Export()

XrdSutBucket * XrdCryptoX509::Export ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 229 of file XrdCryptoX509.cc.

{
   // EXport in form of bucket
   ABSTRACTMETHOD("XrdCryptoX509::Export");
   return (XrdSutBucket *)0;
}

References ABSTRACTMETHOD.

GetExtension()

XrdCryptoX509data XrdCryptoX509::GetExtension ( const char * oid )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 221 of file XrdCryptoX509.cc.

{
   // Return issuer name
   ABSTRACTMETHOD("XrdCryptoX509::GetExtension");
   return (XrdCryptoX509data)0;
}

References ABSTRACTMETHOD.

Referenced by XrdCryptosslX509Crl::XrdCryptosslX509Crl(), Display(), main(), and XrdCryptogsiX509Chain::Verify().

Here is the caller graph for this function:

IsExpired()

bool XrdCryptoX509::IsExpired ( int when = 0 )

virtual

Definition at line 115 of file XrdCryptoX509.cc.

{
   // Check expiration at UTC time 'when'. Use when =0 (default) to check
   // at present time.
 
   int now = (when > 0) ? when : (int)time(0);
   return (now > NotAfter());
}

References NotAfter().

Referenced by Dump().

Here is the call graph for this function:

Here is the caller graph for this function:

Issuer()

const char * XrdCryptoX509::Issuer ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 157 of file XrdCryptoX509.cc.

{
   // Return issuer name
   ABSTRACTMETHOD("XrdCryptoX509::Issuer");
   return (const char *)0;
}

References ABSTRACTMETHOD.

Referenced by Display(), Dump(), XrdCryptoX509Chain::FindIssuer(), main(), XrdCryptoX509Chain::Reorder(), XrdCryptosslX509ChainToFile(), and XrdCryptosslX509ExportChain().

Here is the caller graph for this function:

IssuerHash() [1/2]

const char * XrdCryptoX509::IssuerHash ( )

inline

Definition at line 99 of file XrdCryptoX509.hh.

{ return IssuerHash(0); }   // hash 

References IssuerHash().

Referenced by Dump(), and IssuerHash().

Here is the call graph for this function:

Here is the caller graph for this function:

IssuerHash() [2/2]

const char * XrdCryptoX509::IssuerHash ( int )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 173 of file XrdCryptoX509.cc.

{
   // Return issuer name
   ABSTRACTMETHOD("XrdCryptoX509::IssuerHash");
   return (const char *)0;
}

References ABSTRACTMETHOD.

Referenced by XrdCryptoX509Chain::Dump(), XrdSecProtocolgsi::getCredentials(), main(), XrdCryptoX509Chain::SetEffectiveCA(), and XrdCryptosslX509ExportChain().

Here is the caller graph for this function:

IsValid()

bool XrdCryptoX509::IsValid ( int when = 0 )

virtual

Definition at line 105 of file XrdCryptoX509.cc.

{
   // Check validity at UTC time 'when'. Use when =0 (default) to check
   // at present time.
 
   int now = (when > 0) ? when : (int)time(0);
   return (now >= (NotBefore()-kAllowedSkew) && now <= NotAfter());
}

References kAllowedSkew, NotAfter(), and NotBefore().

Referenced by XrdCryptoX509Chain::CheckValidity(), and XrdCryptoX509Chain::Verify().

Here is the call graph for this function:

Here is the caller graph for this function:

MatchesSAN()

virtual bool XrdCryptoX509::MatchesSAN ( const char * fqdn, bool & hasSAN )

pure virtual

Implemented in XrdCryptosslX509.

References XrdCryptoX509().

Here is the call graph for this function:

MatchHostnames()

bool XrdCryptoX509::MatchHostnames ( const char * match_pattern, const char * fqdn )

static

Definition at line 253 of file XrdCryptoX509.cc.

{
   // Compare two hostnames and see if they are the same, including wildcards.
   //
   // For example,
   //
   // - foo.example.com and foo.example.com are considered equal.
   // - bar.example.com and foo.example.com are not equal.
   // - *.example.com and foo.example.com are equal.
   // - *.example.com and foo.bar.example.com are NOT equal (wildcard applies to a single label).
   // - FOO.example.com and foo.EXAMPLE.COM are equal (comparison is not case sensitive).
   // - F*.com and foo.com are equal
   //
   // Returns true if the hostnames are considered a match
 
    XrdOucString mpatt(match_pattern), hname(hostname);
 
    // Not empty
    if (!mpatt.length() || !hname.length()) return false;
 
    // Create a lowercase copy of both hostnames
    mpatt.lower(0);
    hname.lower(0);
 
    // Are they equal?
    if (mpatt == hname) return true;
 
    bool theydomatch = false;
 
    // Get first token of both strings
//  int mfrom = -1, hfrom = -1;
    int mfrom =  0, hfrom =  0;
    XrdOucString mfirst, hfirst;
    if (((mfrom = mpatt.tokenize(mfirst, mfrom, '.')) != -1) &&
        ((hfrom = hname.tokenize(hfirst, hfrom, '.')) != -1)) {
       if (hfirst.matches(mfirst.c_str())) {
          // First tokens matches, the rest should match without wildcards
          mpatt.erasefromstart(mfrom);
          hname.erasefromstart(hfrom);
          if ((hname == mpatt) ||
              (!hname.length() && !mpatt.length())) theydomatch = true;
       }
    }
 
    return theydomatch;
}

References XrdOucString::c_str(), XrdOucString::erasefromstart(), XrdOucString::length(), XrdOucString::lower(), XrdOucString::matches(), and XrdOucString::tokenize().

Referenced by XrdCryptosslX509::MatchesSAN().

Here is the call graph for this function:

Here is the caller graph for this function:

NotAfter()

time_t XrdCryptoX509::NotAfter ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 133 of file XrdCryptoX509.cc.

{
   // End-validity time in secs since Epoch
   ABSTRACTMETHOD("XrdCryptoX509::NotAfter");
   return -1;
}

References ABSTRACTMETHOD.

Referenced by Display(), Dump(), IsExpired(), IsValid(), and main().

Here is the caller graph for this function:

NotBefore()

time_t XrdCryptoX509::NotBefore ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 125 of file XrdCryptoX509.cc.

{
   // Begin-validity time in secs since Epoch
   ABSTRACTMETHOD("XrdCryptoX509::NotBefore");
   return -1;
}

References ABSTRACTMETHOD.

Referenced by Dump(), and IsValid().

Here is the caller graph for this function:

Opaque()

XrdCryptoX509data XrdCryptoX509::Opaque ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 181 of file XrdCryptoX509.cc.

{
   // Return underlying certificate in raw format
   ABSTRACTMETHOD("XrdCryptoX509::Opaque");
   return (XrdCryptoX509data)0;
}

References ABSTRACTMETHOD.

Referenced by XrdCryptosslX509::Verify(), XrdCryptosslX509Crl::Verify(), XrdVomsFun::VOMSFun(), XrdCryptosslFactory::X509(), XrdCryptosslFactory::X509(), XrdCryptosslX509ChainToFile(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseBucket(), XrdCryptosslX509ParseFile(), XrdCryptosslX509ToFile(), XrdCryptosslX509VerifyCert(), and XrdCryptosslX509VerifyChain().

Here is the caller graph for this function:

ParentFile()

const char * XrdCryptoX509::ParentFile ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 149 of file XrdCryptoX509.cc.

{
   // Return parent file name
   ABSTRACTMETHOD("XrdCryptoX509::ParentFile");
   return (const char *)0;
}

References ABSTRACTMETHOD.

Referenced by Dump().

Here is the caller graph for this function:

PKI()

XrdCryptoRSA * XrdCryptoX509::PKI ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 189 of file XrdCryptoX509.cc.

{
   // Return PKI key of the certificate
   ABSTRACTMETHOD("XrdCryptoX509::PKI");
   return (XrdCryptoRSA *)0;
}

References ABSTRACTMETHOD.

Referenced by Dump(), main(), XrdCryptosslX509ChainToFile(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseBucket(), and XrdCryptosslX509ParseFile().

Here is the caller graph for this function:

ProxyType()

virtual const char * XrdCryptoX509::ProxyType ( ) const

inlinevirtual

Reimplemented in XrdCryptosslX509.

Definition at line 83 of file XrdCryptoX509.hh.

{ return ""; }

Referenced by Display().

Here is the caller graph for this function:

SerialNumber()

kXR_int64 XrdCryptoX509::SerialNumber ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 205 of file XrdCryptoX509.cc.

{
   // Return issuer name
   ABSTRACTMETHOD("XrdCryptoX509::SerialNumber");
   return -1;
}

References ABSTRACTMETHOD.

Referenced by Dump().

Here is the caller graph for this function:

SerialNumberString()

XrdOucString XrdCryptoX509::SerialNumberString ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 213 of file XrdCryptoX509.cc.

{
   // Return issuer name
   ABSTRACTMETHOD("XrdCryptoX509::SerialNumberString");
   return XrdOucString("");
}

References ABSTRACTMETHOD.

Referenced by XrdCryptoX509Chain::Verify().

Here is the caller graph for this function:

SetPKI()

void XrdCryptoX509::SetPKI ( XrdCryptoX509data pki )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 197 of file XrdCryptoX509.cc.

{
   // Set PKI
 
   ABSTRACTMETHOD("XrdCryptoX509::SetPKI");
}

References ABSTRACTMETHOD.

Referenced by main(), XrdCryptosslX509ParseBucket(), and XrdCryptosslX509ParseFile().

Here is the caller graph for this function:

Subject()

const char * XrdCryptoX509::Subject ( )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 141 of file XrdCryptoX509.cc.

{
   // Return subject name
   ABSTRACTMETHOD("XrdCryptoX509::Subject");
   return (const char *)0;
}

References ABSTRACTMETHOD.

Referenced by XrdCryptoX509Chain::XrdCryptoX509Chain(), XrdCryptoX509Chain::CheckCA(), Display(), Dump(), XrdCryptoX509Chain::EECname(), XrdCryptoX509Chain::FindSubject(), main(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseFile(), and XrdSecgsiAuthzKey().

Here is the caller graph for this function:

SubjectHash() [1/2]

const char * XrdCryptoX509::SubjectHash ( )

inline

Definition at line 104 of file XrdCryptoX509.hh.

{ return SubjectHash(0); }  // hash 

References SubjectHash().

Referenced by Dump(), and SubjectHash().

Here is the call graph for this function:

Here is the caller graph for this function:

SubjectHash() [2/2]

const char * XrdCryptoX509::SubjectHash ( int )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 165 of file XrdCryptoX509.cc.

{
   // Return subject name
   ABSTRACTMETHOD("XrdCryptoX509::SubjectHash");
   return (const char *)0;
}

References ABSTRACTMETHOD.

Referenced by XrdCryptosslX509Crl::XrdCryptosslX509Crl(), XrdCryptoX509Chain::XrdCryptoX509Chain(), XrdCryptoX509Chain::CheckCA(), XrdCryptoX509Chain::Dump(), XrdCryptoX509Chain::EEChash(), XrdSecProtocolgsi::getCredentials(), and XrdCryptosslX509ExportChain().

Here is the caller graph for this function:

Type()

const char * XrdCryptoX509::Type ( EX509Type t = kUnknown ) const

inline

Definition at line 80 of file XrdCryptoX509.hh.

                 { return ((t == kUnknown) ? ctype[type+1] : ctype[t+1]); }

References kUnknown, and type.

Referenced by Display(), Dump(), and XrdCryptoX509Chain::Dump().

Here is the caller graph for this function:

Verify()

bool XrdCryptoX509::Verify ( XrdCryptoX509 * ref )

virtual

Reimplemented in XrdCryptosslX509.

Definition at line 237 of file XrdCryptoX509.cc.

{
   // Verify certificate signature with pub key of ref cert
   ABSTRACTMETHOD("XrdCryptoX509::Verify");
   return 0;
}

References XrdCryptoX509(), and ABSTRACTMETHOD.

Referenced by main(), and XrdCryptoX509Chain::Verify().

Here is the call graph for this function:

Here is the caller graph for this function:

Member Data Documentation

type

EX509Type XrdCryptoX509::type

Definition at line 56 of file XrdCryptoX509.hh.

Referenced by XrdCryptosslX509Crl::XrdCryptosslX509Crl(), XrdCryptoX509(), XrdCryptoX509Chain::XrdCryptoX509Chain(), XrdCryptoX509Chain::CheckCA(), XrdCryptoX509Chain::Cleanup(), Display(), XrdCryptoX509Chain::EEChash(), XrdCryptoX509Chain::EECname(), XrdSecProtocolgsi::getCredentials(), XrdCryptosslX509::MatchesSAN(), XrdCryptoX509Chain::Remove(), XrdCryptoX509Chain::SetEffectiveCA(), Type(), XrdCryptogsiX509Chain::Verify(), XrdCryptoX509Chain::Verify(), XrdVomsFun::VOMSFun(), XrdCryptosslX509ChainToFile(), XrdCryptosslX509ExportChain(), XrdCryptosslX509ParseBucket(), XrdCryptosslX509ParseFile(), and XrdCryptosslX509VerifyChain().

---

The documentation for this class was generated from the following files:

• XrdCryptoX509.hh
• XrdCryptoX509.cc