#include <certstor.h>

Inheritance diagram for Botan::Certificate_Store_In_Memory:

Public Member Functions
void	add_certificate (const X509_Certificate &cert)
void	add_crl (const X509_CRL &crl)
std::vector< X509_DN >	all_subjects () const override
bool	certificate_known (const X509_Certificate &cert) const
	Certificate_Store_In_Memory ()
	Certificate_Store_In_Memory (Certificate_Store_In_Memory &&other) noexcept
	Certificate_Store_In_Memory (const Certificate_Store_In_Memory &other)
	Certificate_Store_In_Memory (const X509_Certificate &cert)
	Certificate_Store_In_Memory (const X509_Certificate &cert, const X509_CRL &crl)
bool	contains (const X509_Certificate &cert) const override
std::vector< X509_Certificate >	find_all_certs (const X509_DN &subject_dn, const std::vector< uint8_t > &key_id) const override
std::optional< X509_Certificate >	find_cert (const X509_DN &subject_dn, const std::vector< uint8_t > &key_id) const override
std::optional< X509_Certificate >	find_cert_by_issuer_dn_and_serial_number (const X509_DN &issuer_dn, std::span< const uint8_t > serial_number) const override
std::optional< X509_Certificate >	find_cert_by_pubkey_sha1 (const std::vector< uint8_t > &key_hash) const override
std::optional< X509_Certificate >	find_cert_by_raw_subject_dn_sha256 (const std::vector< uint8_t > &subject_hash) const override
std::optional< X509_CRL >	find_crl_for (const X509_Certificate &subject) const override
Certificate_Store_In_Memory &	operator= (Certificate_Store_In_Memory &&other) noexcept
Certificate_Store_In_Memory &	operator= (const Certificate_Store_In_Memory &other)=delete
	~Certificate_Store_In_Memory () override

Detailed Description

In Memory Certificate Store

Definition at line 99 of file certstor.h.

Constructor & Destructor Documentation

◆ Certificate_Store_In_Memory() [1/5]

Botan::Certificate_Store_In_Memory::Certificate_Store_In_Memory ( const X509_Certificate & cert )

explicit

Adds given certificate to the store.

Definition at line 246 of file certstor.cpp.

                                                                                     : Certificate_Store_In_Memory() {
   add_certificate(cert);
}

References add_certificate(), and Certificate_Store_In_Memory().

Referenced by Certificate_Store_In_Memory(), Certificate_Store_In_Memory(), Certificate_Store_In_Memory(), Certificate_Store_In_Memory(), operator=(), and operator=().

◆ Certificate_Store_In_Memory() [2/5]

Botan::Certificate_Store_In_Memory::Certificate_Store_In_Memory	(	const X509_Certificate &	cert,
		const X509_CRL &	crl )

Adds given certificate and CRL to the store.

Definition at line 250 of file certstor.cpp.

                                                                                                          :
      Certificate_Store_In_Memory() {
   add_certificate(cert);
   add_crl(crl);
}

References add_certificate(), add_crl(), and Certificate_Store_In_Memory().

◆ Certificate_Store_In_Memory() [3/5]

Botan::Certificate_Store_In_Memory::Certificate_Store_In_Memory ( )

Create an empty store.

Definition at line 63 of file certstor.cpp.

63: m_impl(std::make_unique<Impl>()) {}

◆ Certificate_Store_In_Memory() [4/5]

Botan::Certificate_Store_In_Memory::Certificate_Store_In_Memory ( const Certificate_Store_In_Memory & other )

Definition at line 65 of file certstor.cpp.

65 :

66 m_impl(std::make_unique<Impl>(other.impl())) {}

References Certificate_Store_In_Memory().

◆ Certificate_Store_In_Memory() [5/5]

Botan::Certificate_Store_In_Memory::Certificate_Store_In_Memory ( Certificate_Store_In_Memory && other )

defaultnoexcept

References Certificate_Store_In_Memory().

◆ ~Certificate_Store_In_Memory()

Botan::Certificate_Store_In_Memory::~Certificate_Store_In_Memory ( )

overridedefault

References add_certificate(), add_crl(), all_subjects(), contains(), find_all_certs(), find_cert(), find_cert_by_issuer_dn_and_serial_number(), find_cert_by_pubkey_sha1(), find_cert_by_raw_subject_dn_sha256(), and find_crl_for().

Member Function Documentation

◆ add_certificate()

void Botan::Certificate_Store_In_Memory::add_certificate ( const X509_Certificate & cert )

Add a certificate to the store.

Parameters

cert	certificate to be added

Definition at line 85 of file certstor.cpp.

                                                                              {
   auto& store = impl();
   const auto tag = cert.tag();
   if(!store.m_cert_tags.contains(tag)) {
      store.m_cert_tags.insert(tag);
      const size_t idx = store.m_certs.size();
      store.m_certs.push_back(cert);
      store.m_dn_to_indices[cert.subject_dn()].push_back(idx);
   }
}

References Botan::X509_Certificate::subject_dn(), and Botan::X509_Certificate::tag().

Referenced by Certificate_Store_In_Memory(), Certificate_Store_In_Memory(), and ~Certificate_Store_In_Memory().

◆ add_crl()

void Botan::Certificate_Store_In_Memory::add_crl ( const X509_CRL & crl )

Add a certificate revocation list (CRL) to the store.

Parameters

crl	CRL to be added

Definition at line 199 of file certstor.cpp.

                                                             {
   auto& store = impl();
   const X509_DN& crl_issuer = crl.issuer_dn();
 
   if(const auto it = store.m_issuer_dn_to_crl_idx.find(crl_issuer); it != store.m_issuer_dn_to_crl_idx.end()) {
      auto& current_crl = store.m_crls.at(it->second);
 
      // Found an update of a previously existing one; replace it
      if(current_crl.this_update() <= crl.this_update()) {
         current_crl = crl;
      }
 
      return;
   }
 
   // Totally new CRL, add to the list
   store.m_issuer_dn_to_crl_idx.emplace(crl_issuer, store.m_crls.size());
   store.m_crls.push_back(crl);
}

References Botan::X509_CRL::issuer_dn(), and Botan::X509_CRL::this_update().

Referenced by Certificate_Store_In_Memory(), and ~Certificate_Store_In_Memory().

◆ all_subjects()

std::vector< X509_DN > Botan::Certificate_Store_In_Memory::all_subjects ( ) const

overridevirtual

Returns: DNs for all certificates managed by the store

Implements Botan::Certificate_Store.

Definition at line 96 of file certstor.cpp.

                                                                   {
   const auto& store = impl();
   std::vector<X509_DN> subjects;
   subjects.reserve(store.m_certs.size());
   for(const auto& cert : store.m_certs) {
      subjects.push_back(cert.subject_dn());
   }
   return subjects;
}

Referenced by ~Certificate_Store_In_Memory().

◆ certificate_known()

bool Botan::Certificate_Store::certificate_known ( const X509_Certificate & cert ) const

inherited

Old version of contains

Definition at line 24 of file certstor.cpp.

                                                                            {
   return contains(cert);
}

References contains().

Referenced by find_cert_by_issuer_dn_and_serial_number().

◆ contains()

bool Botan::Certificate_Store_In_Memory::contains ( const X509_Certificate & cert ) const

overridevirtual

Returns: whether this certificate is contained within the store

Parameters

cert	certificate to be searched

Default implementation uses find_all_certs

Reimplemented from Botan::Certificate_Store.

Definition at line 242 of file certstor.cpp.

                                                                             {
   return impl().m_cert_tags.contains(cert.tag());
}

References Botan::X509_Certificate::tag().

Referenced by ~Certificate_Store_In_Memory().

◆ find_all_certs()

std::vector< X509_Certificate > Botan::Certificate_Store_In_Memory::find_all_certs	(	const X509_DN &	subject_dn,
		const std::vector< uint8_t > &	key_id ) const

overridevirtual

Find all certificates with a given Subject DN. Subject DN and even the key identifier might not be unique.

Implements Botan::Certificate_Store.

Definition at line 131 of file certstor.cpp.

                                                                                                                  {
   const auto& store = impl();
   std::vector<X509_Certificate> matches;
 
   const auto it = store.m_dn_to_indices.find(subject_dn);
   if(it == store.m_dn_to_indices.end()) {
      return matches;
   }
 
   for(const size_t idx : it->second) {
      const auto& cert = store.m_certs[idx];
      BOTAN_ASSERT_NOMSG(cert.subject_dn() == subject_dn);
 
      if(!key_id.empty()) {
         const std::vector<uint8_t>& skid = cert.subject_key_id();
         if(!skid.empty() && skid != key_id) {  // no match
            continue;
         }
      }
 
      matches.push_back(cert);
   }
 
   return matches;
}

References BOTAN_ASSERT_NOMSG.

Referenced by ~Certificate_Store_In_Memory().

◆ find_cert()

std::optional< X509_Certificate > Botan::Certificate_Store_In_Memory::find_cert	(	const X509_DN &	subject_dn,
		const std::vector< uint8_t > &	key_id ) const

overridevirtual

Find a certificate by Subject DN and (optionally) key identifier

Parameters

subject_dn	the subject's distinguished name
key_id	an optional key id

Returns: a matching certificate or nullopt otherwise If more than one certificate in the certificate store matches, then a single value is selected arbitrarily.

Reimplemented from Botan::Certificate_Store.

Definition at line 106 of file certstor.cpp.

                                                                                                               {
   const auto& store = impl();
   const auto it = store.m_dn_to_indices.find(subject_dn);
   if(it == store.m_dn_to_indices.end()) {
      return std::nullopt;
   }
 
   for(const size_t idx : it->second) {
      const auto& cert = store.m_certs[idx];
      BOTAN_ASSERT_NOMSG(cert.subject_dn() == subject_dn);
 
      if(!key_id.empty()) {
         const std::vector<uint8_t>& skid = cert.subject_key_id();
         if(!skid.empty() && skid != key_id) {  // no match
            continue;
         }
      }
 
      return cert;
   }
 
   return std::nullopt;
}

References BOTAN_ASSERT_NOMSG.

Referenced by ~Certificate_Store_In_Memory().

◆ find_cert_by_issuer_dn_and_serial_number()

std::optional< X509_Certificate > Botan::Certificate_Store_In_Memory::find_cert_by_issuer_dn_and_serial_number	(	const X509_DN &	issuer_dn,
		std::span< const uint8_t >	serial_number ) const

overridevirtual

Find a certificate by searching for one with a matching issuer DN and serial number. Used for CMS or PKCS#7.

Parameters

issuer_dn	the distinguished name of the issuer
serial_number	the certificate's serial number

Returns: a matching certificate or nullopt otherwise

Implements Botan::Certificate_Store.

Definition at line 188 of file certstor.cpp.

                                                                         {
   for(const auto& cert : impl().m_certs) {
      if(cert.issuer_dn() == issuer_dn && std::ranges::equal(cert.serial_number(), serial_number)) {
         return cert;
      }
   }
 
   return std::nullopt;
}

Referenced by ~Certificate_Store_In_Memory().

◆ find_cert_by_pubkey_sha1()

std::optional< X509_Certificate > Botan::Certificate_Store_In_Memory::find_cert_by_pubkey_sha1 ( const std::vector< uint8_t > & key_hash ) const

overridevirtual

Find a certificate by searching for one with a matching SHA-1 hash of public key. Used for OCSP.

Parameters

key_hash SHA-1 hash of the subject's public key

Returns: a matching certificate or nullopt otherwise

Implements Botan::Certificate_Store.

Definition at line 158 of file certstor.cpp.

                                             {
   if(key_hash.size() != 20) {
      throw Invalid_Argument("Certificate_Store_In_Memory::find_cert_by_pubkey_sha1 invalid hash");
   }
 
   for(const auto& cert : impl().m_certs) {
      if(key_hash == cert.subject_public_key_bitstring_sha1()) {
         return cert;
      }
   }
 
   return std::nullopt;
}

Referenced by ~Certificate_Store_In_Memory().

◆ find_cert_by_raw_subject_dn_sha256()

std::optional< X509_Certificate > Botan::Certificate_Store_In_Memory::find_cert_by_raw_subject_dn_sha256 ( const std::vector< uint8_t > & subject_hash ) const

overridevirtual

Find a certificate by searching for one with a matching SHA-256 hash of raw subject name. Used for OCSP.

Parameters

subject_hash SHA-256 hash of the subject's raw name

Returns: a matching certificate or nullopt otherwise

Implements Botan::Certificate_Store.

Definition at line 173 of file certstor.cpp.

                                                 {
   if(subject_hash.size() != 32) {
      throw Invalid_Argument("Certificate_Store_In_Memory::find_cert_by_raw_subject_dn_sha256 invalid hash");
   }
 
   for(const auto& cert : impl().m_certs) {
      if(subject_hash == cert.raw_subject_dn_sha256()) {
         return cert;
      }
   }
 
   return std::nullopt;
}

Referenced by ~Certificate_Store_In_Memory().

◆ find_crl_for()

std::optional< X509_CRL > Botan::Certificate_Store_In_Memory::find_crl_for ( const X509_Certificate & subject ) const

overridevirtual

Finds a CRL for the given certificate

Reimplemented from Botan::Certificate_Store.

Definition at line 219 of file certstor.cpp.

                                                                                                     {
   const auto& store = impl();
   const std::vector<uint8_t>& key_id = subject.authority_key_id();
 
   const auto it = store.m_issuer_dn_to_crl_idx.find(subject.issuer_dn());
   if(it == store.m_issuer_dn_to_crl_idx.end()) {
      return std::nullopt;
   }
 
   const auto& crl = store.m_crls.at(it->second);
 
   // Only compare key ids if set in both call and in the CRL
   if(!key_id.empty()) {
      const std::vector<uint8_t>& akid = crl.authority_key_id();
 
      if(!akid.empty() && akid != key_id) {
         return std::nullopt;
      }
   }
 
   return crl;
}

References Botan::X509_Certificate::authority_key_id(), and Botan::X509_Certificate::issuer_dn().

Referenced by ~Certificate_Store_In_Memory().

◆ operator=() [1/2]

Certificate_Store_In_Memory & Botan::Certificate_Store_In_Memory::operator= ( Certificate_Store_In_Memory && other )

defaultnoexcept

References Certificate_Store_In_Memory().

◆ operator=() [2/2]

Certificate_Store_In_Memory & Botan::Certificate_Store_In_Memory::operator= ( const Certificate_Store_In_Memory & other )

delete

References Certificate_Store_In_Memory().

The documentation for this class was generated from the following files:

src/lib/x509/certstor.h
src/lib/x509/certstor.cpp

Public Member Functions

Detailed Description

Constructor & Destructor Documentation

◆ Certificate_Store_In_Memory() [1/5]

◆ Certificate_Store_In_Memory() [2/5]

◆ Certificate_Store_In_Memory() [3/5]

◆ Certificate_Store_In_Memory() [4/5]

◆ Certificate_Store_In_Memory() [5/5]

◆ ~Certificate_Store_In_Memory()

Member Function Documentation

◆ add_certificate()

◆ add_crl()

◆ all_subjects()

◆ certificate_known()

◆ contains()

◆ find_all_certs()

◆ find_cert()

◆ find_cert_by_issuer_dn_and_serial_number()

◆ find_cert_by_pubkey_sha1()

◆ find_cert_by_raw_subject_dn_sha256()

◆ find_crl_for()

◆ operator=() [1/2]

◆ operator=() [2/2]