Botan::TLS::Certificate Class Reference

#include <tls_messages.h>

Inheritance diagram for Botan::TLS::Certificate:

Public Member Functions
const std::vector< X509_Certificate > &	cert_chain () const
	Certificate (Handshake_IO &io, Handshake_Hash &hash, const std::vector< X509_Certificate > &certs)
	Certificate (const std::vector< uint8_t > &buf, const Policy &policy)
size_t	count () const
bool	empty () const
Handshake_Type	type () const override
std::string	type_string () const

Detailed Description

Certificate Message

Definition at line 372 of file tls_messages.h.

Constructor & Destructor Documentation

Certificate() [1/2]

Botan::TLS::Certificate::Certificate	(	Handshake_IO &	io,
		Handshake_Hash &	hash,
		const std::vector< X509_Certificate > &	cert_list
	)

Create a new Certificate message

Definition at line 25 of file msg_certificate.cpp.

References hash, and Botan::TLS::Handshake_IO::send().

                                                                       :
   m_certs(cert_list)
   {
   hash.update(io.send(*this));
   }

Certificate() [2/2]

Botan::TLS::Certificate::Certificate ( const std::vector< uint8_t > &  buf, const Policy &  policy  )

explicit

Deserialize a Certificate message

Definition at line 36 of file msg_certificate.cpp.

References Botan::TLS::Alert::BAD_CERTIFICATE, Botan::make_uint32(), and Botan::TLS::Policy::maximum_certificate_chain_size().

   {
   if(buf.size() < 3)
      throw Decoding_Error("Certificate: Message malformed");

   const size_t total_size = make_uint32(0, buf[0], buf[1], buf[2]);

   if(total_size != buf.size() - 3)
      throw Decoding_Error("Certificate: Message malformed");

   const size_t max_size = policy.maximum_certificate_chain_size();
   if(max_size > 0 && total_size > max_size)
      throw Decoding_Error("Certificate chain exceeds policy specified maximum size");

   const uint8_t* certs = buf.data() + 3;

   while(size_t remaining_bytes = buf.data() + buf.size() - certs)
      {
      if(remaining_bytes < 3)
         throw Decoding_Error("Certificate: Message malformed");

      const size_t cert_size = make_uint32(0, certs[0], certs[1], certs[2]);

      if(remaining_bytes < (3 + cert_size))
         throw Decoding_Error("Certificate: Message malformed");

      DataSource_Memory cert_buf(&certs[3], cert_size);
      m_certs.push_back(X509_Certificate(cert_buf));

      certs += cert_size + 3;
      }

   /*
   * TLS 1.0 through 1.2 all seem to require that the certificate be
   * precisely a v3 certificate. In fact the strict wording would seem
   * to require that every certificate in the chain be v3. But often
   * the intermediates are outside of the control of the server.
   * But, require that the leaf certificate be v3
   */
   if(m_certs.size() > 0 && m_certs[0].x509_version() != 3)
      {
      throw TLS_Exception(Alert::BAD_CERTIFICATE,
                          "The leaf certificate must be v3");
      }
   }

Member Function Documentation

cert_chain()

const std::vector<X509_Certificate>& Botan::TLS::Certificate::cert_chain ( ) const

inline

Definition at line 376 of file tls_messages.h.

{ return m_certs; }

count()

size_t Botan::TLS::Certificate::count ( ) const

inline

Definition at line 378 of file tls_messages.h.

{ return m_certs.size(); }

empty()

bool Botan::TLS::Certificate::empty ( ) const

inline

Definition at line 379 of file tls_messages.h.

{ return m_certs.empty(); }

type()

Handshake_Type Botan::TLS::Certificate::type ( ) const

inlineoverridevirtual

Returns

the message type

Implements Botan::TLS::Handshake_Message.

Definition at line 375 of file tls_messages.h.

References Botan::TLS::CERTIFICATE.

{ return CERTIFICATE; }

type_string()

std::string Botan::TLS::Handshake_Message::type_string ( ) const

inherited

Returns

string representation of this message type

Definition at line 19 of file tls_handshake_state.cpp.

References Botan::TLS::handshake_type_to_string(), and Botan::TLS::Handshake_Message::type().

   {
   return handshake_type_to_string(type());
   }

---

The documentation for this class was generated from the following files:

• src/lib/tls/tls_messages.h
• src/lib/tls/msg_certificate.cpp