Botan::TLS::Certificate_Req Class Reference

#include <tls_messages.h>

Inheritance diagram for Botan::TLS::Certificate_Req:

Public Member Functions
const std::vector< X509_DN > &	acceptable_CAs () const
const std::vector< std::string > &	acceptable_cert_types () const
	Certificate_Req (const std::vector< uint8_t > &buf, Protocol_Version version)
	Certificate_Req (Handshake_IO &io, Handshake_Hash &hash, const Policy &policy, const std::vector< X509_DN > &allowed_cas, Protocol_Version version)
const std::vector< Signature_Scheme > &	signature_schemes () const
Handshake_Type	type () const override
std::string	type_string () const

Detailed Description

Certificate Request Message

Definition at line 425 of file tls_messages.h.

Constructor & Destructor Documentation

Certificate_Req() [1/2]

Botan::TLS::Certificate_Req::Certificate_Req	(	Handshake_IO &	io,
		Handshake_Hash &	hash,
		const Policy &	policy,
		const std::vector< X509_DN > &	ca_certs,
		Protocol_Version	version
	)

Create a new Certificate Request message

Definition at line 54 of file msg_cert_req.cpp.

                                                           :
   m_names(ca_certs),
   m_cert_key_types({ "RSA", "ECDSA", "DSA" })
   {
   if(version.supports_negotiable_signature_algorithms())
      {
      m_schemes = policy.allowed_signature_schemes();
      }
 
   hash.update(io.send(*this));
   }

Certificate_Req() [2/2]

Botan::TLS::Certificate_Req::Certificate_Req	(	const std::vector< uint8_t > &	buf,
		Protocol_Version	version
	)

Deserialize a Certificate Request message

Definition at line 73 of file msg_cert_req.cpp.

   {
   if(buf.size() < 4)
      throw Decoding_Error("Certificate_Req: Bad certificate request");
 
   TLS_Data_Reader reader("CertificateRequest", buf);
 
   std::vector<uint8_t> cert_type_codes = reader.get_range_vector<uint8_t>(1, 1, 255);
 
   for(size_t i = 0; i != cert_type_codes.size(); ++i)
      {
      const std::string cert_type_name = cert_type_code_to_name(cert_type_codes[i]);
 
      if(cert_type_name.empty()) // something we don't know
         continue;
 
      m_cert_key_types.emplace_back(cert_type_name);
      }
 
   if(version.supports_negotiable_signature_algorithms())
      {
      const std::vector<uint8_t> algs = reader.get_range_vector<uint8_t>(2, 2, 65534);
 
      if(algs.size() % 2 != 0)
         throw Decoding_Error("Bad length for signature IDs in certificate request");
 
      for(size_t i = 0; i != algs.size(); i += 2)
         {
         m_schemes.push_back(static_cast<Signature_Scheme>(make_uint16(algs[i], algs[i+1])));
         }
      }
 
   const uint16_t purported_size = reader.get_uint16_t();
 
   if(reader.remaining_bytes() != purported_size)
      throw Decoding_Error("Inconsistent length in certificate request");
 
   while(reader.has_remaining())
      {
      std::vector<uint8_t> name_bits = reader.get_range_vector<uint8_t>(2, 0, 65535);
 
      BER_Decoder decoder(name_bits.data(), name_bits.size());
      X509_DN name;
      decoder.decode(name);
      m_names.emplace_back(name);
      }
   }

References Botan::TLS::TLS_Data_Reader::get_range_vector(), Botan::TLS::TLS_Data_Reader::get_uint16_t(), Botan::TLS::TLS_Data_Reader::has_remaining(), Botan::make_uint16(), name, Botan::TLS::TLS_Data_Reader::remaining_bytes(), and Botan::TLS::Protocol_Version::supports_negotiable_signature_algorithms().

Member Function Documentation

acceptable_CAs()

const std::vector< X509_DN > & Botan::TLS::Certificate_Req::acceptable_CAs ( ) const

inline

Definition at line 433 of file tls_messages.h.

{ return m_names; }

acceptable_cert_types()

const std::vector< std::string > & Botan::TLS::Certificate_Req::acceptable_cert_types ( ) const

inline

Definition at line 430 of file tls_messages.h.

         { return m_cert_key_types; }

signature_schemes()

const std::vector< Signature_Scheme > & Botan::TLS::Certificate_Req::signature_schemes ( ) const

inline

Definition at line 435 of file tls_messages.h.

         {
         return m_schemes;
         }

Referenced by Botan::TLS::Handshake_State::choose_sig_format(), and Botan::TLS::Handshake_State::parse_sig_format().

type()

Handshake_Type Botan::TLS::Certificate_Req::type ( ) const

inlineoverridevirtual

Returns

the message type

Implements Botan::TLS::Handshake_Message.

Definition at line 428 of file tls_messages.h.

{ return CERTIFICATE_REQUEST; }

References Botan::TLS::CERTIFICATE_REQUEST.

type_string()

std::string Botan::TLS::Handshake_Message::type_string ( ) const

inherited

Returns

string representation of this message type

Definition at line 19 of file tls_handshake_state.cpp.

   {
   return handshake_type_to_string(type());
   }

References Botan::TLS::handshake_type_to_string(), and Botan::TLS::Handshake_Message::type().

---

The documentation for this class was generated from the following files:

• src/lib/tls/tls_messages.h
• src/lib/tls/msg_cert_req.cpp