Botan::TLS::Certificate_Verify Class Reference

#include <tls_messages.h>

Inheritance diagram for Botan::TLS::Certificate_Verify:

Public Member Functions
	Certificate_Verify (Handshake_IO &io, Handshake_State &state, const Policy &policy, RandomNumberGenerator &rng, const Private_Key *key)
	Certificate_Verify (const std::vector< uint8_t > &buf, Protocol_Version version)
Handshake_Type	type () const override
std::string	type_string () const
bool	verify (const X509_Certificate &cert, const Handshake_State &state, const Policy &policy) const

Detailed Description

Certificate Verify Message

Definition at line 458 of file tls_messages.h.

Constructor & Destructor Documentation

Certificate_Verify() [1/2]

Botan::TLS::Certificate_Verify::Certificate_Verify	(	Handshake_IO &	io,
		Handshake_State &	state,
		const Policy &	policy,
		RandomNumberGenerator &	rng,
		const Private_Key *	key
	)

Definition at line 22 of file msg_cert_verify.cpp.

References BOTAN_ASSERT_NONNULL, Botan::TLS::Handshake_State::callbacks(), Botan::TLS::Handshake_State::choose_sig_format(), Botan::TLS::Handshake_Hash::get_contents(), Botan::TLS::Handshake_State::hash(), Botan::TLS::Handshake_IO::send(), Botan::TLS::Callbacks::tls_sign_message(), and Botan::TLS::Handshake_Hash::update().

   {
   BOTAN_ASSERT_NONNULL(priv_key);

   std::pair<std::string, Signature_Format> format =
      state.choose_sig_format(*priv_key, m_scheme, true, policy);

   m_signature =
      state.callbacks().tls_sign_message(*priv_key, rng, format.first, format.second,
                                         state.hash().get_contents());

   state.hash().update(io.send(*this));
   }

Certificate_Verify() [2/2]

Botan::TLS::Certificate_Verify::Certificate_Verify	(	const std::vector< uint8_t > &	buf,
		Protocol_Version	version
	)

Definition at line 43 of file msg_cert_verify.cpp.

References Botan::TLS::TLS_Data_Reader::assert_done(), Botan::TLS::TLS_Data_Reader::get_range(), Botan::TLS::TLS_Data_Reader::get_uint16_t(), and Botan::TLS::Protocol_Version::supports_negotiable_signature_algorithms().

   {
   TLS_Data_Reader reader("CertificateVerify", buf);

   if(version.supports_negotiable_signature_algorithms())
      {
      m_scheme = static_cast<Signature_Scheme>(reader.get_uint16_t());
      }

   m_signature = reader.get_range<uint8_t>(2, 0, 65535);
   reader.assert_done();
   }

Member Function Documentation

type()

Handshake_Type Botan::TLS::Certificate_Verify::type ( ) const

inlineoverridevirtual

Returns

the message type

Implements Botan::TLS::Handshake_Message.

Definition at line 461 of file tls_messages.h.

References Botan::TLS::CERTIFICATE_VERIFY.

{ return CERTIFICATE_VERIFY; }

type_string()

std::string Botan::TLS::Handshake_Message::type_string ( ) const

inherited

Returns

string representation of this message type

Definition at line 19 of file tls_handshake_state.cpp.

References Botan::TLS::handshake_type_to_string(), and Botan::TLS::Handshake_Message::type().

   {
   return handshake_type_to_string(type());
   }

verify()

bool Botan::TLS::Certificate_Verify::verify	(	const X509_Certificate &	cert,
		const Handshake_State &	state,
		const Policy &	policy
	)		const

Check the signature on a certificate verify message

Parameters

cert	the purported certificate
state	the handshake state
policy	the TLS policy

Definition at line 85 of file msg_cert_verify.cpp.

References Botan::TLS::Handshake_State::callbacks(), Botan::TLS::Policy::check_peer_key_acceptable(), Botan::TLS::Handshake_Hash::get_contents(), Botan::TLS::Handshake_State::hash(), Botan::TLS::Handshake_State::parse_sig_format(), Botan::X509_Certificate::subject_public_key(), and Botan::TLS::Callbacks::tls_verify_message().

   {
   std::unique_ptr<Public_Key> key(cert.subject_public_key());

   policy.check_peer_key_acceptable(*key);

   std::pair<std::string, Signature_Format> format =
      state.parse_sig_format(*key.get(), m_scheme, true, policy);

   const bool signature_valid =
      state.callbacks().tls_verify_message(*key, format.first, format.second,
                                           state.hash().get_contents(), m_signature);

#if defined(BOTAN_UNSAFE_FUZZER_MODE)
   return true;
#else
   return signature_valid;
#endif
   }

---

The documentation for this class was generated from the following files:

• src/lib/tls/tls_messages.h
• src/lib/tls/msg_cert_verify.cpp