11#ifndef BOTAN_PKIX_TYPES_H_
12#define BOTAN_PKIX_TYPES_H_
14#include <botan/asn1_obj.h>
15#include <botan/pkix_enums.h>
25class X509_Certificate;
28BOTAN_DEPRECATED(
"Use Key_Constraints::to_string")
42 explicit X509_DN(
const std::multimap<OID, std::string>& args)
45 add_attribute(i.first, i.second);
48 explicit X509_DN(
const std::multimap<std::string, std::string>& args)
51 add_attribute(i.first, i.second);
57 bool has_field(
const OID& oid)
const;
63 const std::vector<uint8_t>&
get_bits()
const {
return m_dn_bits; }
65 std::vector<uint8_t> DER_encode()
const;
67 bool empty()
const {
return m_rdn.empty(); }
69 std::string to_string()
const;
71 const std::vector<std::pair<OID,ASN1_String>>&
dn_info()
const {
return m_rdn; }
73 std::multimap<OID, std::string> get_attributes()
const;
74 std::multimap<std::string, std::string> contents()
const;
76 bool has_field(std::string_view attr)
const;
77 std::vector<std::string> get_attribute(std::string_view attr)
const;
78 std::string get_first_attribute(std::string_view attr)
const;
80 void add_attribute(std::string_view key, std::string_view val);
89 static std::string deref_info_field(std::string_view key);
98 static size_t lookup_ub(
const OID& oid);
101 std::vector<std::pair<OID,ASN1_String>> m_rdn;
102 std::vector<uint8_t> m_dn_bits;
105bool BOTAN_PUBLIC_API(2,0) operator==(const X509_DN& dn1, const X509_DN& dn2);
106bool BOTAN_PUBLIC_API(2,0) operator!=(const X509_DN& dn1, const X509_DN& dn2);
112bool BOTAN_PUBLIC_API(2,0) operator<(const X509_DN& dn1, const X509_DN& dn2);
126 std::multimap<std::string, std::string> contents()
const;
128 bool has_field(std::string_view attr)
const;
129 std::vector<std::string> get_attribute(std::string_view attr)
const;
131 std::string get_first_attribute(std::string_view attr)
const;
133 void add_attribute(std::string_view type, std::string_view value);
134 void add_othername(
const OID& oid, std::string_view value,
ASN1_Type type);
136 const std::multimap<std::string, std::string, std::less<>>&
get_attributes()
const
148 bool has_items()
const;
151 std::string_view uri =
"",
152 std::string_view dns =
"",
153 std::string_view ip_address =
"");
155 std::multimap<std::string, std::string, std::less<>> m_alt_info;
156 std::multimap<OID, ASN1_String> m_othernames;
169 Attribute(
const OID& oid,
const std::vector<uint8_t>& params);
170 Attribute(std::string_view oid_str,
const std::vector<uint8_t>& params);
173 const std::vector<uint8_t>&
parameters()
const {
return m_parameters; }
180 std::vector<uint8_t> m_parameters;
220 const std::string&
type()
const {
return m_type; }
225 const std::string&
name()
const {
return m_name; }
238 bool matches_dns(
const std::string&)
const;
239 bool matches_dn(
const std::string&)
const;
240 bool matches_ip(
const std::string&)
const;
243std::ostream&
operator<<(std::ostream& os,
const GeneralName& gn);
268 : m_base(base), m_minimum(min), m_maximum(max)
302std::ostream&
operator<<(std::ostream& os,
const GeneralSubtree& gs);
323 std::vector<GeneralSubtree>&& excluded_subtrees)
324 : m_permitted_subtrees(permitted_subtrees), m_excluded_subtrees(excluded_subtrees)
330 const std::vector<GeneralSubtree>&
permitted()
const {
return m_permitted_subtrees; }
335 const std::vector<GeneralSubtree>&
excluded()
const {
return m_excluded_subtrees; }
338 std::vector<GeneralSubtree> m_permitted_subtrees;
339 std::vector<GeneralSubtree> m_excluded_subtrees;
366 virtual std::unique_ptr<Certificate_Extension>
copy()
const = 0;
384 const std::vector<X509_Certificate>& cert_path,
385 std::vector<std::set<Certificate_Status_Code>>& cert_status,
417 if(extn->oid_name().empty())
421 else if(
const T* extn_as_T =
dynamic_cast<const T*
>(extn))
427 throw Decoding_Error(
"Exception::get_extension_object_as dynamic_cast failed");
440 return m_extension_oids;
446 bool extension_set(
const OID& oid)
const;
451 bool critical_extension_set(
const OID& oid)
const;
457 std::vector<uint8_t> get_extension_bits(
const OID& oid)
const;
468 void add(std::unique_ptr<Certificate_Extension> extn,
bool critical =
false);
478 bool add_new(std::unique_ptr<Certificate_Extension> extn,
bool critical =
false);
485 void replace(std::unique_ptr<Certificate_Extension> extn,
bool critical =
false);
491 bool remove(
const OID& oid);
500 std::unique_ptr<Certificate_Extension> get(
const OID& oid)
const;
515 auto extn_info = m_extension_info.find(oid);
517 if(extn_info != m_extension_info.end())
520 if(extn_info->second.obj().oid_name() ==
"")
522 auto ext = std::make_unique<T>();
523 ext->decode_inner(extn_info->second.bits());
536 std::vector<std::pair<std::unique_ptr<Certificate_Extension>,
bool>> extensions()
const;
543 std::map<OID, std::pair<std::vector<uint8_t>,
bool>> extensions_raw()
const;
554 static std::unique_ptr<Certificate_Extension>
555 create_extn_obj(
const OID& oid,
557 const std::vector<uint8_t>& body);
559 class Extensions_Info
562 Extensions_Info(
bool critical,
563 std::unique_ptr<Certificate_Extension> ext) :
564 m_obj(
std::move(ext)),
565 m_bits(m_obj->encode_inner()),
570 Extensions_Info(
bool critical,
571 const std::vector<uint8_t>& encoding,
572 std::unique_ptr<Certificate_Extension> ext) :
573 m_obj(
std::move(ext)),
579 bool is_critical()
const {
return m_critical; }
580 const std::vector<uint8_t>& bits()
const {
return m_bits; }
581 const Certificate_Extension& obj()
const
588 std::shared_ptr<Certificate_Extension> m_obj;
589 std::vector<uint8_t> m_bits;
590 bool m_critical =
false;
593 std::vector<OID> m_extension_oids;
594 std::map<OID, Extensions_Info> m_extension_info;
#define BOTAN_ASSERT_NONNULL(ptr)
const std::multimap< std::string, std::string, std::less<> > & get_attributes() const
const std::multimap< OID, ASN1_String > & get_othernames() const
const std::vector< uint8_t > & parameters() const
const OID & object_identifier() const
const std::vector< uint8_t > & get_parameters() const
virtual bool should_encode() const
virtual std::string oid_name() const =0
virtual OID oid_of() const =0
virtual std::unique_ptr< Certificate_Extension > copy() const =0
virtual std::vector< uint8_t > encode_inner() const =0
virtual ~Certificate_Extension()=default
virtual void decode_inner(const std::vector< uint8_t > &)=0
std::unique_ptr< T > get_raw(const OID &oid) const
Extensions & operator=(const Extensions &)=default
Extensions(const Extensions &)=default
Extensions(Extensions &&)=default
const std::vector< OID > & get_extension_oids() const
const T * get_extension_object_as(const OID &oid=T::static_oid()) const
Extensions & operator=(Extensions &&)=default
const std::string & type() const
const std::string & name() const
A single Name Constraint.
GeneralSubtree(const GeneralName &base, size_t min, size_t max)
const GeneralName & base() const
NameConstraints(std::vector< GeneralSubtree > &&permitted_subtrees, std::vector< GeneralSubtree > &&excluded_subtrees)
const std::vector< GeneralSubtree > & permitted() const
const std::vector< GeneralSubtree > & excluded() const
void add_attribute(const OID &oid, std::string_view val)
X509_DN(const std::multimap< OID, std::string > &args)
const std::vector< std::pair< OID, ASN1_String > > & dn_info() const
X509_DN(const std::multimap< std::string, std::string > &args)
const std::vector< uint8_t > & get_bits() const
int(* final)(unsigned char *, CTX *)
#define BOTAN_PUBLIC_API(maj, min)
std::ostream & operator<<(std::ostream &out, const OID &oid)
std::string key_constraints_to_string(Key_Constraints c)