Some compilers don't like x = {} where x is a boost::optional<string>

[libdcp.git] / src / certificate_chain.h

diff --git a/src/certificate_chain.h b/src/certificate_chain.h
index 046f28451b1567e3e1322c3476ca526df0be0901..56523a68f52e98618522ba4948e8d785444d0187 100644 (file)
--- a/src/certificate_chain.h
+++ b/src/certificate_chain.h
@@ -1,5 +1,5 @@
 /*
-    Copyright (C) 2013-2015 Carl Hetherington <cth@carlh.net>
+    Copyright (C) 2013-2021 Carl Hetherington <cth@carlh.net>
 
     This file is part of libdcp.
 
@@ -15,26 +15,56 @@
 
     You should have received a copy of the GNU General Public License
     along with libdcp.  If not, see <http://www.gnu.org/licenses/>.
+
+    In addition, as a special exception, the copyright holders give
+    permission to link the code of portions of this program with the
+    OpenSSL library under certain conditions as described in each
+    individual source file, and distribute linked combinations
+    including the two.
+
+    You must obey the GNU General Public License in all respects
+    for all of the code used other than OpenSSL.  If you modify
+    file(s) with this exception, you may extend this exception to your
+    version of the file(s), but you are not obligated to do so.  If you
+    do not wish to do so, delete this exception statement from your
+    version.  If you delete this exception statement from all source
+    files in the program, then also delete it here.
 */
 
-/** @file  src/signer_chain.h
- *  @brief Functions to make signer chains.
+
+/** @file  src/certificate_chain.h
+ *  @brief CertificateChain class
  */
 
+
 #ifndef LIBDCP_CERTIFICATE_CHAIN_H
 #define LIBDCP_CERTIFICATE_CHAIN_H
 
+
 #include "certificate.h"
 #include "types.h"
 #include <boost/filesystem.hpp>
 #include <boost/optional.hpp>
 
+
 namespace xmlpp {
        class Node;
 }
 
+
+struct certificates_validation1;
+struct certificates_validation2;
+struct certificates_validation3;
+struct certificates_validation4;
+struct certificates_validation5;
+struct certificates_validation6;
+struct certificates_validation7;
+struct certificates_validation8;
+
+
 namespace dcp {
 
+
 /** @class CertificateChain
  *  @brief A chain of any number of certificates, from root to leaf.
  */
@@ -60,23 +90,63 @@ public:
                std::string leaf_common_name = "CS.smpte-430-2.LEAF.NOT_FOR_PRODUCTION"
                );
 
+       explicit CertificateChain (std::string);
+
+       /** Add a certificate to the chain.
+        *  @param c Certificate to add.
+        */
        void add (Certificate c);
+
+       /** Remove a certificate from the chain.
+        *  @param c Certificate to remove.
+        */
        void remove (Certificate c);
-       void remove (int);
 
+       /** Remove the i'th certificate in the chain, as listed
+        *  from root to leaf.
+        */
+       void remove (int i);
+
+       /** @return Root certificate */
        Certificate root () const;
+
+       /** @return Leaf certificate */
        Certificate leaf () const;
 
-       typedef std::list<Certificate> List;
+       typedef std::vector<Certificate> List;
 
+       /** @return Certificates in order from leaf to root */
        List leaf_to_root () const;
+       /** @return Certificates in order from root to leaf */
        List root_to_leaf () const;
+       List unordered () const;
 
-       bool valid () const;
-       bool attempt_reorder ();
+       bool valid (std::string* reason = nullptr) const;
+
+       /** Check to see if the chain is valid (i.e. root signs the intermediate, intermediate
+        *  signs the leaf and so on) and that the private key (if there is one) matches the
+        *  leaf certificate.
+        *  @return true if it's ok, false if not.
+        */
+       bool chain_valid () const;
 
+       /** Check that there is a valid private key for the leaf certificate.
+        *  Will return true if there are no certificates.
+        */
+       bool private_key_valid () const;
+
+       /** Add a &lt;Signer&gt; and &lt;ds:Signature&gt; nodes to an XML node.
+        *  @param parent XML node to add to.
+        *  @param standard INTEROP or SMPTE.
+        */
        void sign (xmlpp::Element* parent, Standard standard) const;
-       void add_signature_value (xmlpp::Node* parent, std::string ns) const;
+
+       /** Sign an XML node.
+        *
+        *  @param parent Node to sign.
+        *  @param ns Namespace to use for the signature XML nodes.
+        */
+       void add_signature_value (xmlpp::Element* parent, std::string ns, bool add_indentation) const;
 
        boost::optional<std::string> key () const {
                return _key;
@@ -86,14 +156,28 @@ public:
                _key = k;
        }
 
-private:
-       friend class ::certificates;
+       std::string chain () const;
 
+private:
+       friend struct ::certificates_validation1;
+       friend struct ::certificates_validation2;
+       friend struct ::certificates_validation3;
+       friend struct ::certificates_validation4;
+       friend struct ::certificates_validation5;
+       friend struct ::certificates_validation6;
+       friend struct ::certificates_validation7;
+       friend struct ::certificates_validation8;
+
+       bool chain_valid (List const & chain) const;
+
+       /** Our certificates, not in any particular order */
        List _certificates;
        /** Leaf certificate's private key, if known */
        boost::optional<std::string> _key;
 };
 
+
 }
 
+
 #endif